Legal

Privacy Policy

Last updated: May 2026 · pursuant to GDPR

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Engin Ucar
Overbruckstr. 73
47166 Duisburg
Germany

2. General Information on Data Processing

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

As a rule, it is possible to use this website without providing personal data. Where personal data (e.g. name, email address) is collected on our pages, this is done on a voluntary basis wherever possible. This data will not be passed on to third parties without your express consent.

3. Data Collection on This Website

Server Log Files

The provider of this website automatically collects and stores information in server log files that your browser transmits automatically. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address (anonymised)

This data is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website). The data is automatically deleted after 7 days.

Contact by Email

If you contact us by email, your details (email address, content of your message) will be stored for the purpose of processing your enquiry and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract / pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing enquiries).

4. Shopify App – Processing of Merchant Data

EU Warranty Label is a Shopify app. When the app is installed via the Shopify App Store, the following data is processed:

Data Collected

  • Shop domain (myshopify.com subdomain)
  • Product data (product IDs, titles, product type) – read-only access
  • App settings (selected language, product type exclusions, guarantee configurations)
  • Billing status (FREE or PRO plan)

Purpose of Processing

The data is used exclusively to provide the app's functionality: displaying EU statutory warranty and manufacturer guarantee labels on the product pages of the respective Shopify store. It is not used for advertising purposes and is not passed on to third parties for other purposes.

Legal Basis

The legal basis is Art. 6 para. 1 lit. b GDPR (performance of the contract with the Shopify merchant for use of the app).

Retention Period

App configuration data is stored for as long as the app is installed. After the app is uninstalled, all stored shop data is automatically deleted within 48 hours (webhook: app/uninstalled).

Third-Party Providers

The app is operated using the following third-party providers:

  • Shopify Inc. (Ottawa, Canada) – App platform, billing and OAuth authentication. Privacy policy: shopify.com/legal/privacy
  • Fly.io, Inc. (Chicago, USA) – Server hosting for the app (data centre: Frankfurt, EU). Privacy policy: fly.io/legal/privacy-policy
  • Supabase, Inc. (San Francisco, USA) – Database hosting (data centre: Paris, France, EU). Privacy policy: supabase.com/privacy

Fly.io operates its server infrastructure in Frankfurt, Germany; Supabase operates its database in Paris, France. Both process data exclusively within the EU/EEA. Data transfer to Shopify is based on standard contractual clauses (Art. 46 GDPR).

5. Cookies

The public website (this landing page) does not set any tracking or marketing cookies. Within the app itself, technically necessary session cookies are set by Shopify, which are required for the secure operation of the embedded app (Shopify Embedded App). These cookies are subject to Shopify's privacy policy.

6. Your Rights as a Data Subject

You have the following rights with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, please contact us by email: engin.ucar@outlook.de

7. Currency and Amendments to This Privacy Policy

This privacy policy is currently valid and was last updated in May 2026. Further development of our app or changes to legal or regulatory requirements may make it necessary to amend this privacy policy. The current privacy policy can be accessed on this page at any time.