Privacy policy

We take the protection of your personal data seriously. The controller responsible for data processing on this website is Avarena, owner Ricarda Spielvogel. Full contact details can be found in our Imprint.

This Privacy Policy explains what personal data may be processed when you visit this website and for what purposes.

Last updated: September 2026

This website is provided using the Shopify platform. For merchants in the European Economic Area, the relevant provider is Shopify International Limited, Ireland.

Although products cannot currently be purchased through this website, personal data may be processed as part of the technical provision of the website. This may include: IP address, browser type and version, operating system and device information, date and time of access, pages and content accessed, referring URL, technical log and security information.

This data is processed in particular to provide the website, maintain its stability and security, and identify technical errors.

Where this processing is necessary for the operation and security of our website, it is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

Shopify may also process personal data outside the European Economic Area. According to Shopify, appropriate safeguards are used for relevant international data transfers. Further information about Shopify's processing of personal data can be found in Shopify's Privacy Policy.

We use Shopify Translate & Adapt, an application provided by Shopify, to make our website available in multiple languages.

The application is used to translate and localize website content. It is not an external analytics or marketing service used by us.

Our website may use cookies and similar technologies that are necessary for the technical provision and operation of the website.

We currently do not use additional third-party apps for analytics, advertising or marketing purposes.

If we introduce non-essential technologies in the future, we will update this Privacy Policy accordingly and, where legally required, obtain your consent before such technologies are used.

If you contact us by email, we process the personal data you provide for the purpose of handling and responding to your enquiry.

Depending on the nature of your enquiry, processing is based on Article 6(1)(b) GDPR where it relates to pre-contractual measures, or on our legitimate interest in responding to general enquiries pursuant to Article 6(1)(f) GDPR.

Personal data is generally retained only for as long as necessary for the respective processing purpose or as required by applicable statutory retention obligations.

Subject to the requirements of the GDPR, you have in particular the right to: access your personal data, correct inaccurate personal data, request deletion of personal data, restrict processing, receive your data in a portable format, object to certain processing, and withdraw consent at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

We may update this Privacy Policy if the functionality of our website, the services we use or applicable legal requirements change.

The current version will always be available on this website.