Privacy Policy

Last updated: October 28, 2026

1. Introduction

LD-13 GmbH ("LD-13", "we", "us", or "our") operates the website https://ld-13.com and its associated online store, including all related content, products, features, and services (collectively, the "Services").

Our online store is powered by Shopify, which provides the technical infrastructure that enables us to offer our products and services.

We take the protection of your personal data seriously. This Privacy Policy explains how we collect, process, use, store, and disclose personal information when you visit our website, browse our products, place an order, subscribe to our communications, or otherwise interact with us.

We process personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and, where applicable, other national and international privacy laws.

Where consent is required for the use of cookies or similar technologies, we comply with the applicable requirements of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Data Controller and Contact Information

The entity responsible for the processing of personal data under the GDPR is:

LD-13 GmbH
Augsburger Str. 40
86157 Augsburg
Germany

Email: lisa.deurer@ld-13.com
Website: https://ld-13.com

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details above.

3. Personal Information We Collect

Depending on your interaction with our website and services, we may collect and process the following categories of personal information:

Contact Information

Your first and last name, email address, telephone number, billing address, shipping address, and other contact details.

Account Information

Your account credentials, customer preferences, account settings, and purchase history.

Transaction and Payment Information

Products viewed, selected, added to your shopping cart, purchased, returned, or exchanged, together with order details, payment status, payment methods, transaction references, and delivery information.

Payment information may be processed directly by authorized payment service providers. We do not necessarily receive or store complete payment card information.

Device and Technical Information

Your IP address, browser type, device characteristics, operating system, language preferences, online identifiers, cookies, and technical information about your connection.

Usage and Interaction Information

Pages visited, products viewed, search queries, shopping cart interactions, browsing behavior, referring websites, and interactions with our online store.

Communication Information

Information you provide when contacting customer support, submitting inquiries, subscribing to newsletters, or communicating with us.

Marketing Information

Where permitted by law, we may process advertising identifiers, marketing preferences, consent records, website interactions, and information about responses to advertising campaigns.

We collect and process personal information only where a lawful basis exists.

4. Sources of Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, subscribe to communications, or contact us.

• Automatically through our website, cookies, pixels, and similar technologies, where permitted.

• From Shopify and service providers involved in operating our store.

• From payment, delivery, marketing, and analytics providers.

• From advertising platforms and business partners, where legally permitted.

5. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

5.1 Order Processing and Contract Fulfilment

We process personal information to manage orders, process payments, arrange shipping, provide customer service, handle returns, and fulfil our contractual obligations.

Legal basis: Article 6(1)(b) GDPR.

5.2 Legal and Accounting Obligations

We process and retain certain information to comply with tax, commercial, accounting, consumer protection, and other legal obligations.

Legal basis: Article 6(1)(c) GDPR.

5.3 Security and Fraud Prevention

We process technical and transactional information to protect our website, prevent fraud, identify unauthorized activity, and maintain the security of our systems.

Legal basis: Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and reliable online store, or Article 6(1)(c) GDPR where required by law.

5.4 Customer Communication

We process your contact information to respond to inquiries, provide order information, manage customer relationships, and handle service requests.

Legal basis: Article 6(1)(b) or Article 6(1)(f) GDPR, depending on the nature of the communication.

5.5 Analytics, Advertising and Personalization

Where consent is required, we process information about website usage and interactions to measure website performance, personalize content, evaluate advertising campaigns, and display relevant advertising.

Legal basis: Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

Where consent is legally required, the relevant technologies will only be used after your consent has been obtained.

6. Shopify and E-Commerce Infrastructure

Our online store is hosted by Shopify.

Shopify provides technical services necessary for operating our online store, including hosting, order processing infrastructure, checkout functionality, customer account management, security, and related services.

Depending on how you use our store, Shopify may process contact information, transaction information, device data, usage information, and other information required to provide its services.

Shopify may process personal data in accordance with its contractual arrangements with us and, for certain services, as an independent data controller.

Further information is available in the Shopify Privacy Policy:

https://www.shopify.com/legal/privacy

6.1 Shopify Network Intelligence and Enhanced Services

We use certain Shopify enhanced features that may incorporate information collected through interactions with our store, Shopify, and other participating merchants.

These features may support improvements to shopping experiences, business operations, marketing performance, security, and other services.

For certain enhanced services, Shopify may act as an independent controller and process personal data in accordance with its own privacy policy and applicable legal requirements.

Further information about Shopify's processing of consumer personal data and the rights available to you can be found at:

https://www.shopify.com/legal/privacy/app-users

Shopify Privacy Portal:

https://privacy.shopify.com/en

7. Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to operate our website, remember preferences, analyze website usage, and support advertising activities.

These technologies may be provided by us or by third-party service providers.

We distinguish between the following categories:

7.1 Essential Cookies

Essential cookies are required for core functions of our online store, including shopping cart functionality, checkout, security, fraud prevention, and session management.

They do not require consent where they are strictly necessary to provide a service expressly requested by the user.

7.2 Analytics Cookies

With your consent, analytics technologies help us understand how visitors interact with our website, evaluate website performance, and identify opportunities for improvement.

7.3 Marketing Cookies

With your consent, marketing technologies may be used to measure advertising effectiveness, analyze conversions, create advertising audiences, and display personalized advertising on third-party platforms.

7.4 Personalization Cookies

With your consent, personalization technologies may be used to remember optional preferences and provide personalized content or shopping experiences.

7.5 Managing Your Cookie Preferences

When visiting our website, you can accept or decline optional cookies through our cookie consent banner.

You may also manage your preferences and withdraw previously given consent through the cookie settings available on our website.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Where consent is required, non-essential tracking technologies are intended to operate only after the relevant consent has been obtained.

8. Meta Pixel and Meta Conversions API

We use Meta advertising technologies provided by:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland

These technologies include the Meta Pixel and Meta Conversions API.

8.1 Purposes of Processing

We use Meta technologies to:

• Measure the effectiveness of advertising on Facebook and Instagram.

• Analyze website interactions following advertising campaigns.

• Track conversion events such as product views, shopping cart activity, checkout initiation, and purchases.

• Optimize advertising campaigns.

• Create and manage advertising audiences, including retargeting audiences, where permitted.

8.2 Categories of Data

Depending on your interaction with our website and the applicable settings, the following information may be processed:

• IP addresses and browser information.

• Device information and technical identifiers.

• Page views and website interactions.

• Product and shopping cart activity.

• Purchase events and order values.

• Advertising and event identifiers.

• Customer information such as name, email address, telephone number, and location information, where applicable.

The Meta Conversions API may transmit certain events directly between Shopify's servers and Meta's systems.

Some identifying information may be hashed before transmission. Hashing does not necessarily make the information anonymous.

8.3 Legal Basis

Where consent is legally required, Meta advertising and conversion tracking is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG where applicable.

You may withdraw your consent at any time through our cookie settings.

8.4 International Data Transfers

Personal information processed through Meta services may be transferred to or processed in countries outside the European Economic Area, including the United States.

Such transfers are subject to the applicable legal safeguards and transfer mechanisms.

Further information:

https://www.facebook.com/privacy/policy/

9. Google Services

Where enabled, we use services provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

These may include Google Analytics 4, Google Ads conversion measurement, Google & YouTube integrations, and related advertising technologies.

9.1 Purposes of Processing

Google services may help us:

• Analyze website traffic and user interactions.

• Measure the performance of advertising campaigns.

• Evaluate purchase and conversion events.

• Optimize marketing activities.

• Display relevant advertising.

• Understand how visitors use our online store.

9.2 Categories of Data

Depending on the service and configuration, Google may process technical identifiers, device information, IP addresses, website interactions, conversion events, purchase information, and advertising-related data.

9.3 Legal Basis

Where legally required, analytics and advertising tracking is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Where applicable, data may be transferred to or processed in countries outside the European Economic Area.

Further information:

https://policies.google.com/privacy

10. Pinterest Advertising and Analytics

Where enabled, we use Pinterest technologies for advertising, conversion measurement, and analysis of website interactions.

These technologies may process information about page views, product interactions, shopping cart actions, purchase events, device identifiers, and related technical data.

The purpose of this processing is to evaluate and improve advertising performance and, where permitted, deliver relevant advertising.

Where consent is legally required, such processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information:

https://policy.pinterest.com/privacy-policy

11. Klaviyo and Email Marketing

We use Klaviyo for email marketing, customer communications, and, where enabled, marketing analytics and personalization.

Depending on your interaction with our store, Klaviyo may process:

• Names and email addresses.

• Newsletter subscription preferences.

• Consent and unsubscribe records.

• Purchase history and order information.

• Interactions with marketing communications.

• Website activity, where the relevant tracking functionality is enabled and legally permitted.

11.1 Marketing Emails

We send promotional emails only where an appropriate legal basis exists, particularly your consent or a legally permitted exception for marketing to existing customers.

You can unsubscribe from promotional communications at any time by using the unsubscribe link provided in our emails.

Transactional emails relating to orders or other necessary services may still be sent.

11.2 Website Tracking

Where consent is required, Klaviyo website tracking and personalization features are used only after the relevant consent has been obtained.

Further information:

https://www.klaviyo.com/legal/privacy

12. Other Service Providers and Recipients

We may disclose personal information to service providers and business partners where necessary for operating our services or where otherwise legally permitted.

These may include:

• Website hosting and e-commerce infrastructure providers.

• Payment service providers.

• Shipping and logistics companies.

• Customer support providers.

• Email and marketing service providers.

• Analytics and advertising providers.

• IT security and fraud prevention services.

• Professional advisers, accountants, and legal advisers.

• Public authorities where disclosure is required by law.

Where required, we enter into appropriate data processing agreements with service providers.

We may also disclose information in connection with legitimate business transactions, legal obligations, or the protection of our rights.

13. Third-Party Websites and External Links

Our website may contain links to third-party websites or platforms.

These websites are operated independently and may apply their own privacy policies and data processing practices.

We encourage you to review the privacy policies of external websites before providing personal information.

We are not responsible for the privacy practices of third-party websites that we do not control.

14. International Data Transfers

We work with service providers that may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to countries outside the EEA and an appropriate transfer mechanism is required, we rely on applicable safeguards under Chapter V GDPR.

Depending on the recipient and destination, these may include:

• An adequacy decision issued by the European Commission.

• The EU-US Data Privacy Framework, where applicable to a certified recipient and the relevant transfer.

• Standard Contractual Clauses approved by the European Commission.

• Other legally recognized safeguards or exceptions where applicable.

The specific mechanisms depend on the provider, processing activity, destination, and contractual arrangements.

You may contact us for further information about applicable transfer safeguards.

15. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods depend on the nature and purpose of the processing.

In particular:

• Order and accounting information may be retained for applicable commercial and tax retention periods.

• Customer account information may be retained while an account remains active and thereafter where legally necessary.

• Customer support communications may be retained as necessary to respond to inquiries, resolve disputes, or establish legal claims.

• Marketing consent records may be retained for as long as necessary to demonstrate compliance with applicable legal obligations.

• Marketing and analytics information is retained according to the applicable configuration, purpose, and service provider's retention settings.

In Germany, certain business and tax records are subject to statutory retention requirements, commonly ranging from six to ten years depending on the type of record.

When personal data is no longer required, we delete or anonymize it, unless continued retention is legally required.

16. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, secure connections, authentication, and security measures provided by our e-commerce and technology partners.

However, no method of electronic transmission or storage is entirely secure.

We therefore cannot guarantee absolute security.

17. Children's Privacy

Our Services are not specifically directed at children.

We do not knowingly collect personal information from children where such collection would be prohibited by applicable law.

If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.

18. Your Data Protection Rights

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to applicable conditions and legal exceptions:

Right of Access – Article 15 GDPR

You may request information about the personal data we process concerning you.

Right to Rectification – Article 16 GDPR

You may request correction of inaccurate or incomplete personal data.

Right to Erasure – Article 17 GDPR

You may request deletion of your personal data where the applicable legal requirements are met.

Right to Restriction of Processing – Article 18 GDPR

You may request restriction of processing in certain circumstances.

Right to Data Portability – Article 20 GDPR

You may request to receive certain personal data in a structured, commonly used, machine-readable format.

Right to Object – Article 21 GDPR

You may object to certain processing activities, particularly processing based on legitimate interests and processing for direct marketing.

Right to Withdraw Consent – Article 7(3) GDPR

Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

Right to Lodge a Complaint – Article 77 GDPR

You have the right to lodge a complaint with a competent data protection supervisory authority.

You may exercise your rights by contacting:

lisa.deurer@ld-13.com

We may request appropriate information to verify your identity before responding to certain requests.

We respond within the time limits required by applicable law.

19. Additional Privacy Rights for Certain Jurisdictions

Depending on your place of residence, additional privacy rights may apply.

These may include rights to access, correct, delete, or obtain information about personal data, and to opt out of certain forms of targeted advertising or data sharing.

Where legally required, we provide additional mechanisms to exercise these rights.

For applicable data sharing opt-out requests, please visit:

https://ld-13.com/pages/data-sharing-opt-out

Where legally applicable and supported by our systems, recognized Global Privacy Control signals may also be treated as opt-out requests.

Further information about Global Privacy Control:

https://globalprivacycontrol.org/

20. Automated Decision-Making and Profiling

We may use automated tools for product recommendations, advertising audience selection, fraud detection, and personalization, subject to applicable legal requirements.

Where profiling is used for marketing purposes, it may involve evaluating website interactions, shopping preferences, and purchase activity.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals without complying with the applicable requirements of Article 22 GDPR.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, data processing practices, technology providers, or applicable legal requirements.

The current version will be published on our website with an updated revision date.

Where required by law, we will provide additional notice of material changes.

22. Contact and Complaints

If you have questions, concerns, or requests relating to the processing of your personal data, please contact:

LD-13 GmbH
Augsburger Str. 40
86157 Augsburg
Germany

Email: lisa.deurer@ld-13.com

Website: https://ld-13.com

You may also lodge a complaint with a competent data protection supervisory authority.

For private-sector companies based in Bavaria, the competent supervisory authority will generally be:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Website: https://www.lda.bayern.de

You are also entitled to contact another competent supervisory authority, particularly in the EU member state of your habitual residence, place of work, or the place of an alleged infringement.

LD-13 GmbH – Privacy Policy
Last updated: October 28, 2026