Privacy policy
Privacy Policy
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Litvinov & Klapproth GbR (trading as: Vaydore)
represented by its partners Alexander Litvinov and Kevin Klapproth
Pfälzer Weg 8
53844 Troisdorf
Germany
Phone: +49 176 21846493
Email: contact@vaydore.com
We have not appointed a data protection officer, as we are not legally required to do so.
General Information
We process personal data only to the extent necessary to operate our online store, process orders, communicate with you and run our partner program, or where you have given your consent. The legal basis is stated in each section. We do not use solely automated decision-making within the meaning of Art. 22 GDPR.
Hosting via Shopify and Server Log Files
Our online store runs on the Shopify platform (Shopify International Limited, Ireland, together with group companies such as Shopify Inc., Canada). Shopify provides the technical infrastructure and processes personal data on our behalf (Art. 28 GDPR).
Each time our website is accessed, information is recorded automatically (server log files), in particular:
– IP address of the accessing device
– date and time of access
– pages and files accessed
– browser and operating system used
– referrer URL
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the store and in fraud prevention.
Where Shopify processes data for its own purposes, for example cross-store fraud prevention, Shopify is responsible for that processing itself. More information: https://privacy.shopify.com
Cookies and Consent Management
We use cookies and similar technologies. We use technically necessary cookies, for example for the cart, checkout, login and security, without consent. The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
We use all other cookies and technologies, in particular for statistics, only if you have consented via our cookie banner. The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can withdraw or change your consent at any time with effect for the future via the cookie settings in our store.
Statistics (Shopify Analytics)
If you have consented, we use Shopify's analytics features to evaluate how our store is used, for example which pages are visited and where visitors come from. Usage and device data are processed for this purpose. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time.
Customer Account
You can create a customer account in our store to view your orders and data. For this we process your email address and the data you store in your account. The legal basis is Art. 6(1)(b) GDPR. You can also order without an account. You can have your account deleted at any time; a message to contact@vaydore.com is sufficient.
Orders and Contract Processing
When you place an order, we process the data required to perform the contract, in particular:
– first and last name
– billing and delivery address
– email address
– phone number, if provided
– order and payment data
We use this data to process your order, for delivery and payment, for queries, and for withdrawals and warranty claims. The legal basis is Art. 6(1)(b) GDPR. Where statutory retention obligations apply, the legal basis is Art. 6(1)(c) GDPR.
The information marked as mandatory in the checkout is required to conclude the contract. Without it, we cannot accept your order.
Address Validation (AddressHero)
To avoid delivery errors, we use the Shopify app AddressHero to check delivery addresses for completeness and deliverability. If an address appears to be incorrect, we may ask you by email to confirm or correct it. The provider processes the data on our behalf. The legal basis is Art. 6(1)(b) and (f) GDPR. Our legitimate interest lies in correct delivery.
Pre-orders (Timesact)
We use the Shopify app Timesact to offer products for pre-order. The app displays the pre-order information in our store and processes the order data required for this, such as order number, ordered products and order status. The provider, Kairock Partners SRL, Romania, processes the data on our behalf. The legal basis is Art. 6(1)(b) GDPR.
Payment Processing
PayPal: If you pay with PayPal, we transmit the data required for payment (e.g. name, address, email address, amount, order number) to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal processes this data as an independent controller in accordance with its own privacy policy: https://www.paypal.com/de/legalhub/privacy-full
Card payments and other payment methods via Shopify Payments: If you pay by card or another payment method offered through Shopify Payments, the data required for payment (e.g. name, billing address, card details, amount) is transmitted to Shopify and its payment service providers. We do not receive your card details ourselves.
In each case, the legal basis is Art. 6(1)(b) GDPR.
Shipping via DHL
To deliver your order, we transmit your name and delivery address to DHL (Deutsche Post AG / DHL Paket GmbH, Bonn). The legal basis is Art. 6(1)(b) GDPR.
We only pass your email address or phone number on to DHL if you have expressly consented to this during checkout, so that DHL can notify you about the delivery. The legal basis is Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.
DHL processes the data as an independent controller.
Contacting Us
If you contact us via the contact form, by email, by phone or by message on social networks, we process your information, such as your name, email address and the content of your message, in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering your request.
Newsletter
If you subscribe to our newsletter, we use your email address to send you information about our products and offers. Subscription uses the double opt-in procedure: you will receive an email asking you to confirm your subscription. Newsletters are sent via Shopify's email feature.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email or by sending a message to contact@vaydore.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Discount Codes and Referral Links of Our Partners
We work with partners (creators) who share personal discount codes and referral links. If you use such a code or link, we process order data (order number, date, order value, code or link used, order status) in order to attribute the order to the correct partner and calculate their commission. For this we use the software Ponvis, whose provider processes the data on our behalf.
The partner only receives information about the order value and status, not your name or address.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the correct settlement of our partner program. Where information is stored on or read from your device to attribute link clicks, this only happens with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).
Data Processing in Our Partner Program (for Creators)
This section applies to creators whom we approach about a collaboration or who take part in our partner program.
Public profile data: To find suitable partners, we evaluate publicly available information on TikTok and Instagram, such as username, content, follower and view counts, and engagement. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in finding suitable partners.
Communication: If we contact you by direct message, we store the conversation, including as a screenshot, and link it to your profile in order to follow and respond to the communication. The legal basis is Art. 6(1)(f) GDPR, and from the start of a collaboration Art. 6(1)(b) GDPR.
Participation in the partner program: If you sign up, we process the information you provide during registration (e.g. name, email address, country, delivery address, tax status, PayPal address), as well as your sales, clicks and commissions, in order to perform the contract, ship products and pay out commissions. The legal basis is Art. 6(1)(b) GDPR, and for information and records required for tax purposes Art. 6(1)(c) GDPR. Payouts are made via PayPal as an independent controller.
For this processing we use the software Ponvis, whose provider processes the data on our behalf.
Retention: We delete data from an approach that does not lead to a collaboration no later than 12 months after the last contact. If you do not wish to be contacted again, we delete it immediately, except where we need it to respect your objection. We store data from a collaboration for its duration and afterwards within the statutory retention periods.
Our Profiles on Social Networks
We are present on Instagram and TikTok. When you visit our profiles or interact with us, the operators Meta Platforms Ireland Ltd. and TikTok Technology Ltd. process data in accordance with their own privacy policies. For the statistics on our profiles (insights), we may be jointly responsible with the respective operator (Art. 26 GDPR). The legal basis for our processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in communicating with customers and interested parties.
Overview of Recipients
Processors (Art. 28 GDPR) with whom we have concluded the corresponding agreements:
– Shopify (hosting, store, statistics, email sending)
– provider of AddressHero (address validation)
– provider of Timesact (pre-orders)
– provider of Ponvis (partner program)
Independent controllers:
– PayPal (payment processing, payouts to partners)
– DHL (shipping)
– Meta and TikTok (social networks)
– authorities, courts and tax advisors, where legally required
Transfers to Third Countries
Some services, in particular Shopify, PayPal and Meta, may also process data outside the EU/EEA, for example in Canada or the USA. For Canada, there is an adequacy decision of the European Commission. Transfers to the USA are based on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Retention Period
We store personal data only for as long as necessary for the respective purpose. We keep order and invoice data for up to 10 years due to commercial and tax law obligations. We store newsletter data until you unsubscribe. We delete contact requests once they have been dealt with, unless a retention obligation applies.
Your Rights
Under the GDPR, you have the right to:
– access (Art. 15 GDPR)
– rectification (Art. 16 GDPR)
– erasure (Art. 17 GDPR)
– restriction of processing (Art. 18 GDPR)
– data portability (Art. 20 GDPR)
– withdraw consent with effect for the future (Art. 7(3) GDPR)
An informal message to contact@vaydore.com is sufficient.
Right to Object (Art. 21 GDPR)
Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
If we process your data for direct marketing, you can object to this at any time without giving reasons.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). You may also contact the supervisory authority at your place of residence.
Data Security
Data transmitted in our store is encrypted (SSL/TLS). We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
Changes
We update this privacy policy when our services or the legal situation change. The version published here applies.
Last updated: 29October 2026