Welcome to BEVANG | Shop Independent Fashion
1. Introduction
2. Collecting non-personal data
2.1 How do we collect your data ?
3. Collecting personal data
4. Why do we store data?
5. How do we store them?
6. How long do we store them?
7. Squarespace
7.1 Personal data when concluding a contract
7.2 Stored non-persion-related data when using the website and online shop.
7.3 Contact form
7.4 Customer accounts
7.5 E-Mails
7.5.1 E-Mails regarding your abandoned shopping cart
7.5.2 E-Mails regarding your order and your customer account
7.5.3 Newsletter
7.6 Fonts
8. Paypal/Transactions
9. Google Analytics
9.1 Data Collected by Google Analytics
10. Instagram
11. Cookies
11.1 Functional cookies
11.2 Analysis and performance cookies
12. Newsletter
13. User Rights (Data Subject Rights)
13.1 Right of Access (Art. 15 GDPR)
13.2 Right to Rectification (Art. 16 GDPR)
13.3 Right to Erasure (Art. 17 GDPR)
14. Changes to this Privacy Policy
1. Introduction
This document explains how Becke Kochs / Riccioppo Slaviero / Rios Roehren GbR ("we", "us", "our") collects, stores, protects and processes the personal data ("data") of its customers ("users", "you", "your") online, offline, on its website ("website") and on its online store ("online store"). In doing so, we comply with the European General Data Protection Regulation (EU-DSGVO) and the German Bundesdatenschutzgesetz of 2018. In addition, the rights of users are explained.
Please read this privacy policy carefully before using our website, online store or entering into a contract. Make sure that you have understood our privacy policy in its entirety. Your use of the website and online store constitutes your acceptance of our privacy policy and those of the service providers and suppliers we use.
If you have any concerns, questions or comments about our privacy policy, please send an email to: contact@bevang.com
2. Collection of non-personal data
When you use our website, we collect non-personal data. This includes the duration of use, the type of use/session, the date of use, the country from which you visit our website, the websites from which you visit or are redirected to ours and your IP address. We need this data for technical and administrative purposes, for the service operation of our website, its UX design and for its optimization.
2.1 How do we collect your data?
The collection of non-personal data takes place automatically and in anonymized form. This data includes, for example, browser information, device data, access times, and pages visited.
It is stored on the servers of our website operator, Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify may process and store this data on servers located in other countries, including Canada and the United States, and may share it with third-party service providers as necessary for operating the platform.
In addition, BEVANG uses Google Analytics to analyze website traffic and improve user experience. Information about the non-personal data collected by Google Analytics and your rights in this regard can be found under the section “Web Analytics with Google Analytics.”
3. Collection of personal data
We collect and process data that you provide to us freely, for example in the context of the contact form, newsletter subscription or for a contract conclusion. This is done in the context of your request. This data is stored on the servers of the website operator Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) in accordance with their privacy policy. Further information on this can be found under the bullet point "7".
4. Why do we store data?
We process user data in accordance with the EU-DSGVO and the German Bundesdatenschutzgesetz 2018:
1. for the fulfillment of (pre-)contractual obligations
2. for the fulfillment of legal obligations
3. to fulfill legitimate interests
4. customer database
5. advertising /advertising purposes
6. analysis, optimization and further development of services and products
7. within the scope of your consent
5. How do we store them?
BEVANG stores and processes the data on the servers of our website operator Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).
6. How long do we store them?
Generally, we store data only as long as necessary. BEVANG is required by law to keep contract-related data for up to 10 years.
7. Shopify
Our website is hosted by the provider Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). By using our website, you agree to the privacy policy of Shopify. Further information about data processing by Shopify can be found in Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy and in Shopify’s Terms of Service: https://www.shopify.com/legal/terms.
7.1 Personal data when concluding a contract
If users purchase products via our online store, we store personal data in order to fulfill this purchase contract. We store and process this information:
-
The name of the users
-
The billing address of the users
-
The delivery address of the users
-
The users' e-mail address
-
The phone number of the users
-
Details pertaining to the product purchased (e.g. what product was purchased, what size, color, etc).
This data is processed for the purpose of order fulfillment, customer communication, and invoicing.
The data entered during the order process is therefore also stored and processed on Shopify’s secure servers.
During checkout, Shopify may use the Google Places API to assist users by automatically completing shipping and billing address fields. This feature is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and is intended to enhance the user experience.
7.2 Stored non-personal data when using the website and the online shop
When you visit our website, certain data is automatically collected and processed by our website operator, Shopify International Ltd., to enable the operation and security of our online shop. The following information may be collected automatically:
-
Information about the browser used, operating system, and device type
-
Information about your network connection (e.g. IP address)
-
Referring websites (the page visited before accessing our site)
-
Pages visited and actions taken on our website
-
Date, time, and duration of your visit
This data is used for technical purposes — such as ensuring website functionality, system security, and improving the user experience — and may also be used in anonymized form for statistical analysis. For more information about how Shopify collects and processes data, please see Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy. Shopify may analyze this data in aggregated and anonymized form.
7.3 Contact form
When you submit information via a contact form on our website, we collect the data entered into the form in order to process and respond to your inquiry. This data is stored and processed by our website operator, Shopify International Ltd., to enable us to manage communication and provide customer support. Your data will not be shared with third parties unless this is necessary to handle your request or we are legally required to do so.
7.4 Customer Account
If users create a customer account on our website, their personal data is collected and stored on the servers of our website operator, Shopify International Ltd., to enable account management and improve the customer experience.
The following data may be processed for this purpose:
-
User name
-
Full name
-
Email address
-
Shipping and billing address
-
Telephone number
-
Order history and saved preferences
This information allows users to log in securely, view their order history, manage saved addresses, and complete purchases more efficiently. The processing of this data is based on the user’s consent and/or the necessity to fulfill pre-contractual or contractual obligations (Art. 6 (1) (a) and (b) GDPR). Users can request deletion of their customer account at any time by contacting us directly or by using an account deletion function, if available.
7.5 Emails
In order to provide certain services through our online store and website, we collect, store, and process users’ email addresses. Emails are used for communication related to customer accounts, orders, and—if applicable—marketing or reminder notifications.
7.5.1 Emails regarding your abandoned shopping cart
If users begin the checkout process but do not complete their purchase, they may receive an automatic reminder email within 24 hours, provided that:
-
The user has entered their email address or is logged into their customer account,
-
The items in the shopping cart are still in stock, and
-
The user has closed the browser or left the Bevang website before completing the purchase.
These emails are sent automatically through our e-commerce platform Shopify International Ltd., to remind users of their pending purchase. Users can unsubscribe from these reminder emails at any time by clicking the “unsubscribe” link included at the bottom of each email.
7.5.2 Emails regarding your order and your customer account
To send transactional and account-related communications, we use Shopify International Ltd. as our service provider. Shopify processes and stores users’ email addresses to enable us to send essential service notifications, such as:
-
Confirmation of customer account creation,
-
Password reset or change notifications,
-
Order confirmations,
-
Shipping and delivery notifications.
These transactional emails are essential for order processing and account management and therefore cannot be unsubscribed from.
7.5.3 Newsletter
If users have consented to receive our newsletter and have voluntarily provided us with their personal data (such as their email address and, if applicable, their name), this data will be used to send regular updates about our products, news, and offers.
We use the email marketing platform Klaviyo, operated by Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA, for the purpose of managing and sending newsletters. Klaviyo processes this data on our behalf to deliver and analyze email campaigns (e.g. to measure open and click rates). The data is stored on Klaviyo’s secure servers, which may be located in the United States. Data transfers to the USA take place on the basis of the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR.
We also use Shopify International Ltd. as our e-commerce platform, which may process and transfer certain customer data (such as email addresses) to Klaviyo for newsletter distribution and marketing automation purposes.
Users can unsubscribe from the newsletter at any time by clicking the “unsubscribe” link included at the bottom of every newsletter email or by contacting us directly. After unsubscribing, users’ data will be deleted from the newsletter distribution list, unless it must be retained for other legitimate purposes (e.g. proof of consent).
7.6 Fonts
This website uses web fonts from Google Fonts and Adobe Fonts to ensure a consistent and visually appealing display of content. When a page is loaded, your browser may request the necessary font files from servers operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Adobe Systems Software Ireland Limited (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland). To deliver these fonts efficiently and securely, the servers of these providers may automatically receive certain technical information (non-personal data), including:
-
Information about the browser and device used
-
Information about your network connection
-
Your IP address
This data is processed solely for the purpose of providing and optimizing font delivery and ensuring website functionality. For users in the EU, both Google and Adobe operate through their Irish subsidiaries in compliance with the GDPR.
Further information can be found in the respective privacy policies:
-
Google Fonts: https://policies.google.com/privacy
-
Adobe Fonts: https://www.adobe.com/privacy/policies/adobe-fonts.html
8. Paypal/Transactions
For payment processing, BEVANG uses the services of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). PayPal is an independent payment service provider that operates under the supervision of the Luxembourg financial authority and processes data in accordance with the General Data Protection Regulation (GDPR).
When users choose PayPal as a payment method, the data required for payment processing is automatically transmitted to PayPal and stored on PayPal’s secure servers. This data exchange is necessary to fulfill the purchase contract (Art. 6 (1) (b) GDPR). The data transmitted to PayPal may include:
-
Transaction details (e.g. purchase amount, products ordered, device and technical usage data)
-
Personal identification data (e.g. name, address, email address, phone number)
-
Payment and account information (e.g. IBAN, credit card number, or PayPal account details)
-
Data relating to the specific transaction (e.g. merchant information, delivery address, order ID)
-
Other data required by PayPal to verify identity and prevent fraud
PayPal may also receive personal data from third parties (such as credit reporting agencies or identity verification services) in accordance with legal requirements.
PayPal retains transaction-related data for as long as necessary to fulfill contractual and legal obligations (e.g. under financial and anti-money laundering laws). Extended retention may occur when required by law or to protect legitimate business interests. In order to complete payment processing, personal data may be shared by PayPal with:
-
Other companies within the PayPal corporate group
Financial institutions involved in the transaction -
External service providers acting on PayPal’s behalf (e.g. IT or compliance partners)
-
Merchants and customers involved in the same transaction
-
Public authorities or regulatory bodies, where legally required
Further information about PayPal’s data processing practices can be found in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
9. Google Analytics
BEVANG uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to analyze and improve the performance and usability of our website. Google Analytics uses cookies and similar technologies to collect and evaluate data about how visitors interact with our website. This data may include:
-
The type and version of your browser
-
The operating system you use
-
The referrer URL (the previously visited page)
-
The hostname of the accessing computer (IP address, anonymized)
-
The time of the server request
Google Analytics 4 anonymizes IP addresses within the European Union or the European Economic Area before transmitting them to Google servers. Full IP addresses are never stored or logged. The legal basis for using Google Analytics is your consent, pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by adjusting your cookie preferences on our website.
Google processes the collected information on our behalf to evaluate website activity and compile reports on website usage. This data may also be used by Google for its own purposes in accordance with Google’s privacy policy. For more information about Google’s data processing practices, please refer to Google’s Privacy Policy: https://policies.google.com/privacy
Data transfers to the United States are based on the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses (Art. 46 GDPR).
9.1 Data Collected by Google Analytics
Google Analytics 4 collects data to analyze website usage, improve performance, and ensure the security and reliability of its services. The information collected may include:
-
IP addresses (processed and anonymized within the EU)
-
Information about user interactions on our website (e.g. pages viewed, time spent, navigation paths)
-
Technical information about the device and browser used (e.g. browser type, operating system, screen resolution)
-
Approximate geolocation data (city and region, derived from the anonymized IP address)
This data helps us understand how visitors use our website and allows us to improve our content and user experience. The data collected through Google Analytics does not allow us to identify individual users. Users can prevent the collection of data by Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available here: https://tools.google.com/dlpage/gaoptout Further information about data protection at Google Analytics can be found here: https://support.google.com/analytics/answer/6004245
10. Instagram
Our website may contain links to or integrations of services provided by Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you visit a page that includes an Instagram plugin or link, your browser may establish a direct connection to Meta’s servers. This may allow Instagram to receive information such as your IP address, the pages you visit on our site, and, if you are logged into your Instagram account, associate this information with your personal Instagram profile.
We have no influence over the scope and further processing of data collected by Instagram through this integration. For more information about how Instagram collects and processes data, please refer to Instagram’s Privacy Policy: https://help.instagram.com/519522125107875 The use of Instagram integrations is based on your consent (Art. 6 (1) (a) GDPR) or, where applicable, on our legitimate interest in presenting our online offerings in an appealing and socially connected manner (Art. 6 (1) (f) GDPR).
11. Cookies
This website uses cookies and similar technologies. Cookies are small text files that are stored on your device when you visit a website. They help us ensure the proper functionality of our online store, analyze usage patterns, and personalize content and offers. Some cookies are technically necessary for the operation of the website and online shop (e.g., to enable shopping cart and checkout functions). Other cookies are used for analytical and marketing purposes and are only activated with your prior consent.
You can adjust your cookie preferences at any time via the cookie banner on our website or through your browser settings. Please note that disabling cookies may limit certain website features. Shopify uses cookies to provide its e-commerce services. More information about the cookies used by Shopify can be found here: https://www.shopify.com/legal/cookies
11.1 Functional cookies
Functional and necessary cookies are used on this website to enable Shopify to provide the essential features of our online store. These cookies ensure that the website operates properly and that users can browse, add items to the shopping cart, and complete purchases securely. Examples of how these cookies are used include:
-
Managing customer accounts and logins
-
Storing items in the shopping cart and processing checkout
-
Enabling secure payment transactions
-
Maintaining session settings and language preferences
-
Handling URL redirections and navigation consistency
These cookies do not collect personal data for marketing purposes and are automatically deleted when they are no longer needed. More information about the functional cookies used by Shopify can be found here: https://www.shopify.com/legal/cookies
11.2 Analysis and performance cookies
Analytics and performance cookies are used only with the user’s prior consent, as obtained through the cookie banner on this website. These cookies help us understand how visitors interact with our website — for example, which pages are visited most frequently, how users navigate the site, and where technical errors may occur. This data allows us to continuously improve our content, user experience, and overall performance. We use the analytics tools provided by Shopify International Ltd. and Google Analytics 4 (Google Ireland Limited) for this purpose. These tools may set their own cookies or similar technologies to collect and process information such as:
-
The number of visitors and session duration
-
Pages viewed and navigation paths
-
Browser type, operating system, and device information
-
General geographic region (city or country) derived from the anonymized IP address
The legal basis for using analytics and performance cookies is your consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by adjusting your cookie preferences via the cookie banner or browser settings. More information about cookies used by Shopify can be found here: https://www.shopify.com/legal/cookies For details on how Google Analytics processes data, please see: https://policies.google.com/privacy
12. Newsletter
If you voluntarily provide your data by subscribing to our newsletter, we will collect and process this information to send you regular updates about our products, offers, and news. The data collected for this purpose includes your name (if provided) and email address. This information is stored and processed on the secure servers of our e-commerce provider, Shopify International Ltd., Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, and our email marketing service provider, Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA.
Klaviyo helps us design, manage, and send newsletters as well as analyze campaign performance (e.g. open and click rates). Your data may be transferred to and processed on Klaviyo’s servers in the United States. These transfers take place under the EU–U.S. Data Privacy Framework or Standard Contractual Clauses (Art. 46 GDPR) to ensure adequate data protection.
By subscribing to the newsletter, you consent to the collection, processing, and storage of your data for this purpose in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by clicking the “unsubscribe” link included at the end of each newsletter or by contacting us directly. Further information on Klaviyo’s privacy practices can be found here: https://www.klaviyo.com/legal/privacy-notice
13. User Rights (Data Subject Rights)
In accordance with Articles 15–21 of the General Data Protection Regulation (GDPR), users (data subjects) have the following rights with regard to the processing of their personal data. To exercise any of these rights, please contact us at contact@bevang.com. Bevang will respond to all legitimate requests promptly and in accordance with applicable data protection laws.
13.1 Right of Access (Art. 15 GDPR)
Users have the right to obtain information about the personal data we process about them, including details on the purpose of processing, categories of data, recipients, and storage periods.
13.2 Right to Rectification (Art. 16 GDPR)
Users have the right to request the correction or completion of inaccurate or incomplete personal data we have stored.
13.3 Right to Erasure (Art. 17 GDPR)
Users have the right to request the deletion of their personal data, provided there is no legal obligation or legitimate interest preventing its deletion.
14. Changes to this Privacy Policy
We reserve the right to amend, update, or adjust this Privacy Policy at any time to reflect legal, technical, or business developments.The most current version will always be published on our website, together with the date of the latest revision.