Privacy policy

This is a courtesy translation. Only the German version is legally binding.

1. Controller

Johann Heinrich Dittmann, Taply
Münzstraße 33, 19055 Schwerin, Germany
Email: info@gettaply.net

We have not appointed a data protection officer, as there is no obligation to do so.

2. Hosting and shop system (Shopify)

This online shop runs on the Shopify platform. The provider for merchants in the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes the data arising from visits to the shop and from orders on our behalf (Art. 28 GDPR). When pages are accessed, this includes technically necessary data such as IP address, date and time, pages accessed, browser and operating system.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure and functioning online shop. Shopify may also process data in Canada, the USA and other third countries. An adequacy decision of the EU Commission exists for Canada; otherwise Shopify uses the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. More: Shopify privacy policy.

3. Orders and contract processing

When you buy from us, we process the information from the checkout (name, email address, billing address if applicable, order data, payment status). The purpose is to process the purchase, provide the download and communicate about the order. The legal basis is Art. 6 (1) (b) GDPR.

To provide the download we use the Shopify app "Digital Downloads", which is also operated by Shopify.

We retain order and invoice data for up to ten years due to commercial and tax law obligations (Art. 6 (1) (c) GDPR in conjunction with § 147 AO, § 257 HGB). We delete other data as soon as it is no longer needed.

4. Payment

Payment is processed via the payment providers offered at checkout (e.g. Shopify Payments, PayPal). The data required for payment is transmitted to the respective provider. Shopify Payments uses Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, for payment processing. If you choose PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, is responsible. The legal basis is Art. 6 (1) (b) GDPR. Payment providers also process data for fraud prevention and partly under their own responsibility.

5. Contact by email

If you email us, we process your information to answer your request. The legal basis is Art. 6 (1) (b) GDPR if it concerns an order, otherwise Art. 6 (1) (f) GDPR. We delete the data once the request has been dealt with and no retention obligations apply.

6. Cookies and similar technologies

The shop uses cookies and similar technologies. We use technically necessary cookies (e.g. for cart, checkout and security) on the basis of § 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR. We only use cookies for statistics, personalisation or advertising with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), which you give via the cookie banner and can withdraw there at any time.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7 (3)).

Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Western Pomerania, Werderstraße 74a, 19055 Schwerin, Germany.

8. Obligation to provide data

For a purchase we need at least your email address and payment details. Without this information we cannot conclude the contract.

Last updated: October 2026