Your data.

The controller responsible for processing your personal data on this website is:

Gefällt mir, trading under the brand “Shopibrands”
Owner: Maria Veronica Ducos Abadie
Dannenwalder Weg 50
13439 Berlin
Germany

Email: info@shopibrands.com
Phone: +49 152 5535 3749

For any questions about data protection and to exercise your rights, you can reach us using these contact details. We have not appointed a data protection officer, as we are not legally required to do so.

We only process the data needed to run this website, handle your inquiry and carry out our projects. We do not use advertising trackers.

As a rule, we delete data as soon as the purpose no longer applies and no statutory retention obligation prevents deletion. No automated decision-making or profiling within the meaning of Art. 22 DSGVO (Art. 22 GDPR) takes place.

This website runs on the Shopify platform. The provider for users in the European Economic Area is Shopify International Limited, c/o Intertrust Ireland, 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

When you visit the website, Shopify automatically processes technical data transmitted by your browser, in particular:

• IP address
• date and time of access
• page visited and previously visited page (referrer)
• browser type, operating system and device type

This data is needed to deliver the website, ensure its stability and security, and fend off attacks. Content such as images, fonts and scripts is delivered via Shopify’s content delivery network. The legal basis is our legitimate interest in a secure and fast website (Art. 6 Abs. 1 lit. f DSGVO / Art. 6(1)(f) GDPR).

Shopify processes the data on our behalf. We have concluded a data processing agreement with Shopify under Art. 28 DSGVO (Art. 28 GDPR) (Shopify Data Processing Addendum). Shopify may transfer data to its parent company Shopify Inc. in Canada and to other service providers outside the EU. An adequacy decision of the European Commission exists for Canada. For transfers within the Shopify group, Shopify uses Binding Corporate Rules; for external service providers, it uses the European Commission’s Standard Contractual Clauses. More information: Shopify’s privacy policy.

Cookies are small text files stored on your device. We distinguish between two types:

• Necessary cookies keep the website working, protect it from misuse and save your cookie choice. They are set without consent (§ 25 Abs. 2 Nr. 2 TDDDG / Section 25(2) no. 2 TDDDG). The subsequent processing is based on our legitimate interest in a functioning website (Art. 6 Abs. 1 lit. f DSGVO / Art. 6(1)(f) GDPR).
• Optional cookies for statistics are only set if you consent (§ 25 Abs. 1 TDDDG / Section 25(1) TDDDG, Art. 6 Abs. 1 lit. a DSGVO / Art. 6(1)(a) GDPR).

On your first visit, our cookie banner asks for your consent. The banner is provided by Shopify. Until you consent, no optional cookies are set and no statistical data is collected. You can change your choice at any time via the “Cookie settings” link in the footer or withdraw your consent with effect for the future.

You can find an overview of the cookies Shopify sets in Shopify’s cookie policy. You can also delete or block cookies in your browser. In that case, some features of the website may no longer work fully.

If you have consented, we use Google Analytics 4 to understand how visitors use our website, for example which pages are viewed and where visitors come from. This helps us improve the content and structure of the site. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies. In particular, the following is processed: pages viewed, time spent on the site, source of the visit, approximate location (country, region, city), device and browser information, and a random identifier for your browser. According to Google, IP addresses of users in the EU are not stored but only used to determine the approximate location and then discarded.

• Legal basis: your consent (§ 25 Abs. 1 TDDDG / Section 25(1) TDDDG, Art. 6 Abs. 1 lit. a DSGVO / Art. 6(1)(a) GDPR). Without consent, Google Analytics is not loaded.
• Retention period: Analytics data is automatically deleted after 2 months.
• Google signals and advertising features are disabled. We do not link the data to Google accounts and do not use it for advertising.
• Data processing: We have concluded a data processing agreement with Google.
• Third country: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies to the USA (Art. 45 DSGVO / Art. 45 GDPR).

You can withdraw your consent at any time via the “Cookie settings” in the footer. More information: Google’s privacy policy and Data privacy in Google Analytics.

This website uses the fonts Inter, Inter Tight, JetBrains Mono and Archivo. They are stored locally in our Shopify theme and delivered via Shopify (see “Hosting via Shopify”). Loading the fonts does not establish any connection to servers of Google or other font providers.

If you contact us by email, phone or via the contact form, we process the information you give us: usually your name, email address and, where applicable, phone number, company and the content of your message. We use this data solely to respond to your inquiry.

• Legal basis: Art. 6 Abs. 1 lit. b DSGVO (Art. 6(1)(b) GDPR) if your inquiry relates to a project or contract. Otherwise, our legitimate interest in responding to inquiries (Art. 6 Abs. 1 lit. f DSGVO / Art. 6(1)(f) GDPR).
• Contact form: Messages sent via the form are processed by Shopify and forwarded to our email inbox (see “Hosting via Shopify”).
• Retention period: We delete your inquiry once it has been dealt with and no statutory retention obligations apply. If the inquiry turns into a contract, “Client and project data” applies.

Please do not send us login credentials for your store through these channels. We use Shopify’s collaborator/staff access for that.

We use Calendly for booking an intro call. The provider is Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. Its representative in the EU is DPO Centre Europe, Friedrichstraße 88, 10117 Berlin.

Calendly is only loaded once you click “Book an intro call”. Before that, there is no connection to Calendly. After the click, the booking window opens and Calendly processes:

• the data you enter (e.g. name, email address, company, message),
• the selected appointment and your time zone,
• technical data such as IP address and browser information.

Calendly may set its own cookies that are required for the booking.

• Legal basis: Art. 6 Abs. 1 lit. b DSGVO (Art. 6(1)(b) GDPR), as the booking serves to initiate a working relationship. Calendly is only loaded upon your explicit action.
• Data processing: We have concluded a data processing agreement with Calendly (Calendly DPA).
• Third country: Calendly is certified under the EU-US Data Privacy Framework, so an adequacy decision applies to transfers to the USA (Art. 45 DSGVO / Art. 45 GDPR).
• Retention period: We delete booking data once the call has taken place and no working relationship results, at the latest after 12 months. If a contract results, “Client and project data” applies.

More information: Calendly’s privacy notice. Instead of Calendly, you can always reach us directly by email or phone.

When we carry out a project for you, we process the data needed for the offer, contract, implementation and billing: contact persons, company details, contact details, project communication, billing and payment data.

• Legal basis: Art. 6 Abs. 1 lit. b DSGVO / Art. 6(1)(b) GDPR (contract and pre-contractual measures) and Art. 6 Abs. 1 lit. c DSGVO / Art. 6(1)(c) GDPR (legal obligations, e.g. accounting).
• Retention period: After the project ends, we store the data for as long as commercial and tax retention periods require: business correspondence 6 years, accounting vouchers 8 years, books and financial statements 10 years (§ 257 HGB / Section 257 German Commercial Code, § 147 AO / Section 147 German Fiscal Code).
• Recipients: tax advisors, payment service providers and the tools we use for project work and accounting, in each case only to the extent necessary and, where required, on the basis of a data processing agreement.

If, as part of a project, we access your Shopify store and thus your customers’ data, we act as your processor. For this, we conclude a separate data processing agreement with you under Art. 28 DSGVO (Art. 28 GDPR).

Our website links to other sites, such as our clients’ stores or our social media profiles. These are simple links, not embedded plugins: only when you click a link is the target page loaded and the respective provider receives your data. The respective provider is responsible for the processing there.

You have the following rights against us at any time. An informal message to info@shopibrands.com is enough.

• Access to the data we hold about you (Art. 15 DSGVO / Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 DSGVO / Art. 16 GDPR)
• Erasure of your data (Art. 17 DSGVO / Art. 17 GDPR)
• Restriction of processing (Art. 18 DSGVO / Art. 18 GDPR)
• Data portability in a common format (Art. 20 DSGVO / Art. 20 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7 Abs. 3 DSGVO / Art. 7(3) GDPR), for example via the “Cookie settings” in the footer

Right to object (Art. 21 DSGVO / Art. 21 GDPR): If we process data on the basis of our legitimate interest (Art. 6 Abs. 1 lit. f DSGVO / Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defense of legal claims.

Right to lodge a complaint (Art. 77 DSGVO / Art. 77 GDPR): You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information), Alt-Moabit 59–61, 10555 Berlin, datenschutz-berlin.de.

This website is delivered exclusively in encrypted form via HTTPS (TLS). You can tell by the padlock icon in your browser’s address bar. In addition, we protect data through technical and organizational measures, such as restricted access rights and two-factor login for our accounts.

We update this privacy policy when the website, our services or the legal situation change. The version published here at any given time applies.

Last updated: October 2026