Privacy Policy

We are pleased about your interest in our online store. The protection of your personal data is important to us. Below we inform you about the processing of personal data when you use our website https://www.404modules.com in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

Gianluca Schröder
Wilhelmshavener Str. 68
10551 Berlin
Germany
Email: info@404modules.com
Phone: +49 1573 7987493

(As a small business you generally do not need a data protection officer — § 38 BDSG. If you have appointed one, name them here.)

2. Hosting and Store Platform (Shopify)

Our online store is hosted on the e-commerce platform Shopify, provided by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

When you visit our store, Shopify processes technical access data (IP address, date and time of access, browser type and version, operating system, referrer URL) in server log files. This processing is necessary to display the website, ensure its stability and security, and defend against attacks. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable operation of our store).

Shopify processes personal data on our behalf on the basis of a data processing agreement in accordance with Art. 28 GDPR. Data may be transferred to Shopify Inc. in Canada and to service providers in the USA. Canada is covered by an EU adequacy decision; transfers to the USA are safeguarded by the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses.

Further information: https://www.shopify.com/legal/privacy

3. Orders and Contract Processing

When you place an order, we process the data required for the conclusion and performance of the contract: first and last name, email address, billing address, order details, and payment status. Because we deliver digital products only, no physical shipping address is required.

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

We use your email address to send the order confirmation and to deliver the purchased digital files, and — where legally required — to inform you about updates to the purchased digital products (§ 327f BGB). Legal basis: Art. 6 (1) (b) and (c) GDPR.

Order and invoice data are retained for the statutory commercial and tax retention periods (§ 147 AO, § 257 HGB) and deleted thereafter.

4. Payment Providers

Depending on the payment method you choose at checkout, your payment data (name, payment details, order amount) is transmitted to the respective payment provider. Legal basis: Art. 6 (1) (b) GDPR. We do not receive or store your full card details.

(Delete the providers you do not use:)

  • Shopify Payments (processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland) — https://stripe.com/privacy
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg) — https://www.paypal.com/privacy
  • Klarna (Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden) — https://www.klarna.com/privacy
  • Apple Pay / Google Pay — payment is processed via your card provider through the wallet operator.

5. Cookies and Consent

Our store uses cookies and similar technologies. Strictly necessary cookies (e.g. cart, checkout, session, security, and your cookie preferences) are used on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR; they cannot be deactivated.

All non-essential cookies and technologies (statistics, marketing) are used only with your prior consent via our cookie banner (legal basis: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR). You can withdraw or change your consent at any time with effect for the future via the cookie settings link in the footer of our store.

6. Web Analytics

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze your use of our store (pages visited, session duration, approximate location based on shortened IP, device information). IP addresses are not stored by Google Analytics 4. Data may be transferred to Google LLC in the USA; the transfer is safeguarded by the EU–US Data Privacy Framework.

Legal basis: Art. 6 (1) (a) GDPR (consent via the cookie banner). You can withdraw your consent at any time via the cookie settings.

Further information: https://policies.google.com/privacy

7. Marketing Pixels

With your consent, we use the [Meta Pixel / TikTok Pixel / Google Ads conversion tracking] to measure the effectiveness of our advertising and to show you relevant ads. The provider receives information about your visit to our store (pages viewed, purchases, device and browser information) and may link it to your account with the respective platform.

Legal basis: Art. 6 (1) (a) GDPR (consent via the cookie banner), withdrawable at any time.

8. Newsletter

If you sign up for our newsletter, we process your email address to send you regular information about our products and offers. Registration uses the double opt-in procedure: you receive a confirmation email and are only subscribed once you confirm.

Legal basis: Art. 6 (1) (a) GDPR (consent). You can unsubscribe at any time via the link in every newsletter or by emailing [EMAIL ADDRESS].

Newsletter dispatch is handled by [NEWSLETTER PROVIDER, e.g. Klaviyo, Mailchimp, Shopify Email — name provider, address, privacy policy link] on our behalf (Art. 28 GDPR).

9. Contact by Email

If you contact us by email, we process the data you provide (email address, name, content of your message) to handle your inquiry. Legal basis: Art. 6 (1) (b) GDPR if your inquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries). We delete inquiries once they are fully resolved, unless statutory retention periods apply.

10. Your Rights

You have the following rights regarding your personal data:

  • Access (Art. 15 GDPR) — information about the data we process about you;
  • Rectification (Art. 16 GDPR) — correction of inaccurate data;
  • Erasure (Art. 17 GDPR) — deletion, unless statutory retention periods apply;
  • Restriction of processing (Art. 18 GDPR);
  • Data portability (Art. 20 GDPR);
  • Withdrawal of consent (Art. 7 (3) GDPR) — at any time with effect for the future;
  • Objection (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR.

To exercise your rights, contact us at info@404modules.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular the authority of your habitual residence or the authority responsible for us: [DATA PROTECTION AUTHORITY OF YOUR BUNDESLAND, e.g. "Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen"].

11. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Data Security

Our store is transmitted via TLS/SSL encryption (recognizable by "https://" and the lock symbol in your browser).

13. Changes to this Privacy Policy

We may update this privacy policy to reflect changes to our store or legal requirements. The current version is always available at [STORE URL]/policies/privacy-policy.

Last updated: 22.08.2026