Privacy Policy
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Smile Toys Shop
Owner: Aldona Krzesniak
Bogenstraße 9B
70569 Stuttgart
Germany
Email: info@smiletoysshop.com
Website: www.smiletoysshop.com
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person. This may include, in particular, your name, address, email address, telephone number, payment information, order data, IP address and information about how you use our website.
We process personal data only where there is a legal basis for doing so or where you have given us your consent.
3. Hosting and E-Commerce Platform – Shopify
Our online store is operated using the Shopify e-commerce platform.
For merchants based in the European Economic Area, the provider is:
Shopify International Limited
2nd Floor, 1–2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland
When you visit and use our online store, Shopify processes personal data necessary to provide, secure and operate the store and to process orders. This may include your IP address, device and browser information, contact details, order information, payment information and information about your use of our store.
Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR. Where processing is necessary to ensure the security and functionality of our online store, the legal basis is Art. 6(1)(f) GDPR.
Shopify may also process personal data in countries outside the European Economic Area. Where required, appropriate safeguards under the GDPR are used.
Further information about Shopify’s processing of personal data can be found in Shopify’s Privacy Policy.
4. Shopify Network Intelligence
We have enabled Shopify Network Intelligence.
Shopify may use information from customers’ interactions with our store together with information from their interactions with Shopify and other Shopify-powered stores to provide so-called “Enhanced Services”.
These services may include improving and personalising Shopify services, fraud prevention, analytics and – where you have given the relevant consent – improving the personalisation and delivery of advertising.
For these purposes, Shopify may process information about your use of our store and your interactions with Shopify services and combine this information with other Shopify data.
Where non-essential cookies or similar tracking technologies are used or data is processed for advertising purposes, such processing takes place in accordance with the choices you make through our consent management solution.
Further information about how Shopify processes your data and how you can exercise your privacy rights is available through the Shopify Privacy Portal.
5. Orders and Contract Fulfilment
When you place an order in our online store, we process the information you provide in order to process and fulfil your order.
This may include:
Name and address
Email address and telephone number
Billing and delivery address
Products ordered
Order and transaction information
Payment information
The legal basis for this processing is Art. 6(1)(b) GDPR.
Where we are legally required to retain certain order, invoice or tax information, processing is additionally based on Art. 6(1)(c) GDPR.
6. Payment Processing
To process payments, we use the payment service providers offered during checkout. Depending on the payment method selected, these may include Shopify Payments, PayPal, Klarna or other payment providers displayed during checkout.
The information necessary to process the payment is transmitted to the respective payment service provider. This may include your name, billing address, payment information, order amount and transaction data.
Processing is necessary for the performance of the purchase contract and is therefore based on Art. 6(1)(b) GDPR.
The respective payment provider’s privacy policy additionally applies to any further processing of your data by that provider.
7. Shipping and Delivery
To deliver your order, we provide the personal data necessary for delivery to the respective shipping, logistics and fulfilment service providers.
This may include your name, delivery address, contact details and information relating to your order.
As we work with various delivery and fulfilment partners within the European Union, the service provider used may vary depending on the product and destination country.
Processing is necessary for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
8. Contacting Us
If you contact us by email or through a contact form, we process the information you provide in order to respond to your enquiry.
Where your enquiry relates to an existing or potential contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in responding to customer enquiries pursuant to Art. 6(1)(f) GDPR.
9. Newsletter and Email Marketing
If you subscribe to our newsletter, we use your email address to send you information about Smile Toys Shop products, offers and news.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link included at the bottom of our marketing emails.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
10. Cookies and Consent Management
Our website uses cookies and similar technologies.
Strictly necessary cookies are used where required to provide and operate the basic functions of our online store.
For non-essential cookies and tracking technologies, particularly those used for analytics, marketing and advertising purposes, we obtain your consent through our consent management system.
We use Consentmo GDPR Compliance to manage your cookie and privacy preferences.
You can change or withdraw your consent at any time with effect for the future through the privacy or cookie settings available on our website.
Where non-essential technologies store information on your device or access information already stored on your device, this takes place on the basis of your consent pursuant to Section 25(1) TDDDG. Subsequent processing of personal data is based on Art. 6(1)(a) GDPR.
Strictly necessary technologies may be used where permitted under Section 25(2) TDDDG.
11. Google Analytics
We use Google Analytics to analyse the use of our website.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics may process information about your use of our website, including pages visited, interactions with the website, technical information about your browser and device, approximate location information and other usage and event data.
Google Analytics is used for non-essential analytics purposes in accordance with the choices you make through our consent management system.
The processing of personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. Where applicable, accessing or storing information on your device is based on Section 25(1) TDDDG.
You may withdraw your consent at any time through our cookie settings.
12. Google Ads
We use Google Ads, including features for measuring the effectiveness of our advertising and – where enabled and permitted by your consent – creating or using audiences and personalising advertising.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Information may be processed about whether you reached our website through a Google advertisement and which actions you subsequently performed on our website. Cookies, advertising IDs, click IDs and similar technologies may be used for this purpose.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.
You may withdraw your consent at any time through our cookie settings.
13. Meta Pixel
We use the Meta Pixel provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4, D04 X2K5
Ireland
The Meta Pixel allows us to measure the effectiveness of our advertising on Facebook and Instagram and – where you have given your consent – to create advertising audiences and deliver more relevant advertising.
Information about page views, product views, shopping cart activity and purchases, as well as technical information about your browser, device and IP address, may be processed and transmitted to Meta.
Meta may be able to associate this information with your Facebook or Instagram account.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time through our cookie settings.
In connection with certain processing activities involving Meta Business Tools, we and Meta may act as joint controllers within the meaning of Art. 26 GDPR.
14. TikTok Pixel
We use the TikTok Pixel to measure and optimise our advertising on TikTok.
For users in the European Economic Area, the relevant provider is:
TikTok Technology Limited
10 Earlsfort Terrace
Dublin, D02 T380
Ireland
The TikTok Pixel may collect information about how you use our website, including page views, interactions with products, shopping cart and purchase events, as well as technical information about your browser and device.
This information may be used to measure the effectiveness of our TikTok advertising campaigns and – where you have given your consent – to personalise advertising or create relevant audiences.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time through our cookie settings.
15. Transfers to Third Countries
Some of the service providers we use belong to international corporate groups. It therefore cannot be ruled out that personal data may also be processed outside the European Economic Area, particularly in the United States.
Where personal data is transferred to a third country, this takes place only in accordance with the requirements of Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, where required.
16. Data Retention
We generally retain personal data only for as long as necessary for the respective processing purpose.
Data required for contract fulfilment may additionally be retained in accordance with statutory commercial and tax retention requirements.
Data processed on the basis of your consent will generally be processed until you withdraw your consent or until the relevant processing purpose no longer applies, unless statutory retention requirements require further storage.
17. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future pursuant to Art. 7(3) GDPR.
To exercise your rights, please contact:
info@smiletoysshop.com
You also have the right to lodge a complaint with a competent data protection supervisory authority.
18. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
In particular, data transmitted through our website is protected using SSL/TLS encryption.
19. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy where legal requirements, our website, the services we use or our data processing practices change.
Last updated: August 2026