Last updated: January 1, 2026
This Privacy Policy describes how Gerboldt + Thomsen GbR (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from onira.shop (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services").
For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.
To provide the Services, we collect personal information from a variety of sources. The information collected depends on how you interact with our Site and Services.
In addition to the specific uses described below, we may use personal information to communicate with you, improve the Services, comply with legal obligations, enforce applicable terms, and protect our rights and the rights of our users.
Contact details (name, address, email address)
Order information (billing and shipping address, payment confirmation)
Account information (username, password)
Customer support communications
Providing certain information may be required to use specific features of the Services.
We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies and similar technologies. This may include IP address, browser type, device information, and interaction data.
We may receive personal information from third parties, including:
Shopify, which powers our online store
Payment processors for payment handling
Shipping and fulfillment partners
Analytics and marketing service providers
All such information is handled in accordance with this Privacy Policy.
To process orders, payments, shipping, returns, account management, and customer communication.
We may send marketing communications where legally permitted.
For users in the EEA, the legal basis is Art. 6 (1)(f) GDPR (legitimate interest) or consent where required.
To protect our Site, customers, and business.
Legal basis for EEA users: Art. 6 (1)(f) GDPR.
To provide customer support and improve our Services.
Legal basis for EEA users: Art. 6 (1)(f) GDPR.
We use cookies and similar technologies to operate and improve our Site, analyze usage, and remember preferences.
For details on Shopify-related cookies, see:
https://www.shopify.com/legal/cookies
You may manage cookie preferences via your browser settings.
We may share personal information with:
Service providers (IT, payment, shipping, analytics)
Business and marketing partners
Affiliates
Authorities where legally required
Parties involved in business transactions (e.g. merger)
We do not sell personal data.
Our Site may link to third-party websites. We are not responsible for their privacy practices or content.
Our Services are not intended for children, and we do not knowingly collect personal data from children.
We implement appropriate technical and organizational measures to protect personal data.
Data is retained only as long as necessary for legal, contractual, or operational purposes.
Depending on your location, you may have rights including:
Access
Correction
Deletion
Data portability
Restriction of processing
Objection to processing
Withdrawal of consent
Requests can be submitted using the contact details below.
We may need to verify your identity before responding.
Your personal information may be processed outside your country of residence.
For transfers outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses, unless adequacy decisions apply.
You may lodge a complaint with your local data protection authority if you believe your rights have been violated.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Gerboldt + Thomsen GbR
Steinberg 147
24107 Kiel
Germany
For the purposes of applicable data protection laws, Gerboldt + Thomsen GbR is the data controller of your personal information.