Privacy policy
Who is responsible
The controller is SJB Handel e. K., Sommerfieldring 4, 14109 Berlin, Germany. Contact for privacy matters: support@sjb-handel.de. This policy covers this website and the app ItWorks House Number Check.
Visiting this website
This website sets no cookies and uses no statistics, no fonts and no scripts from third parties.
When you open a page, our hosting provider Google (Firebase Hosting) processes technical data in its access logs: IP address, date and time, the page requested and your browser type. We need this to deliver the website and to keep it secure (Art. 6(1)(f) GDPR). The logs are kept for [retention of hosting logs].
If you write to us
If you write to us by email, we process your email address and the content of your message to answer you (Art. 6(1)(b) and (f) GDPR). Our mailbox is provided by Google Workspace. We delete messages when they are no longer needed, at the latest after [retention of emails], unless the law requires us to keep them longer.
Using the app: data of merchants
When you install the app, we store for your store: the store address (…myshopify.com), access tokens issued by Shopify with their expiry time, and the time when Shopify last confirmed your subscription. We need this to operate the app for you (Art. 6(1)(b) GDPR).
Your settings (delivery countries, markers, message texts) are stored at Shopify with your store, not on our server.
To check your subscription, our server sends the identifier of your store to Shopify. Billing is handled by Shopify; we do not receive or store payment details.
Data of your customers
The check runs inside Shopify. It reads address line 1 and 2, the country, the delivery method and the checkout language of the current checkout, only for the moment of the check. These data are not sent to our server, and we do not store them.
Addresses you enter in “Test an address” stay in your browser.
The app does not read customers or orders from your store.
Logs of our server
Our server writes technical logs (time, requested path, status, store address). They contain no customer addresses and no access tokens. They are kept for 30 days.
Recipients and transfer to the USA
We use Google Cloud (Google Cloud EMEA Limited, Ireland, with Google LLC, USA) to run the app and its database. The data named under “Using the app” and “Logs of our server” are stored in a data centre in the USA.
The transfer is based on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and on the standard contractual clauses in Google’s data processing terms.
Shopify receives the data needed to provide the app in your store. We do not pass data on to anyone else.
How long we keep data
- Store address, access tokens and the time of the confirmed subscription: until you uninstall the app.
- Anything left after uninstalling: deleted when Shopify sends the deletion request, 48 hours after uninstalling.
- Server logs: 30 days.
- Emails: see “If you write to us”.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Write to support@sjb-handel.de. You can also lodge a complaint with a data protection authority, for example the one responsible for us: the Berlin Commissioner for Data Protection and Freedom of Information.
We make no automated decisions about you.
Changes
We update this policy when the app or the website changes. Last updated: [date of publication].