Legal
Privacy Policy / Datenschutzerklärung
Last updated: 26 July 2026
Controller contact
GETOKEN
Kohlschütterstraße 1
06114 Halle (Saale)
Germany
Telephone: +49 152 19352582
Email: info@getoken.store
1. Controller
The controller responsible for the processing of personal information is GETOKEN.
GETOKEN is referred to below as the Controller, we, us or our.
2. General information
We operate the online store available at www.getoken.store and offer clothing, accessories and related products.
Our online store is provided through Shopify. Many products are manufactured only after an order has been received using external print-on-demand, production, fulfilment and shipping partners.
This Privacy Policy explains which personal information we process, the purposes and legal bases of the processing, and the rights available to data subjects.
3. Shopify hosting and store services
For customers and visitors from the European Economic Area, the United Kingdom and Switzerland, personal information is generally initially processed by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify may process technical information, device information, IP addresses, browser information, usage data and customer and order information to provide and secure the store.
Depending on the purpose, processing is based on Article 6(1)(b), Article 6(1)(c), Article 6(1)(f) or Article 6(1)(a) GDPR. International transfers are based on an adequacy decision, appropriate safeguards such as European Commission Standard Contractual Clauses, or another legally recognised transfer mechanism.
4. Categories of personal information
We may process names and contact details, billing and delivery addresses, email addresses, telephone numbers, account and login information, customer and order numbers, ordered products and product variants, payment and transaction information, returns, complaints, refund information, communications with us, device and browser information, IP addresses, usage, interaction and cookie information.
5. Processing purposes and legal bases
We process personal information to accept and fulfil orders, process payments, arrange production, fulfilment and shipping, provide customer service, process returns, refunds and complaints, comply with legal obligations, protect our store and prevent fraud, analyse and improve our services and conduct marketing where permitted.
Contract-related processing is based on Article 6(1)(b) GDPR. Legal-obligation processing is based on Article 6(1)(c) GDPR. Security and fraud-prevention processing may be based on Article 6(1)(f) GDPR. Non-essential analytics, advertising and tracking generally take place only after consent under Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.
6. Print-on-demand, production and fulfilment
Many products are manufactured on an order-specific basis only after an order has been received.
We disclose the information required to manufacture, package and deliver the order to print-on-demand, production, fulfilment and shipping partners. We use Printify and production partners selected or assigned through Printify.
The information disclosed may include recipient name, delivery address, order number, ordered product, size, colour, product variant and contact details where required for delivery. The legal basis is Article 6(1)(b) GDPR.
7. Payments and shipping providers
The available payment methods are displayed during checkout and may include Shopify Payments, credit and debit cards, PayPal, Klarna, Apple Pay, Google Pay and other payment providers displayed during checkout.
Required payment and transaction information is disclosed to the selected payment provider. Payment providers may conduct identity, fraud, creditworthiness, anti-money-laundering or legally required checks under their own responsibility.
We disclose information required to deliver an order to the relevant shipping provider, including recipient name, delivery address, order or tracking number, email address and telephone number where required for delivery notifications.
8. Cookies, analytics and marketing
Our store uses cookies and comparable technologies. Essential cookies may be used for shopping-cart functions, checkout, login and account security, fraud prevention, privacy preferences, language and store settings.
Non-essential analytics, marketing and tracking technologies are generally activated only after consent has been provided through the cookie banner. Consent may be withdrawn or changed through the cookie settings.
Shopify may provide analytics functions concerning store use, including visitor and session numbers, viewed pages and products, device and browser information, approximate region, cart and purchase activity and referral information.
9. Meta Pixel and Instagram
We use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The Meta Pixel helps us measure website activity and evaluate and optimise advertising campaigns. It is generally activated only after consent has been provided through the cookie banner.
We maintain an Instagram business profile. When a person visits or interacts with that profile, Meta processes personal information under its own privacy terms. We may process messages, comments, likes, profile names and aggregate statistics to communicate with customers and present our brand.
Normal links or icons to Instagram or other social networks do not by themselves transmit data from our store to those networks before the visitor clicks the link. Embedded social-media plugins or content are generally activated only after consent where required.
10. Shopify apps, email and customer accounts
We may use Shopify apps from external providers for store functions such as product reviews, newsletter, email marketing, customer service, live chat, wishlists, upselling, recommendations, shipping tracking, invoicing, analytics, fraud prevention, product personalisation and cookie or consent management.
Depending on function, those apps may access customer, order, usage or device data. Non-essential marketing, analytics or tracking apps are generally activated only after consent.
When a person contacts us by email, contact form, Instagram or another channel, we process the provided information to handle the request. If customers create an account, we process the provided data to set up and manage that account.
11. Newsletter, reviews and recipients
If we offer a newsletter or other electronic advertising messages, sending generally takes place only after prior consent. Consent can be withdrawn at any time, for example through the unsubscribe link or by contacting us.
If customers can publish reviews, comments, photographs or other content, we process the provided data to publish and manage that content. Published content may be visible to other visitors and may be moderated or removed where required.
Recipients of personal information may include Shopify and subprocessors, Printify and production partners, fulfilment, packaging and shipping providers, payment providers, IT, hosting and security providers, Shopify-app providers, newsletter and communication providers, analytics and marketing providers, Meta Platforms Ireland Limited, professional advisers, authorities and courts where legally required.
12. International transfers and retention
Some service providers are located outside the European Economic Area or use subprocessors in third countries, including the USA, Canada and countries where production, shipping or IT providers operate. Transfers take place only where legal requirements are met.
We store personal information only as long as required for the relevant purpose or legal retention duties. Order, contract, invoice, commercial and tax data may regularly be stored for up to ten years.
Customer-service communications are stored as long as required to handle the request, assert or defend claims or comply with legal duties. Marketing data is generally stored until consent is withdrawn or an objection is made.
13. Security, required data and minors
We take appropriate technical and organisational measures to protect personal information, including encrypted transmission, access restrictions, secure passwords, Shopify security measures, updates and limiting access to necessary persons and providers. No transmission or storage can be guaranteed completely risk-free.
Name, delivery address, billing information, email address, required payment information and ordered-product information are required to conclude and perform a purchase contract. Without this information, we cannot process, manufacture, bill or deliver an order.
Our online store is not specifically directed to children. We do not knowingly process personal information from children who cannot validly consent under applicable law.
14. Data-subject rights
Data subjects have rights under statutory requirements, including access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and complaint to a data protection supervisory authority.
To exercise privacy rights, send a message to info@getoken.store. We may request appropriate proof of identity to prevent unauthorised disclosure and process requests within statutory deadlines.
The supervisory authority generally responsible for us is Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany. Data subjects may also contact the supervisory authority of their habitual residence or workplace.
15. Changes
We may update this Privacy Policy if legal requirements, services, Shopify functions, apps, production or shipping partners or processing operations change. The current version is published in the online store.
Deutsche Kurzfassung
Verantwortlicher im Sinne der DSGVO ist GETOKEN. Wir betreiben den Online-Shop unter www.getoken.store über Shopify und nutzen externe Print-on-Demand-, Produktions-, Fulfilment- und Versandpartner.
Wir verarbeiten insbesondere Kontakt- und Stammdaten, Bestell- und Vertragsdaten, Zahlungsinformationen, Konto- und Anmeldedaten, Kommunikationsdaten sowie Geräte- und Nutzungsdaten.
Zwecke der Verarbeitung sind Bestellabwicklung, Zahlung, Produktion, Versand, Kundenservice, Rückgaben, Reklamationen, gesetzliche Pflichten, Sicherheit, Betrugsprävention, Analyse und Marketing, soweit zulässig.
Rechtsgrundlagen sind insbesondere Art. 6 Abs. 1 lit. b, lit. c, lit. f und lit. a DSGVO sowie, soweit einschlägig, § 25 TDDDG.
Betroffene Personen können ihre Rechte auf Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch, Widerruf und Beschwerde bei einer Aufsichtsbehörde per Nachricht an info@getoken.store ausüben.