Privacy Policy

This Privacy Policy explains how eurvapes.com (the “Site,” “we,” “us,” or “our”) collects, uses, stores, and shares personal data when you visit the Site, create an account, place or attempt to place an order, contact us, or otherwise use our services.

“Personal data” means any information relating to an identified or identifiable natural person.

1. Who Is Responsible for Your Personal Data?

The controller responsible for processing personal data through the Site is the EurVapes business identified in our Legal Notice (Impressum). Our full legal name, German business address, authorised representative, registration details, and other mandatory provider information are available in the Impressum.

For privacy-related enquiries, please contact us at [email protected].

2. Personal Data We Collect

Information You Provide to Us

Depending on how you use the Site, we may collect:

• Identity and contact information: your name, billing address, shipping address, email address, telephone number, and account details;
• Order information: the products ordered, order number, transaction status, delivery preferences, returns, refunds, and related communications;
• Payment information: payment method, payment status, transaction identifiers, and limited payment details made available to us by the payment provider;
• Age-verification information: information required to confirm that you meet the applicable minimum age, where age verification is required;
• Customer support information: messages, photographs, videos, documents, and other information you provide when requesting assistance, reporting a product issue, or making a claim; and
• Marketing preferences: your preferences concerning newsletters, promotional communications, and cookies.

Information Collected Automatically

When you visit or use the Site, we may automatically collect:

• Your IP address and approximate location derived from it;
• Browser type, operating system, device type, language, and time zone;
• Cookie identifiers and similar technical information;
• Pages, products, and links viewed or selected;
• Search terms entered on the Site;
• Referring pages and exit pages;
• Date, time, duration, and method of access; and
• Security, diagnostic, performance, and error-log information.

Information Received From Other Sources

We may receive personal data from service providers involved in payment processing, fraud prevention, age verification, delivery, website hosting, analytics, advertising, and customer support, but only where permitted by applicable law.

3. How We Use Personal Data and Our Legal Bases

We process personal data only where we have an appropriate legal basis. Depending on the circumstances, we may process your data for the following purposes:

• Processing and fulfilling orders: to accept payments, confirm orders, arrange delivery, process returns and refunds, and provide information about your order. The legal basis is the performance of a contract or steps taken at your request before entering into a contract under Article 6(1)(b) GDPR.
• Customer support: to respond to enquiries, investigate complaints, troubleshoot products, and handle warranty or return requests. The legal basis is Article 6(1)(b) GDPR and, where applicable, our legitimate interest in providing effective customer service under Article 6(1)(f) GDPR.
• Legal and regulatory compliance: to maintain tax and accounting records, verify age where required, respond to lawful requests, and comply with legal obligations. The legal basis is Article 6(1)(c) GDPR.
• Security and fraud prevention: to protect the Site, our customers, and our business; prevent misuse; investigate suspicious activity; and establish, exercise, or defend legal claims. The legal basis is our legitimate interests under Article 6(1)(f) GDPR and, where applicable, compliance with legal obligations under Article 6(1)(c) GDPR.
• Website operation and improvement: to maintain the Site, diagnose technical problems, understand general usage, and improve performance and usability. The legal basis is our legitimate interests under Article 6(1)(f) GDPR for necessary operational processing and your consent under Article 6(1)(a) GDPR where consent is required.
• Marketing communications: to send information about products, promotions, and offers where you have consented or where otherwise permitted by law. The legal basis is your consent under Article 6(1)(a) GDPR or, where legally permitted, our legitimate interests under Article 6(1)(f) GDPR.

Where processing is based on legitimate interests, we consider whether our interests are overridden by your interests, rights, or freedoms.

4. Information Required to Complete a Purchase

Certain personal data is required to process an order, arrange payment and delivery, comply with legal requirements, or respond to a return or refund request. If you do not provide the required information, we may be unable to accept or fulfil your order or provide the requested service.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Site, maintain shopping-cart and checkout functions, remember preferences, protect accounts, prevent fraud, measure performance, and, where enabled, support analytics and advertising.

Cookies that are strictly necessary to provide a service you expressly request may be used without consent where permitted by law. Non-essential cookies and similar technologies are used only after obtaining consent where required under the German Telecommunications Digital Services Data Protection Act (TDDDG) and the GDPR.

You can accept, reject, or manage non-essential cookies through the cookie banner or cookie settings tool available on the Site. You may withdraw your consent at any time through the same tool. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

You may also manage cookies through your browser settings. Blocking necessary cookies may prevent certain parts of the Site, including the shopping cart or checkout, from functioning correctly.

6. How We Share Personal Data

We may share personal data with service providers where necessary to operate the Site and provide our services. Depending on the services actually used, these recipients may include:

• Website hosting, technical support, and security providers;
• Providers supporting our WordPress and WooCommerce environment;
• Payment processors and financial service providers;
• Warehouses, fulfilment providers, couriers, and delivery partners;
• Age-verification and fraud-prevention providers;
• Customer service and communications providers;
• Analytics, advertising, and marketing providers where the required consent has been obtained;
• Accountants, auditors, insurers, legal advisers, and other professional advisers; and
• Courts, regulators, law-enforcement bodies, tax authorities, and other public authorities where disclosure is legally required.

Service providers acting as processors may process personal data only on documented instructions and must protect it in accordance with applicable data-protection requirements. Some providers, such as payment providers, may act as independent controllers for certain processing and will provide their own privacy information.

We may also disclose personal data in connection with a merger, restructuring, financing, sale, or transfer of all or part of our business, subject to applicable legal safeguards.

7. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use an appropriate transfer mechanism where required, such as the European Commission's Standard Contractual Clauses, together with supplementary safeguards where necessary.

You may contact us for further information about the safeguards applicable to an international transfer involving your personal data.

8. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, comply with tax, accounting, commercial, and other legal obligations, resolve disputes, prevent fraud, and establish or defend legal claims.

Retention periods vary according to the type of data and the reason for processing. Order and transaction records may be retained for applicable statutory retention periods. Customer support and claim records may be retained until the matter is resolved and for any subsequent limitation period. Cookie and marketing data is retained according to the relevant cookie duration, consent status, or until you unsubscribe or withdraw consent, unless continued retention is legally required.

When personal data is no longer required, we delete or anonymise it unless continued storage is required by law.

9. Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access.

These measures may include access controls, secure communications, restricted administrative access, service-provider controls, backups, monitoring, and other safeguards appropriate to the nature and risk of the processing.

No system or method of Internet transmission is completely secure. We therefore cannot guarantee absolute security.

10. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• Request access to your personal data and information about how it is processed;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data;
• Request restriction of processing;
• Receive personal data you provided in a structured, commonly used, and machine-readable format and request its transfer where applicable;
• Object to processing based on legitimate interests;
• Object at any time to the use of your personal data for direct marketing;
• Withdraw consent at any time where processing is based on consent; and
• Lodge a complaint with a competent data-protection supervisory authority.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Some rights may not apply in every circumstance, and we may retain certain information where required or permitted by law.

To exercise a data-protection right, contact us at [email protected]. We may request information reasonably necessary to verify your identity and protect your personal data.

11. Complaints to a Supervisory Authority

You have the right to lodge a complaint with a data-protection supervisory authority, particularly in the European Union member state of your habitual residence, place of work, or place of the alleged infringement.

If our German establishment is responsible for the relevant processing, you may also contact the competent supervisory authority for the German federal state in which that establishment is located.

12. Marketing Communications

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.

Opting out of marketing communications does not prevent us from sending non-promotional messages necessary to process an order, provide customer support, or communicate important service information.

13. Children's Privacy and Age-Restricted Products

Our products and purchasing services are intended only for persons who meet the applicable minimum legal age. We do not knowingly accept orders from persons who are not legally permitted to purchase the relevant products.

We may process limited information to verify age and comply with legal obligations. If you believe that an underage person has provided personal data inappropriately, please contact us.

14. Third-Party Websites

The Site may contain links to third-party websites or services. We do not control the privacy practices of independent third parties. You should review their privacy notices before providing personal data to them.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, processing activities, service providers, technology, or legal obligations. The revised version will be published on this page with an updated revision date.

Where required by law, we will provide additional notice or request consent before applying a material change to relevant processing.

16. Contact Us

If you have questions, concerns, complaints, or requests concerning this Privacy Policy or our processing of personal data, please contact us:

• Email: [email protected]
• WhatsApp: 17744928098