Privacy Policy

I. Name and address of the controller

Responsible within the meaning of the General Data Protection Regulation (GDPR) is:
NYTE Europe GmbH
Martin-Hoffmann-Str. 11
12435 Berlin, Germany
Email: hello@nytetools.com
Website: www.nytetools.com

Represented by:
Patrick Bender, Managing Director
Martin-Hoffmann-Str. 11
12435 Berlin, Germany

II. Data protection supervisor

A data protection officer has not currently been appointed, as there is no legal obligation. For data protection inquiries, please contact the controller directly at hello@nytetools.com.

III. General information on data processing

We only process personal data of our users to the extent that this is necessary for the provision of a functional website, our online shop, and our services.

Processing generally only takes place with the user's consent or if a legal basis allows it.

Legal basis according to Art. 6 para. 1 GDPR:
- lit. a – Consent
- lit. b – Performance of the contract or pre-contractual measures
- lit. c – Legal obligation
- lit. f – Legitimate interest

IV. Provision of the website and hosting

1. Domain-Hosting (IONOS SE)

The domain nytetools.com is operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

IONOS collects data in server log files including browser type/version, operating system, referrer URL, host name, anonymized IP address, date/time of access.

Purpose: Ensure trouble-free operation, stability, security. No personal evaluation.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Storage period: Logs deleted after 8 weeks.
Further info: IONOS Privacy Policy

2. Shop-Hosting (Shopify Inc.)

Shopify Inc., 151 O'Connor Street, Ottawa, ON K2P 2L8, Canada operates the online shop.

Shopify processes personal data (IP, browser, device, order details) on behalf of NYTE Europe GmbH. Data transfer to Canada based on EU adequacy decision (Art. 45 GDPR).
Legal basis: Art. 6 para. 1 lit. f GDPR.
More info: Shopify Privacy Policy

V. Cookies

Our website uses cookies. Some are technically necessary (e.g., shopping cart), others for statistics/marketing (e.g., Google Analytics, Meta Pixel).

Consent can be given via cookie banner and withdrawn anytime via settings.
Legal basis: Necessary: Art. 6 para. 1 lit. f GDPR; Optional: Art. 6 para. 1 lit. a GDPR (§ 25 TTDSG)

VI. Registration and customer account

Data collected: first name, last name, email, billing/delivery address, payment info, order history.
Purpose: Order processing, delivery, invoicing, customer service.
Legal basis: Art. 6 para. 1 lit. b GDPR.
Storage period: Until account deletion or statutory retention (6–10 years).

VII. Payment

1. PayPal

Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
Legal basis: Art. 6 para. 1 lit. b GDPR.
More info: PayPal Privacy

2. Payment Hero / Pathway Solution

Data: name, email, order number, transaction ID.
Purpose: Secure and automated payment processing.
Legal basis: Art. 6 para. 1 lit. b GDPR.

VIII. Shipping and Fulfillment

Provider: Hive Technologies GmbH, Köpenicker Str. 154, 10997 Berlin.
Data: Address and order details.
Purpose: Picking, packing, shipping, returns management.
Legal basis: Art. 6 para. 1 lit. b GDPR.

IX. Address and data validation

Provider: Address Hero. Data is automatically checked and corrected if necessary.
Legal basis: Art. 6 para. 1 lit. f GDPR.

X. Marketing and Analytics

1. Google Analytics

Provider: Google Ireland Limited. Data processed pseudonymously.
Legal basis: Art. 6 para. 1 lit. a GDPR.
More info: Google Privacy

2. Meta Pixel

Provider: Meta Platforms Ireland Ltd. Used for ad effectiveness and targeting.
Legal basis: Art. 6 para. 1 lit. a GDPR.
More info: Meta Privacy

3. Klaviyo (Newsletter & Automations)

Provider: Klaviyo Inc., Boston, MA, USA.
Data: name, email, email interactions.
Legal basis: Art. 6 para. 1 lit. a GDPR.
Transfer to USA under Art. 46 GDPR (SCC).

4. xRay (Shopify-App)

Analyzes product interactions, pseudonymized data.
Legal basis: Art. 6 para. 1 lit. f GDPR.

5. Edit-Intend

Supports content optimization and internal process control.
Legal basis: Art. 6 para. 1 lit. f GDPR.

6. Translator-Tool

For multilingual website presentation (e.g., Weglot / Google Translate).
Legal basis: Art. 6 para. 1 lit. f GDPR.

XI. Contact form and e-mail contact

Data (name, email, message) used only to process inquiry.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. b GDPR (pre-contractual measure).
Data deleted after inquiry unless statutory retention applies.

XII. Data transfer to third countries

Some providers (Google, Meta, Klaviyo) process data in the USA. Transfer based on EU Standard Contractual Clauses (SCC) or Data Privacy Framework (DPF).

XIII. Rights of the data subject

Under Art. 15 et seq. GDPR, you have rights to:
- Information
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Object (Art. 21 GDPR)
- Withdraw consent (Art. 7 para. 3 GDPR)
- Lodge a complaint with supervisory authority

XIV. Competent supervisory authority

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin
E-mail: mailbox@datenschutz-berlin.de