We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data – in accordance with the General Data Protection Regulation (GDPR).

1. Person responsible

Responsible for data processing within the meaning of the GDPR is:

fliXzon Commerce GmbH
Schorbachstraße 9
35510 Butzbach
Email: info@elysera.de
Managing Director: Anne-Christin Groß

Our shop is technically operated via the platform Shopify International Ltd. , 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. A data processing agreement is in place pursuant to Art. 28 GDPR. Transfer to third countries (e.g., Canada, USA) is based on standard contractual clauses pursuant to Art. 46 GDPR.

2. Data collection when visiting the shop

When you visit our website, Shopify automatically collects technical data (e.g., IP address, browser, device type, access time, referrer). This data is used for the technical provision, analysis, and security of the shop. Processing is carried out in accordance with Art. 6 (1) (f) GDPR (legitimate interest).

3. Collection of personal data when placing orders

When you place an order, we collect:

• First and Last Name
• Delivery and billing address
• E-mail address
• Telephone number (optional)
• Payment data (via payment service providers)

This data is necessary for contract processing in accordance with Art. 6 (1) (b) GDPR.

4. Customer account

If you create a customer account, we will save your data for future orders. The legal basis is Art. 6 (1) (b) GDPR. You can delete your account at any time by informing us.

5. Sharing of data

Your data will only be passed on if this is necessary to fulfil the contract, for example to:

• Shipping service providers (e.g. DHL, DPD, Hermes)
• Payment providers (e.g. Klarna, PayPal, Stripe, Shopify Payments)
• Technical service providers within the scope of shop operation by Shopify

Shopify may transfer data to third countries (e.g., the USA or Canada). Processing is based on standard contractual clauses in accordance with Art. 46 GDPR.

6. Email marketing and newsletters

When you subscribe to our newsletter, we will use your email address for our own advertising purposes. We will only send you emails with your express consent (Art. 6 (1) (a) GDPR) using the double opt-in process.

The newsletter is sent via Shopify Email . The time of registration and IP address are logged. Performance analyses (e.g., open and click rates) are only performed with your consent. You can revoke your consent at any time via the unsubscribe link or by email.

7. Cookies & Analysis

Our shop uses cookies and similar technologies to make the shop functional, secure, and user-friendly.

• Essential cookies – required for the operation of the shop
• Statistics and marketing cookies – e.g., Google Analytics, Meta Pixel (only with consent)

The legal basis for technically necessary cookies is Art. 6 (1) (f) GDPR, for all other cookies Art. 6 (1) (a) GDPR.

Consent is given via our cookie banner on your first visit. You can adjust your selection at any time in the Cookie Manager.

8. External links (e.g. Instagram, Facebook)

If you use external links (e.g., to social media), you leave our area of responsibility. The privacy policies of the respective providers apply.

9. Your rights

You have the right at any time:

• to information (Art. 15 GDPR)
• to rectification (Art. 16 GDPR)
• to deletion (Art. 17 GDPR)
• to restriction of processing (Art. 18 GDPR)
• to data portability (Art. 20 GDPR)
• to object to processing (Art. 21 GDPR)
• to revoke consent given (Art. 7 para. 3 GDPR)
• to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g.:
  Hessian Commissioner for Data Protection
  https://datenschutz.hessen.de

10. Storage period

Personal data will only be stored for as long as necessary for the respective purpose or as long as statutory retention periods exist (e.g. commercial and tax law).

11. SSL encryption

Our website uses modern SSL encryption via HTTPS (e.g. https://elysera.de) to protect your data during transmission.