Privacy policy

PRIVACY POLICY

Last updated: 16 August 2026

  1. DATA CONTROLLER

The controller responsible for processing personal data through this online shop is:

JOYAVELLE
Owner: Jost Trenker
Erfurter Straße 3
86169 Augsburg
Germany

Telephone: +49 151 43400780
Email: thejoyavelle@gmail.com

JOYAVELLE operates this online shop and is responsible for processing your personal data as described in this Privacy Policy.

Our online shop is hosted by Shopify. Shopify provides the technical e-commerce platform that enables us to offer and sell our products.

  1. PERSONAL DATA WE PROCESS

Personal data is information that identifies you or can reasonably be linked to you.

Depending on how you interact with our online shop, we may process the following categories of personal data:

  • Contact information, including your name, postal address, billing address, shipping address, telephone number and email address.

  • Order and transaction information, including products viewed, products placed in your shopping cart, products ordered, order value, returns, cancellations and previous transactions.

  • Payment information, including the selected payment method, payment status and transaction confirmation. Complete payment-card details are generally processed directly by the relevant payment provider and are not made fully available to us.

  • Customer-account information, including login details, account preferences and settings.

  • Communications, including information you provide when contacting us by email, telephone or through a contact form.

  • Device and technical information, including your IP address, browser type, device type, operating system, network information and other technical identifiers.

  • Usage information, including information about how and when you access, browse and interact with our online shop.

  • Marketing preferences, including newsletter subscriptions, consent choices and communication preferences.

  1. HOW WE COLLECT PERSONAL DATA

We may collect personal data from the following sources:

  • Directly from you when you place an order, create an account, contact us, subscribe to our newsletter, request a return or otherwise provide information to us.

  • Automatically when you visit or use our online shop, including through cookies and similar technologies.

  • From Shopify and service providers that help us operate the online shop, process payments, prevent fraud, deliver orders or provide technical services.

  • From advertising or analytics partners, where those services are enabled and you have provided any legally required consent.

  1. PURPOSES AND LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation applies, we process personal data for the following purposes and legal bases:

PERFORMANCE OF A CONTRACT – ARTICLE 6(1)(b) GDPR

We process personal data when necessary to:

  • Process and fulfil orders.

  • Process payments.

  • Arrange delivery.

  • Manage customer accounts.

  • Process returns, cancellations and refunds.

  • Respond to enquiries connected with an order.

  • Take steps requested by you before entering into a contract.

COMPLIANCE WITH LEGAL OBLIGATIONS – ARTICLE 6(1)(c) GDPR

We process and retain personal data where necessary to comply with legal requirements, including commercial, accounting, taxation, consumer-protection and regulatory obligations.

LEGITIMATE INTERESTS – ARTICLE 6(1)(f) GDPR

We may process personal data where necessary for our legitimate interests, provided that these interests are not overridden by your rights and freedoms. These interests may include:

  • Operating, maintaining and improving our online shop.

  • Securing our website and customer accounts.

  • Preventing and investigating fraud, misuse and security incidents.

  • Providing customer service.

  • Analysing the general performance of our business.

  • Establishing, exercising or defending legal claims.

CONSENT – ARTICLE 6(1)(a) GDPR

Where legally required, we process personal data based on your consent, including for:

  • Email marketing and newsletters.

  • Non-essential cookies.

  • Personalised advertising.

  • Certain analytics and marketing technologies.

You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

  1. ORDERS, PAYMENTS AND DELIVERY

When you place an order, we process the information necessary to complete the purchase, receive payment, deliver the products and provide customer service.

Payment information may be processed by Shopify Payments or another payment provider selected during checkout. The relevant provider may process your information under its own privacy notice.

To deliver an order, we share the necessary recipient and delivery information with the selected shipping or logistics provider.

  1. SHOPIFY

Our online shop is hosted by Shopify. Shopify processes personal data to provide, secure and improve the e-commerce platform, process transactions, prevent fraud and provide related services.

Information submitted through the online shop may be transmitted to Shopify and its service providers. Shopify or its service providers may process information in countries outside Germany or the European Economic Area.

More information about Shopify’s processing activities and customer privacy rights is available in the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/consumers

Shopify’s privacy portal is available at:

https://privacy.shopify.com/

  1. COOKIES AND SIMILAR TECHNOLOGIES

Our online shop uses cookies and similar technologies.

Some cookies are necessary for essential functions such as:

  • Displaying the website.

  • Maintaining the shopping cart.

  • Providing checkout functions.

  • Securing customer accounts.

  • Processing orders.

  • Remembering privacy choices.

Where required by law, non-essential analytics, marketing and advertising cookies are used only after you have given consent through our cookie or privacy settings.

You can change or withdraw your cookie choices at any time through the “Cookie preferences” link displayed on the website.

You may also configure your browser to block or delete cookies. Blocking essential cookies may prevent some parts of the online shop from functioning correctly.

  1. MARKETING COMMUNICATIONS

If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may use your email address to send information about JOYAVELLE products, offers and news.

You can withdraw your consent at any time by:

Withdrawal from marketing does not affect necessary communications concerning existing orders, payments, deliveries, returns or customer-service enquiries.

  1. DISCLOSURE OF PERSONAL DATA

We may disclose personal data to service providers where necessary to operate the online shop and fulfil our contractual and legal obligations.

Categories of recipients may include:

  • Shopify and technical hosting providers.

  • Payment processors and financial-service providers.

  • Shipping, delivery and logistics providers.

  • IT, security and fraud-prevention providers.

  • Customer-support and communication providers.

  • Analytics, advertising and marketing providers, where enabled and legally permitted.

  • Professional advisers, including tax advisers, accountants, legal advisers and insurers.

  • Public authorities, courts or law-enforcement agencies where disclosure is legally required.

Service providers receive only the information reasonably necessary to perform their respective services.

We do not sell personal data in the ordinary meaning of the word.

  1. INTERNATIONAL DATA TRANSFERS

Some of our service providers, including Shopify, may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards are used where legally required. These may include European Commission adequacy decisions, Standard Contractual Clauses or another legally recognised transfer mechanism.

  1. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

The retention period depends on factors including:

  • The duration of our contractual relationship with you.

  • Whether you maintain a customer account.

  • The need to process or document an order, return or refund.

  • Statutory commercial, accounting and tax-retention requirements.

  • The establishment, exercise or defence of legal claims.

  • Security and fraud-prevention requirements.

When personal data is no longer required and no legal obligation justifies further retention, it will be deleted or anonymised.

  1. SECURITY

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Please do not send passwords, complete payment-card details or other highly sensitive information through ordinary email.

  1. YOUR DATA-PROTECTION RIGHTS

Subject to the applicable legal requirements, you may have the following rights:

  • Right of access to your personal data.

  • Right to correction of inaccurate or incomplete personal data.

  • Right to deletion of personal data.

  • Right to restriction of processing.

  • Right to data portability.

  • Right to object to processing based on legitimate interests.

  • Right to object at any time to processing for direct-marketing purposes.

  • Right to withdraw consent at any time with effect for the future.

  • Right to lodge a complaint with a data-protection supervisory authority.

To exercise your rights, contact us at:

thejoyavelle@gmail.com

We may need to request reasonable information to verify your identity and protect personal data from unauthorised access.

We will respond within the period required by applicable data-protection law.

  1. RIGHT TO OBJECT

Where we process personal data based on legitimate interests under Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing, you have the right to object at any time. If you object to direct marketing, we will stop using your personal data for that purpose.

  1. CHILDREN’S DATA

Our online shop is not intended for use by children who cannot legally enter into a purchase contract.

We do not knowingly collect personal data from children without the involvement of a parent or legal guardian where such involvement is required by law.

If you believe that a child has provided us with personal data unlawfully, please contact us at thejoyavelle@gmail.com.

  1. THIRD-PARTY WEBSITES

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices or content of third-party websites. You should review the privacy information of the relevant third party before providing personal data.

  1. COMPLAINTS

If you have concerns about how we process your personal data, please contact us first at thejoyavelle@gmail.com.

You also have the right to lodge a complaint with a data-protection supervisory authority.

The competent supervisory authority for private businesses in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Ansbach, Germany
Website: https://www.lda.bayern.de/

You may also contact the competent supervisory authority in the country or region where you normally reside or work.

  1. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where necessary to reflect changes to our services, technologies, service providers or legal requirements.

The current version will be published on this website together with the date of the latest update.

  1. CONTACT

For questions about this Privacy Policy, our processing of personal data or the exercise of your rights, please contact:

JOYAVELLE
Owner: Jost Trenker
Erfurter Straße 3
86169 Augsburg
Germany

Telephone: +49 151 43400780
Email: thejoyavelle@gmail.com