Information about the processing of personal data when you use the Thermal Hero Cooling Store.
The controller responsible for processing personal data in connection with the Thermal Hero Cooling Store is:
IPROJEX GmbH
Osterbrooksweg 69
22869 Schenefeld
Germany
Phone: +49 40 1800 3910
Email: info@thermalhero.com
For privacy-related questions or to exercise your data protection rights, please contact us using the details above.
This Privacy Policy applies when you visit or use thermalhero-coolingstore.com, create a customer account, place an order, request a return, contact us, subscribe to marketing communications or otherwise interact with the services offered through the store.
The store is operated by IPROJEX GmbH under the Thermal Hero brand and is hosted on the Shopify platform.
Depending on how you use the store, we may process the following categories of personal data:
Our store is hosted by Shopify. Shopify provides the ecommerce platform, checkout, customer accounts, security, fraud-prevention and related technical services required to operate the store.
For customers in the European Economic Area, the United Kingdom and Switzerland, personal data is initially processed by Shopify International Ltd., Ireland. Shopify may process data through affiliated companies and subprocessors in other countries, including Canada and the United States. Shopify states that it uses recognised transfer mechanisms, including Binding Corporate Rules, adequacy decisions and Standard Contractual Clauses where applicable.
Shopify may also process data as an independent controller for certain enhanced platform functions. Further information and available privacy controls are provided through Shopify's consumer privacy information and privacy portal.
When you place an order, create an account or contact us, we process the information required to provide the requested service. Mandatory fields are marked during checkout or in the relevant form. Without the required information, we may be unable to conclude or perform the contract, deliver the goods, issue a refund or answer your request.
Order-related communications, including order confirmations, shipping notices, safety information, invoices and return confirmations, are transactional and may be sent even if you have not subscribed to marketing messages.
Payments are processed through Shopify and the payment service selected at checkout. Depending on availability and your location, this may include card payments, Shopify Payments, PayPal, Klarna, Apple Pay, Google Pay, Shop Pay or other methods displayed during checkout.
The relevant payment provider processes the data necessary to authorise, execute and secure the transaction and may act as an independent controller under its own privacy notice. We receive transaction status, limited payment information and identifiers needed for accounting, fulfilment, fraud prevention and refunds.
To deliver your order, we disclose the necessary recipient, address, contact and shipment data to the carrier or fulfilment partner used for the order. Depending on destination and service level, carriers may include DHL, Deutsche Post, UPS, FedEx, Hermes or another carrier shown during checkout or in the shipment confirmation.
Carriers process the information required to transport, track and deliver the shipment and may process it under their own legal obligations and privacy notices.
The store uses cookies and similar technologies such as pixels, local storage and tags. Strictly necessary technologies are used to provide the shopping cart, checkout, security, account login, language and consent settings. Other technologies may be used for analytics, performance measurement and advertising only where permitted and, where required, after consent.
You can manage or withdraw cookie consent through the consent banner or privacy settings available in the store. Withdrawing consent does not affect processing that occurred before withdrawal. Blocking necessary cookies may prevent parts of the store from functioning correctly.
Where enabled and subject to the required consent, we may use Shopify analytics and services from Google, such as Google Analytics, Google Ads conversion measurement and the Google & YouTube sales channel, including Google Merchant Center. These services may process device, browser, cookie, usage, order and conversion data to measure store performance, attribute purchases and display or optimise advertising.
Google services for users in the European Economic Area and Switzerland are generally provided by Google Ireland Limited. Data may also be processed by Google group companies and service providers outside the EEA using applicable safeguards.
If Meta or another advertising platform is activated, the relevant consent-based pixel or conversion technology may process comparable usage and conversion data. The active technologies and choices available to you should be reflected in the store's cookie banner.
We send email marketing only where permitted by law, normally on the basis of your consent. You can unsubscribe at any time by using the unsubscribe link in the message or by contacting us. We may retain limited suppression data to ensure that your opt-out is respected.
Unsubscribing from marketing does not stop necessary transactional communications concerning your account, orders, safety notices, returns or legal obligations.
We disclose personal data only where necessary and lawful, including to:
Some service providers may process data outside Germany or the European Economic Area. Where the receiving country does not benefit from an adequacy decision, transfers are protected by recognised safeguards such as Standard Contractual Clauses, Binding Corporate Rules or another lawful transfer mechanism, together with supplementary measures where required.
We retain personal data only for as long as necessary for the relevant purpose. Order, invoice, payment and accounting records may be retained for statutory commercial and tax retention periods. Customer-service and contractual records may be retained for the applicable limitation period and for the establishment, exercise or defence of legal claims.
Consent records are retained for as long as needed to demonstrate lawful consent. Data no longer required is deleted or anonymised unless continued storage is required by law.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The store uses encrypted HTTPS connections. No internet transmission or storage system can, however, be guaranteed to be completely secure.
Subject to the conditions of applicable law, you may have the right to:
To exercise these rights, contact us at info@thermalhero.com. We may need to verify your identity before completing a request.
You may lodge a complaint with the supervisory authority responsible for IPROJEX GmbH:
Independent State Centre for Data Protection Schleswig-Holstein (ULD)
Holstenstrasse 98
24103 Kiel
Germany
Telephone: +49 431 988-1200
Email: mail@datenschutzzentrum.de
You may also contact the supervisory authority in the EU or EEA member state of your habitual residence, place of work or the place of the alleged infringement.
The store is not directed at children. We do not knowingly collect personal data from children who are not legally able to enter into the relevant transaction. If you believe that a child has provided personal data without the required authorisation, please contact us.
The store may link to websites or services operated by third parties. Their processing is governed by their own privacy notices. We are not responsible for the content, security or privacy practices of third-party websites.
We may update this Privacy Policy to reflect changes to the store, service providers, legal requirements or our processing activities. The current version and update date will be published on this page.
IPROJEX GmbH
Osterbrooksweg 69
22869 Schenefeld
Germany
Telephone: +49 40 1800 3910
Email: info@thermalhero.com
