Legal Basis for Data Processing
Article 6(1)(a) GDPR serves as the legal basis for our company for processing operations in which we obtain consent for a specific purpose of processing.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party—such as processing operations required for the delivery of goods or the provision of another service or return service—the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, for example in cases of inquiries about our products or services.
If our company is subject to a legal obligation that requires the processing of personal data—such as to fulfill tax obligations—the processing is based on Article 6(1)(c) GDPR.
In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This could be the case, for example, if a visitor were injured on our premises and as a result, their name, age, health insurance data, or other vital information had to be disclosed to a doctor, hospital, or other third party. In such a case, the processing would be based on Article 6(1)(d) GDPR.
Finally, processing operations could be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal grounds, if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not override such interest. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In this regard, the legislator considered that a legitimate interest may be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 of the GDPR).
Use of Payment Service Providers (Mollie, PayPal, Klarna)
We use Mollie as a payment service provider on our website. Through Mollie, you can pay using various methods such as PayPal, Klarna, credit card, Apple Pay, and others.
When you select one of these payment methods, certain personal data—such as your name, billing address, email address, IP address, and payment details—will be transferred to the respective payment provider for the purpose of processing the transaction. This data is required to complete the payment, verify your identity if necessary, and detect or prevent fraud.
Mollie, PayPal, and Klarna act as independent data controllers for the processing of your payment data. They process your information under their own responsibility and in accordance with their respective privacy policies, while ensuring compliance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
The legal basis for the processing of your personal data in connection with payment transactions is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.
For more information, please refer to the privacy policies of the respective providers:
SSL Encryption in the Online Shop
Our online shop handles highly sensitive information such as IBAN or bank account numbers. To ensure that this data is protected and not misused, we use SSL encryption.
SSL (Secure Sockets Layer) is a security technology designed to make data transmission over the Internet as secure as possible. The use of SSL encryption is a technical and organizational measure required under Article 32(1)(b) GDPR, which obliges data controllers to ensure the confidentiality of processing. For example, when a customer provides payment information or logs into their account, SSL encryption ensures that this data can only be accessed by our online shop. Without SSL encryption, this level of security would not be guaranteed, making SSL a necessity for any e-commerce platform. The confidentiality requirement under Article 32(1)(b) GDPR is thus fulfilled through SSL encryption.
Shipping
- Description and scope of data processing
If you order products or services on our website that are delivered via a shipping service provider, you will receive your order and shipping confirmation via email. In addition, the shipping provider may notify you about the delivery status of your parcel, as well as provide delivery options or pickup notifications, in accordance with their services.
For this purpose, the following data may be transferred to the shipping provider:
Shipping provider:
Deutsche Post
Charles-de-Gaulle-Straße 20
53113 Bonn, Germany
Data regularly transmitted:
– First and last name
– Address
– Email address
- Purpose of data processing
The purpose of processing this personal data is to enable the shipping service provider to inform the recipient about the shipping progress by email and thus increase the likelihood of a successful delivery. - Legal basis for data processing
The legal basis for transmitting the email address to the shipping provider and for its use is Article 6(1)(a) GDPR, based on your consent.
The legal basis for transmitting your name and address (first name, last name, address) to the shipping provider is Article 6(1)(b) GDPR, as the data processing is required for the performance of a purchase contract. - Storage duration
If the shipment is successfully delivered, the transmitted data is deleted by the shipping provider in accordance with their internal data retention policies.
Instagram Feed and Company Profile
Use of Instagram Feed Plugin
We use an Instagram feed plugin to display social media content on our website. The operating company of Instagram’s services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time a page on our website that contains an Instagram component is accessed, the browser on the user’s device automatically downloads a display of images and videos from Instagram. As part of this technical process, Instagram becomes aware of which specific subpage of our website is being visited. These requests expose your IP address to Instagram, which Instagram may process in accordance with its privacy policy:
🔗 Instagram Privacy Policy
If you are logged into Instagram at the same time, Instagram can recognize which specific subpage you visit on our site during your entire session. This information is collected via the Instagram component and may be linked to your personal Instagram account.
If you do not want Instagram to receive this information, please log out of your Instagram account before visiting our website.
For more information on Instagram’s data processing, please visit:
🔗 https://help.instagram.com/155833707900388
🔗 https://www.instagram.com/about/legal/privacy/
Our Company Presence on Instagram
We maintain a company profile on Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We use this profile to provide information about our products and to interact with Instagram users. If you engage with our Instagram page (e.g., by commenting, posting, liking, etc.), you may voluntarily disclose personal data (such as your real name or profile photo). Our Instagram presence is used primarily for product presentations, marketing, and communication with customers and interested parties. All users are free to decide what data they share through their own interactions.
The legal basis for processing data we receive through your interaction with our Instagram page is Article 6(1)(f) GDPR (our legitimate interest in marketing and communication). If your contact with us is aimed at concluding a contract, the legal basis is additionally Article 6(1)(b) GDPR.
We do not store any data generated through our Instagram profile in our own systems. You may object at any time to the processing of your personal data collected via our Instagram presence by emailing us at:
📧 info@techn0.de
For information about how Instagram itself processes personal data and your rights to object, please refer to:
🔗 https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
Contact Option via the Website
The website contains, as required by law, information that enables quick electronic contact with our company as well as direct communication with us. This includes a general address for electronic mail (email address). If a data subject contacts the data controller by email or via a contact form, the personal data transmitted by the data subject will be stored automatically.
Such personal data voluntarily transmitted by a data subject to the data controller are stored for the purpose of processing the request or for contacting the data subject. There is no disclosure of this personal data to third parties.
Comment Function in the Blog on the Website
We offer users the possibility to leave individual comments on specific blog posts on our website. A blog is a publicly accessible web-based portal, through which one or more persons (called bloggers or web bloggers) can publish articles or express their thoughts in so-called blog posts. These blog posts can usually be commented on by third parties.
If a data subject leaves a comment on one of our blog posts, the comment, the time the comment was entered, and the chosen username (pseudonym) of the data subject are stored and published. In addition, the IP address assigned by the Internet Service Provider (ISP) to the data subject is also logged.
The storage of the IP address takes place for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content through a given comment. The storage of this personal data is therefore in the legitimate interest of the data controller, so that, if necessary, the controller can exonerate themselves in the event of a legal violation. This personal data is not passed on to third parties, unless such disclosure is required by law or necessary for legal defense.
This privacy statement was last updated on 01/05/2025 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
In this privacy statement, we explain what we do with the data we obtain about you via https://neoultimateshop.com. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us.
1. Sharing with other parties
We only share or disclose this data to processors for the following purposes:
Processors
Name: Mollie B.V.
Country: Netherlands
Purpose: Payment processing
2. Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
3. Disclosure practices
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.
We have concluded a data Processing Agreement with Google.
Google may not use the data for any other Google services.
The inclusion of full IP addresses is blocked by us.
4. Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
5. Third-party websites
This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
6. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
7. Accessing and modifying your data
If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:
- You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
- Right of access: You have the right to access your personal data that is known to us.
- Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
- If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
- Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
- Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
8. Submitting a complaint
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.
9. Contact details
Micha Kütterer
Im Daistler 9
74196 Neuenstadt am Kocher
Germany
Website: https://neoultimateshop.com
Email: info@ex.comneoultimateshop.com
Phone number: 0176 87819569
10. Data Requests
For the most frequently submitted requests, we also offer you the possibility to use our data request form