Privacy Policy

Last Updated: August 28, 2026

1. Controller

The controller for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is:

Suntic Overseas UG (haftungsbeschränkt)
Setzerweg 6
57076 Siegen
North Rhine-Westphalia
Germany

Managing Director: Dennis Suntic

Phone: +49 152 34826377
Email: info@sunticoverseas.com

2. General Information on Data Processing

The protection of your personal data is important to us.

We process personal data exclusively within the framework of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications-Digital Services Data Protection Act (TDDDG).

Personal data is any information relating to an identified or identifiable natural person. This may include, for example, name, email address, telephone number, IP address, or usage data.

We only process personal data to the extent necessary for the provision of our website, communication with you, the processing and fulfillment of orders, and the fulfillment of contractual or legal obligations.

3. Accessing Our Website

When you access our website, information is automatically processed by the web server or hosting provider.

The following data, in particular, may be collected:

  • IP address of the accessing device
  • Date and time of access
  • Pages and files accessed
  • Referrer URL
  • Browser used
  • Operating system
  • Language and version of the browser
  • Possibly other technical information

This data is processed to technically provide the website, ensure the security and stability of the website, and to detect and prevent misuse and attacks.

Legal Basis: Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies, in particular, in the secure, stable, and technically functional provision of our website.

Server log data will be deleted as soon as they are no longer required for the stated purposes, unless there is a legal retention obligation or a legitimate interest in longer storage.

4. Hosting

Our website and our online shop are operated via Shopify.

Hosting Provider:
Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify provides the technical infrastructure for our online shop. In the context of hosting, Shopify may process personal data that arises during the use of our website and our online shop, in particular IP addresses, technical connection data, order and customer data.

Insofar as Shopify processes personal data on our behalf, the processing takes place on the basis of the Shopify Data Processing Addendum (DPA) or a corresponding agreement for commissioned processing in accordance with Art. 28 GDPR. Shopify points out that the specific use and configuration of Shopify services is decisive for data protection compliance by the merchant.

Further information on data protection at Shopify can be found in Shopify's privacy policy.

5. Contacting Us via Email, Phone, or Contact Form

If you contact us via email, phone, or a contact form, we process the personal data you provide.

This may include, in particular:

  • Name
  • Email address
  • Phone number
  • Content of the inquiry
  • Other information voluntarily provided by you

The processing takes place for the purpose of handling and responding to your inquiry.

If your inquiry is aimed at concluding or executing a contract, the processing takes place for the purpose of carrying out pre-contractual measures or fulfilling a contract.

Legal Bases:
Art. 6 para. 1 lit. b GDPR, if the inquiry relates to a contract or pre-contractual measures.

Art. 6 para. 1 lit. f GDPR for other inquiries.

Our legitimate interest lies in the proper processing and answering of inquiries.

The data will be deleted as soon as the inquiry has been conclusively processed and no legal retention obligations or other legitimate reasons for further storage exist.

6. Contact Form

If a contact form is offered on our website, the data entered there will be processed exclusively for the purpose of handling the respective inquiry.

Mandatory fields are marked as such. The provision of further data is voluntary.

Legal Basis:
Art. 6 para. 1 lit. b GDPR, if the inquiry serves the purpose of carrying out pre-contractual measures.

Otherwise Art. 6 para. 1 lit. f GDPR.

The data transmitted via the contact form will be deleted as soon as the purpose of processing ceases to apply, unless there are legal retention obligations to the contrary.

7. Cookies and Similar Technologies

Our Shopify store uses cookies and similar technologies.

Cookies are small text files that are stored on your device. They can, for example, serve to ensure the technical function of the online shop, manage the shopping cart, save settings or – if you have consented – enable statistical or marketing purposes.

We generally distinguish between:

Technically Necessary Cookies

These cookies are necessary for the website or online shop to function technically.

No consent is required for technically necessary cookies or similar technologies, provided that the legal requirements for this are met.

Legal Basis: Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG, insofar as the respective requirements are met.

Non-Essential Cookies

Non-technically necessary cookies, particularly for analysis, marketing or tracking purposes, are only used if you have given your prior consent.

Legal Basis: Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG.

You can revoke any given consent at any time with effect for the future.

8. Consent Management / Cookie Banner

If a cookie or consent management system is used on our website, it is used to record and manage your consent decisions.

In particular, the following information may be processed:

  • IP address or truncated/anonymized IP address
  • Date and time of consent
  • Consent status
  • Browser used or technical device information
  • Information about the categories you have selected

The processing serves to document and manage your consent and to fulfill data protection verification obligations.

Legal Basis: Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.

9. Analysis and Statistics

If we use analysis or statistics services on our website, these will only be used within the framework of the respective applicable data protection requirements.

Non-essential analysis procedures are generally only activated if you have given your consent for this.

Legal Basis: Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.

10. Google Services

If Google services such as Google Analytics, Google Ads, Google Maps, Google Tag Manager or YouTube are used on our website, these will be processed in accordance with the respective data protection requirements.

Non-essential Google services are generally only activated with prior consent, insofar as this is legally required.

11. Social Media Services

Our website may contain links to our social media presences.

When merely accessing our website via a simple external link, no data is generally transferred to the respective social network yet.

Insofar as social media content, plugins or other functions from external providers are directly integrated into our website, processing of personal data by the respective provider may occur.

12. External Content and Services

Our website may embed external content or services, for example:

  • Map and navigation services
  • Videos
  • Fonts
  • Captcha services
  • Payment services
  • Analysis and statistics services
  • External images or other content

When external services are integrated, it may be necessary to transmit personal data such as the IP address to the respective provider.

Non-essential external services are generally only loaded after prior consent, insofar as this is legally required.

13. Contract Processing and Customer Management

If you conclude a contract with us or place an order in our online shop, we process the personal data required for this.

This may include, in particular:

  • Name and contact details
  • Billing and delivery address
  • Order and contract data
  • Communication data
  • Payment and billing information

The processing takes place for the execution of the contract, for communication with you, and for the fulfillment of legal obligations.

Legal Bases:
Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. c GDPR.

Where necessary, data may be transmitted to tax advisors, payment service providers, shipping service providers or other service providers used for contract processing.

14. Payment Processing

Various payment methods are available in our online shop. Depending on the selected payment method, the personal data required for payment processing is transmitted to the respective payment service provider or credit institution.

We offer the following payment methods:

  • Credit Card: Visa, Mastercard, Maestro
  • Klarna: Invoice and Sofortüberweisung (instant bank transfer)
  • PayPal
  • Prepayment / Bank Transfer

Payment via PayPal

If you choose the PayPal payment method, the personal data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

This may include, in particular, name, email address, billing and shipping address, order amount, order number, and other data required for payment processing.

PayPal processes the data on its own responsibility for the purpose of carrying out the payment and, if applicable, for fraud prevention and transaction verification.

Further information on the processing of personal data by PayPal can be found in PayPal's privacy policy.

Payment via Klarna

If you choose a Klarna payment method, the personal data required for payment processing will be transmitted to Klarna Bank AB (publ), Sveavägen 46, SE-111 34 Stockholm, Sweden.

This particularly concerns the contact, order, and payment data you provide. Klarna may process this data, in particular, to process the payment, to check available payment methods, and for fraud prevention and, if applicable, credit assessment.

Further information on the processing of personal data by Klarna can be found in Klarna's privacy policy.

Payment by Credit Card

When paying by credit card (Visa, Mastercard or Maestro), the data required for payment processing is transmitted to the respective payment service provider used by us or Shopify.

This may include, in particular, name, billing address, payment information, order number and order amount.

Prepayment / Bank Transfer

If you choose the prepayment or bank transfer payment method, we will provide you with the bank details required for payment.

We process the payment data communicated by you during the transfer or received by us exclusively for the purpose of allocating and processing your order.

Legal Basis

The processing and transmission of personal data required for payment processing takes place for the fulfillment of the purchase contract in accordance with Art. 6 para. 1 lit. b GDPR.

When using PayPal or Klarna, the respective data protection provisions and terms and conditions of the respective payment service providers also apply.

15. Shipping

To deliver your order, we pass on the necessary data to the shipping company commissioned by us.

This includes, in particular, your name and your delivery address, as well as your email address or telephone number, if required for delivery.

Legal Basis: Art. 6 para. 1 lit. b GDPR.

16. Processors and Other Recipients

We may use external service providers who process personal data on our behalf.

These may include, for example:

  • Shopify
  • IT service providers
  • Email and communication service providers
  • Payment service providers
  • Shipping and logistics service providers
  • Tax advisors
  • Consent management providers
  • Analysis and marketing service providers

Insofar as a service provider processes personal data on our behalf, this is done on the basis of a contract for commissioned processing in accordance with Art. 28 GDPR, provided that the legal requirements for this are met.

17. Transfer to Third Countries

The processing of personal data outside the European Union (EU) or the European Economic Area (EEA) only takes place if the legal requirements of Art. 44 et seq. GDPR are met.

Such a transfer can occur, in particular, when using certain international services.

Shopify points out that personal data may also be processed or transferred outside the EEA as part of its international infrastructure. For such transfers, Shopify uses the legal safeguards it claims are in place, including standard contractual clauses, where necessary.

Insofar as there is no adequacy decision by the European Commission for a third country, suitable safeguards are used, for example, standard data protection clauses in accordance with Art. 46 GDPR, where necessary.

18. Storage Duration

We generally store personal data only for as long as is necessary for the respective processing purpose.

In addition, legal retention obligations may exist. In particular, commercial and tax law retention obligations may result in certain data having to be stored beyond the end of a business relationship.

After the respective processing purpose ceases to apply or legal retention periods expire, the data will be deleted, unless another legal basis for further storage exists.

19. Data Security

We take appropriate technical and organizational measures to protect personal data from loss, destruction, manipulation, unauthorized access, and other unauthorized processing.

Our security measures are regularly reviewed and adapted in accordance with technological developments and existing risks.

20. Your Rights as a Data Subject

In accordance with the legal requirements, you have the following rights:

  • Right to information
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent

To exercise your rights, you can contact us at any time:

Suntic Overseas UG (haftungsbeschränkt)
Setzerweg 6
57076 Siegen
Germany

Email: info@sunticoverseas.com
Phone: +49 152 34826377

21. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

For companies based in North Rhine-Westphalia, the following supervisory authority is particularly relevant:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)

Kavalleriestraße 2–4
40213 Düsseldorf
Germany

22. No Obligation to Provide Personal Data

In principle, there is no legal obligation to provide us with personal data via our website.

However, to place an order in our online shop, the provision of certain personal data is necessary so that we can execute the purchase contract and process the order.

23. Automated Decision-Making and Profiling

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR, does not generally take place via this website, unless expressly stated otherwise in this privacy policy.

24. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy if this becomes necessary due to legal, technical or organisational changes.

The privacy policy published at the time of your visit to our website applies.

Last Updated: August 28, 2026