Privacy Policy
Privacy Policy (as of November 2025)
for the online shop www.evimhome.de
1. Responsible person
Evim Mobilya GmbH
Leimenstraße 10–12
63450 Hanau, Germany
Represented by: Mr. Sahin Cikrikci
Telephone: 06183 7207201
Email: shop@evimhome.de
(Controller within the meaning of Art. 4 No. 7 GDPR)
2. Hosting, Security & Content Delivery
Shop system (Shopify)
Our website is operated via the service Shopify International Ltd. , Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify handles the hosting, the provision of the online shop, and in some cases, the payment processing.
Data processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and functional online shop).
Shopify may transfer data to third countries, in particular the USA. The USA has an adequacy decision based on the EU-US Data Privacy Framework (DPF) . Shopify Inc. is certified under the DPF.
More information: https://www.shopify.com/legal/privacy
Cloudflare
To secure and optimize the performance of our shop, we use the CDN and security service Cloudflare , operated by Cloudflare, Inc. , 101 Townsend St., San Francisco, CA 94107, USA.
Cloudflare temporarily stores technical data (e.g., IP address, access time, URL) in server logs to defend against attacks and improve accessibility.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in IT security).
Cloudflare is certified under the EU-US Data Privacy Framework (DPF) .
Details: https://www.cloudflare.com/privacypolicy
3. Collection and processing of personal data
We collect personal data when you:
- to place an order,
- open a customer account
- use our contact form or
- Subscribe to our newsletter.
Mandatory fields are marked as such.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. a GDPR (consent).
After conclusion of the contract, data will be stored in accordance with tax and commercial law retention periods and subsequently deleted.
4. Data sharing
4.1. Shipping companies
For the purpose of fulfilling the contract (Art. 6 para. 1 lit. b GDPR), we will pass on your address to the commissioned shipping company.
With your consent (Art. 6 para. 1 lit. a GDPR), we will also transmit your email address and telephone number for delivery notifications.
4.2. Payment service providers
Depending on the selection made during the ordering process, we will forward payment details to the respective provider (e.g. PayPal, Klarna, Shopify Payments, credit card).
The data protection policies of the providers apply to their processing.
4.3. Credit check (Klarna)
A credit check may be performed when selecting a Klarna payment method.
Details: https://www.klarna.com/de/datenschutz
5. Newsletter
When you subscribe to our newsletter, we process your email address and, if applicable, your name in order to send you regular offers and information.
Shipping will only take place after double opt-in .
Legal basis: Art. 6 para. 1 lit. a GDPR.
You can unsubscribe at any time via the link in the newsletter or by email to shop@evimhome.de possible.
6. Cookies and consent management
We use cookies to make our shop more user-friendly.
-
Necessary cookies: for login, shopping cart, checkout (Art. 6 para. 1 lit. b GDPR)
-
Analytics and marketing cookies: only with your consent (Art. 6 para. 1 lit. a GDPR)
You can change your cookie settings at any time via the cookie banner or in your browser.
7. Analytics and advertising tools
Google Analytics 4
We use Google Analytics 4 , a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland .
Data (e.g., IP address, user behavior, device data) is collected anonymously.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Google may transfer data to the USA (DPF-certified).
Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=de
Google Ads / Remarketing
We use Google Ads to display personalized ads.
If you have given your consent (Art. 6 para. 1 lit. a GDPR), a cookie will be set to address visitors again later.
Google also processes data in the USA (DPF-certified).
Opt out: https://adssettings.google.com/
Google Fonts
Our website uses Google Fonts to display fonts consistently.
The integration is done locally via Shopify or, if external, on the basis of legitimate interests (Art. 6 para. 1 lit. f GDPR).
Google Ireland Ltd., Dublin, Ireland.
More information: https://policies.google.com/privacy
Meta Pixels (Facebook & Instagram)
We use the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland , to analyze the behavior of visitors after clicking on an ad.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Meta can transfer data to the USA (DPF-certified).
Opt out: https://www.facebook.com/settings?tab=ads
TikTok Pixel
We use the TikTok Pixel , operated by TikTok Technology Limited , 10 Earlsfort Terrace, Dublin, Ireland, and TikTok Information Technologies UK Ltd.
This allows TikTok to analyze your user behavior and display targeted advertising.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
TikTok transfers data to third countries (including the USA and Singapore) on the basis of standard contractual clauses (Art. 46 GDPR).
Details: https://www.tiktok.com/legal/privacy-policy-eea
8. Social Media & Plugins
We operate profiles on:
- TikTok
When visiting our social media pages, the data protection regulations of the respective operators apply.
Data that we process there (e.g. comments, messages) is processed in accordance with Art. 6 para. 1 lit. f GDPR (legitimate interest in communication).
9. Your rights
Under the GDPR, you have the following rights:
- Information (Art. 15)
- Correction (Art. 16)
- Deletion (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection (Art. 21)
- Complaint to the data protection supervisory authority (Art. 77)
To exercise your rights, simply send an email to shop@evimhome.de .
10. Right to object pursuant to Article 21 GDPR
If we process your data based on legitimate interests (Art. 6 para. 1 lit. f GDPR), you have the right to object at any time.
This applies to direct marketing (newsletters, advertisements) at any time and without giving reasons.
11. Data security
We use SSL encryption and modern technical measures to protect your data from loss, misuse and unauthorized access.
12. Status of the privacy policy
This privacy policy was last updated on November 7, 2025 and is valid until revoked.

