Privacy policy

Last updated: 29 June 2026

This Privacy Policy explains how CreateYourSkate GmbH collects, uses and protects personal data when you visit our website, place an order, contact us or use our online store.

1. Controller

The controller responsible for the processing of personal data is:

CreateYourSkate GmbH
Hussitenweg 103
94469 Deggendorf
Germany

Email: dennis@createyourskate.com
Phone: +49 15152563136

Managing Director: Dennis Abertshauser
Registered with Amtsgericht Deggendorf, HRB 6497
VAT ID: DE461899568

2. What personal data we process

We process personal data that you provide to us directly, that is generated when you use our website, or that is required to process your order.

This may include:

  • name, billing address and shipping address

  • email address and phone number

  • order details and customer account information

  • payment and transaction information

  • shipping and tracking information

  • messages, support requests, reviews or survey responses

  • IP address, browser information, device information and website usage data

  • cookie and consent information

3. Why we process your data

We process your personal data for the following purposes:

  • to operate and display our online store

  • to process orders, payments, shipping, returns and customer support

  • to issue invoices and fulfil legal accounting and tax obligations

  • to communicate with you about your order or enquiry

  • to send newsletters or marketing emails, if you have subscribed or where legally permitted

  • to collect product reviews and customer feedback

  • to analyse and improve our website, products and marketing

  • to prevent fraud, misuse and security risks

  • to comply with legal obligations and protect our legal rights

4. Legal bases

We process personal data on the following legal bases under the GDPR:

  • Art. 6(1)(b) GDPR, where processing is necessary to perform a contract with you or to take steps before entering into a contract

  • Art. 6(1)(c) GDPR, where processing is necessary to comply with legal obligations

  • Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests, such as operating our business, improving our services, preventing fraud and communicating with customers

  • Art. 6(1)(a) GDPR, where you have given consent, for example for certain cookies, analytics, advertising or newsletter subscriptions

You may withdraw your consent at any time with effect for the future.

5. Shopify

Our online store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to sell our products and services to you.

When you use our store, Shopify may process technical data, order data, customer account data, checkout data, payment-related data, fraud prevention data and consent information.

Shopify may process data outside the European Economic Area, including in Canada and the United States. Where required, appropriate safeguards are used for international data transfers.

6. Payment providers

We use payment providers to process payments securely. Depending on the payment method selected, your data may be processed by:

  • Shopify Payments

  • PayPal

  • credit card providers

  • Apple Pay or other accelerated checkout providers, where available

The data processed may include name, billing address, email address, order amount, payment details, transaction data and fraud prevention information.

We do not store full credit card details ourselves.

7. Shipping and fulfilment

To deliver your order, we share the necessary delivery information with shipping and fulfilment providers.

We currently use services such as:

  • FedEx

  • Sendcloud

  • DHL or other carriers, where applicable

The data processed may include name, shipping address, email address, phone number where required, order information, parcel information, tracking data and customs information for international shipments.

8. Email marketing and customer communication

If you subscribe to our newsletter or marketing emails, we process your email address and, where applicable, your name, country, order history, preferences and email interaction data.

We use services such as Klaviyo and/or Shopify Email for email marketing.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us.

For customer communication and support, we may use email, Shopify Inbox or similar communication tools. In this case, we process the information required to respond to your request.

9. Analytics, advertising and attribution

We use analytics and attribution tools to understand how visitors use our website, how our marketing performs and how we can improve our store.

We currently use services such as:

  • Shopify Analytics

  • Triple Whale

  • Grapevine Surveys, where surveys are displayed or submitted

We may also use advertising and tracking technologies from platforms such as Meta/Facebook/Instagram, Google or Microsoft/Bing, if these are active in our store or theme.

These tools may process information such as website usage data, device and browser information, pages viewed, products viewed, cart and checkout events, purchase events, campaign data, cookie IDs or similar identifiers.

Where required, analytics and marketing tracking is only used after your consent.

You can change or withdraw your cookie and tracking consent at any time through the cookie or privacy settings available on our website.

10. Reviews, surveys and user-generated content

We may use review and survey tools to collect customer feedback and product reviews.

We currently use services such as:

  • Loox Reviews

  • Grapevine Surveys

If you submit a review, rating, photo, video or survey response, we may process your name, email address, order information, product information, review content, rating, uploaded media and survey answers.

Reviews or uploaded content may be published on our website if you submit them for this purpose.

11. Returns and withdrawal requests

To process returns, withdrawal requests and related customer communication, we may use Shopify, email communication and tools such as EU Widerruf Pro.

The data processed may include name, email address, order number, order details, return reason, withdrawal declaration and related communication.

12. Accounting and business administration

For accounting, tax compliance and business administration, we process order, invoice and customer data.

We may use services such as Lexware Office and may share relevant data with tax advisors, accountants or authorities where required by law.

13. Marketplaces and B2B sales channels

We may use marketplace and B2B sales channels to sell our products or manage orders.

This may include services such as:

  • Ankorstore

  • Shopify Marketplace Connect

  • Amazon or other connected marketplaces, where applicable

Where marketplace orders are processed through our systems, we may process customer, company, order, payment, shipping and tracking data as required to fulfil the order and comply with legal obligations.

14. Cookies and consent

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to function properly, for example for the shopping cart, checkout, customer login, security and fraud prevention.

Other cookies may be used for analytics, marketing, advertising and personalisation. Where required, these cookies are only used after your consent.

Our cookie banner and customer privacy settings are configured to manage consent for visitors from the EU/EEA. Where required, analytics and marketing tracking is blocked until consent has been given.

You can manage cookies through your browser settings and, where available, through the cookie or privacy settings on our website.

Please note that disabling necessary cookies may affect the functionality of the website.

15. Disclosure of personal data

We may share personal data with service providers and partners where this is necessary to operate our business, provide our services, fulfil orders, comply with legal obligations or protect our rights.

This may include:

  • ecommerce and hosting providers

  • payment providers

  • shipping and fulfilment providers

  • email marketing and communication providers

  • analytics, attribution and advertising providers

  • review and survey providers

  • accounting and tax service providers

  • marketplace providers

  • IT service providers

  • legal advisors, authorities or courts where required

We do not sell customer data in the ordinary sense of selling customer lists or personal information in exchange for money.

16. International data transfers

Some of our service providers may process personal data outside the European Economic Area, for example in the United States, Canada or other countries.

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are used where required, such as adequacy decisions, standard contractual clauses, data processing agreements or other legally recognised transfer mechanisms.

17. Retention

We store personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Order, invoice and accounting data may be retained for the statutory retention periods required under German commercial and tax law.

Customer communication is retained for as long as necessary to handle the request and, where applicable, to defend or assert legal claims.

Newsletter data is stored until you unsubscribe or withdraw your consent.

Cookie, analytics and marketing data is stored according to the retention periods of the respective tools and your cookie preferences.

18. Automated decision-making

We do not use fully automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Shopify, payment providers and fraud prevention systems may use limited automated systems for fraud prevention and risk analysis. These processes are used to protect transactions and prevent misuse.

19. Your rights

If the GDPR applies to you, you have the following rights:

  • right of access

  • right to rectification

  • right to erasure

  • right to restriction of processing

  • right to data portability

  • right to object to processing

  • right to withdraw consent at any time

  • right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:

dennis@createyourskate.com

20. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

For companies based in Bavaria, the competent supervisory authority for the private sector is generally:

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

21. Children’s privacy

Our website and products are intended to be used by adults or by children with the involvement of a parent or legal guardian.

We do not knowingly collect personal data from children without appropriate parental or guardian involvement. If you believe that a child has provided us with personal data without appropriate consent, please contact us.

22. Contact

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:

CreateYourSkate GmbH
Hussitenweg 103
94469 Deggendorf
Germany

Email: dennis@createyourskate.com
Phone: +49 15152563136