Privacy policy

Privacy Policy

Last updated: 6 October 2026

1. Controller

The controller responsible for data processing on this website and in our online shop is:
Mandy Jakisch Einzelunternehmen, owner Mandy Jakisch
Hauptstr. 34, OT Etingen
39359 Oebisfelde-Weferlingen, Germany
Phone: +49 39059 96777
E-mail: info@trendisland.de

2. Legal bases

We only process personal data where a legal basis permits this. The main legal bases are:

  • Art. 6(1)(a) GDPR: your consent, for example for the newsletter or for statistics and marketing services.
  • Art. 6(1)(b) GDPR: the performance of a contract with you or pre-contractual measures, for example order, shipping, customer account.
  • Art. 6(1)(c) GDPR: legal obligations, for example retention under commercial and tax law.
  • Art. 6(1)(f) GDPR: legitimate interests, for example the secure and stable operation of the shop or fraud prevention.

For storing information on your device and accessing it (such as cookies), Section 25 of the German TDDDG also applies: we set strictly necessary cookies on the basis of Section 25(2) no. 2 TDDDG, all others only with your consent under Section 25(1) TDDDG.

3. Shop system and hosting (Shopify)

Our shop runs on the Shopify platform. The contractual partner for merchants in Europe is Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes all data arising from visits to the shop and from orders on our behalf (Art. 28 GDPR). This includes server logs with IP address, browser, operating system, page accessed and time, which are required for secure operation (Art. 6(1)(f) GDPR).

Shopify may transfer data to Shopify Inc. in Canada and to service providers in other countries, including the USA. There is an adequacy decision of the EU Commission for Canada; for other countries Shopify uses the EU Standard Contractual Clauses.

For some functions, Shopify itself is the controller, for example for Shop Pay, the Shop app and fraud detection. In addition, Shopify uses data from your visits and purchases with us together with data from your interactions with other Shopify merchants and with Shopify (Shopify Network Intelligence), for example for personalisation, fraud protection and advertising. Without your consent in the cookie banner, Shopify does not use the device data from our shop for advertising or other non-essential purposes. Which data Shopify uses and which rights you have, for example to withdraw your consent or to object to the processing, is described in Shopify's Consumer Privacy Policy and in the Shopify privacy portal.

4. Cookies and consent

On your first visit, a cookie banner asks which services you consent to. Technically necessary cookies, for example for the shopping cart, checkout, security and saving your selection, are always active. Statistics and marketing services only run if you have given your consent. You can change or withdraw your selection at any time via the "Cookie settings" link in the footer.

5. Order and customer account

For an order, we process your name, billing and delivery address, e-mail address, telephone number if provided, the items ordered and the payment method (Art. 6(1)(b) GDPR). You will receive e-mails from us about the order, shipping and, where applicable, returns. A customer account is optional. If you create one, we store your details and orders for future purchases until you have the account deleted.

For accounting purposes, we transfer order and invoice data to our accounting system and to our tax advisor using the app AccountOne Ecommerce2Datev (Art. 6(1)(c) GDPR).

6. Payment processing

Depending on the payment method selected, we pass on the data required for payment to the respective payment service provider (Art. 6(1)(b) GDPR). The provider also checks the payment to prevent fraud.

  • Credit and debit card, Apple Pay, Google Pay, Shop Pay as well as Bancontact, BLIK, EPS, iDEAL | Wero, MobilePay and USDC: processed via Shopify Payments by Shopify and the payment service providers used by Shopify.
  • Klarna: Klarna Bank AB (publ), Stockholm, Sweden. For invoice or instalment purchases, Klarna may check your identity and creditworthiness and decides itself which payment options are offered. Klarna's privacy policy applies to this.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal's privacy policy also applies.
  • Prepayment: you transfer the amount to our bank account; we receive the details from your transfer.

We do not receive full card details.

7. Shipping

For delivery, we pass on your name and delivery address to the commissioned shipping service provider, currently DHL or Deutsche Post and DPD (Art. 6(1)(b) GDPR). We only transmit your e-mail address or telephone number where this is necessary for delivery or a delivery notification.

If we sell goods via the shop of a partner retailer (Shopify Collective), we receive the data required for shipping from that retailer.

8. Newsletter and marketing e-mails

If you subscribe to our newsletter, for example via the sign-up form, we use your e-mail address to send you offers and news (Art. 6(1)(a) GDPR). You confirm your subscription via a link in an e-mail (double opt-in). We store the time of subscription and confirmation as proof. Subscribers also receive automatic reminders, for example about an incomplete purchase, and thank-you e-mails after a purchase.

We send e-mails via Shopify Messaging. In doing so, we evaluate whether an e-mail was opened and which links were clicked in order to improve the content. You can unsubscribe from the newsletter at any time via the unsubscribe link in every e-mail or by sending us a message.

9. Back-in-stock notifications

If you sign up for a notification for a sold-out item, we only use your e-mail address to inform you about its availability (Art. 6(1)(a) GDPR). We use the app Essential Back In Stock for this. You can withdraw your consent at any time.

10. Contact

If you contact us via the contact form, e-mail or telephone, we process your details in order to answer your enquiry (Art. 6(1)(b) GDPR for questions about an order, otherwise Art. 6(1)(f) GDPR).

11. Reviews

We collect and display product reviews with Judge.me. About five days after shipping, or about eight days for orders abroad, you will receive an e-mail from us via Judge.me asking for a review (Art. 6(1)(f) GDPR, our interest in feedback on our products). You can object to this at any time, for example via the unsubscribe link in the e-mail, without incurring any costs other than the transmission costs at the basic rates. If you submit a review, we publish it with the name you provided. Judge.me only measures how visitors interact with the reviews on the page with your consent via the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

12. Advertising and statistics (only with consent)

If you consent in the cookie banner, we transmit information about page views, shopping cart and purchases to the following advertising partners in order to display ads and measure their success (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). In some cases, the transmission also takes place from the server. The partners may also process the data in the USA.

  • Meta (Facebook and Instagram): Meta Platforms Ireland Limited, Ireland.
  • Google (Google Ads, Google Shopping, YouTube), also via the app AdTrack for measuring Google Ads campaigns: Google Ireland Limited, Ireland.
  • Pinterest: Pinterest Europe Ltd., Ireland.

This transmission does not take place without your consent. You can withdraw your consent at any time via "Cookie settings".

13. Other integrated services

  • Withdrawal form: For withdrawals via our website we use the app "EU Widerruf Button" by 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Str. 1a, 40721 Hilden, Germany. When you open the form, it is loaded from the provider's server (euwiderrufsbutton.de). In doing so, your IP address and browser data are transmitted. To protect against automated misuse, the provider uses the bot protection AWS WAF by Amazon Web Services, which stores a technically necessary identifier (aws-waf-token) on your device (Section 25(2) No. 2 TDDDG). When you submit your withdrawal, the provider processes your details (name, e-mail address, order number, affected items and, if applicable, your comments) on our behalf, matches them with your order and forwards them to us (Art. 6(1)(b) and (c) GDPR, processing your withdrawal and the legal obligation to provide a withdrawal function under Section 356a BGB). According to the provider, it uses servers of Amazon Web Services and Vercel, including in the USA.
  • Volume pricing: to display the matching prices, the app G: Volume Discounts queries your country based on your IP address via the service geojs.io (Art. 6(1)(f) GDPR).
  • For image sliders, we load a program library from the content delivery network jsDelivr. In doing so, your IP address is transmitted to the operator (Art. 6(1)(f) GDPR, fast and stable display).

14. Storage period

We only store personal data for as long as is necessary for the respective purpose. We retain order data until warranty periods have expired and beyond that where required by law: invoices and accounting records for eight years, commercial and business letters for six years. We delete newsletter and notification data after you unsubscribe; we retain the proof of consent for as long as we need it as evidence.

15. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection of Saxony-Anhalt. For all requests, a message to the contact details above is sufficient.

Right to object under Art. 21 GDPR: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to processing for direct marketing at any time without giving reasons.

16. Obligation to provide data, automated decisions

The details required for an order are marked as mandatory fields. Without them, we cannot conclude the contract. We do not make any automated decisions, including profiling. For Klarna invoice or instalment purchases, Klarna decides which payment options are offered.

17. Changes

We adapt this privacy policy when our services or the legal situation change. The version published here applies.