Privacy policy

Privacy Policy

1. Data Controller

Bichoushop
Owner: Isra Smahi
Linzenicher Straße 48
52428 Jülich
Germany

Email: info@bichoushop.com

2. General Information on Data Processing

We process personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data refers to any information that can be used to personally identify you.

3. Hosting & Shopify

Our online store is operated via Shopify Inc.:

Shopify Inc.
150 Elgin Street, Suite 800
Ottawa, ON K2P 1L4
Canada

Shopify processes personal data on our behalf as a data processor (in accordance with Art. 28 GDPR).

Data may also be transferred to third countries (in particular Canada and the USA). Shopify relies on the European Commission’s Standard Contractual Clauses to ensure an adequate level of data protection.

4. Collection and Processing of Personal Data

We process personal data only when necessary, in particular for:

  • providing the website
  • processing and fulfilling orders
  • communicating with customers
  • ensuring technical security of the website

The data collected may include:

name, address, email address, telephone number, payment data, IP address, and order information.

5. Legal Basis for Processing

Data processing is based on the following legal grounds:

  • Art. 6 (1) (b) GDPR (performance of a contract)
  • Art. 6 (1) (a) GDPR (consent)
  • Art. 6 (1) (f) GDPR (legitimate interests)

Legitimate interests include in particular:

  • secure operation of the online shop
  • analysis and optimization of our services
  • prevention of misuse and fraud

6. Cookies

Our website uses cookies.

Cookies are small text files stored on your device that do not cause any damage.

We use:

  • technically necessary cookies (shop functionality)
  • functional cookies (shopping cart)
  • analytics and marketing cookies (only with consent)

Processing is based on Art. 6 (1) (a) GDPR in conjunction with § 25 TTDSG (consent requirement).

You can change your cookie settings at any time via the cookie banner or your browser settings.

7. Analytics Tools and Advertising

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Google uses cookies that enable analysis of website usage.

IP addresses are processed in anonymized form (IP anonymization enabled).

Meta / Facebook Pixel

We use the Meta Pixel to measure the effectiveness of advertising campaigns.

Data may be transferred to Meta Platforms Inc. in the United States.

8. Payment Service Providers

We use third-party payment providers for processing payments, including:

  • PayPal
  • Klarna
  • Shopify Payments

Processing is carried out for contract fulfillment (Art. 6 (1) (b) GDPR).

These providers process data independently under their own data protection responsibility.

9. Data Sharing with Shipping Providers

To deliver your order, we share your data with shipping providers, in particular:

  • DHL
  • other logistics partners

This is done exclusively for contract fulfillment purposes.

10. Storage Duration

Personal data is stored only as long as necessary to fulfill the respective purposes or as required by statutory retention obligations.

11. Your Rights

You have the right at any time to:

  • access your stored data (Art. 15 GDPR)
  • request correction of inaccurate data (Art. 16 GDPR)
  • request deletion of your data (Art. 17 GDPR)
  • request restriction of processing (Art. 18 GDPR)
  • request data portability (Art. 20 GDPR)
  • object to data processing (Art. 21 GDPR)

12. Withdrawal of Consent

You may withdraw any consent you have given for data processing at any time with effect for the future.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The competent authority is usually the data protection authority of your federal state in Germany.

14. Data Security

We implement technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access.

15. Current Status

This privacy policy is currently valid and was last updated: July 2026.