Privacy Policy

Status: August 2026

1. Controller

RiseUp, Owner: Tristan Häseker, c/o Adressgeber #2175, An der Alten Ziegelei 38, 48157 Münster, Germany, Email: info@rise-up.store

2. Shop System and Hosting (Shopify)

Our online shop runs on the Shopify platform by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit the shop, Shopify processes technical access data (e.g., IP address, date and time, browser type) to provide and secure the shop. The legal basis is Art. 6 para. 1 lit. b and f GDPR. Processing may also take place through Shopify Inc. in Canada; there is an adequacy decision by the EU Commission for Canada. Details: Shopify Privacy Policy.

3. Orders and Shipping

For processing your order, we process your name, delivery address, email address, and payment information (Art. 6 para. 1 lit. b GDPR). We only share your data as far as it is necessary for shipping and payment, with the shipping service provider (DHL) and the respective payment provider.

4. Payment Providers

When paying via PayPal, Klarna, credit card, or Apple Pay / Google Pay, your payment data is processed directly by the respective provider. Their data protection notices apply in addition.

5. Cookies

We use technically necessary cookies (e.g., shopping cart, session) based on Section 25 para. 2 TDDDG and Art. 6 para. 1 lit. f GDPR. We only use statistics and marketing cookies with your consent (Section 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR), which you can revoke at any time via the cookie settings.

6. Contact Inquiries

If you write to us via the contact form or by email, we process your information to answer the inquiry (Art. 6 para. 1 lit. b and f GDPR) and delete it as soon as it is no longer required.

7. Product Reviews (Judge.me)

For product reviews, we use the service Judge.me (Judge.me Ltd., United Kingdom; there is an adequacy decision by the EU Commission for the United Kingdom). When loading the review widget, technical access data (e.g., IP address) may be processed. If you submit a review, we process the information you provide to display the review (Art. 6 para. 1 lit. a and f GDPR).

8. Storage Duration

We store personal data only as long as it is necessary for the stated purposes or legal retention obligations (especially from commercial and tax law, 6 or 10 years) exist.

9. Your Rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You can also lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover.