Privacy Policy
I. Name and address of the controller
Responsible within the meaning of the General Data Protection Regulation (GDPR) is:
NYTE Europe GmbH
Martin-Hoffmann-Str. 11
12435 Berlin, Germany
Email: hallo@nytetools.com
Website: www.nytetools.com
Represented by:
Patrick Bender, Managing Director
Martin-Hoffmann-Str. 11
12435 Berlin, Germany
II. Data protection supervisor
A data protection officer has not currently been appointed, as there is no legal obligation. For data protection inquiries, please contact the controller directly at hallo@nytetools.com.
III. General information on data processing
We only process personal data of our users to the extent that this is necessary for the provision of a functional website, our online shop, and our services.
Processing generally only takes place with the user's consent or if a legal basis allows it.
Legal basis according to Art. 6 para. 1 GDPR:
- lit. a – Consent
- lit. b – Performance of the contract or pre-contractual measures
- lit. c – Legal obligation
- lit. f – Legitimate interest
IV. Provision of the website and hosting
1. Domain-Hosting (IONOS SE)
The domain nytetools.com is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
IONOS collects data in server log files including browser type/version, operating system, referrer URL, host name, anonymized IP address, date/time of access.
Purpose: Ensure trouble-free operation, stability, security. No personal evaluation.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Storage period: Logs deleted after 8 weeks.
Further info: IONOS Privacy Policy
2. Shop-Hosting (Shopify Inc.)
Shopify Inc., 151 O'Connor Street, Ottawa, ON K2P 2L8, Canada operates the online shop.
Shopify processes personal data (IP, browser, device, order details) on behalf of NYTE Europe GmbH. Data transfer to Canada based on EU adequacy decision (Art. 45 GDPR).
Legal basis: Art. 6 para. 1 lit. f GDPR.
More info: Shopify Privacy Policy
V. Cookies
Our website uses cookies. Some are technically necessary (e.g., shopping cart), others for statistics/marketing (e.g., Google Analytics, Meta Pixel).
Consent can be given via cookie banner and withdrawn anytime via settings.
Legal basis: Necessary: Art. 6 para. 1 lit. f GDPR; Optional: Art. 6 para. 1 lit. a GDPR (§ 25 TTDSG)
VI. Registration and customer account
Data collected: first name, last name, email, billing/delivery address, payment info, order history.
Purpose: Order processing, delivery, invoicing, customer service.
Legal basis: Art. 6 para. 1 lit. b GDPR.
Storage period: Until account deletion or statutory retention (6–10 years).
VII. Payment
1. PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
Legal basis: Art. 6 para. 1 lit. b GDPR.
More info: PayPal Privacy
2. Payment Hero / Pathway Solution
Data: name, email, order number, transaction ID.
Purpose: Secure and automated payment processing.
Legal basis: Art. 6 para. 1 lit. b GDPR.
VIII. Shipping and Fulfillment
Provider: Hive Technologies GmbH, Köpenicker Str. 154, 10997 Berlin.
Data: Address and order details.
Purpose: Picking, packing, shipping, returns management.
Legal basis: Art. 6 para. 1 lit. b GDPR.
IX. Address and data validation
Provider: Address Hero. Data is automatically checked and corrected if necessary.
Legal basis: Art. 6 para. 1 lit. f GDPR.
X. Marketing and Analytics
1. Google Analytics
Provider: Google Ireland Limited. Data processed pseudonymously.
Legal basis: Art. 6 para. 1 lit. a GDPR.
More info: Google Privacy
2. Meta Pixel
Provider: Meta Platforms Ireland Ltd. Used for ad effectiveness and targeting.
Legal basis: Art. 6 para. 1 lit. a GDPR.
More info: Meta Privacy
3. Klaviyo (Newsletter & Automations)
Provider: Klaviyo Inc., Boston, MA, USA.
Data: name, email, email interactions.
Legal basis: Art. 6 para. 1 lit. a GDPR.
Transfer to USA under Art. 46 GDPR (SCC).
4. xRay (Shopify-App)
Analyzes product interactions, pseudonymized data.
Legal basis: Art. 6 para. 1 lit. f GDPR.
5. Edit-Intend
Supports content optimization and internal process control.
Legal basis: Art. 6 para. 1 lit. f GDPR.
6. Translator-Tool
For multilingual website presentation (e.g., Weglot / Google Translate).
Legal basis: Art. 6 para. 1 lit. f GDPR.
XI. Contact form and e-mail contact
Data (name, email, message) used only to process inquiry.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. b GDPR (pre-contractual measure).
Data deleted after inquiry unless statutory retention applies.
XII. Data transfer to third countries
Some providers (Google, Meta, Klaviyo) process data in the USA. Transfer based on EU Standard Contractual Clauses (SCC) or Data Privacy Framework (DPF).
XIII. Rights of the data subject
Under Art. 15 et seq. GDPR, you have rights to:
- Information
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Object (Art. 21 GDPR)
- Withdraw consent (Art. 7 para. 3 GDPR)
- Lodge a complaint with supervisory authority
XIV. Competent supervisory authority
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin
E-mail: mailbox@datenschutz-berlin.de