PRIVACY POLICY

1. Controller

The controller responsible for data processing on this website is:

BCCO Productions UG
Rosenthaler Straße 49
10437 Berlin
Germany

Email: shop@bcco.berlin

Phone: +49 15167846398

2. General Information

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

3. Data Collection When Visiting the Website

When you visit our website, the following data is automatically collected:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL

This data is necessary to ensure the stability, functionality, and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4. Hosting and Platform (Shopify)

Our online store is hosted by Shopify Inc.

Shopify provides the e-commerce platform that allows us to offer our products and services.

Your data is stored via Shopify’s data storage, databases, and general applications.

Shopify may process personal data in countries outside the European Union (e.g. Canada or the United States). Data transfers are safeguarded through appropriate measures in accordance with Art. 46 GDPR (e.g. Standard Contractual Clauses).

5. Orders and Customer Accounts

When you place an order or create an account, we process:

  • Name
  • Billing and shipping address
  • Email address
  • Payment information
  • Order details

This processing is necessary to:

  • Fulfill the contract
  • Deliver goods
  • Communicate with you regarding your order

Legal basis: Art. 6(1)(b) GDPR

6. Payment Processing

Depending on the selected payment method, payment data is transferred to third-party providers such as:

  • PayPal
  • Klarna
  • Credit card providers

These providers process data solely for payment processing.

Legal basis: Art. 6(1)(b) GDPR

7. Email Communication and Marketing

7.1 Newsletter and Marketing Emails (Consent)

If you actively subscribe to our newsletter or explicitly consent, we use your email address to send:

  • Product announcements
  • New collections (“drops”)
  • Event invitations
  • Brand and community updates
  • Promotional communication

Legal basis: Art. 6(1)(a) GDPR (consent)

You may withdraw your consent at any time via the unsubscribe link or by contacting us.

7.2 Existing Customer Communication (Soft Opt-in)

If you have purchased goods from us, we may use your email address to send information about similar products or services.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) in conjunction with applicable ePrivacy laws.

You may object to this use at any time.

8. Email Service Providers

We may use third-party providers (e.g. Shopify Email, Klaviyo or similar tools) to send emails.

These providers process personal data on our behalf under data processing agreements.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Ensure website functionality
  • Analyze user behavior
  • Improve marketing performance

Types of cookies:

  • Necessary cookies (essential for operation)
  • Analytics cookies
  • Marketing cookies

Legal basis:

  • Art. 6(1)(a) GDPR (consent) for non-essential cookies
  • Art. 6(1)(f) GDPR (legitimate interest) for essential cookies

You can manage your preferences via your browser or cookie banner.

10. Data Retention

We retain personal data only as long as necessary:

  • For contract fulfillment
  • To comply with legal obligations (e.g. tax laws)
  • Until consent is withdrawn

11. Data Sharing

We only share personal data where necessary:

  • With service providers (hosting, payment, shipping)
  • Where required by law
  • With your consent

All processors are bound by GDPR-compliant agreements.

12. Your Rights

Under GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction (Art. 18 GDPRR
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

14. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal or operational changes.

Button label