Privacy policy
Last updated: January 27, 2026
Vervyn operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Vervyn is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Controller
Harder & Tofern GbR
Cremon 11, 20457 Hamburg, Germany
E-Mail: info@vervyn.com
For the purposes of the General Data Protection Regulation (GDPR), we are the data controller.
General Information
We take the protection of your personal data very seriously.
Personal data is processed exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
This Privacy Policy explains the nature, scope, and purpose of the processing of personal data when using our website and services.
Data Processing When Visiting Our Website
When you visit our website, the hosting provider automatically collects and stores information in so-called server log files.
Processed data:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
Purpose:
Ensuring the technical functionality, stability, and security of the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
Hosting and Platform Provider
Our online store is hosted by:
Shopify Inc.
151 O’Connor Street, Ottawa, Ontario, Canada
Shopify processes personal data on our behalf as a data processor pursuant to Art. 28 GDPR.
Data transfers to third countries (e.g. Canada or the USA) are safeguarded by adequacy decisions or standard contractual clauses.
Further information: https://privacy.shopify.com
Contact Requests
If you contact us via email or contact form, your personal data will be processed for the purpose of handling your request.
Processed data:
- Name
- Email address
- Message content
Legal basis:
Art. 6(1)(b) GDPR (pre-contractual measures)
or Art. 6(1)(f) GDPR (legitimate interest in responding)
Orders and Contract Fulfillment
When placing an order, we process personal data necessary to conclude and perform the contract.
Processed data:
- Name
- Billing and shipping address
- Email address
- Order details
Purpose:
Order processing, delivery, customer support.
Legal basis:
Art. 6(1)(b) GDPR
Payment Service Providers
To process payments, personal data is transmitted to the selected payment service provider.
Possible data recipients:
- Maestro
- PayPal
- American Express
- Google Pay
- Klarna
- Mastercard
- Union Pay
- Visa
Processed data:
Payment details, transaction information.
Legal basis:
Art. 6(1)(b) GDPR
Shipping and Logistics Providers
For the delivery of orders, personal data is transmitted to shipping providers.
Processed data:
Name, shipping address.
Legal basis:
Art. 6(1)(b) GDPR
Print-on-Demand & External Fulfillment
For the production and shipment of art prints and posters, we work with:
theprintspace GmbH
Jahnstr. 18
40215 Düsseldorf
Germany
Processed data:
Name, shipping address, order details.
Legal basis:
Art. 6(1)(b) GDPR
Newsletter
If you subscribe to our newsletter, we process your email address for marketing communication.
Processed data:
Email address.
Legal basis:
Art. 6(1)(a) GDPR (consent)
You may withdraw your consent at any time.
Google Analytics
If you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Scope of Processing
Google Analytics uses cookies and similar technologies to collect and analyze information about how you use our website. This may include in particular:
-
Pages visited and user interactions
-
Time spent on the website
-
Traffic sources (referrer)
-
Device, operating system, and browser information
-
Approximate location (based on IP address)
We use Google Analytics with IP anonymization enabled. This means that your IP address is shortened by Google within the European Union or the European Economic Area before any transfer to third countries.
No Processing of Personally Identifiable Information (PII)
We have configured Google Analytics so that no directly identifiable personal data (such as names, email addresses, or phone numbers) is transmitted to Google.
Purpose of Processing
The processing is carried out to analyze user behavior, optimize our website, and improve our marketing activities.
Legal Basis
The processing is based exclusively on your consent in accordance with Art. 6(1)(a) GDPR and §25(1) TTDSG.
Data Transfers to Third Countries
It cannot be excluded that data may be transferred to Google servers in the United States. The USA does not provide a level of data protection equivalent to that of the EU. Google uses Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR as appropriate safeguards.
Storage Duration
Data sent by us and linked to cookies is automatically deleted after [e.g. 14 months]. Google Analytics cookies may be stored for up to 2 years.
Withdrawal of Consent
You can withdraw your consent at any time with effect for the future by adjusting your cookie settings on our website.
Alternatively, you can prevent the storage of cookies by adjusting your browser settings or by installing the browser add-on to disable Google Analytics:
https://tools.google.com/dlpage/gaoptout
Data Processing Agreement
We have entered into a data processing agreement with Google.
Further Information
Further information on how Google processes data can be found at:
https://policies.google.com/privacy
Cookies and Similar Technologies
General Information
This website (“vervyn.com") is operated by the Harder & Tofern GbR represented by Nina Harder und Fabian Tofern, Germany.
We use cookies and similar technologies on our website to ensure the proper operation of the site, provide certain functions, and improve the user experience. The following Cookie Policy informs you about the type, scope, and purpose of cookies used on this website in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TTDSG).
What Are Cookies?
Cookies are small text files that are stored on your device by your browser. They contain information that allows the browser to be recognized and enable certain website functionalities.
Cookies may be:
1. Session cookies, which are deleted after you close your browser
2. Persistent cookies, which remain stored on your device for a defined period
Which Cookies Do We Use?
Our online store is operated using the e-commerce platform Shopify. Shopify sets certain cookies by default that are necessary for operating the online shop.
a) Essential Cookies (Required)
These cookies are strictly necessary for the operation of the website and the online shop and cannot be disabled.
Purposes include:
1. Shopping cart and checkout functionality
2. Session management
3. Security and fraud prevention
4. Saving language and regional settings
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
Section 25(2) No. 2 TTDSG
b) Analytics Cookies
We use Shopify Analytics to obtain anonymized statistical information about the use of our online shop (e.g. page views, ordering behavior).
We currently do not use Google Analytics or comparable third-party analytics tools.
Legal basis:
Art. 6(1)(a) GDPR (consent)
Section 25(1) TTDSG
c) Marketing Cookies
We currently do not use marketing or tracking cookies, such as Facebook Pixel, Google Ads, or similar technologies.
If marketing cookies are used in the future, this will only occur after obtaining your prior consent via the cookie banner.
Legal basis:
Art. 6(1)(a) GDPR (consent)
Section 25(1) TTDSG
d) Personalization & Preference Cookies
These cookies enable additional features such as:
1. Saving language preferences (e.g. through translation tools)
2. Improving usability and presentation of the website
Legal basis:
Art. 6(1)(a) GDPR (consent)
Section 25(1) TTDSG
Third Parties & Payment Service Providers
During the checkout process, external payment service providers are integrated, in particular:
1. PayPal
2. Shopify Payments
These providers may set their own cookies. Data processing is carried out independently by the respective payment service provider.
Please refer to their individual privacy policies for more information.
Cookie Consent & Cookie Banner
We use a cookie consent banner provided by Shopify, which distinguishes between the following categories:
1. Required
2. Analytics
3. Marketing
4. Personalization
When you first visit our website, you can choose which categories of cookies you wish to allow.
Please note:
At present, there is no separate function to change or withdraw cookie consent after the initial selection. However, you can delete or block cookies at any time via your browser settings.
Managing Cookies via Your Browser
You can manage cookies at any time through your browser settings by:
1. deleting cookies
2. blocking cookies
3. allowing cookies only in certain cases
Please note that disabling essential cookies may limit the functionality of our online shop.
Changes to This Cookie Policy
We reserve the right to update this Cookie Policy to reflect changes in legal requirements or the technologies used. The current version published on this website shall apply.
Third-Party Links
Our website may contain links to external websites.
We have no influence on the content or data processing practices of third-party websites.
Data Retention
Personal data is stored only for as long as necessary to fulfill the respective purpose or in accordance with statutory retention obligations.
Your Rights
You have the following rights under the GDPR:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact us at:
info@vervyn.com
International Data Transfers
If personal data is transferred outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are applied.
Data Security
We implement appropriate technical and organizational security measures.
However, internet-based data transmission can never be completely secure.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect legal, technical, or operational changes.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at info@vervyn.com. For the purpose of applicable data protection laws, we are the data controller of your personal information.