Privacy Policy for www.picpunk.art (Shopify)

Last updated: September 2025

Thank you for your interest in our online shop. Protecting your privacy is very important to us. The following explains in detail how we handle your personal data.

1. Controller

signed|DESIGN GmbH
PIC | PUNK® – www.picpunk.art
Bahnhofsplatz 2/2, 4600 Wels, Austria
Email: hello@picpunk.art

The company named above is the controller for data processing on this website within the meaning of the GDPR.

2. Collection and storage of personal data

We collect personal data when you:

visit our shop,

create a customer account,

place an order,

subscribe to our newsletter,

contact us.

The types of data processed include:

Name, address, e-mail address, telephone number, billing and delivery address, payment information, ordered products,

IP address, device type, browser information.

Data processing is carried out for the purpose of fulfilling contracts, for providing our website technically, for optimizing our offering and — with your consent — for marketing and analytics purposes.

3. Shopify as processor

Our shop is operated on the Shopify platform.

Service provider: Shopify International Ltd., Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify stores your data on secure servers, including in Canada and the United States. Shopify uses the European Commission’s Standard Contractual Clauses to provide an adequate level of data protection.

Further information: https://www.shopify.com/legal/privacy

4. Payment providers

To process your order we forward payment data to the following providers (only if you choose the respective payment method):

Shopify Payments (credit card)

Provider: Shopify International Ltd., Dublin, Ireland.

Privacy policy: (see Shopify link above)

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

Privacy policy: PayPal

Apple Pay

Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA.

Privacy policy: Apple Privacy

Google Pay

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Privacy policy: Google Privacy

Klarna (all methods)

Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

Privacy policy: Klarna

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

5. Shipping providers

For delivery purposes we share your name, address and, where applicable, telephone number with our contracted shipping providers:

DPD Austria GmbH

DHL Paket GmbH

Österreichische Post AG

Legal basis: Art. 6(1)(b) GDPR.

6. Cookies & consent management

We use a cookie/consent management tool (e.g., Cookiebot or Consentmo) to manage your consents for cookies and tracking technologies.

You may revoke your consent at any time via the following link: Change cookie settings.

7. Analytics and marketing tools

Google Analytics (GA4)

We use Google Analytics by Google Ireland Ltd. to analyze website usage. Data (including shortened IP address and usage data) may be transmitted to the USA.

Legal basis: your consent (Art. 6(1)(a) GDPR). More information: https://policies.google.com/privacy

Meta Pixel (Facebook / Instagram)

We use the Meta Pixel from Meta Platforms Ireland Ltd. to measure conversions and deliver personalized advertising.

Legal basis: your consent (Art. 6(1)(a) GDPR). More information: https://www.facebook.com/privacy/policy

Pinterest Tag

We use the Pinterest Ads Tag for conversion measurement.

Legal basis: your consent (Art. 6(1)(a) GDPR). More information: https://policy.pinterest.com/de/privacy-policy

8. Microsoft Clarity

We use Microsoft Clarity, a service of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA), to understand visitor behavior on our website (e.g., click paths, mouse movements, scroll behavior).

Clarity creates heatmaps and session replays that help us make our website more user-friendly.

Legal basis: your consent (Art. 6(1)(a) GDPR). Clarity anonymizes sensitive inputs (e.g., passwords, payment data). Data transfers: Microsoft participates in the EU-US Data Privacy Framework or uses Standard Contractual Clauses. You can withdraw consent at any time via the cookie settings.

More information: Microsoft Privacy Statement

9. Newsletter

If you subscribe to our newsletter we use your email address exclusively for sending the newsletter. Mailing is handled via MailerLite (MailerLite Limited, Ireland).

We use the double opt-in procedure. You can unsubscribe at any time via the link at the end of each newsletter.

10. Legal bases for processing

Art. 6(1)(b) GDPR — performance of a contract

Art. 6(1)(c) GDPR — legal obligation

Art. 6(1)(f) GDPR — legitimate interest (e.g., fraud prevention)

Art. 6(1)(a) GDPR — consent (e.g., analytics tools, marketing)

11. Storage period

We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods.

12. Your rights

You have the right to:

Access your data (Art. 15 GDPR)

Rectification (Art. 16 GDPR)

Erasure (Art. 17 GDPR)

Restriction of processing (Art. 18 GDPR)

Data portability (Art. 20 GDPR)

Object to processing (Art. 21 GDPR)

To file a complaint with the data protection authority: www.dsb.gv.at

13. Changes to this privacy policy

We reserve the right to change this privacy policy to adapt it to technical or legal developments.

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us at hello@picpunk.art.