Privacy policy

Privacy Policy
Last updated: May 4, 2026

kernstudie (“we”, “us”, “our”) operates this website and online store, including all associated information, content, features, tools, products, and services (collectively, the “Services”), to provide customers with a personalized shopping experience. The Services are hosted and supported by Shopify Inc. (“Shopify”), which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal data when you access or use the Services, including when you make a purchase or otherwise interact with us.

In the event of any conflict between this Privacy Policy and our Terms and Conditions, this Privacy Policy shall prevail with respect to the processing of personal data.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Definition of Personal Data

“Personal data” means any information relating to an identified or identifiable natural person. This does not include data that has been anonymized in such a way that the individual is no longer identifiable.

2. Categories of Personal Data Processed

Depending on your interaction with the Services and as permitted by applicable law, we may process the following categories of personal data:

  • Contact Data: including name, billing address, shipping address, email address, and telephone number
  • Financial Data: including payment card details, billing information, transaction records, and payment confirmations
  • Account Data: including login credentials, account preferences, and security information
  • Transaction Data: including purchase history, products viewed, cart activity, returns, and exchanges
  • Communication Data: including correspondence with us, such as customer service inquiries
  • Technical Data: including IP address, browser type, device information, and unique identifiers
  • Usage Data: including information about how you interact with the Services

3. Sources of Personal Data

We collect personal data from the following sources:

  • Directly from you, when you create an account, place an order, contact us, or otherwise provide information
  • Automatically, through cookies and similar tracking technologies when you use the Services
  • From service providers, acting on our behalf
  • From business partners and third parties, where permitted by law

4. Purposes and Legal Bases for Processing

We process personal data for the following purposes and on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR):
    To process transactions, fulfill orders, manage accounts, arrange shipping, and provide customer support
  • Legitimate interests (Art. 6(1)(f) GDPR):
    To improve and personalize the Services, prevent fraud, ensure security, and maintain business operations
  • Consent (Art. 6(1)(a) GDPR):
    For marketing communications and certain advertising activities, where required
  • Legal obligations (Art. 6(1)(c) GDPR):
    To comply with applicable laws, regulations, and legal processes

5. Disclosure of Personal Data

We may disclose personal data to:

  • Service providers and processors, including Shopify, payment processors, IT providers, analytics providers, and logistics partners
  • Business and marketing partners, for advertising and promotional purposes, subject to applicable law
  • Affiliated entities, within our corporate group
  • Authorities and third parties, where required to comply with legal obligations or protect rights

Where personal data is shared with third parties, we ensure appropriate safeguards are in place as required by applicable data protection laws.

6. Shopify Processing

The Services are hosted by Shopify, which processes personal data to provide and improve its services. Shopify may process personal data across multiple jurisdictions. In certain cases, Shopify acts as an independent controller.

Further information is available in Shopify’s Privacy Policy.

7. International Data Transfers

Personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or the United Kingdom.

Where such transfers occur, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission or equivalent mechanisms, unless the destination country has been deemed to provide an adequate level of protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data. However, no system can be guaranteed to be completely secure.

10. Your Rights

Subject to applicable law, you may have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

You may also have the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us using the details below. We may require verification of your identity before processing your request.

11. Children’s Data

The Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

12. Third-Party Links

The Services may contain links to third-party websites. We are not responsible for the privacy practices of such websites.

13. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. Updates will be published on this page with a revised “Last updated” date.

14. Contact Details

If you have any questions regarding this Privacy Policy or our data processing practices, or if you wish to exercise your rights, please contact:

K E R N S T U D I E
Email: info@kernstudie.com

For the purposes of applicable data protection laws, kernstudie is the data controller responsible for your personal data.