1. Controller

The controller responsible for data processing on this website is:

BCCO Productions UG
Rosenthaler Straße 49
10437 Berlin
Germany

Email: shop@bcco.berlin
Phone: +49 15167846398

2. General Information

We take the protection of your personal data seriously. Your data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.

Personal data refers to any information that can identify you personally.

3. Data Collection When Visiting the Website

When you access our website, certain data is automatically collected:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL

This data is required to ensure the stability and security of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4. Orders and Customer Accounts

When you place an order or create an account, we process the following data:

• Name
• Billing and shipping address
• Email address
• Payment information
• Order details

This data is processed for:

• Contract fulfillment
• Delivery of goods
• Customer communication

Legal basis: Art. 6(1)(b) GDPR (contract performance)

5. Shopify

Our online store is hosted by Shopify Inc.

Shopify provides the platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases, and general applications.

Shopify may process data in countries outside the European Union (e.g. Canada or the United States). Appropriate safeguards are in place in accordance with Art. 46 GDPR.

6. Payment Providers

Depending on the selected payment method, payment data may be transferred to third-party payment providers (e.g. PayPal, Klarna, credit card providers).

This is done solely for the purpose of processing payments.

Legal basis: Art. 6(1)(b) GDPR

7. Email Use & Marketing Communications

When you register, place an order, or provide your email address, you consent to us using your email address for the following purposes:

• Information about new product releases ("drops")
• Invitations to events
• Community updates
• Marketing and promotional communication

Legal basis: Art. 6(1)(a) GDPR (consent)

You can withdraw your consent at any time by:

• Clicking the unsubscribe link in any email
• Contacting us directly

8. Email Services

We may use third-party services (e.g. Shopify Email or similar providers) to send emails. These providers process your data only on our behalf.

9. Cookies and Tracking

Our website uses cookies to:

• Ensure functionality
• Analyze user behavior
• Improve marketing performance

You can manage your cookie preferences through your browser settings or cookie banner.

Legal basis:

• Art. 6(1)(a) GDPR (consent)
• Art. 6(1)(f) GDPR (legitimate interest)

10. Data Retention

We store personal data only as long as necessary:

• For contractual obligations
• To comply with legal retention requirements
• Until consent is withdrawn

11. Your Rights

You have the following rights under GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

13. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to comply with legal requirements or changes to our services.