Privacy Policy

Privacy Policy

Effective: August 2026

1. Controller

WrestlerStore – Noah Honold (sole proprietor)
Wiesenstraße 5, 89551 Königsbronn, Germany
Email: admin@wrestlerstore.com

2. General Information on Data Processing

We process our customers’ personal data only insofar as this is necessary to provide our online shop, process contracts, or based on your consent. The legal bases are Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(a) GDPR (consent), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).

3. Shop System and Hosting (Shopify)

Our online shop is operated via the Shopify e-commerce platform (Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes on our behalf all data collected when you visit the shop and place orders (e.g., IP address, browser data, order and contact details); we have entered into a data processing agreement with Shopify. Personal data may be transferred to Shopify Inc. in Canada or the USA; such transfers are based on adequacy decisions by the European Commission and EU Standard Contractual Clauses. Further information: Shopify Privacy Policy. When the website is accessed, technically necessary server log data (IP address, date/time, page accessed) is also processed (Art. 6(1)(f) GDPR – secure and stable operation).

4. Orders, Payment, and Shipping

When you place an order, we process your name, address, email address, telephone number where applicable, and order and payment data for contract processing (Art. 6(1)(b) GDPR). Payment data is processed directly by the relevant payment service provider: Shopify Payments (credit/debit cards, Apple Pay, Google Pay, Shop Pay), PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), and Klarna (Klarna Bank AB, Sweden). To deliver your order, we provide your name and delivery address to our shipping provider (DHL). Personalization details (e.g., the name on the singlet) are processed to manufacture the ordered goods.

5. Cookies and Consent Management

We use technically necessary cookies (e.g., shopping cart, language setting; Art. 6(1)(f) GDPR, Section 25(2) TDDDG). All non-essential cookies and analytics/marketing services are loaded only after you have given your consent via our consent banner (Consentmo) (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You may withdraw or adjust your consent at any time with effect for the future via the cookie settings in the shop.

6. Analytics and Marketing Services (Only with Consent)

Google Tag Manager / Google services (Google Ireland Ltd., Dublin): Management and integration of analytics and marketing tags. Microsoft Clarity (Microsoft Ireland Operations Ltd.): Anonymized analysis of user behavior (heatmaps, session recordings) to improve our shop. Klaviyo (Klaviyo Inc., USA): Sending email notifications and newsletters if you have subscribed; you may unsubscribe at any time via the link in each email. Judge.me (Judge.me Ltd.): Collection and display of product reviews; after a purchase, you may receive an invitation to submit a review by email. For services based outside the EU, transfers are based on adequacy decisions or EU Standard Contractual Clauses.

7. Use of Artificial Intelligence (AI) Systems

We use AI-supported systems in our shop. We provide transparent information about this; separate consent is required only insofar as the relevant services set cookies that require consent (see Section 5).

  • Automatic Translation: Our shop content is offered in several languages. The translations are created wholly or partly using machine translation or AI. No personal data is processed in this process. In case of doubt, the German version is authoritative; for legally binding texts (e.g., cancellation policy, Terms and Conditions), the German original version applies.
  • Product Recommendations: On product pages and in the shopping cart, we display automatically generated product suggestions (Shopify Search & Discovery). These are based on relationships between products and aggregated usage behavior in the shop. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a user-friendly offering). You may object to this processing under Art. 21 GDPR.
  • AI-Assisted Content Creation: Texts and images in our shop may have been created or edited with AI assistance. We review such content before publication; editorial responsibility lies with us. Fully AI-generated product images and AI-generated depictions of people are labeled directly on the respective image.

No Automated Decision-Making in Individual Cases: No solely automated decision-making, including profiling, with legal effect or similarly significant impact on you within the meaning of Art. 22 GDPR takes place. In particular, we do not conduct our own creditworthiness checks; such checks may be carried out exclusively by the payment service provider you select, in accordance with its privacy policy.

8. Storage Period

We store personal data only for as long as necessary for the stated purposes. We retain order and invoice data for up to ten years due to commercial and tax law requirements (Section 257 HGB, Section 147 AO). The data is then deleted.

9. Your Rights

You have the following rights regarding your personal data vis-à-vis us: the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, it is sufficient to email admin@wrestlerstore.com.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart.

10. Changes to This Privacy Policy

We will amend this Privacy Policy if our data processing or the applicable law changes. The current version published here shall apply in each case.