Data protection

Data protection declaration Unless otherwise stated below, the provision of your personal data is neither required by law nor contractually, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is provided during the subsequent processing operations. "Personal data" means all information that relates to an identified or identifiable natural person.

Server log files You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider through your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 Paragraph 1 lit. f GDPR from our predominant legitimate interest in ensuring trouble-free operation of our website and in improving our offering. Your data may be transferred to third countries outside the EU, in particular Canada and the USA, and processed there. There is an adequacy decision from the EU Commission for Canada. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not TADPF certified. This data transfer takes place on the basis of contractual obligations that are comparable to those of the EU Commission's standard contractual clauses.

Contact person responsible Contact us if desired. The person responsible for data processing is: Gabriel Elija, Calle Parque Tajo 108, 03177 San Fulgencio Spain, 017620620748, support@gawalis.com

Customer's unsolicited contact via email If you initiate business contact with us via email, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves to process and answer your contact request. If the contact serves to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 b GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form When you use the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Orders Collection, processing and transfer of personal data when placing an order When placing an order, we only collect and process your personal data to the extent that this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR and is necessary for the fulfillment of a contract with you. Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The scope of data transfer is limited to a minimum. Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. There is an adequacy decision from the EU Commission for Canada. The EU Commission has an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not TADPF certified. This data transfer takes place on the basis of contractual obligations that are comparable to those of the EU Commission's standard contractual clauses.




Rights of those affected and storage period Duration of storage After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then in consideration of statutory retention periods, in particular tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use.

Rights of the data subject You are entitled to the following rights under Articles 15 to 20 of the GDPR if the legal requirements are met: right to information, to rectification, to deletion, to restriction of processing, to data portability. You also have the right under Article 21 Paragraph 1 GDPR has a right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for the purpose of direct advertising.

Right to complain to the supervisory authority In accordance with Article 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

Right to object If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. After an objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

last updated: November 29, 2023