Privacy policy

Privacy Policy — Eclipse Studios (2024 Updated)

Unless otherwise specified below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obligated to provide data, and failure to provide it has no consequences. This only applies insofar as no other indication is given in the subsequent processing operations. "Personal data" refers to any information that relates to an identified or identifiable natural person.

Use of TikTok Ads Manager and Facebook Ads

We use the TikTok Ads Manager and Facebook Ads to advertise our services. When you interact with our ads, TikTok and Facebook may process your personal data for analytics, remarketing, and ad optimization purposes. Please refer to their respective privacy policies for further details on data processing.

Legal Basis: Article 6(1)(f) GDPR (legitimate interest in marketing)
Recipient: TikTok Inc., Meta Platforms Inc.
Data Transfer: USA (TADPF compliance for Meta)
Duration: Until cookie deletion or opt-out

Klaviyo — Newsletter & Marketing Automation

We use Klaviyo to manage our email newsletter and marketing communications. When you subscribe to our newsletter, Klaviyo processes your email address, name, and interaction data (opens, clicks) to send targeted communications.

Legal Basis: Article 6(1)(a) GDPR (your explicit consent via subscription)
Recipient: Klaviyo Inc. (USA)
Data Transfer: USA (Standard Contractual Clauses)
Your Rights: You can unsubscribe from any email with a single click. We will delete your data upon request.
Duration: Until unsubscription or account deletion

PayPal & Mollie — Payment Processing

We use PayPal and Mollie to process your payments securely. When you make a purchase, these payment processors collect and process:

Name, address, email
Payment method details
Transaction history
IP address

Legal Basis: Article 6(1)(b) GDPR (contract fulfillment)
Recipients: PayPal Europe S.à r.l. / Mollie B.V.
Data Transfer: USA (PayPal, TADPF); Netherlands (Mollie)
Duration: As per payment processor retention (typically 180 days for tax compliance, then deletion)

For details, see PayPal's Privacy Policy and Mollie's Privacy Policy.

Google Analytics

We use Google Analytics to understand how visitors use our website. This includes:

Pages visited, time on site
Device type (mobile, desktop)
Geographic location (country-level)
Traffic source (how you found us)

Legal Basis: Article 6(1)(a) GDPR (your consent via cookie banner)
Recipient: Google LLC (USA)
Data Transfer: USA (Google certified under Data Processing Agreement)
Duration: 14 months (default Google Analytics retention)
Your Rights: You can opt-out by disabling cookies or using Google's Opt-Out Browser Extension

Meta Pixel (Facebook Pixel)

We use Meta Pixel to measure conversions from our website and optimize Facebook/Instagram ads. Meta Pixel tracks:

Page views
Add-to-cart actions
Purchases
Your device ID and cookie data

Legal Basis: Article 6(1)(a) GDPR (your consent via cookie banner)
Recipient: Meta Platforms Inc. (USA)
Data Transfer: USA (Meta certified under TADPF)
Duration: As per Meta's retention policies (typically 90 days)

Judge.me — Product Reviews & Ratings

We use Judge.me to collect and display customer product reviews. When you submit a review, we collect:

Your name and email
Review text and rating
Photos (optional)

Legal Basis: Article 6(1)(a) GDPR (your consent when submitting review)
Recipient: Judge.me (Shopify app)
Duration: Indefinitely (reviews are public; deletion upon request)
Your Rights: You can request deletion of your review at any time

Server Log Files

You can visit our website without providing personal information. Each time you access our website, usage data is transmitted by your internet browser to us or our web hosting/IT service provider and stored in protocol data (known as server log files). This data includes the name of the page accessed, date and time of access, IP address, the amount of data transferred, and the requesting provider.

The processing is based on Article 6(1)(f) of the GDPR, reflecting our legitimate interest in ensuring the trouble-free operation of our website and enhancing our services.

Your data may be transmitted and processed in third countries outside the EU, specifically Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, the EU Commission's adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF), applies. Shopify is certified under TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's standard contractual clauses.

Cookies & Cookie Consent

We use cookies to enhance your user experience. Cookies are small text files stored on your device that help us:

Remember your preferences
Keep you logged in
Track website performance
Deliver targeted ads

Types of Cookies:

Essential Cookies (always active):

Session cookies for cart, login, security
No consent required; necessary for site functionality

Marketing Cookies (require consent):

Google Analytics
Meta Pixel (Facebook/Instagram ads)
TikTok Pixel

Your Rights: You can manage cookies in your browser settings or disable marketing cookies via our cookie banner at any time.

Contact

Data Controller

For inquiries, please contact:

Phuc Huynh Gia Le
Brümmelkamp 10
21423 Winsen, Germany
Phone: +49 172 7682082
Email: clothing@eclipse-studios.de

Customer-Initiated Contact via Email

When you contact us via email, we collect your personal data (name, email address, message content) only to the extent you provide. Data processing serves the purpose of handling and responding to your inquiry.

If the contact relates to pre-contractual measures (e.g., purchase inquiries, quotes) or an existing contract, this data processing is based on Article 6(1)(b) of the GDPR. For other inquiries, processing is based on Article 6(1)(f) GDPR, as we have a legitimate interest in processing and responding to your request. You may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation.

We will use your email address solely for handling your inquiry. Your data will be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Data Collection and Processing When Sending Images by Email

You have the option to send us images via email related to ordering personalized products. Upon submission, we collect personal data (e.g., identifiable persons in images) only to the extent you provide. Data processing serves to create personalized products, with the submitted image used as a template for production (e.g., T-shirt printing). Processing is based on Article 6(1)(b) GDPR, as it is necessary to fulfill a contract with you.

Your image will be used solely for fulfilling the order. Afterward, data will be deleted according to statutory retention periods, unless further processing is authorized.

WhatsApp Business

If you contact us via WhatsApp, we use the WhatsApp Business version from WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). For users outside the EEA, WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA) provides this service.

Data processing serves to handle and respond to your inquiries. We may process your WhatsApp-stored mobile number, name (if provided), and other details you provide. Data is stored solely for users who contact us via WhatsApp.

WhatsApp transmits data to Meta Platforms Inc. in the USA. The USA has an EU adequacy decision, the TADPF, under which Meta is certified and obligated to comply with EU privacy standards.

If the contact pertains to pre-contractual measures or an existing contract, processing is based on Article 6(1)(b) GDPR. For other inquiries, it is based on Article 6(1)(f) GDPR, as we have a legitimate interest in offering a quick and easy means of contact and responding to your inquiry. You may object to data processing under Article 6(1)(f) GDPR for reasons arising from your specific situation.

Your personal data is used solely to process your inquiry and subsequently deleted in accordance with statutory retention periods, unless you consent to further processing.

For further information on WhatsApp's terms of use and privacy policy, please visit WhatsApp's terms of service and WhatsApp's privacy policy.

Your Data Protection Rights

Under the GDPR, you have the following rights:

Right to Access: You can request a copy of your personal data
Right to Rectification: You can correct inaccurate data
Right to Erasure: You can request deletion ("Right to be Forgotten")
Right to Restriction: You can limit how we process your data
Right to Portability: You can request your data in a portable format
Right to Object: You can object to certain processing
Right to Lodge a Complaint: You can file a complaint with the data protection authority

To exercise any of these rights, contact us at: clothing@eclipse-studios.de

Data Protection Authority

If you believe your rights have been violated, you can file a complaint with the competent data protection authority:

Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen)
Prinzenstraße 5
30159 Hannover, Germany
Email: poststelle@lfd.niedersachsen.de
Phone: +49 511 120-4500
Website: www.lfd.niedersachsen.de

Updates to This Policy

We may update this Privacy Policy periodically to reflect legal changes or our practices. We will notify you of significant changes via email or prominent notice on our website.

Last Updated: August 2026