Privacy Policy

1. Data Controller

Commodus UG (haftungsbeschränkt)
Parkstraße 16
86462 Langweid am Lech
Germany

Email: hello@toweltogo.com

2. General Information on Data Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws. Personal data is any information that can be used to identify you personally.

3. Hosting and Platform

Our website is hosted by Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada. Shopify provides the e-commerce platform and processes personal data on our behalf.

In the course of using Shopify, personal data may be transferred to third countries (e.g., Canada or the United States).

4. Access Data

When you visit our website, the following data is automatically collected:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL

This data is used to ensure the proper functioning and security of the website.

5. Data Processing for Contract Fulfillment

For order processing, we collect and process the following data:

• Name

• Address

• Payment information

• Email address

The processing is carried out for the purpose of fulfilling a contract in accordance with Art. 6 (1) (b) GDPR.

6. Payment Providers

To process payments, we work with external payment service providers. Depending on the selected payment method, personal data may be transmitted to the respective provider.

Currently, we use:

• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg)

We reserve the right to use additional payment providers (e.g., credit card providers, SEPA direct debit or invoice services) where necessary for payment processing.

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd., Dublin, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. The following data may be processed:

• Anonymized IP address

• User behavior

• Device information

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

8. Meta Pixel (Facebook & Instagram)

We use the Meta Pixel provided by Meta Platforms Ireland Ltd., Dublin, Ireland.

The Meta Pixel allows us to track user behavior after they have been redirected to our website via advertisements. This helps us analyze and optimize our marketing efforts.

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

9. Newsletter

If you subscribe to our newsletter, we use your email address to send you regular updates about our products and offers.

Subscription is carried out using a double opt-in procedure. This means you will only receive newsletters after confirming your subscription via a verification link.

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

You can unsubscribe at any time via the unsubscribe link included in every email.

We may use external service providers to send newsletters where necessary.

10. Cookies and Consent Management

Our website uses cookies and similar technologies.

We use a cookie banner to obtain your consent for non-essential cookies.

We distinguish between:

• Necessary cookies

• Analytics cookies

• Marketing cookies

You can withdraw your consent at any time.

11. Contact

If you contact us (e.g., by email), your information will be stored to process your request.

12. Your Rights

You have the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to withdraw consent

13. Data Retention

Personal data is stored only as long as necessary for the respective purposes or as required by legal retention obligations.

14. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy as necessary to comply with legal requirements or changes to our services.