Privacy policy

Privacy Policy

Last updated: November 8, 2025

1. Data Controller

This website is operated by
Arlyc GmbH, under the brand name The Art of Deen.
Address: Bredenscheider Str. 119b, 45527 Hattingen, Germany
Email: info@arlyc.com

For the purposes of the General Data Protection Regulation (GDPR), Arlyc GmbH is the data controller responsible for the processing of your personal data.

2. General Information

We take the protection of your personal data very seriously.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit theartofdeen.com, use our services, or purchase products from us.

By using our website, you agree to the collection and processing of your personal data in accordance with this Privacy Policy.

3. Information We Collect

a) Information You Provide to Us

We collect personal information that you voluntarily provide, for example:

Name and surname
Billing and shipping address
Email address and phone number
Payment information (processed securely via our payment providers)
Order details (products purchased, prices, delivery status)
Messages or inquiries you send to us

b) Information Collected Automatically

When you visit our website, certain data are automatically collected, such as:

IP address
Browser type and version
Operating system
Date, time, and duration of your visit
Pages visited and click behavior
Cookies and similar tracking technologies

This information helps us ensure technical functionality, security, and user experience optimization.

c) Information from Third Parties

We may also receive information from our partners, such as:

Shopify Inc. (website hosting and e-commerce platform)
Payment service providers (e.g., PayPal, Stripe, Shopify Payments)
Shipping companies (e.g., DHL, Deutsche Post)
Analytics and advertising partners (e.g., Google Analytics, Meta Ads)

All third parties are contractually obligated to comply with GDPR requirements.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and legal bases:

Purpose	Legal Basis
To process and fulfill your orders, deliveries, and payments	Art. 6 (1)(b) GDPR – performance of a contract
Customer communication and support	Art. 6 (1)(b) & (f) GDPR
Website improvement and service optimization	Art. 6 (1)(f) GDPR – legitimate interest
Marketing and newsletters (if you have subscribed)	Art. 6 (1)(a) GDPR – consent
Compliance with legal obligations (e.g., tax and retention duties)	Art. 6 (1)(c) GDPR
Fraud prevention and website security	Art. 6 (1)(f) GDPR – legitimate interest

You may withdraw your consent to marketing communications at any time by contacting us or clicking “unsubscribe” in any of our emails.

5. Cookies

We use cookies and similar technologies to:

Ensure proper functioning of our website,
Analyze traffic and improve performance,
Personalize your experience and display relevant content.

Cookies are small text files stored on your device.
You can manage or disable cookies in your browser settings, but please note that some parts of the website may not function properly if you do so.

For details about Shopify’s use of cookies, visit:
👉 https://www.shopify.com/legal/cookies

6. Disclosure of Personal Data

We share personal data only when necessary to fulfill our contractual or legal obligations.
Typical recipients include:

Shipping and logistics providers
Payment processors
IT and hosting service providers (Shopify)
Tax authorities and other public institutions where legally required

We never sell your personal data.
Data may be shared with third parties for marketing purposes only if you have explicitly given consent.

7. International Data Transfers

Our store is hosted on Shopify Inc., headquartered in Canada.
Your data may therefore be processed in countries outside the European Union, such as Canada or the United States.

Shopify ensures adequate data protection through the EU Standard Contractual Clauses (SCCs).
More information is available here:
👉 https://www.shopify.com/legal/privacy

8. Data Retention

We store personal data only for as long as necessary to achieve the purposes stated above:

Order and contract data: until completion and expiration of statutory retention periods (typically 6–10 years)
Newsletter or marketing data: until you withdraw your consent
Technical log data: typically deleted after 30 days

After these periods, data are deleted or anonymized.

9. Your Rights (under GDPR)

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“Right to be forgotten”, Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)

To exercise these rights, contact us at:
📧 info@arlyc.com

You also have the right to lodge a complaint with your local data protection authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
👉 https://www.ldi.nrw.de/

10. Data Security

We apply appropriate technical and organizational security measures to protect your data against loss, misuse, or unauthorized access.
Payment data are transmitted exclusively via encrypted SSL/TLS connections.

Please note that no method of data transmission over the Internet is completely secure, but we strive to maintain the highest possible level of protection.

11. Children’s Privacy

Our website and services are not intended for individuals under the age of 16, and we do not knowingly collect personal information from minors.
If you believe that a minor has provided us with personal data, please contact us so we can delete the information.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in legal requirements or in our services.
The most current version will always be available on this page.

By continuing to use our website after updates, you agree to the revised version.

13. Contact Information

Arlyc GmbH
Bredenscheider Str. 119b
45527 Hattingen, Germany
Email: info@arlyc.com
Commercial Register: HRB 35582, Amtsgericht Essen
VAT ID: DE368348247