Data protection

Privacy Policy

Last updated: September 2026

1. Data Controller

TST Marici GmbH

Wilhelm-Keim-Str. 1, 82031 Grünwald, Germany

Tel.: +49 (0) 163 4702089

Email: info@marici-pashminadelicates.com

2. Overview

The protection of your personal data is important to us. We process your data exclusively on the basis of the EU General Data Protection Regulation (GDPR) and applicable national data protection laws. This Privacy Policy also addresses the rights of California and other US state residents under applicable US privacy laws (CCPA and similar).

3. Your Rights (GDPR — EU Visitors)

If you are located in the EU, EEA, or UK, you have the following rights:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent at any time (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise these rights, contact us at info@marici-pashminadelicates.com.

4. Data We Collect & How We Use It

Cookies & Consent Management

Our website uses cookies. Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. All other cookies (marketing, analytics) are only stored after your consent via our cookie banner, based on Art. 6(1)(a) GDPR.

Server Log Files

When you visit our website, the following data is automatically collected: IP address, browser type and operating system, date and time of access. This data serves technical security purposes only.

Contact Enquiries

When you contact us, we process your information to handle your enquiry. Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR.

Orders & Customer Data

When you place an order, we process personal data to fulfil your contract. Legal basis: Art. 6(1)(b) GDPR. Order data is retained for statutory retention periods (generally 10 years under German commercial law).

Newsletter

We send newsletters only with your explicit consent (double opt-in). Legal basis: Art. 6(1)(a) GDPR. You may withdraw consent at any time via the unsubscribe link.

5. Analytics & Marketing Tools

We use the following services only with your prior consent (Art. 6(1)(a) GDPR):

  • Google Analytics 4 (with IP anonymisation) — Google Ireland Limited
  • Google Ads / Conversion Tracking — Google Ireland Limited
  • Meta Pixel / Facebook Pixel — Meta Platforms Ireland Ltd.

Data transfers to the USA are based on Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

6. Third-Party Tools & Services

  • Google Web Fonts — fonts loaded from Google servers
  • Shopify — e-commerce platform (data processed under Shopify’s DPA)
  • DHL — shipping provider (name, address, order details shared for fulfillment)
  • PayPal / Apple Pay — payment processing

7. Payment Providers

We use Shopify Payments (Stripe), PayPal, and Apple Pay for payment processing. These providers process payment data directly under their own privacy policies. We do not store complete card numbers. Legal basis: Art. 6(1)(b) GDPR.

8. Social Media

We maintain profiles on Instagram, TikTok, Pinterest, Facebook, and YouTube. When you visit our profiles, the privacy policies of the respective platform operators apply.

9. California Residents — CCPA Rights

If you are a resident of California, the CCPA as amended by the CPRA grants you the following rights:

Categories of Personal Information We Collect

  • Identifiers: name, email address, shipping/billing address, IP address
  • Commercial information: order history, products purchased
  • Internet activity: pages visited, referring URL (via analytics, with consent)
  • Geolocation: approximate location based on IP (for currency/market display)

Your CCPA Rights

  • Right to know what personal information we collect, use, disclose, and sell
  • Right to delete personal information we have collected (subject to legal exceptions)
  • Right to correct inaccurate personal information
  • We do not sell your personal information to third parties
  • We do not share your personal information for cross-context behavioral advertising without consent
  • We will not discriminate against you for exercising any CCPA rights

To exercise your CCPA rights, contact us at info@marici-pashminadelicates.com. We will respond within 45 days.

10. Other US State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, and other US states with comprehensive privacy laws may have similar rights. Please contact us at info@marici-pashminadelicates.com to exercise your rights. We will respond within 45 days.

11. Data Retention

Order-related personal data is retained for as long as required by law (generally 10 years for financial records). Marketing consent data is retained until consent is withdrawn. Analytics data is retained per tool settings (typically 14 months for Google Analytics).

12. International Data Transfers

Your personal data may be transferred to Germany, within the EU, and (for service providers such as Shopify, Google, Meta, PayPal, and DHL) to the United States. All transfers are carried out with appropriate safeguards under GDPR.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. The current version is always available at marici-pashminadelicates.com/en/pages/datenschutz.

14. Contact

TST Marici GmbH · info@marici-pashminadelicates.com · Wilhelm-Keim-Str. 1, 82031 Grünwald, Germany