PRIVACY POLICY

Last updated: June 1, 2026

POESIE operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). The Services are offered by Poesie Ventures GmbH and are powered by Shopify, which enables us to provide the online store infrastructure and related ecommerce functionality.

This Privacy Policy explains how we collect, use, process, store and disclose your personal data when you visit, use, or make a purchase or other transaction via our Services, or otherwise communicate with us.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.

1.  Controller Information

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (“GDPR”) is:

Poesie Ventures GmbH
Lerchenstraße 16 a
22767 Hamburg
Germany

Represented by:
Manuel Tobias Fischer

Commercial Register:
Commercial Register B of the Local Court Hamburg
HRB 194729

For privacy-related inquiries, please contact:
hello@drinkpoesie.com


2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional, secure and user-friendly website, as well as our content, products and services.

“Personal data” means any information relating to an identified or identifiable natural person. It does not include data that has been anonymized or irreversibly de-identified.

Where applicable, processing is carried out in accordance with the GDPR and other applicable data protection laws.

3. Personal Data We Collect

Depending on how you interact with our Services, we may collect and process the following categories of personal data:

Contact details
such as your name, billing address, shipping address, phone number and email address

Financial and payment information
such as payment method, transaction details, payment confirmation and related billing information 

Payment data is generally processed by our payment service providers and Shopify. We do not necessarily store full card details ourselves.

Account information
such as login credentials, preferences, saved settings and security-related information

Transaction information
such as products viewed, cart contents, wishlist items, purchases, returns, exchanges, cancellations and past orders

Communications with us
such as inquiries by email or customer support messages

Device and technical information
such as IP address, browser type, operating system, device identifiers, language settings, access times and referrer URL

Usage information
such as pages visited, interactions on the website, session duration and navigation behavior

Marketing and analytics data
where consent is given, such as cookie identifiers, advertising identifiers, campaign attribution and website behavior across sessions


4.  Sources of Personal Data

We may collect personal data from the following sources:

Directly from you
when you place an order, create an account, contact us, subscribe to communications, or otherwise provide information to us

Automatically through the Services
through your browser, device, cookies, tracking technologies and server log files when you visit or use the website

From service providers
such as Shopify, payment processors, analytics providers, fulfillment providers, customer support tools and hosting providers

From partners or other third parties
including advertising and social media partners where applicable

5.  Purposes and Legal Bases for Processing

We process your personal data for the following purposes and, where required, on the following legal bases under Art. 6 GDPR:

a) Providing the Services and fulfilling contracts

We use your data to:

  • process orders and payments
  • provide products and services
  • arrange shipping and delivery
  • handle returns, exchanges and cancellations
  • manage customer accounts
  • communicate regarding orders and service-related issues

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract)

b) Website functionality, security and technical stability

We process technical and log data to:

  • provide the website securely and efficiently
  • prevent misuse and fraud
  • maintain system integrity and security
  • troubleshoot errors and ensure service stability

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

c) Customer communication and support

We process your data to respond to inquiries and maintain our customer relationship.

Legal basis:

  • Art. 6 para. 1 lit. b GDPR, where the communication relates to a contract or pre-contractual request
  • Art. 6 para. 1 lit. f GDPR, for general inquiries and support

d) Marketing and advertising

We may use your personal data to send promotional communications and display advertising, including personalized advertising, where permitted.

Legal basis:

  • Art. 6 para. 1 lit. a GDPR (consent), where required
  • Art. 6 para. 1 lit. f GDPR (legitimate interest), where lawful for direct marketing under applicable law

e) Analytics and performance measurement

We use analytics tools to understand how visitors use our website and to improve our Services.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent), where required

f) Legal obligations and enforcement

We may process your data to comply with legal obligations, defend legal claims, investigate potential violations, or respond to lawful requests by authorities.

Legal basis:

  • Art. 6 para. 1 lit. c GDPR (legal obligation)
  • Art. 6 para. 1 lit. f GDPR (legitimate interest)


6. Hosting, Shopify and Content Delivery

This website is hosted in Germany and operated using the Shopify platform.

Shopify Inc.
151 O’Connor Street
Ottawa, Ontario K2P 2L8
Canada

Shopify provides the ecommerce infrastructure for our store and may process personal data to host the website, provide checkout functionality, process orders, store customer information, and improve its services.

When visiting or using this website, technical and usage-related data may be processed by Shopify and related service providers, including:

  • IP address
  • browser information
  • device information
  • access times
  • referrer URL
  • usage and interaction data

This processing is necessary to provide the Services and is based on Art. 6 para. 1 lit. b GDPR and/or Art. 6 para. 1 lit. f GDPR.

Further information about Shopify’s processing of personal data can be found here:
https://www.shopify.com/de/legal/datenschutz
and
https://privacy.shopify.com/en


7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.

Information you submit through our store may be transmitted to and shared with Shopify, as well as third parties that may be located outside your country of residence. In addition, we may use certain Shopify features that help us improve and grow our business, including features that use data related to your interactions with our store and, in some cases, with Shopify and other merchants.

In such cases, Shopify may act as an independent controller for certain processing activities. For more information about how Shopify uses personal data and how you may exercise rights directly with Shopify, please visit:


8. Access Data and Server Log Files

When you access this website, information is automatically collected and stored in server log files. This may include:

  • IP address
  • browser type and version
  • operating system
  • date and time of access
  • pages visited
  • referrer URL

This processing is based on our legitimate interest in ensuring technical stability, security and proper website functionality pursuant to Art. 6 para. 1 lit. f GDPR.


9. Consent Management and Cookies

This website uses a consent management solution to manage user consent for cookies and similar technologies.

Where legally required, non-essential cookies and tracking or marketing technologies are only activated after you have given your consent. You may change or withdraw your consent at any time with future effect through the consent settings available on the website.

Cookies and similar technologies may be used for:

  • essential website functionality
  • shopping cart and checkout features
  • storing preferences
  • measuring website performance
  • analytics
  • advertising and conversion tracking


10. Google Tag Manager

This website uses Google Tag Manager.

Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Tag Manager itself does not typically store personal data, but facilitates the integration and management of tags and scripts on our website.

Legal basis: Art. 6 para. 1 lit. f GDPR for technically necessary implementation, and Art. 6 para. 1 lit. a GDPR where tags managed through it require consent.

Further information:
https://support.google.com/tagmanager


11. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google.

Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors interact with our website. The following data may be processed:

  • IP address (shortened/anonymized where applicable)
  • device information
  • browser information
  • pages visited
  • session duration
  • interactions on the website

Google Analytics is only activated with your consent.

Legal basis: Art. 6 para. 1 lit. a GDPR

Further information:
https://policies.google.com/privacy


12. Google Search Console

We use Google Search Console to monitor and improve the visibility of our website in Google Search results.

Google Search Console itself does not generally process personal data of website visitors in a directly identifiable way for our purposes.

Further information:
https://search.google.com/search-console/about


13. Meta Pixel and Meta Conversions API

We may use Meta Pixel and Meta Conversions API to measure advertising effectiveness and improve our marketing activities.

Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

This may involve processing of:

  • IP address
  • browser information
  • device information
  • website interactions
  • conversion and event data

Such processing only takes place after you have provided consent, where required.

Legal basis: Art. 6 para. 1 lit. a GDPR

Further information:
https://www.facebook.com/privacy/policy


14. Instagram

Our website may contain links to Instagram.

Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

If you visit Instagram or interact with Instagram content, personal data may be processed by Meta independently under its own privacy policy.

Further information:
https://privacycenter.instagram.com/


15. Contact Requests

If you contact us via email or otherwise, we process the information you provide solely for handling your inquiry and related communication.

Legal basis:

  • Art. 6 para. 1 lit. b GDPR, if your request relates to an existing or potential contractual relationship
  • Art. 6 para. 1 lit. f GDPR, for other inquiries


16. How We Disclose Personal Data

We may disclose personal data to third parties where necessary and legally permitted, including:

  • Shopify and related providers for operation of the store
  • payment service providers for payment processing
  • shipping and fulfillment providers for order delivery
  • IT, cloud and hosting providers
  • analytics and marketing providers
  • customer support providers
  • professional advisors such as lawyers, accountants or auditors
  • authorities or courts, where legally required
  • affiliates or successors in connection with a business transaction such as a merger, restructuring or sale

We may also disclose information where you direct us to do so, or where disclosure is necessary to protect our rights, enforce our terms, prevent fraud, or comply with legal obligations.


17. International Data Transfers

Please note that personal data may be transferred to, stored in, or processed in countries outside your country of residence, including outside the European Economic Area (“EEA”) or the United Kingdom.

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards, including:

  • adequacy decisions, where available
  • Standard Contractual Clauses approved by the European Commission
  • equivalent UK transfer mechanisms where applicable


18. Data Retention

We store personal data only for as long as necessary for the respective processing purpose, including:

  • to provide the Services
  • to fulfill contracts and process transactions
  • to comply with legal retention obligations
  • to resolve disputes
  • to enforce legal claims and agreements

Retention periods may vary depending on the nature of the data and the applicable legal requirements.


19. Protection of Minors / Alcohol-Related Content

Our products and content are intended exclusively for persons aged 18 years or older.

The Services are not intended for minors, and we do not knowingly collect personal data from children or minors. If you believe that a minor has provided us with personal data, please contact us so that we can review and delete the data where appropriate.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “sell” or “share” personal information of individuals under 16 years of age as those terms may be defined under applicable law.


20. Security of Your Information

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse or alteration.

However, no method of transmission over the internet and no storage system is completely secure. Therefore, we cannot guarantee absolute security. We recommend that you do not transmit sensitive information through unsecured channels.


21. Your Rights

Depending on the law applicable to your place of residence, including under the GDPR, you may have the following rights regarding your personal data:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

If you are located in the UK or EEA, you may also have the right to object to certain processing activities and request restriction of processing.

You may also unsubscribe from marketing emails at any time by using the unsubscribe link in the respective email. Even if you opt out of marketing messages, we may still send service-related messages, such as order confirmations or account notices.

To exercise your rights, please contact us using the contact details listed above. We may need to verify your identity before processing your request.


22. Complaints

If you have concerns or complaints regarding the way we process your personal data, please contact us first using the contact information above.

You also have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

For the EEA, a list of supervisory authorities can be found here:
https://edpb.europa.eu/about-edpb/about-edpb/members_en


23. Third-Party Websites and Links

Our Services may contain links to websites or platforms operated by third parties. If you follow such links, please note that we are not responsible for the privacy practices, content or security of those third-party services. We recommend reviewing their privacy policies separately.

This also applies to public or semi-public platforms such as social networks where information may be visible to others.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes.

The current version published on this website shall apply. We will update the “Last updated” date and provide additional notice where required by law.


25. Contact

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your rights, please contact us at:

Poesie Ventures GmbH
Lerchenstraße 16 a
22767 Hamburg
Germany

📧 hello@drinkpoesie.com