Privacy policy

Scooter-Labs is the trading name under which Finn Tews conducts business as a sole proprietor (Kleingewerbetreibender) under German law. This Privacy Policy explains how we process personal data when you visit or shop at our online store.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Finn Tews (trading as Scooter-Labs)
c/o MDC Management#5352
Welserstraße 3
87463 Dietmannsried
Germany
Email: admin@scooter-labs.com

2. General Information on Data Processing

We only process personal data to the extent necessary to provide a functioning website, our content, and our services. Personal data is processed only with your consent, or where processing is otherwise permitted by law — in particular where necessary for the performance of a contract with you (Art. 6(1)(b) GDPR) or for a legitimate interest we pursue (Art. 6(1)(f) GDPR), provided such interest does not override your fundamental rights and freedoms.

3. Hosting

This online store is hosted on the infrastructure of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). All data collected through this website is processed on Shopify's servers. As part of providing this service, data may also be processed by Shopify Inc. (Canada), Shopify Data Processing (USA) Inc., and Shopify Payments (USA) Inc. This processing is carried out on our behalf under a data processing agreement pursuant to Art. 28 GDPR, which is concluded automatically through Shopify's Terms of Service. Further information is available in Shopify's Privacy Policy: https://www.shopify.com/legal/privacy.

When you visit our website, technical information is automatically collected and stored in server log files, including your IP address, browser type and version, operating system, referring website, and date and time of access. This is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the technical operation, security, and stability of our website.

4. Cookies

Our storefront (product browsing, product pages, and cart) is built on a custom frontend that we operate independently of Shopify's standard theme. We do not use analytics, tracking, or advertising cookies on this custom frontend.

Checkout is completed on Shopify's hosted checkout pages. During checkout, Shopify sets cookies that are technically necessary to process your order, such as for maintaining your session and cart, and for fraud prevention. These are processed on the basis of Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a secure checkout), and are exempt from the consent requirement under § 25(2) No. 2 TDDDG, as they are strictly necessary to provide the service you have explicitly requested.

Since January 1, 2026, Shopify no longer automatically sets general-purpose visitor-analytics cookies (formerly named _shopify_y / _shopify_s) on merchant storefronts; such tracking is now only available through Shopify's Web Pixels API, which we do not use. We do not use third-party analytics tools (such as Google Analytics), advertising or marketing pixels, or a newsletter service. Should this change in the future, this Privacy Policy will be updated accordingly and, where required, your prior consent will be obtained before any such tool is activated.

5. Contacting Us

If you contact us by email, the data you provide (e.g., your name, email address, and message) is stored for the purpose of processing your inquiry and any follow-up questions. This is processed on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). This data is deleted once it is no longer required, unless statutory retention obligations apply.

6. Order Processing

When you place an order, including a pre-order, we collect the personal data necessary to process the order and fulfil the resulting contract, such as your name, billing and shipping address, email address, and order details. This is processed on the basis of Art. 6(1)(b) GDPR (performance of a contract).

We retain this data for the duration of statutory commercial and tax retention obligations — generally six years pursuant to § 257 HGB and ten years pursuant to § 147 AO, calculated from the end of the relevant calendar year.

7. Payment Processing

Depending on the payment method you select at checkout, your payment data is passed on to the following payment service providers, solely for the purpose of processing your payment and only to the extent necessary:

PayPal: If you choose to pay via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). This is carried out on the basis of Art. 6(1)(b) GDPR. Further information is available in PayPal's Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Card payments (Visa, Mastercard, Maestro): If you choose to pay by card, the payment is processed via Shopify Payments, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland, using the technical infrastructure of Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland ("Stripe") as sub-processor. This is carried out on the basis of Art. 6(1)(b) GDPR. Further information is available in Shopify's Privacy Policy (https://www.shopify.com/legal/privacy) and Stripe's Privacy Policy (https://stripe.com/de/privacy).

8. Shipping

To deliver your order, we pass on the data necessary for delivery (name and delivery address) to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany ("DHL"), the shipping carrier commissioned with the delivery. This data is provided directly to DHL and not through Shopify's integrated carrier connection. This is carried out on the basis of Art. 6(1)(b) GDPR. Further information is available in DHL's Privacy Policy: https://www.dhl.de/de/privacy.html.

9. Your Rights

You have the following rights with regard to your personal data, subject to the applicable legal requirements:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interest (Art. 21 GDPR)
  • Right to withdraw consent with future effect, where processing is based on consent (Art. 7(3) GDPR)

To exercise any of these rights, please contact us using the details in Section 1.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to ensure it complies with current legal requirements or to reflect changes to our services, for example when new features are introduced.