Legal

Privacy Policy

TRIMINT GmbH · Last updated: July 2026

1. Controller

TRIMINT GmbH
Fahrbachweg 3 · 69126 Heidelberg · Germany
Email: trimint.contact@gmail.com

2. Hosting and Server Log Files

This website runs on the infrastructure of our hosting provider. When you visit the website, the following data is automatically stored in server log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the requested file
  • Browser type and version, as well as operating system
  • Referrer URL (previously visited page)

Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and stable operation). Data is deleted after a maximum of 7 days.

3. Shop System and Order Processing (Shopify)

We use the services of Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (Shopify) to operate our online shop, cart, customer account and checkout. When you view product and order pages or complete a checkout, data is transmitted to Shopify — in particular your IP address, browser data, cart contents and, in the case of an order, your name, delivery and billing address, email address and payment data.

The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR. Shopify acts as our processor under a data processing agreement. Any transfer to third countries is based on the EU Standard Contractual Clauses.

4. Payment Processing

Payments are processed by the payment service providers shown during checkout (e.g. Shopify Payments, PayPal, credit card, Klarna, subject to availability). Your payment data is transmitted to and processed solely by the respective payment provider; we do not receive or store full card details. The legal basis is Art. 6 para. 1 lit. b GDPR.

5. Shipping Service Providers

To deliver your order we pass on your name, delivery address and — where required for tracking — your email address to the commissioned carrier (usually DHL / Deutsche Post). The legal basis is Art. 6 para. 1 lit. b GDPR.

6. Back-in-Stock Notifications

If you sign up to be notified when a product is back in stock, we store your email address and the requested product in our database (operated via Supabase, hosted in the EU). Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time by email. The data is deleted once the notification has been sent or after withdrawal.

7. Cookies

We use technically necessary cookies required to operate the website — for example for the shopping cart, language selection and access protection during the build phase. The legal basis is Sec. 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 lit. f GDPR.

We currently do not use third-party analytics, marketing or tracking cookies. No user profiles are created. Should this change, we will obtain your consent in advance.

8. No Disclosure for Advertising Purposes

Your personal data is not sold and is not passed on to third parties for advertising purposes. Data is shared only with the service providers named above and with authorities where we are legally obliged to do so.

9. Retention Periods

We store personal data only for as long as necessary for the respective purpose. Order and invoice data is subject to statutory commercial and tax retention obligations (6 and 10 years respectively under Sec. 257 HGB, Sec. 147 AO). Email correspondence is deleted after a maximum of 3 years, server log files after 7 days.

10. Contact by Email

If you contact us by email, your details will be stored to process your request. The legal basis is Art. 6 para. 1 lit. b and f GDPR.

11. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7 para. 3 GDPR)

Contact: trimint.contact@gmail.com

12. No Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

13. Right to Complain to the Supervisory Authority

You have the right to lodge a complaint with the LfDI Baden-Württemberg:
www.baden-wuerttemberg.datenschutz.de

Last updated: July 2026