Privacy policy

Privacy policy

1. Controller

The controller responsible for data processing on this website is:

NATIONALIS
Owner: Ali Diyar Dölek
Luisenstraße 26
55246 Mainz-Kostheim
Germany

Nationalis warehouse
Kaiser-Friedrich-Ring 55
65185 Wiesbaden

Email: support@nationalis.de

2. General information on data processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations.
We only process data to the extent necessary to provide a functional website, to perform contracts or to provide our content and services.

3. Hosting and platform: Shopify

Our online shop runs on the Shopify platform.

Service provider:
Shopify International Limited
Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Shopify processes personal data as a processor (Art. 28 GDPR) exclusively on our instructions.
Data may also be transferred to servers in Canada and the USA.
For Canada, there is an adequacy decision of the EU Commission.
Transfers to the USA are based on the EU Standard Contractual Clauses (SCCs).

You can find more information on data protection at Shopify here:
https://www.shopify.com/legal/privacy

4. Data collected when you visit the website

When you visit our website, Shopify automatically collects and stores server log files that your browser transmits:

  • IP address (shortened)

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

  • Pages visited

This data is processed exclusively to ensure technical operation, system security and error analysis.
It is not linked to any specific person.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, functioning website).

5. Orders and contract processing

When you shop in our online shop, we process the following data:

  • First and last name

  • Billing and shipping address

  • Email address

  • Phone number (optional)

  • Payment information

  • Order details (products, prices, quantities)

Processing serves the performance of the contract (Art. 6(1)(b) GDPR) and only takes place to the extent necessary to process your order.

To perform the contract, we pass personal data on to the following recipients:

  • Payment service providers (see section 6)

  • Shipping providers (see section 7)

  • Shopify International Ltd. (technical platform)

6. Payment service providers

We use several providers to process payments; you choose one at checkout.

Shopify Payments
(data processing by Shopify International Limited, Dublin)
https://www.shopify.com/legal/privacy

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe Payments Europe Ltd., Ireland
https://stripe.com/de/privacy

Klarna Bank AB (publ), Sweden
https://www.klarna.com/de/datenschutz/

Payment data is passed on exclusively for payment processing on the basis of Art. 6(1)(b) GDPR.

7. Shipping providers

To deliver your order, we pass your delivery address and, where applicable, your email address to the respective shipping provider, for example:

  • DHL Paket GmbH, Bonn

  • DPD Deutschland GmbH, Aschaffenburg

  • Hermes Germany GmbH, Hamburg

Legal basis: Art. 6(1)(b) GDPR (performance of the contract).

8. Customer account

If you create a customer account, we store the data you provide permanently until you delete your account.
You can delete your account yourself at any time or request deletion by email.

Legal basis: Art. 6(1)(b) GDPR.

9. Contacting us

When you contact us by email or via the contact form, the data you provide is used exclusively to handle your enquiry.
The data is deleted as soon as it is no longer required for the purpose for which it was collected.

Legal basis: Art. 6(1)(b) GDPR.

10. Newsletter (if activated)

When you sign up for our newsletter, we process your email address to send you information about products, promotions and offers.
You can unsubscribe at any time using the unsubscribe link in every email.

Legal basis: Art. 6(1)(a) GDPR (consent).

11. Cookies and analytics tools

Our website uses cookies and similar technologies to enable certain functions (e.g. cart, login) and to analyse user behaviour anonymously.

You can set your browser to allow cookies only in individual cases or to block them entirely.
If you disable cookies, the functionality of the website may be limited.

You can find more information in Shopify’s cookie policy:
https://www.shopify.com/legal/cookies

12. Marketing and tracking tools

Shopify may use tools such as Shopify Analytics, Google Analytics, Meta Pixel or comparable services.
Data is processed on the basis of your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via the cookie banner or your browser settings.

Meta Pixel and Conversions API (Meta Ads)

On our website we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). These technologies allow us to show visitors to our website interest-based advertising on Instagram and Facebook (retargeting), to measure the effectiveness of our ads and to build audiences for advertising campaigns (Custom Audiences).

In the process, usage data (e.g. pages visited, products viewed, cart and purchase events, IP address, device and browser information) is transmitted to Meta both via your browser (Pixel) and server-side (Conversions API). As part of advanced matching, contact data (e.g. email address) may also be transmitted in encrypted (hashed) form.

We are jointly responsible with Meta for the collection and transmission of this data within the meaning of Art. 26 GDPR. You can find the essential content of the joint controller agreement at: https://www.facebook.com/legal/controller_addendum. Any further processing of the data is the sole responsibility of Meta.

Processing takes place exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG, which you give via the cookie banner. You can withdraw your consent at any time with effect for the future via the cookie banner.

A transfer of data to the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses are used in addition.

You can find more information about data protection at Meta and your settings options at: https://www.facebook.com/privacy/policy and https://www.facebook.com/adpreferences.

13. Social media and external links

Our website may contain links to our social media profiles (e.g. Instagram).
When you follow these links, the privacy policies of the respective platform apply.
We have no influence on the data processing there.

14. Your rights as a data subject

Under the GDPR, you have the following rights:

  • Access to your stored data (Art. 15 GDPR)

  • Rectification of inaccurate data (Art. 16 GDPR)

  • Erasure (“right to be forgotten”, Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Objection to data processing (Art. 21 GDPR)

To exercise these rights, simply send us an email at:
support@nationalis.de

15. Data security

Our website uses SSL/TLS encryption to protect your data from unauthorised access.
You can recognise an encrypted connection by “https://” in your browser’s address bar.

16. Retention period

We only store personal data for as long as necessary to perform the contract or to comply with statutory retention obligations (e.g. under tax and commercial law).

17. Changes to this privacy policy

We reserve the right to update this privacy policy from time to time to adapt it to changed legal requirements or new features of our shop.
The current version applies to each new visit.

Last updated: July 2026