Summary
We process your data to handle orders and rentals/loans of outdoor equipment , to provide support, and to improve our website. Legal basis: Art. 6 para. 1 lit. a, b, c, f GDPR.
Responsible
Eddy's Adventure GmbH, Germany. Contact details as per the legal notice or via the contact form .
Types of processed data
Master data (name, address), contact details, order and contract data, payment and shipping data (for payment/shipping partners), usage data (cookies/logs), communication data.
Purposes & Legal Basis
Contract performance including shipping/return shipping (Art. 6 (1) b), fulfillment of legal obligations (e.g. storage; Art. 6 (1) c), legitimate interests such as fraud prevention/performance (Art. 6 (1) f), consents e.g. for newsletters/marketing (Art. 6 (1) a).
Hosting & Platform (Shopify)
Our website runs on Shopify. Data may be processed on Shopify's servers. Details: See Shopify's privacy policy and the privacy policies of the apps used (e.g., SEO/shipping/reviews).
Payments & Shipping
For payment and shipping, we pass on necessary data to payment services (e.g. credit card, PayPal, etc.) and shipping service providers (e.g. DHL) – only for processing your order/rental.
Cookies & Tracking
We use technically necessary cookies and – with your consent – statistics/marketing cookies. You can change your cookie settings at any time (link in the cookie banner).
Customer account & orders
Your account stores billing/shipping addresses and order history. You can delete this information at any time, provided there are no legal obligations to retain it.
Newsletter & Communication
Newsletters are only sent with your consent (double opt-in). You can unsubscribe at any time via the link in the newsletter. We will respond to inquiries submitted via the form/contact form to process your request.
Storage duration
We only store data for as long as is necessary for the respective purposes or legal obligations (e.g., up to 10 years for commercial/tax law purposes).
Recipient/Third Country Transfers
Service providers (IT/hosting, payment, shipping, support, analytics) operate under instructions. Appropriate safeguards apply to transfers to third countries (e.g., EU standard contractual clauses).
Your rights (GDPR)
Information, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and right to lodge a complaint with a supervisory authority.
Security
We implement organizational and technical measures (TLS/HTTPS etc.) to protect your data.
Changes
We will update this statement if services/processes change. The most current version is always the authoritative one.
contact
Questions about data protection? Write to us here .
As of October 29, 2025
