Privacy policy

The purpose of this Privacy Policy is to inform you about how we process your personal data when you use the Vector Brandshop or visit the Vector Brandshop website.

Please read this Privacy Policy carefully.

1. Controller

Vector Informatik GmbH
Ingersheimer Straße 24
70499 Stuttgart
Germany

Phone: +49 711-80670-0
Fax: +49 711-80670-111
E-mail: info(at)vector.com

Our Data Protection Officer’s contact details are as follows:

Gerd Kempf
Ingersheimer Straße 24
70499 Stuttgart
Germany

E-mail: dataprotection(at)vector.com

2. Your Rights

You have the right, in some cases subject to certain conditions, at any time to:

• request access to and information about the processing of your data,
• have your data corrected,
• have your data erased or blocked,
• obtain restriction of processing,
• receive your data in a portable format and transfer it to a third party,
• withdraw your consent to the processing of your data with future effect. The withdrawal of consent does not affect the lawfulness of the processing of your personal data carried out prior to the withdrawal. Likewise, further processing of this data on another legal basis, such as for the fulfillment of legal obligations, remains unaffected.

To exercise these rights, please contact us using the contact details provided above in clause 1.

In addition, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR.

3. Security and storage of your data

Please note that no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Furthermore, the information you send to us may not be secure during transmission. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

We will store your data:

• if you have consented to the processing, no longer than until you withdraw your consent;
• if we require the data for the performance of a contract or for compliance with legal obligations, no longer than for the duration of the contractual relationship with you or for the applicable statutory retention periods.

Otherwise, your personal data will be deleted as soon as it is no longer necessary for the aforementioned purposes. In this context, personal data may be retained for the period during which claims may be asserted against us (statutory limitation periods ranging from three to thirty years). Furthermore, personal data will be stored to the extent and for as long as we are legally required to do so. Corresponding documentation and retention obligations arise, among other things, under the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act. Accordingly, retention periods may be up to ten years.

4. Data transfer to third countries

Visiting our website may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permissible where the European Commission has determined that an adequate level of data protection is ensured in such a third country. If no such adequacy decision of the European Commission exists, personal data will be transferred to a third country only if appropriate safeguards pursuant to Article 46 GDPR are in place or if one of the conditions set out in Article 49 GDPR is met.

Unless otherwise specified in this Privacy Policy, we use the EU Standard Contractual Clauses as appropriate safeguards for the transfer of personal data to processors in third countries.

If you consent to the transfer of personal data to third countries, the transfer is based on Article 49 (1) (a) GDPR.

5. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy from time to time in order to adapt it to changes in the legal framework or to changes in the service and data processing.

However, this applies only to statements regarding data processing. Where user consent is required or where parts of this Privacy Policy contain provisions governing the contractual relationship with users, changes will be made only with your consent.

We will publish the revised Privacy Policy on the Site, update the “Last Updated” date, and take any other steps required by law.

6. How we collect and use your personal data

To provide the services, we collect your data as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific purposes listed below, we may use the information we collect about you to communicate with you, provide or improve the services, comply with applicable legal obligations, enforce applicable Terms of Service, and protect or defend the services, our rights, and the rights of our users or others.

7. What personal data do we collect?

The type of personal data we receive about you depends on how you interact with our Site and use our services. When we use the term “personal data”, we mean information that identifies you, relates to you, describes you, or can be associated with you. The following sections describe the categories and specific types of personal data we collect.

8. Information we collect directly from you

The information that you provide to us directly through our services may include:

• Contact Information – including your name, address, telephone number, and email address.
• Order Information – including your name, billing address, shipping address, payment confirmation, email address, and telephone number.
• Account Information – including your username, password, security questions, and other information used for account security.
• Customer Support Information – including the information you include in communications with us, for example when you send a message through the services.

Some features of the services may require you to provide certain information about yourself directly to us. You may choose not to provide this information. However, this may mean that you are unable to use or access those features.

9. Information we collect about your use

We may also automatically collect certain information about your interaction with the services (“Usage Data”). For this purpose, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our site and your account, including device information, browser information, information about your network connection, your IP address, and other information regarding your interaction with the services.

10. Information received from third parties

Finally, we may receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:

• Companies that support our site and services, such as Shopify.
• Our payment processors, who collect payment information (e.g. bank account details, credit or debit card information, billing address) in order to process your payment, fulfill your orders, and provide you with the products or services you have requested, thereby performing our contract with you.

When you visit our site, open or click emails we send you, or interact with our services or advertisements, we or third parties with whom we work may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

All information we receive from third parties is processed in accordance with this Privacy Policy. See also the section below, Third-Party Websites and Links.

11. How we use your personal data

• Providing products and services. We use your personal data to provide you with our services and to perform our contract with you, including processing your payments, fulfilling your orders, sending you notifications regarding your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, arranging shipping, facilitating returns and exchanges, and providing other features and functionalities related to your account. We may also enhance your shopping experience by allowing Shopify to sync your account with other Shopify services you may wish to use. In this case, Shopify processes your data in accordance with its privacy policy and consumer privacy privacy.

The legal basis for processing is Article 6 (1) sentence 1 (b) GDPR.

• Marketing and advertising. We may use your personal data for marketing and advertising purposes, for example to send you marketing and promotional communications by email, SMS, or mail and to show you advertisements for products or services. This may include using your personal data to better tailor the services and advertisements on our site and on other websites.

The legal basis for processing is your consent pursuant to Article 6 (1) sentence 1 (a) GDPR.

• Security and fraud prevention. We use your personal data to detect, investigate, or take appropriate action regarding potential fraudulent, illegal, or malicious activities.

If you choose to use the services and register an account, you are responsible for maintaining the confidentiality of your account credentials. We strongly recommend that you do not share your username, password, or other login credentials with third parties. If you believe your account has been compromised, please contact us immediately.

The legal basis for processing is our legitimate interest in ensuring the security of our website for you and other customers pursuant to Article 6 (1) sentence 1 (f) GDPR.

• Communication with you and service improvement. We use your personal data to provide customer support and to improve our services.

The legal basis for processing is our legitimate interest in being able to respond to you, provide effective services, and maintain our business relationship with you pursuant to Article 6 (1) sentence 1 (f) GDPR.

12. Cookies

Our website uses cookies. Specific information about the cookies we use in connection with our Shopify store can be found at https://www.shopify.com/legal/cookies . We use cookies to operate and improve our site and services (including by storing your actions and preferences), to perform analytics, and to better understand user interaction with the services (in our legitimate interest to manage, improve, and optimize the services). We may also allow third parties and service providers to use cookies on our Site in order to better tailor the services, products, and advertising on our site and on other websites.

Most browsers automatically accept cookies by default. However, you can set your browser to remove or reject cookies via the browser controls.

Please note that removing or blocking cookies may affect your user experience and may result in some of the services, including certain features and general functionality, not working properly or becoming unavailable. Furthermore, blocking cookies cannot completely prevent us from sharing information with third parties, such as our advertising partners.

13. How we share personal data

Under certain circumstances, we may share your personal data with third parties for the purposes of contract performance, legitimate interests, and other reasons consistent with this Privacy Policy, including with:

• Vendors or other third parties who provide services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, order fulfillment, and shipping).
• Business and marketing partners, to provide services to you and to market to you. Our business and marketing partners use your data in accordance with their own privacy policies.
• our subsidiaries and other companies within our corporate group, in our legitimate interest in operating a successful business.

We may also share information with third parties:

• if you instruct us to do so, request that we do so, or otherwise consent to our sharing certain information with third parties, for example to send you products or through your use of social media widgets or login integrations;
• in connection with a business transaction such as a merger or bankruptcy, to comply with all applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce all applicable Terms of Service, and to protect or defend the services, our rights, and the rights of our users or others.

We disclose the following categories of personal data and sensitive personal data about users for the purposes set out in clause 6 and this clause 13.

We will not use or disclose your personal data without your consent or to draw inferences about you.

With your consent, we share personal data for advertising and marketing activities as follows.

14. Third-party websites and links

Our Site may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies as well as other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of the information found on them.

Information you provide in public or semi-public areas, including information you share on third-party social networking platforms, may also be viewed by other users of the services and/or users of such third-party platforms, without any restriction on its use by us or third parties. Our inclusion of such links does not automatically constitute an endorsement of the content of such platforms or their owners or operators, except as disclosed in the services.

15. Children’s data

The services are not intended for use by children, and we do not knowingly collect personal data from children. If you are a parent or guardian of a child who has provided us with their personal data, you may contact us using the contact information provided below and request the deletion of such data.

As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell,” as those terms are defined under applicable law, personal data of individuals under 16 years of age.

Last updated: 10 October 2025