Privacy policy

Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

Nationalis
Luisenstraße 26
55246 Mainz-Kostheim
Germany

📩 Email: support@nationalis.de
Managing Directors: Diyar Dölek, Mertcan Boz

2. General Information on Data Processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG new), and other applicable data protection regulations.
Processing only takes place insofar as it is necessary to provide a functional website, to perform contractual relationships, or to provide our content and services.

3. Hosting and Platform – Shopify

Our online shop is operated on the Shopify platform.

Service provider:
Shopify International Limited
Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

Shopify processes personal data on our behalf as a data processor (Art. 28 GDPR) exclusively in accordance with our instructions.
Data may also be transferred to servers in Canada and the USA.
For Canada, there is an adequacy decision by the EU Commission.
Transfers to the USA are based on the EU Standard Contractual Clauses (SCCs).

More information about data protection at Shopify can be found here:
🔗 https://www.shopify.com/legal/privacy

4. Data Collection When Visiting the Website

When you visit our website, Shopify automatically collects and stores server log files that your browser transmits:

  • IP address (shortened)

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

  • Pages accessed

These data are processed exclusively to ensure technical operation, system security, and error analysis.
They are not assigned to a specific person.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable website functionality).

5. Orders and Contract Processing

When you shop in our online store, we process the following data:

  • First and last name

  • Billing and shipping address

  • Email address

  • Phone number (optional)

  • Payment information

  • Order details (products, prices, quantities)

Processing serves the performance of the contract (Art. 6(1)(b) GDPR) and only takes place insofar as this is necessary to process your order.

To fulfill the contract, we pass on personal data to the following recipients:

  • Payment service providers (see section 6)

  • Shipping service providers (see section 7)

  • Shopify International Ltd. (technical platform)

6. Payment Service Providers

We use various providers to process payments; you select the provider during checkout.

Shopify Payments
(data processing by Shopify International Limited, Dublin)
https://www.shopify.com/legal/privacy

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe Payments Europe Ltd., Ireland
https://stripe.com/de/privacy

Klarna Bank AB (publ), Sweden
https://www.klarna.com/de/datenschutz/

The transfer of payment data takes place exclusively for payment processing on the basis of Art. 6(1)(b) GDPR.

7. Shipping Service Providers

To deliver your order, we transmit your shipping address and, if applicable, your email address to the respective shipping service provider, e.g.:

  • DHL Paket GmbH, Bonn

  • DPD Deutschland GmbH, Aschaffenburg

  • Hermes Germany GmbH, Hamburg

Legal basis: Art. 6(1)(b) GDPR (performance of the contract).

8. Customer Account

If you create a customer account, we store the data you provide permanently until you delete your account.
You can delete your account yourself at any time or request deletion by email.

Legal basis: Art. 6(1)(b) GDPR.

9. Contact

If you contact us by email or contact form, the data you provide will be used exclusively to process your inquiry.
The data will be deleted as soon as they are no longer required for the purpose for which they were collected.

Legal basis: Art. 6(1)(b) GDPR.

10. Newsletter (if activated)

When you subscribe to our newsletter, we process your email address to send you information about products, promotions, and offers.
You can unsubscribe at any time via the unsubscribe link in every email.

Legal basis: Art. 6(1)(a) GDPR (consent).

11. Cookies & Analysis Tools

Our website uses cookies and similar technologies to enable certain functions (e.g. shopping cart, login) and to anonymously analyze user behavior.

You can set your browser so that cookies are only allowed in individual cases or are generally blocked.
If cookies are deactivated, the functionality of the website may be limited.

More information can be found in Shopify’s cookie policy:
🔗 https://www.shopify.com/legal/cookies

12. Marketing and Tracking Tools

Shopify may use tools such as Shopify Analytics, Google Analytics, Meta Pixel, or comparable services.
Data processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

You can revoke your consent at any time via the cookie banner or browser settings.

13. Social Media & External Links

Our website may contain links to our social media profiles (e.g. Instagram).
When accessing these links, the data protection policies of the respective platforms apply.
We have no influence on the data processing carried out there.

14. Rights of Data Subjects

Under the GDPR, you have the following rights:

  • Right of access to your stored data (Art. 15 GDPR)

  • Right to rectification of inaccurate data (Art. 16 GDPR)

  • Right to erasure (“right to be forgotten”, Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object to data processing (Art. 21 GDPR)

To exercise these rights, simply send us an email to:
📩 support@nationalis.de

15. Data Security

Our website uses SSL/TLS encryption to protect your data from unauthorized access.
You can recognize an encrypted connection by “https://” in your browser’s address bar.

16. Data Retention Period

We store personal data only as long as this is necessary for contract performance or due to statutory retention obligations (e.g. tax and commercial law).

17. Changes to This Privacy Policy

We reserve the right to update this privacy policy occasionally in order to adapt it to changed legal requirements or new functions of our shop.
The current version applies to your renewed visit.

Status: November 2025