Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This only applies insofar as no other statement is made in the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You may visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Your data may be transferred to third countries outside the EU, in particular to Canada and the United States, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission exists in the form of the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.

Contact

Controller
If you wish to contact us, the controller responsible for data processing is:
Fiore Tartaglia, Eichenstraße 8, 73037 Göppingen, Germany
Phone: +49 7161 78925
Email: info@ft-karate.com

Customer-initiated contact via email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message content) only to the extent provided by you. Processing serves the purpose of handling and responding to your inquiry.
If the contact relates to pre-contractual measures (e.g. advice regarding purchase interest, preparation of offers) or an existing contract, processing is based on Art. 6(1)(b) GDPR.
If contact is made for other reasons, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling and responding to your inquiry. You have the right to object to this processing at any time for reasons arising from your particular situation.
Your email address is used solely to respond to your inquiry. Your data will be deleted after statutory retention periods unless you have consented to further processing.

Collection and processing when sending images by email
You may send us images by email in connection with ordering a personalized product. By submitting images, we may collect personal data (depictions of identifiable persons) only to the extent provided by you. Processing serves the purpose of creating personalized products. The submitted image is used as a template for the product (e.g. T-shirt printing). Processing is based on Art. 6(1)(b) GDPR and is necessary for contract performance.
Your data will not be shared. The image is used exclusively for service provision and deleted thereafter in accordance with statutory retention periods unless you consent to further use.

Customer Account

Customer account creation
When creating a customer account, we collect personal data to the extent specified. Processing serves to improve your shopping experience and simplify order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time. Your customer account will then be deleted.

Orders

Collection, processing, and disclosure of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary for order fulfillment and processing your inquiries. Providing this data is required for contract conclusion; failure to provide it will prevent contract formation. Processing is based on Art. 6(1)(b) GDPR.
Your data may be shared with shipping companies, dropshipping or fulfillment providers, payment service providers, order processing services, and IT service providers. Data transfer is limited to the minimum required.
Data may be transferred to third countries outside the EU, particularly Canada and the USA, under the conditions described above.

Reviews

Data collection when submitting comments or reviews
When submitting a comment or review, we collect personal data (name, email address, comment text) only to the extent provided. Processing enables comments and reviews to be published.
For verification, we may also collect order number, customer number, invoice number, and email address.
By submitting a comment or review, you consent to data processing under Art. 6(1)(a) GDPR. You may revoke consent at any time.
Only the name you provide will be published.
Your IP address is stored to prevent misuse and ensure system security. It will be deleted thereafter.

Review reminder
After your order, we may send you a review reminder email if you have expressly consented. Processing is based on Art. 6(1)(a) GDPR. You may revoke consent at any time.

Advertising

Postal advertising
We use your name and address obtained during a sale to send postal advertising unless you object. Processing is based on Art. 6(1)(f) GDPR. You may object at any time.

Email newsletters
We use your email address to send newsletters if you have expressly consented. Processing is based on Art. 6(1)(a) GDPR. You may unsubscribe at any time.
Your email address may be stored in a blacklist to prevent future mailings, based on Art. 6(1)(f) GDPR.

Use of Klaviyo
We use Klaviyo Inc. for newsletter delivery under a data processing agreement. Data may be transferred to the USA under the TADPF. Tracking pixels are used for statistical analysis. Processing is based on Art. 6(1)(f) GDPR. Further information is available in Klaviyo’s privacy notices.

SMS advertising
We use your mobile number exclusively for SMS advertising with your consent under Art. 6(1)(a) GDPR. You may revoke consent at any time.

Shipping Service Providers

Disclosure of email address for shipping status notifications
Your email address may be provided to shipping companies if you consent during checkout. Processing is based on Art. 6(1)(a) GDPR.

Use of external inventory management systems
We use an inventory management system under a data processing agreement. Data is transferred to Billbee GmbH / Shophero. Processing is based on Art. 6(1)(b) GDPR.

Payment Service Providers

PayPal, PayPal Express, PayPal Checkout, third-party providers, invoice purchase, Shopify Payments
Personal data required for payment processing is transferred to the respective payment service provider under Art. 6(1)(b) GDPR. Creditworthiness checks may be performed based on Art. 6(1)(f) GDPR.
Detailed privacy information is available in the respective provider privacy policies.

Cookies

Our website uses cookies. Cookies are small text files stored on your device that enable browser recognition.
You can manage cookies via your browser settings and delete them at any time. Disabling cookies may limit website functionality.
Technically necessary cookies are used based on §25(2) TDDDG and Art. 6(1)(f) GDPR.

Shopify Privacy & Compliance Tool
We use Shopify’s consent tool to obtain and document consent. Data may be transferred to Canada and the USA under contractual safeguards. Processing is based on Art. 6(1)(c) GDPR.

Analytics and Advertising Tracking

We use Google Analytics 4, Shopify Analytics, Meta Pixel, Google Ads Conversion Tracking, Google AdSense, Google Remarketing, Pinterest Tag, and TikTok Pixel based on your consent under Art. 6(1)(a) GDPR. Data may be transferred to the USA under adequacy decisions or Standard Contractual Clauses. Detailed provider privacy policies apply.

Plug-ins and Other Services

Google Tag Manager
Used to manage tracking tags. The tool itself does not store personal data.

Social plug-ins and 2-click solution
Social plug-ins are integrated only after consent. Data transfer occurs only after activation. Providers include Facebook, Instagram, LinkedIn, Pinterest, X (formerly Twitter), and YouTube.

Data Subject Rights and Storage Duration

Storage duration
Data is stored for the duration of warranty periods and statutory retention obligations, then deleted unless further consent exists.

Rights of the data subject
You have rights under Arts. 15–20 GDPR, including access, rectification, erasure, restriction, and data portability, as well as the right to object under Art. 21 GDPR.

Right to lodge a complaint
You may lodge a complaint with the competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10a, 70173 Stuttgart, Germany
Phone: +49 711 6155410
Email: poststelle@lfdi.bwl.de

Right to object
If processing is based on legitimate interests, you may object at any time. Processing will cease unless compelling legitimate grounds exist.
You may object to processing for direct marketing at any time.

Last updated: 22 January 2026