Data protection

1. Person responsible

Hexagons GmbH

Rhine Promenade 13

40789 Monheim am Rhein

Germany

Phone: 02173/2650321

Email: info@sechsecken.com

Represented by: Managing Director Arvid Loboda

2. General information on data processing

We process personal data (e.g. name, address, email address, payment details) exclusively within the framework of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the Telecommunications-Telemedia Data Protection Act (TTDSG).

Processing will only take place to the extent necessary for the provision of our services, the execution of the contract or due to legal requirements.

3. Hosting via Shopify

Our online shop is operated via the platform Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland .

The data will also be transferred to Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada and partly to the USA.

Shopify uses EU standard contractual clauses (SCC) for data transfers to third countries.

For more information about Shopify's privacy policy, please visit: https://www.shopify.com/legal/privacy

4. Collection and use of personal data

We collect, store and process personal data when you:

  1. visit our shop (IP address, device information, browser data, server logs),
  2. Order products (contact details, delivery address, payment details),
  3. register for a customer account,
  4. subscribe to our newsletter or communicate with us.

Legal basis: Art. 6 (1) (b) GDPR (performance of contract), Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (f) GDPR (legitimate interest, e.g. secure IT).

5. Payment processing

We use the following providers to process payments:

  1. Shopify Payments / Stripe Payments Europe Ltd., Ireland
  2. PayPal (Europe) S.à rl et Cie, SCA, Luxembourg
  3. Klarna Bank AB (publ), Sweden (Klarna Sofort, Klarna Invoice)
  4. Apple Pay (Apple Inc., USA)
  5. Google Pay (Google Ireland Ltd.)

Data is only passed on for payment processing.

Legal basis: Art. 6 (1) (b) GDPR.

6. Shipping processing

For shipping purposes, we pass on your data (name, address, email/phone if applicable) to service providers:

  1. DHL Parcel GmbH
  2. Billbee GmbH (order and invoice processing)
  3. Parcel Panel (shipment tracking for customers)

Legal basis: Art. 6 (1) (b) GDPR.

7. Shopify apps & services used

We use additional Shopify apps, some of which process personal data:

  1. Klaviyo (Email & SMS Marketing)
  2. Judge.me Reviews (product reviews)
  3. SearchPie SEO & Speed ​​(SEO analysis)
  4. Suppliful, Spocket, viaGlamour, AliExpress, Jubilee, Blanka, Selfnamed (dropshipping/fulfillment apps)
  5. Printify, Printful (Print on Demand)
  6. RT: Google Fonts, Custom Fonts (font integration)

Each of these apps is independently responsible for data protection.

Data may be transferred to third countries (USA, Canada, etc.). Basis: Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.

8. Newsletter & Communication

We offer the option to subscribe to our newsletter. Provider: Shopify Email / Klaviyo .

  1. Processing: Email address, if applicable first/last name
  2. Legal basis: Consent (Art. 6 (1) (a) GDPR)
  3. Revocation: at any time via unsubscribe link in the newsletter

9. Reviews

Customers can submit product reviews using the Judge.me app.

For this purpose, order and contact information are automatically forwarded to Judge.me in order to send evaluation requests.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in verified reviews).

10. Analysis and tracking tools

With your consent, we use (cookie banner):

  1. Shopify Analytics (Shopify)
  2. Google Analytics (Google Ireland Ltd.)
  3. Meta Pixel (Facebook/Instagram, Meta Platforms Ireland Ltd.) if activated

These services use cookies to evaluate user behavior.

Legal basis: Art. 6 (1) (a) GDPR (consent).

11. Cookies & Consent

We use cookies to provide basic shop functions (shopping cart, login, ordering process).

In addition, we only use tracking cookies after you have actively consented via our cookie banner.

You can revoke your consent at any time.

Legal basis: Art. 6 (1) (b) GDPR (performance of contract), Art. 6 (1) (a) GDPR (consent), Section 25 TTDSG.

12. Duration of storage

We only store personal data for as long as it is necessary for the respective purposes or as long as we are legally obliged to do so (e.g. tax retention obligations 6-10 years).

13. Rights of data subjects

You have the following rights under the GDPR:

  1. Information (Art. 15 GDPR)
  2. Correction (Art. 16 GDPR)
  3. Deletion (Art. 17 GDPR)
  4. Restriction (Art. 18 GDPR)
  5. Data portability (Art. 20 GDPR)
  6. Objection (Art. 21 GDPR)

To exercise your rights, please contact: info@sechsecken.com

14. Right to complain

You have the right to lodge a complaint with the competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Cavalry Street 2-4

40213 Düsseldorf

https://www.ldi.nrw.de

15. Current status & changes

This privacy policy is currently valid and is dated September 2025 .

We reserve the right to change them at any time to reflect legal requirements or changes to our services.