Privacy Policy

1. Responsible Parties

Responsible for the data processing on this website are:

theBlueHeart
Otto-Stadler-Str. 23c
33100 Paderborn
Germany
E-Mail: shop@the-blue-heart.com
(responsible for website operation and product sales)

theBlueHeart gGmbH
Otto-Stadler-Str. 23c
33100 Paderborn
Germany
E-Mail: shop@the-blue-heart.com
(responsible for donation processing)

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is processed exclusively in accordance with the legal provisions of the General Data Protection Regulation (GDPR).

3. Hosting and Technical Infrastructure (Shopify)

This website is operated via the e-commerce platform Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.

Shopify processes personal data as a data processor according to Art. 28 GDPR, in particular:

• IP address
• Device and browser information
• Order and payment data

It cannot be ruled out that data may be transferred to the USA or Canada. Shopify uses standard contractual clauses of the EU Commission for this purpose.

Legal basis: Art. 6 para. 1 lit. b and f GDPR

4. Technically Necessary Cookies

This website uses exclusively technically necessary cookies that are required for the operation of the online shop and the ordering process.

No tracking or analytics cookies are used.

Legal basis: Art. 6 para. 1 lit. f GDPR

5. Data Collection When Visiting the Website

When visiting our website, technical information (e.g., IP address, browser type, date/time, pages visited, operating system) is automatically stored in so-called server log files.

This data is used exclusively for the secure provision of the website and for troubleshooting. No user profiles are created.

6. Data Processing in the Context of Product Sales (theBlueHeart)

6.1 Orders

When you place an order, we process:

• Name
• Billing and shipping address
• Email address
• Payment information

Purpose: Contract processing and shipping
Legal basis: Art. 6 para. 1 lit. b GDPR

6.2 Payment Providers

Depending on the chosen payment method, payment data will be transmitted to the following providers:

• PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
• Stripe Payments Europe Ltd., Ireland (for Apple Pay / Google Pay / credit cards)

Data processing is carried out in accordance with the privacy policies of the respective payment providers.

6.3 Print-on-Demand & Shipping

For print-on-demand products, production and shipping are carried out by:

Shirtigo GmbH, Germany
(delivery after order)

Stock items (e.g., Bracenets, books) are shipped in-house via:

• DHL, integrated via EasyDHL / Shopify

Data shared: Name and shipping address
Legal basis: Art. 6 para. 1 lit. b GDPR