Privacy policy

Privacy Policy

Last updated: June 4, 2026

1. Data Protection at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

Responsible Party (Controller)

Smart Things For Smart People
Kasinostraße 6
65929 Frankfurt am Main, Germany
Email: support@smart-things-tech.com

2. Hosting (Shopify)
We host our online store with Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada.

When you visit our store, Shopify processes personal data on our behalf to provide website functionality, security, and hosting services. This processing is based on Art. 6 (1) lit. f GDPR. Shopify may process data in third countries and uses appropriate safeguards for such transfers, where required by law.

Shopify may also collect server log files such as IP address, browser type, and access time to ensure the security and stability of the store.

3. SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries. You can recognize an encrypted connection because the browser address line changes from “http://” to “https://” and by the lock symbol in your browser.

4. Cookies & Tracking
Our website uses cookies. Necessary cookies are used to provide essential functions of the online store, such as shopping cart functionality, based on Art. 6 (1) lit. f GDPR.

For any marketing, analytics, or behavioral tracking cookies, including cookies used through connected advertising or analytics services, we request your explicit consent via our cookie consent banner before any processing takes place, based on Art. 6 (1) lit. a GDPR.

You can manage or revoke your consent preferences at any time via the cookie settings on our storefront.

5. Contact Form & Email
If you send us inquiries via the contact form or by email, the personal data you provide will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your inquiry relates to a contract or pre-contractual measures, or on Art. 6 (1) lit. f GDPR if it concerns general inquiries.

6. Newsletter (Double Opt-In)
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter.

7. Order Processing & Dropshipping
We process your data to fulfill your order (Art. 6 (1) lit. b GDPR).

To fulfill the contract, we pass on your data to the shipping service provider commissioned with the delivery. Since we ship products partly directly from international logistics centers (dropshipping), your shipping details, such as name and address, may be transmitted to our logistics partners outside the EU/EEA, such as in China, for contract fulfillment. Data transfers outside the EU/EEA are protected by appropriate technical and organizational safeguards where required by law to ensure your data remains secure.

8. Payment Service Providers
We integrate payment services from third-party companies. When you use these services, payment data is transferred to the respective provider.

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Klarna: Klarna Bank AB (publ), Stockholm, Sweden.
Shopify Payments: Stripe Payments Europe, Ltd., Dublin, Ireland.

The processing of payment data is based on Art. 6 (1) lit. b GDPR, as it is necessary for contract fulfillment.

9. Your Rights under the GDPR
As a data subject, you have the following rights under the GDPR:

  • Right to Access (Art. 15 GDPR): The right to obtain confirmation as to whether or not your personal data is being processed, and to receive a copy of that data.

  • Right to Rectification (Art. 16 GDPR): The right to request the correction of inaccurate data.

  • Right to Erasure (Art. 17 GDPR): The right to request the deletion of your personal data, where the legal requirements are met.

  • Right to Restriction of Processing (Art. 18 GDPR): The right to request the restriction of processing under certain conditions.

  • Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, commonly used, and machine-readable format.

  • Right to Object (Art. 21 GDPR): The right to object to processing based on legitimate interests or direct marketing at any time.

  • Right to Withdraw Consent (Art. 7 (3) GDPR): The right to withdraw any consent you have given us at any time with effect for the future.

  • Right to Complain (Art. 77 GDPR): The right to lodge a complaint with a competent data protection supervisory authority.

If you have any questions about the collection, processing, or use of your personal data, or if you wish to exercise your rights, you can contact us at any time at the address given in our Legal Notice for this purpose.