Last updated: October 15, 2025
1. Controller
FILLTHESPACE
Jannis Spitzer
Falkenweg 23
57462 Olpe, Germany
E-Mail: info@fillthespace.de
We are the controller within the meaning of the GDPR for the processing of personal data on this website.
2. Hosting & Shop Platform (Shopify)
Our website and online shop are operated via Shopify Inc.:
Shopify International Ltd.
Victoria Buildings, 1-2 Haddington Road
Dublin 4, D04 XN32, Ireland
Shopify processes data as a processor according to Art. 28 GDPR.
Further information: https://www.shopify.com/legal/privacy
Data may also be transferred to third countries (especially Canada & USA).
The transfer is based on EU standard contractual clauses in accordance with Art. 46 GDPR.
3. Collection and Processing of Personal Data
We process personal data only to the extent necessary:
3.1 When visiting the website (server logs)
Data processed:
-
IP address
-
Date & time
-
Browser, operating system, referrer URL
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest - operation & security of the website).
Data is automatically deleted as soon as it is no longer required for the purpose.
3.2 For orders in the shop
Data processed:
-
Name, address, email, phone number (if applicable)
-
Billing & shipping address
-
Order & payment information (no full credit card data)
Legal basis:
-
Contract fulfillment, Art. 6 para. 1 lit. b GDPR
-
Legal retention obligations, Art. 6 para. 1 lit. c GDPR
3.3 Shipping & Production (Print-on-Demand / Gelato)
For production and delivery, data is transmitted to our production & shipping partner Gelato (name, delivery address, order content).
Legal basis: Contract fulfillment, Art. 6 para. 1 lit. b GDPR.
Further information: https://www.gelato.com/legal/privacy
3.4 Payment service providers
Depending on the payment method, we pass on data to payment providers, e.g.:
-
Shopify Payments
-
PayPal
-
Klarna / Credit institutions
Legal basis: Contract fulfillment, Art. 6 para. 1 lit. b GDPR.
The privacy policies of the providers also apply.
3.5 Contact / Support
Data from emails or contact forms will only be processed to handle the request.
Legal basis:
-
Art. 6 para. 1 lit. b GDPR (contract / initiation) or
-
Art. 6 para. 1 lit. f GDPR (legitimate interest – customer communication)
Our website uses cookies and similar technologies (e.g., analytics and shop functions).
Details on Shopify cookies: https://www.shopify.com/legal/cookies
We use a Consent Management Tool (Consentmo) to manage consents.
Non-technically necessary cookies are only set after consent.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.
You can adjust your cookie settings at any time in the banner.
5. Data Transfer
Data is only transferred:
-
to service providers (hosting, shipping, IT, payment processing)
-
to authorities, if legally required
-
with consent according to Art. 6 para. 1 lit. a GDPR
No transfer for advertising purposes without a legal basis takes place.
6. Storage Period
We store personal data only for as long as necessary for the respective purposes:
-
Order & invoice data: 10 years (tax law obligation)
-
Support/contact inquiries: until processing is completed
-
Log data & security data: max. 90 days
7. Your Rights as a Data Subject
You have the following rights at any time:
-
Right to information (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to object to processing (Art. 21 GDPR)
-
Right to withdraw consent (Art. 7 para. 3 GDPR)
Please address inquiries to: info@fillthespace.de
8. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority is usually the authority of your place of residence or our company's registered office.
For North Rhine-Westphalia (NRW) e.g.:
State Commissioner for Data Protection and Freedom of Information NRW
www.ldi.nrw.de
9. Minors
Our services are not intended for children under 16 years of age.
We do not knowingly process such data.
10. International Data Transfer
If data is processed outside the EU, this only occurs in the case of:
-
Adequacy decision (Art. 45 GDPR) or
-
EU standard contractual clauses (Art. 46 GDPR)
11. Contact
If you have any questions regarding this privacy policy, please contact:
FILLTHESPACE
Falkenweg 23
57462 Olpe, Germany
E-Mail: info@fillthespace.de
