Privacy policy

Privacy Policy

Status: 6 February 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means all data with which you can be personally identified.

Data collection on this website

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the responsible party” in this privacy policy.

2. Responsible party

The responsible party for data processing on this website is:

LilaTee e.K.
Fürther Str. 27
90429 Nuremberg
Germany

Email: info@lilatee.shop

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data, such as names, email addresses or similar data.

3. Hosting by Shopify

We host our shop with Shopify International Limited, Victoria Buildings, 2nd Floor, 1 to 2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify provides the ecommerce platform through which we sell our products.

Your data is stored on Shopify’s servers. This may also involve transfers to Shopify Inc. in Canada as well as to Shopify servers in the USA. Data transfers to third countries are carried out on the basis of the EU Standard Contractual Clauses and the EU US Data Privacy Framework.

Further details can be found in Shopify’s privacy policy. The use of Shopify is based on Art. 6 para. 1 lit. b GDPR, contract performance, and on our legitimate interest in the secure and efficient provision of our online offering, Art. 6 para. 1 lit. f GDPR.

4. Legal bases for data collection

We process your personal data only if at least one of the following conditions applies:

Consent, Art. 6 para. 1 lit. a GDPR: You have given us your express consent for a specific purpose, for example newsletter registration.

Contract performance, Art. 6 para. 1 lit. b GDPR: Processing is necessary for handling a purchase or for pre contractual measures.

Legal obligation, Art. 6 para. 1 lit. c GDPR: We are legally required to store certain data, for example under tax law.

Legitimate interest, Art. 6 para. 1 lit. f GDPR: For improving our offering, fraud prevention or statistical analysis.

5. Payment service providers and shipping

To process your order, we pass your data on to specialized service providers:

Shipping: We pass your address data on to the commissioned shipping company, for example DHL or Hermes, in order to deliver the goods.

Payment: Depending on the payment method selected, your payment data will be transmitted to the respective service provider:

PayPal: PayPal Europe S.à r.l. et Cie, S.C.A., Luxembourg.

Klarna: Klarna Bank AB, Sweden. An identity and credit check may be carried out where applicable.

Stripe / Shopify Payments: Stripe Payments Europe, Ltd., Ireland.

6. Analytics tools and advertising cookies

Our website uses cookies. We distinguish between necessary cookies, which are required for the shopping cart and login, and marketing cookies. Marketing cookies are activated only after your active consent via our cookie banner, Art. 6 para. 1 lit. a GDPR.

Google Analytics: Used to analyze user behavior. The data is transmitted in anonymized form.

Facebook Meta Pixel: Enables the measurement of advertising effectiveness and the display of personalized ads on Facebook and Instagram.

7. Your rights as a data subject

Within the framework of the applicable legal provisions, you have the right at any time to:

Access, Art. 15 GDPR: Information about which data we have stored about you.

Rectification, Art. 16 GDPR: Correction of inaccurate data.

Erasure, Art. 17 GDPR: Deletion of your data, provided that no retention obligations prevent this.

Objection, Art. 21 GDPR: Objection to processing based on legitimate interests.

Data portability, Art. 20 GDPR: Receipt of your data in a commonly used format.

To exercise these rights, please contact us at info@lilatee.shop.

8. Right to lodge a complaint with the supervisory authority

In the event of data protection violations, you have the right to lodge a complaint with the competent supervisory authority. In Bavaria, this is the Bavarian State Office for Data Protection Supervision, BayLDA.