Privacy policy

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Jonas Werner, Ikigo, Amselweg 6, 92711 Parkstein, Germany.
Phone: +49 151 68850050, e-mail: info@ikigo.eu.

2. General information on data processing

We process personal data only to the extent necessary to provide a functioning website and our content and services. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (performance of a contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest).

3. Website hosting and shop infrastructure (Shopify)

This website is hosted by Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit our website, Shopify records various log files including your IP address. The legal basis is Art. 6(1)(f) GDPR; we have a legitimate interest in presenting our website as reliably as possible. A data processing agreement pursuant to Art. 28 GDPR is in place with Shopify. Data may be transferred to Shopify Inc. in the USA, safeguarded by the European Commission's standard contractual clauses and, where certified, the EU-US Data Privacy Framework.

4. Provision of the website and server log files

Each time the site is accessed, the system automatically collects data from the accessing device, in particular the IP address, the date and time of access, the page accessed, the volume of data transferred, the browser type and the operating system. This data serves to deliver the website and to ensure its security. The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and consent

Our website uses cookies. Technically necessary cookies required to operate the shop and the shopping cart are set on the basis of Section 25(2) TDDDG (German Digital Services Data Protection Act) and Art. 6(1)(f) GDPR. All non-essential cookies, in particular those used for analytics and marketing, are set only after you have given your consent via our consent banner; the legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

6. Order processing

When you place an order, we process the inventory and contract data you provide (name, address, e-mail address, order details and, in the case of engraving, the text you enter) in order to perform the purchase contract. The legal basis is Art. 6(1)(b) GDPR. To comply with retention obligations under tax and commercial law, we store the relevant data on the basis of Art. 6(1)(c) GDPR.

7. Payment service providers

To process payments, we pass on the necessary data to the payment service provider you have chosen. The providers in use are Shopify Payments (payment by credit card, Apple Pay and Google Pay), Klarna and PayPal. The legal basis is Art. 6(1)(b) GDPR. The privacy notices of the respective provider apply in addition.

8. Shipping

To deliver your order, we pass on your name and delivery address to the shipping service provider commissioned in each case. Within Germany this is DPD Deutschland GmbH, Wailandtstrasse 1, 63741 Aschaffenburg, Germany. Deliveries to the other countries of the European Union and to Switzerland, Liechtenstein and Norway are handled, depending on the shipment, either by DPD Deutschland GmbH or by United Parcel Service Deutschland S.a r.l. & Co. OHG, Goerlitzer Strasse 1, 41460 Neuss, Germany. Deliveries to the United States and Canada are generally handled by United Parcel Service Deutschland S.a r.l. & Co. OHG. In exceptional cases we commission a different shipping service provider, and on request we will tell you who carried your shipment. The legal basis is Art. 6(1)(b) GDPR.

For deliveries outside the European Union, we additionally pass on your name, delivery address and details of the contents of the shipment to the customs authorities of the country of export and of the country of destination. Export is not possible without this information. The legal basis is Art. 6(1)(c) GDPR in conjunction with customs legislation.

The GDPR applies directly to Norway and Liechtenstein, as both belong to the European Economic Area. Adequacy decisions of the European Commission are in place for Switzerland and Canada, the latter limited to organisations subject to PIPEDA. For deliveries to the United States, your data is transferred to a country for which no general adequacy decision exists. That transfer is based on Art. 49(1)(b) GDPR, as it is necessary for the performance of the contract concluded with you. We point out that the United States does not offer a level of data protection comparable to that of the European Union and that access to the transferred data by state authorities cannot be ruled out.

9. Newsletter and e-mail marketing

If you subscribe to our newsletter, we use the e-mail address you provide to send it. Registration takes place using the double opt-in procedure, meaning that you will receive a confirmation e-mail after signing up. The legal basis is Art. 6(1)(a) GDPR. You can unsubscribe from the newsletter at any time; an unsubscribe link is included in every e-mail.

10. Customer account

You may create a customer account. We process the data you provide in order to administer your account and your orders on the basis of Art. 6(1)(b) GDPR. You can have your account deleted at any time.

11. Contacting us and the withdrawal form

If you contact us via the contact form, the electronic withdrawal form or by e-mail, we process the information you provide in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, and otherwise Art. 6(1)(f) GDPR.

12. Reach measurement and analytics

We do not use any third-party analytics or marketing services, in particular no Google Analytics, no Google Tag Manager and no Meta Pixel. We use only the shop analytics integrated into Shopify, with which we evaluate visits and orders. It accesses cookies and becomes active only after you have given your consent via the consent banner; the legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

13. Product reviews (Judge.me)

We use Judge.me for product reviews. The provider is Judge.me Ltd, C/O Buckworths, 2nd Floor, 1-3 Worship Street, London EC2A 2AB, United Kingdom, registered in the UK companies register under number 12157706. Judge.me processes the data as a processor on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.

If you submit a review, we publish the review text together with the name you provide on the product page. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in displaying customer reviews.

An adequacy decision of the European Commission is in place for the United Kingdom, most recently renewed on 19 December 2025. Judge.me uses sub-processors that also process data in the USA. These transfers are safeguarded by the European Commission's standard contractual clauses together with the UK addendum.

14. Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and a right to object (Art. 21). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian Data Protection Authority (Bayerisches Landesamt fuer Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.

15. Retention period

We store personal data only for as long as is necessary for the purposes stated or for as long as statutory retention periods require. Retention periods under commercial and tax law are up to ten years.

16. Currency of this policy

This privacy policy will be adapted as required to reflect changes in the legal situation or in our processing activities.

17. Authoritative version

This is a translation of our German privacy policy for your convenience. In the event of any discrepancy, the German version at ikigo.eu/policies/privacy-policy prevails.