Privacy policy

1. Data Controller

The data controller for the processing of personal data on this website and in our online shop is:

MA Classic Parts UG (haftungsbeschränkt)
represented by the managing director Manuel Aachte
Im Roggesch 34
49635 Badbergen
Germany
Telephone: +49 162 9262645
Email: info@ma-classic-parts.com

No data protection officer has been appointed.

2. General Information

The protection of your personal data is important to us. Below, we inform you about the type, scope, and purpose of the processing of personal data when using our website, our online shop, and our telephone contact. Personal data means all data that can be used to identify you personally.

3. Hosting and Shop Platform (Shopify)

Our online shop is operated on the Shopify e-commerce platform. The provider is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides us with the shop software, hosting, a content delivery network (CDN), checkout, order management, customer accounts, and the sending of order and shipping notifications by email.

When you access our website, Shopify automatically processes access data in server log files, in particular:

  • IP address,
  • date and time of access,
  • pages and files accessed, as well as the amount of data transmitted,
  • browser and device information,
  • referrer URL.

The processing is carried out to ensure uninterrupted and secure operation and to deliver the content. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of our online offering) and, where you place an order, Art. 6(1)(b) GDPR.

Shopify processes the data as a data processor on our behalf; we have concluded a data processing agreement (Data Processing Addendum) with Shopify in accordance with Art. 28 GDPR. Shopify is part of a corporate group based in Canada (Shopify Inc., Ottawa). Data may therefore be transferred to Shopify companies in Canada and to sub-processors, including in the USA. For Canada, there is an adequacy decision by the European Commission (Art. 45 GDPR). For transfers within the Shopify group, Shopify relies on binding corporate rules approved by European data protection authorities (Binding Corporate Rules, Art. 47 GDPR); for transfers to sub-processors in the USA, on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) or, where the recipient is certified, on the EU-US Data Privacy Framework (Art. 45 GDPR).

Further information: Shopify Privacy Policy and Shopify Data Processing Addendum.

Shopify also processes certain data on its own responsibility, for example for fraud prevention, platform security, and as part of Shop Pay (see Section 7). For this purpose, Shopify's Consumer Privacy Policy applies.

4. Data Processing for Contract Fulfillment

We process personal data that you provide to us in the context of an order, a request (e.g., a restoration request), or an inquiry, in particular your name, delivery and billing address, email address, telephone number if applicable, order and payment data, and vehicle-related information (e.g., model series, part number). Required fields are marked as such; without this information, we cannot conclude or fulfill the contract.

The processing is carried out to fulfill orders and requests, communicate about the request, provide digital content (download links), and process warranty, cancellation, and performance claims. The legal basis is Art. 6(1)(b) GDPR.

After the contract has been fully fulfilled, your data will be restricted for further processing and deleted after the expiration of the statutory retention periods under tax and commercial law (usually 6, 8, or 10 years, § 147 AO, § 257 HGB). The legal basis for retention is Art. 6(1)(c) GDPR.

5. Customer Account

You can voluntarily create a customer account in our shop or register with your email address. Registration is carried out via Shopify's customer account function, usually by means of a one-time code sent to your email address. Your contact details, addresses, and order history are stored in the customer account so that you can view orders and complete future orders more quickly. The legal basis is Art. 6(1)(b) GDPR. You can have your customer account deleted at any time, for example by sending a message to the email address provided above; statutory retention periods remain unaffected.

6. Contact

If you contact us by email, via a contact form, or through social networks, we process your details to handle your request. The legal basis is Art. 6(1)(b) GDPR, insofar as your request is directed at concluding or performing a contract; otherwise, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will be deleted once the request has been fully processed and there are no retention obligations.

WhatsApp Business: If you send us a message via WhatsApp, we process your telephone number, your WhatsApp profile name, and the content of your message (including transmitted photos) to handle your request. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Data may be transferred to Meta Platforms, Inc. in the USA; the transfer is based on the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is Art. 6(1)(b) GDPR, insofar as your request is directed at concluding or performing a contract; otherwise, Art. 6(1)(f) GDPR. The WhatsApp button on our website is a simple link; data is only transmitted when you click it. The use of WhatsApp is voluntary – alternatively, you can reach us at any time by email.

7. Payment Processing

Depending on the selected payment method, we pass on the data required for payment processing (e.g., name, address, email address, order amount, payment details) to the respective payment service provider. The legal basis is Art. 6(1)(b) GDPR. Additional data (e.g., IP address, device information) may be processed for fraud prevention and to secure payment transactions; in this respect, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against payment defaults and fraud). The payment service providers process the data partly on their own responsibility; their respective privacy notices apply additionally.

Shopify Payments: Payments by credit/debit card, Apple Pay, Google Pay, and, if applicable, Klarna are processed via Shopify Payments (Shopify International Limited, address see Section 3). Payment processing is carried out by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland ("Stripe"). Data may therefore be transferred to Stripe, Inc. or Shopify companies in the USA or Canada; this is based on the EU-US Data Privacy Framework or standard contractual clauses and the adequacy decision for Canada. When using Apple Pay or Google Pay, data is also processed by Apple Distribution International Ltd. (Ireland) or Google Ireland Limited (Ireland) in accordance with their respective privacy policies.

Klarna (if offered): When paying via Klarna, your data is transferred to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may perform an identity and credit check. Further information: Klarna Privacy Notice.

PayPal: When paying via PayPal, your payment details are transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal may perform an identity and, if applicable, credit check. Further information: PayPal Privacy Policy.

Shop Pay: If you use Shop Pay Express Checkout and save your data there, Shopify stores your contact, delivery, and payment details to make future orders – including in other Shopify shops – easier for you. Shopify is independently responsible for Shop Pay; the Shop Privacy Notice applies.

Prepayment/Bank Transfer: When paying by bank transfer, your payment details are processed by our bank.

8. Shipping Processing

To deliver ordered goods, we pass on your name and delivery address to the shipping company commissioned with the delivery, usually DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. The legal basis is Art. 6(1)(b) GDPR.

We only pass on your email address and, if applicable, telephone number to the shipping company if you have expressly consented to this during the ordering process so that it can inform you of the delivery date before delivery or coordinate the delivery. The legal basis is Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect to us or the shipping company.

9. Cookies and Similar Technologies

Our shop uses cookies and similar technologies (e.g., Local Storage, pixels). Cookies are small text files stored on your device.

Technically Required Technologies: Some technologies are essential for the operation of the shop, e.g., for the shopping cart, checkout, customer account, language settings, security and fraud prevention, and for storing your cookie consent (e.g., the Shopify cookies "cart", "_secure_session_id", "_tracking_consent"). The legal basis for accessing your device is § 25(2) No. 2 TDDDG; for subsequent data processing, Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Technologies Requiring Consent: We only use technologies for statistics, analysis, personalization, and marketing if you have consented to this. The legal basis is § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

10. Cookie Consent Management (Shopify Cookie Banner)

To obtain, manage, and document your consents, we use the Shopify cookie banner, which is based on the Shopify Customer Privacy API. Your selection (e.g., acceptance or rejection of the analysis, marketing, and preferences categories), the time of declaration, and technical information are stored in the "_tracking_consent" cookie and with Shopify. Technologies and apps requiring consent are only loaded after your consent. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (duty to provide proof) and § 25(2) No. 2 TDDDG.

You can change or revoke your consent at any time with future effect by accessing the cookie settings via the "Cookie Settings" link in the footer of our website.

11. Shopify Analytics

As part of its shop statistics, Shopify collects data on the use of our shop (e.g., pages visited, time spent, cart and checkout events, device and browser information, approximate origin) and provides us with this data in aggregated reports. Cookies such as "_shopify_y" and "_shopify_s" are used for this purpose. We only use these analytics cookies after your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, Shopify only collects the data required for order fulfillment. See Section 3 for transfers to third countries.

12. Web Analytics and Online Marketing (Only with Consent)

We only use the following services if you have consented via the cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can revoke your consent at any time with future effect (see Section 10).

12.1 Google Analytics and Google Ads

We use services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), which are integrated via the Shopify app "Google & YouTube" or the Google tag:

  • Google Analytics 4 to analyze the use of our shop (e.g., page views, clicks, purchases, device and location information in abbreviated form),
  • Google Ads Conversion Tracking to measure the success of our ads,
  • Google Ads Remarketing to serve interest-based advertising.

We use Google Consent Mode: Without your consent, Google will not set any analytics or advertising cookies. The collected data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of July 10, 2023, Art. 45 GDPR). Further information: Google Privacy for Business.

12.2 Google Ads Customer Match

If you have expressly consented to this, we use the Google Ads "Customer Match" feature. Your email address is transmitted to Google in hashed (encrypted) form to match it with Google accounts and create audiences for advertising purposes. The legal basis is Art. 6(1)(a) GDPR. Revocation is possible at any time with future effect, for example by email to us.

12.3 Meta Pixel (Facebook/Instagram) – If Used

If we use the Meta pixel or Conversions API, data about your use of our shop (e.g., pages visited, cart and purchase events, IP address, browser and device information) is transmitted after your consent to Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure the effectiveness of ads on Facebook and Instagram and to show you interest-based advertising. We are jointly responsible with Meta for the collection and transmission (Art. 26 GDPR). A transfer to Meta Platforms, Inc. in the USA is based on the EU-US Data Privacy Framework. Further information: Meta Privacy Policy.

12.4 TikTok Pixel – If Used

If we use the TikTok pixel, data about your use of our shop (e.g., page views, purchase events, IP address, device information) is transmitted after your consent to TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, to measure and optimize advertising campaigns on TikTok. A transfer to third countries (including the USA, Singapore, Malaysia, and China) cannot be ruled out; according to TikTok, it is based on standard contractual clauses. Further information: TikTok Privacy Policy.

13. Newsletter (Shopify Email)

If you subscribe to our newsletter, we use your email address to send you information about new products, offers, and services. The legal basis is your consent (Art. 6(1)(a) GDPR, § 7(2) No. 2 UWG).

We use the double opt-in procedure: After signing up, you will receive an email in which you must confirm your registration. We store the time of registration and confirmation, as well as the IP address, to provide proof of consent (Art. 6(1)(c) GDPR).

For sending, we use Shopify Email from Shopify International Limited (address see Section 3). Shopify Email can analyze whether a newsletter was opened and which links were clicked to improve our newsletters. You can unsubscribe from the newsletter at any time via the unsubscribe link in any email or by message to us. Your email address will be removed from the mailing list after unsubscribing; to provide proof of prior consent, we may store the address in a blocked state for up to three years (Art. 6(1)(f) GDPR).

Existing Customer Advertising: If you have purchased goods or services from us, we may also use your email address for advertising our own similar products without separate consent (§ 7(3) UWG, Art. 6(1)(f) GDPR). You can object to this use at any time without incurring any costs other than the transmission costs according to the basic rates.

14. Online Cancellation Function

If you declare a cancellation via the "Revoke Contract" button, we process your name, order number, email address, and, if applicable, your details regarding the affected items, as well as the date and time of receipt, to process the cancellation and send you the legally required confirmation of receipt. The declaration is transmitted via the contact form of our shop platform Shopify (see Section 3) to our email inbox; the confirmation of receipt is sent automatically from our Google Workspace email inbox (see Section 6). The legal basis is Art. 6(1)(c) GDPR in conjunction with § 356a BGB.

15. Social Media

We maintain online presences on social networks (e.g., Instagram and Facebook by Meta Platforms Ireland Ltd.). When visiting these pages, the respective providers process your data on their own responsibility or – regarding page statistics (Insights) – jointly with us (Art. 26 GDPR). If you contact us through social networks, we process your data to handle your request (Art. 6(1)(b) or Art. 6(1)(f) GDPR). Links to our profiles on our website are simple links; data is only transmitted when you click them.

16. Recipients of Personal Data

We only pass on personal data if required or if you have consented, in particular to:

  • Shop platform and hosting (Shopify),
  • Payment service provider (Shopify Payments/Stripe, PayPal, Klarna if applicable) and our bank,
  • Shipping service provider (DHL),
  • Marketing and analytics service providers (only with consent),
  • Tax advisors and accounting software as part of statutory obligations.

Data processors are contractually bound in accordance with Art. 28 GDPR.

17. Transfer to Third Countries

To the extent that data is transferred to countries outside the EU or EEA, this only occurs if there is an adequacy decision by the European Commission (e.g., for Canada or for US companies certified under the EU-US Data Privacy Framework) or if appropriate safeguards such as standard contractual clauses or binding corporate rules are in place. Details can be found with the respective services.

18. Retention Period

Personal data is only stored for as long as is necessary for the respective purposes or as long as statutory retention obligations exist. After that, it will be deleted.

19. Your Rights

In accordance with the statutory provisions, you have the right to:

  • Access (Art. 15 GDPR),
  • Rectification (Art. 16 GDPR),
  • Erasure (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Revocation of granted consents with future effect (Art. 7(3) GDPR),
  • Complaint to a supervisory authority (Art. 77 GDPR); the authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, www.lfd.niedersachsen.de.

Right to Object (Art. 21 GDPR)

To the extent that we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or if the processing is necessary for the establishment, exercise, or defense of legal claims. If your data is processed for direct marketing, you can object to this processing at any time without giving any reason.

20. Contact

If you have any questions about the processing of your personal data or the exercise of your rights, please contact:

MA Classic Parts UG (haftungsbeschränkt)
Im Roggesch 34
49635 Badbergen
Germany
Email: info@ma-classic-parts.com

As of: October 2026