Last updated: July 28, 2025

1. General Information

For questions regarding data protection or the processing of personal data, please contact info@vollum.de.

Vollum.de is committed to protecting your privacy and providing you with transparency and control over the processing of your personal data.

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit Vollum.de or place an order ("we," "us," "our"). By using our website and services, you confirm that you have read and understood this Privacy Policy.

2. Data Collected

We collect personal data in three ways:

First, data you provide directly to us (e.g., when creating an account, placing an order, or making a contact request).

Second, data collected automatically (e.g., through cookies or analytics tools).

Third, data we receive from partners, such as payment service providers or shipping partners.

The data you provide includes, in particular, first and last name, address, email address, telephone number, payment data, delivery preferences, and the content of communications with us.

Automatically or derivatively, we collect data such as order history, shipping information, usage and browsing behavior, device data (e.g., IP address, browser type), product reviews, and data for providing personalized recommendations or advertising.

The provision of identification, contact, and payment data is required to complete purchases on Vollum.de.

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes and on the respective legal bases according to Article 6 Paragraph 1 GDPR:

For the processing and management of orders, payments, and deliveries, processing is based on contract fulfillment.

For customer communication and improving our service, processing is based on the contractual relationship and our legitimate interest.

Marketing and personalization measures, such as email or SMS campaigns, are carried out exclusively with your explicit consent.

To ensure security and fraud prevention, we process data based on our legitimate interest.

To fulfill tax, accounting, and legal obligations, we process data based on legal obligations.

You can revoke your consent to processing for marketing purposes at any time by using the unsubscribe link in our emails or by contacting us at info@vollum.de.

4. Storage and Protection of Your Data

All personal data is protected against unauthorized access, loss, alteration, or disclosure by appropriate technical and organizational measures.

Vollum.de stores data on servers within the European Union. Some processing may occur through service providers like Shopify in other countries – always based on legally permissible transfer mechanisms (see Section 7).

We apply data protection principles such as data minimization, encryption, pseudonymization, and access restriction. Access to customer data is strictly reserved for authorized employees who require it to perform their duties.

5. Retention Periods

We store your personal data only for as long as necessary for the purposes described in this policy or as required by law.

Order and payment data are stored for up to ten years due to legal retention obligations.

Customer account data is stored until the account is deleted.

Marketing data is deleted as soon as you withdraw your consent.

Technical logs and backups are stored for as long as necessary to ensure security and operational continuity.

Upon request, we will delete or anonymize your personal data. Once deleted or anonymized, the process cannot be reversed.

6. Access to and Recipients of Your Data

Access to personal data is strictly limited to trained employees of Vollum and trusted service providers. Each party processes data only to the extent necessary to fulfill their tasks.

We may transfer personal data to the following recipients:

Shopify as a hosting and e-commerce platform, payment service providers such as Stripe, PayPal or Klarna, shipping partners for logistics and delivery, email and SMS service providers for notifications and marketing (only with consent), analytics partners such as Google Analytics (anonymized or pseudonymized), and authorities or collection agencies, where legally required.

All data processing agreements comply with the requirements of the General Data Protection Regulation (GDPR) and ensure an adequate level of protection.

7. Shopify and International Data Transfers

Our online shop is operated via Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada.

Shopify primarily acts as our processor in the sense of Article 28 GDPR and processes personal data exclusively according to our instructions, for example, for website operation, payment processing, or shipping.

Shopify also processes certain data under its own responsibility, for instance, to improve its services, prevent fraud, or comply with legal obligations.

Data transfers to Canada and the USA are based on the EU Commission's standard contractual clauses to ensure an adequate level of data protection. Further information can be found in Shopify's Privacy Policy.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies such as pixels or local storage functions to ensure functionality, personalize content, and analyze usage.

The cookies used include essential cookies for basic functions such as shopping cart and checkout, analytics and performance cookies to improve our services, and marketing cookies, which are only used with your consent.

You can adjust or withdraw your cookie settings at any time via our consent tool or your browser settings.

We may use tools such as Google Analytics, Google Tag Manager, or Meta Pixel. The data collected in this process is anonymized as much as possible.

Identifiers such as IP addresses are always treated as personal data in the sense of the GDPR.

9. Your Rights

As a data subject, you have the following rights according to the GDPR:

You have the right to information about your stored personal data, the right to rectification of inaccurate or incomplete data, the right to erasure ("right to be forgotten"), the right to restriction of processing, the right to data portability, the right to object to certain processing, and the right to withdraw previously given consents with effect for the future.

To exercise these rights, please contact info@vollum.de. We reserve the right to verify your identity to protect your data. If you believe that your data is being processed unlawfully, you can lodge a complaint with the competent data protection supervisory authority.

10. Control over Marketing and Data Use

You can decide at any time whether you wish to receive marketing emails, product updates, or SMS notifications. You can unsubscribe using the link in each message or by emailing info@vollum.de.

If you wish to permanently delete your customer account, please contact our customer service.

Please note that certain data, such as order or payment information, must continue to be stored due to legal regulations.

11. SMS Marketing

If you have consented to receive SMS, we may send you order notifications, abandoned cart reminders, special offers, or review requests.

Our website uses cookies to detect abandoned carts and – with your consent – send corresponding SMS reminders.

12. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy in the event of changes to our business activities or legal requirements.

Significant changes will be communicated via email or a notice on our website.

13. Controller and Contact

Controller in the sense of the GDPR:

NS Commerce Oy

Email: info@vollum.de