Privacy Policy

Last updated: 18.08.2025

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Monaco Labs GmbH
Fastlinger Ring 168
85716 Unterschleissheim
Germany
Email: info@supergloops.com
Represented by the Managing Director: Tobias-Morten Ilgner

2. Collection and Processing of Personal Data When Visiting Our Website

When you access our website, information is automatically sent to our server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following data in particular is collected:

IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Website from which the access originated (referrer URL)
Browser used and, if applicable, the operating system of your device
Name of your access provider

This data is processed to ensure a smooth connection setup of the website, to evaluate system security and stability, and for administrative purposes.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above.

This data is not used to draw conclusions about your identity.

Our website is operated via Shopify. The ordering process is handled through Shopify Checkout.

Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, acts as a technical service provider for hosting, checkout, and payment processing. Shopify processes personal data on our behalf (data processing pursuant to Art. 28 GDPR).

This may include, in particular, IP address, order and payment data, as well as browser and device data.

For more information, please refer to Shopify’s privacy policy: https://www.shopify.com/legal/datenschutz

3. Cookies and Consent Management

We use cookies and similar technologies on our website. Cookies are small text files that are automatically created by your browser and stored on your device when you visit our site. Some cookies are technically necessary, while others are used for analytics, marketing, or to personalize our offerings.

Technically necessary cookies are used for the operation and security of the website (e.g. to store your language settings or shopping cart) and are processed on the basis of Section 25 (2) TTDSG and Art. 6 para. 1 lit. f GDPR.

We only use analytics and marketing cookies with your explicit consent. The legal bases for this are Section 25 (1) TTDSG and Art. 6 para. 1 lit. a GDPR. You can withdraw or adjust your consent at any time via our consent management tool.

A detailed overview of the cookies used, their purpose, provider, and storage duration can be found in our Cookie Policy.

4. Web Analytics and Tracking

4.1 Shopify Analytics

Our website uses features of the e-commerce platform Shopify, provided by Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify collects and processes certain usage data on our behalf to analyze website performance and prevent fraud. Cookies or similar technologies may be used to collect information such as device data, visited pages, or completed purchases.

Processing may take place on servers outside the EU (particularly in Canada and the USA). Shopify is bound by Standard Contractual Clauses pursuant to Art. 46 GDPR to ensure an adequate level of data protection.

The legal basis for the use of Shopify Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 (1) TTDSG, unless technical necessity exists as an exception. You can withdraw your consent at any time via our cookie banner.

For more information, please refer to Shopify’s privacy policy: https://www.shopify.com/legal/privacy

4.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use Google Analytics in the Google Analytics 4 (GA4) configuration. The IP address is anonymized by default, so it cannot be directly linked to any individual. For more information about data protection at Google, visit: https://policies.google.com/privacy

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 (1) TTDSG. Consent is given via our cookie banner and can be withdrawn at any time with future effect.

4.3 Meta Pixel & Meta Conversion API

We use features of the Meta Pixel and the Meta Conversion API (CAPI) on our website, services provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

These technologies allow us to track the behavior of visitors on our website — for example, page views, interactions with products, purchases, or registrations. The data is transmitted to Meta both client-side (via the Meta Pixel) and server-side (via the Conversion API). This enables us to:

analyze the effectiveness of our advertising campaigns (conversion tracking),
deliver targeted ads on Facebook and Instagram (retargeting),
create audiences (“Custom Audiences”) and similar audiences (“Lookalike Audiences”).

For Custom Audiences, we may transmit certain customer information — such as your email address in hashed form — to Meta. This data is used to target you with advertising on Meta services or to identify users with similar profiles (Lookalike Audiences). The data processed is pseudonymous for us but may be linked by Meta to existing user accounts.

Further information on data processing by Meta can be found at: https://www.facebook.com/privacy/policy

The legal basis for the processing described is your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 (1) TTDSG. You provide this consent via our cookie banner, where you can withdraw or adjust it at any time.

5. Payment Processing and Payment Service Providers

Payment processing in our online shop is carried out exclusively via Shopify Checkout, operated by Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.

During the order process, we offer various payment methods. The available options (e.g. credit card, PayPal, Klarna, Apple Pay, Google Pay, Shop Pay) are displayed to you at checkout. The technical processing of payments is carried out by the respective payment service provider, depending on the selected payment method:

Shopify Payments (e.g. for credit cards, Apple Pay, Google Pay)
PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg)
Klarna (Klarna Bank AB (publ), Sweden)
Shop Pay (via Shopify)

Depending on the provider, personal data (e.g. name, billing address, email address, payment information) may be transmitted to the respective service provider, insofar as this is necessary for payment processing.

The payment service providers process your data under their own responsibility in accordance with Art. 6 para. 1 lit. b GDPR (contract performance) and, where applicable, on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. For information on data processing by these providers, please refer to their respective privacy policies:

Please note that some of these providers are based in third countries (e.g. the USA, Canada) or may process data there. In such cases, transfers are made based on Standard Contractual Clauses pursuant to Art. 46 GDPR.

6. Newsletter and Email Communication

6.1 Transactional Emails

After completing a purchase or subscription, we send you transactional emails, such as order confirmations, shipping notifications, or information about your subscription. This communication is necessary for the performance of the contract and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

These emails are sent via Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes your data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Where personal data is transferred to third countries (particularly Canada or the USA), such transfers are based on adequacy decisions by the European Commission or on the conclusion of Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR.

For more information, please refer to Shopify’s privacy policy: https://www.shopify.com/legal/privacy

6.2 Newsletters and Promotional Emails

If you subscribe to our newsletter, you will receive regular updates via email about our products, offers, and promotions. Subscription is done using a double opt-in process: After signing up, you will receive an email asking you to confirm your consent. Your email address will only be used for mailing after this confirmation.

The legal basis for sending the newsletter is your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 7 para. 2 no. 3 UWG (German Unfair Competition Act).

You can unsubscribe from the newsletter at any time via the unsubscribe link included in every email or by contacting us directly. Your email address will be removed from the mailing list after you unsubscribe, unless there are other legal grounds for continued storage.

For more information, please refer to Shopify’s privacy policy: https://www.shopify.com/legal/privacy

7. Your Rights as a Data Subject

As a data subject, you have the following rights regarding the processing of your personal data:

Access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and receive further information about the processing.
Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data or the completion of incomplete data.
Erasure (Art. 17 GDPR): You may request the deletion of your personal data unless a legal reason prevents its deletion.
Restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain conditions.
Data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transmission of that data to another controller.
Objection (Art. 21 GDPR): You can object to the processing of your data at any time if the processing is based on Art. 6 para. 1 lit. e or f GDPR. This applies in particular to processing for direct marketing purposes.
Withdrawal of consent (Art. 7 para. 3 GDPR): You have the right to withdraw any consent given at any time with effect for the future. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that the processing of your personal data violates applicable data protection law, you may file a complaint with a supervisory authority. The authority responsible is usually the one in your place of residence or where the alleged violation occurred.

8. Hosting and Platform Provider

Our website is operated via the e-commerce platform Shopify. Service provider:
Shopify International Ltd., 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland

Shopify provides the technical infrastructure for our online store, including the website, checkout, and payment processing.

As part of these services, Shopify processes personal data on our behalf that is collected when visiting our website or during the order process (e.g. IP address, order data, payment information, device information, usage behavior). This processing is carried out to provide the website, fulfill contracts, process orders, and ensure technical operations.

For this purpose, Shopify may also use sub-processors and transfer personal data to third countries, particularly to Canada (the parent company's headquarters) and the USA. An adequate level of data protection is ensured through the use of Standard Contractual Clauses pursuant to Art. 46 GDPR.

For more information, please refer to Shopify’s privacy policy:
https://www.shopify.com/legal/privacy

9. Storage Duration and Deletion

We store personal data only for as long as necessary to fulfill the respective purposes or as required by law. Specifically, this means:

Contract data (e.g. orders, subscriptions, billing data) is stored for the duration of the contractual relationship and subsequently archived for up to 10 years in accordance with statutory retention periods (particularly under commercial and tax law) (Legal basis: Art. 6 para. 1 lit. c GDPR).
Data in customer accounts is stored as long as the account is active. You can request the deletion of your account at any time (Art. 17 GDPR).
Communication data (e.g. emails, support inquiries) is stored for the duration of processing and subsequently in accordance with statutory archiving obligations.
Marketing data (e.g. newsletter subscriptions) is stored until you withdraw your consent. After unsubscribing, your data is generally deleted or anonymized within 30 days, unless another legal basis permits longer storage.
Tracking data (e.g. via cookies, pixels) is stored for varying durations depending on the type of cookie and your consent. Details can be found in the settings of our cookie banner.

As soon as the respective purpose of processing ceases to apply and there are no longer any legal retention obligations, your data will be deleted or anonymized.

10. Disclosure of Data to Third Parties and Data Processing on Behalf

We only disclose your personal data to third parties if:

it is necessary for contract fulfillment (e.g. shipping service providers, payment service providers),
it is based on a legal obligation (Art. 6 para. 1 lit. c GDPR),
it is permissible to safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR), or
you have given us your explicit consent (Art. 6 para. 1 lit. a GDPR).

As part of processing your order and providing our services, we use the following service providers, among others:

10.1 Platform Provider

Our website is operated via the e-commerce platform Shopify (see section 8). Shopify processes personal data on our behalf as a data processor.

10.2 Payment Service Providers

We use the following providers for payment processing:

Shopify Payments
Klarna
PayPal
Apple Pay / Google Pay / Shop Pay

Depending on the selected payment method, we transmit the data required for payment processing to the respective provider. The privacy policies of each payment provider apply to the processing of your data.

10.3 Shipping Service Providers

For the delivery of your order, we pass on your address details to our shipping partners. Shipping currently takes place directly from our own warehouse.

10.4 Email and Marketing Services

We use external service providers for sending transactional emails (e.g. order confirmations, shipping notifications) and, in the future, for marketing emails. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

We currently use the following tools:

Transactional emails: via Shopify, with Standard Contractual Clauses pursuant to Art. 46 GDPR
Marketing emails: via Shopify, with Standard Contractual Clauses pursuant to Art. 46 GDPR

10.5 Advertising and Tracking

For details on the disclosure of data to marketing platforms such as Meta (Facebook/Instagram) and, if applicable, Google Ads, please refer to the section on tracking technologies (see section 4).

11. Contests and Sweepstakes

If you participate in one of our contests or sweepstakes, we process your personal data solely for the purpose of conducting the respective contest. Participation usually takes place via our social media channels (e.g. Instagram).

Depending on the structure of the contest, we process in particular:

Your Instagram username
Publicly visible interactions (e.g. likes, comments)
In case of a win: your name, address, or email address for prize notification and delivery

Processing is based on Art. 6 para. 1 lit. b GDPR (for the execution of the contest) and – in the case of publishing the winner or promotional use – on Art. 6 para. 1 lit. a GDPR (consent).

If promotional use is intended (e.g. tagging or naming on Instagram), we will obtain your explicit consent beforehand.

Your data will be stored only as long as necessary for conducting the contest and then deleted, unless legal retention obligations exist. For the shipment of physical prizes, processing may take place via our online shop on Shopify (see section “Hosting and Platform Provider”).

The contest is not affiliated with Instagram and is in no way sponsored, endorsed, or organized by Instagram.

12. Contacting Us

If you contact us (e.g. via email), the personal data you provide (e.g. name, email address, message content) will be processed for the purpose of handling your inquiry.

Processing is based on Art. 6 para. 1 lit. b GDPR where it concerns pre-contractual measures or contract performance, or on Art. 6 para. 1 lit. f GDPR in the case of other inquiries – our legitimate interest lies in efficiently handling incoming requests.

The information may be stored in an internal ticketing or communication system. Your data will not be shared with third parties without your consent unless necessary to process your inquiry.

Your data will be deleted as soon as it is no longer needed for processing and no legal retention obligations apply.

13. Changes to This Privacy Policy

We reserve the right to update this privacy policy occasionally to reflect changes in legal requirements, technical developments, or modifications to our services, such as the introduction of new features.

The current version published on our website applies to your next visit. If your consent is required or if parts of the privacy policy concern contractual terms with you, changes will only be made with your approval.