Privacy policy

1. Controller

Fabian Jacobi (SLICERLAB)
Vogelsangstraße 108, 70197 Stuttgart, Germany
Email: mail@slicerlab.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview and legal bases

We process personal data only insofar as this is necessary to operate the online shop and process your order, we are legally obliged to do so, or you have given your consent. The legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation, e.g. tax retention) and (f) (legitimate interests). Storing information on your device and accessing it is governed by § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): we only use cookies and similar technologies that are not technically necessary with your consent.

Where data is transferred to countries outside the EU/EEA, this is based on an adequacy decision of the European Commission (e.g. Canada, the United Kingdom, Switzerland, and the USA for companies certified under the EU-US Data Privacy Framework) or on EU standard contractual clauses (Art. 46 GDPR).

3. Shop system and hosting: Shopify

Our online shop runs on the Shopify platform. The provider for merchants in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes on our behalf all data generated when you visit the online shop and place orders. Data may be transferred to Shopify Inc. in Canada and to sub-processors, including in the USA (see section 2). We have a data processing agreement with Shopify (Art. 28 GDPR).

When you visit the online shop, technically necessary data is processed (IP address, date and time, page visited, referrer, browser, operating system) to deliver the pages, detect misuse and ensure security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the shop.

4. Cookies and consent management

We use technically necessary cookies (e.g. cart, language setting, checkout, security, storing your cookie choice) on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

We only use all other cookies and similar technologies (statistics, marketing, personalisation) if you consent via our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). The banner uses Shopify's consent management (see section 3). Your choice is stored in a cookie (usually for 12 months) so that we can respect and prove it (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

You can withdraw or change your consent at any time with effect for the future via the "Cookie settings" / "Privacy settings" link in the footer of the website.

5. Orders, customer account and withdrawal

When you place an order, we process your name, billing and delivery address, email address, telephone number if provided, order and payment data in order to perform the contract (Art. 6(1)(b) GDPR). Mandatory fields are marked; without this information we cannot process your order.

If you create a customer account, we store your data for future orders until you delete the account or ask us to delete it (Art. 6(1)(b) GDPR).

If you withdraw from a contract (including via our online withdrawal function), we process your name, the order number, your email address and the content of your statement in order to handle the withdrawal and confirm its receipt (Art. 6(1)(b) and (c) GDPR). For the online withdrawal function we use the app "EU Widerrufsbutton" by PCW Projects, Nuremberg, Germany.

6. Payment service providers

Depending on the payment method you choose, we transmit the data required for payment to the respective provider (Art. 6(1)(b) GDPR):

• Shopify Payments / Shop Pay (cards, Apple Pay, Google Pay and other methods): Shopify (see section 3); payments are processed by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
• Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For invoice or instalment payments, Klarna may carry out an identity and credit check; details in Klarna's privacy notice.

The payment service providers partly process your data under their own responsibility, e.g. for fraud prevention and to meet legal obligations.

For PayPal buyer protection, we transmit the tracking number and carrier to PayPal using the app "Synctrack PayPal Tracking" by Synctrack, 18/11 Thai Ha, Hanoi, Vietnam. Order number, tracking number and carrier are transferred to Vietnam on the basis of EU standard contractual clauses (Art. 46 GDPR). The legal basis is Art. 6(1)(b) and (f) GDPR (payment processing and proof of delivery).

7. Shipping

For delivery, we transmit your name and delivery address to the shipping provider: Deutsche Post AG / DHL Paket GmbH, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany (Art. 6(1)(b) GDPR). We create shipping labels with the app "Post & DHL Shipping" by Deutsche Post AG.

We do not pass on your email address to the shipping provider. For deliveries outside the EU, we must also transmit the contents of the parcel and, where the shipping provider requires it, your telephone number for the customs declaration (Art. 6(1)(b) and (c) GDPR).

8. Accounting

To meet our tax and commercial law obligations, we transmit order and invoice data (name, address, order items, amounts) to our accounting software Lexware Office by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany, via the app "Lexware Office+" by Appify, Ottensoos, Germany. The legal basis is Art. 6(1)(c) GDPR.

9. Contact

If you write to us by email or via the contact form, we process your details to answer your enquiry (Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR).

10. Product reviews with Judge.me

After an order, we may ask you by email to review the products you bought. We use Judge.me Ltd, 1–3 Worship Street, London EC2A 2AB, United Kingdom (EU adequacy decision), for this and transmit your name, email address and the products purchased. The legal basis for the review request is Art. 6(1)(f) GDPR in conjunction with § 7(3) of the German Unfair Competition Act (UWG); our legitimate interest is receiving customer feedback on our products. You can object at any time, e.g. via the unsubscribe link in the email or by emailing us. Published reviews show your name in the form you chose.

11. Google Analytics 4 (only with consent)

With your consent, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to analyse the use of the online shop statistically (e.g. pages visited, time spent, device type, approximate location, purchase events). Cookies are set and data is transferred to Google, including to the USA (see section 2). Google Analytics 4 does not store full IP addresses. Event data is deleted after 14 months at the latest. We use Google Consent Mode: without your consent, no analytics cookies are set. Legal basis: § 25(1) TDDDG, Art. 6(1)(a) GDPR.

12. Google & YouTube, Google Merchant Center (conversion measurement only with consent)

We transmit our product data (no customer data) to Google so that our products can be shown in Google Search, Google Shopping and on YouTube. With your consent, we also measure whether visitors come to us via these listings or ads and make a purchase (conversion measurement). Provider: Google (see section 11). Legal basis: § 25(1) TDDDG, Art. 6(1)(a) GDPR.

13. Retention period

We delete personal data as soon as it is no longer needed for its purpose and no legal retention obligation applies. We keep invoices and other accounting vouchers for 8 years, commercial and business letters for 6 years, and books and records for 10 years (§ 147 German Fiscal Code, § 257 German Commercial Code). The period starts at the end of the calendar year in which the document was created.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation. You can object to the use of your data for direct marketing at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

An email to mail@slicerlab.com is sufficient for all requests.

15. No automated decision-making

We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR. For Klarna's credit check, see section 6.

Last updated: 25 October 2026