1. Information on the Collection of Personal Data and Contact Details of the Controller

1.1 Below we inform you about the processing of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Büsra Bahadir
Schönaicher Straße 96
71032 Böblingen
Germany
E-Mail: contact@lil-miracle.de

1.3 For security reasons and to protect the transmission of personal data, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

2. Data Collection When Visiting Our Website

When you use our website for information purposes only, we collect only the data that your browser transmits to our server (so-called server log files). When you access our website, we collect the following data, which is technically necessary to display the website to you:

• Visited website
• Date and time at the moment of access
• Amount of data sent
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the stability and functionality of our website.

3. Hosting and Shop System (Shopify)

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland.

Shopify provides the technical infrastructure for our online shop. All data collected on our website is processed on Shopify’s servers.

As part of the use of Shopify, data may also be transferred to affiliated companies of Shopify outside the European Union. In such cases, transfers are based on appropriate safeguards, in particular standard contractual clauses of the European Commission or adequacy decisions (e.g. EU-US Data Privacy Framework).

Further information on data protection at Shopify can be found at:
https://www.shopify.com/legal/privacy

4. Consent Management and Cookies

This website uses the consent management platform “Consentmo” to obtain and document consent for the storage of certain cookies or the use of certain technologies in compliance with data protection regulations.

When you access the website, you can use the cookie banner to decide which categories of cookies you wish to allow.

We use:

Strictly necessary cookies
These are required to provide essential website functions (e.g. shopping basket, login, checkout).

Analytics and marketing cookies
These are only set if you have given your explicit consent.

The legal basis for strictly necessary cookies is Art. 6(1)(f) GDPR.
The legal basis for analytics and marketing cookies is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via the cookie settings.

5. Contact (Contact Form, Email, WhatsApp)

If you contact us (e.g. via contact form or email), personal data will be collected.

This data is used exclusively for the purpose of processing your enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

WhatsApp Chat

A WhatsApp chat button is integrated on our website (app “EAZE WhatsApp Button”). If you click this button, you will be redirected to WhatsApp. In doing so, data such as your IP address or browser information may be transmitted to WhatsApp.

Communication then takes place via the WhatsApp service.

Further information on data protection at WhatsApp can be found at:
https://www.whatsapp.com/legal/privacy-policy-eea

6. Data Processing for Orders

To process your order, we handle the following data:

• Name
• Billing address
• Delivery address
• Email address
• Order details
• Payment information

The processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract.

After the order has been fully processed, your data will be stored in accordance with statutory retention periods under tax and commercial law.

7. Shipping Service Provider

The goods are delivered by DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn).

For the purpose of delivery, we pass on your name and delivery address to DHL.

The legal basis for this is Art. 6(1)(b) GDPR.

8. Payment Service Providers

To process payments, we work with the following payment providers:

PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

Shopify Payments
Payment processing is carried out via Shopify Payments, technically provided by Stripe Payments Europe Ltd., Ireland.

Klarna
If you choose Klarna payment methods, payment processing is carried out via Klarna Bank AB, Sweden.

Your data is shared exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

9. Newsletter and Email Marketing

We use the Omnisend service to send our newsletter.

If you subscribe to our newsletter, we will use your email address exclusively to send you our newsletter.

Subscription takes place via a double opt-in procedure.

The legal basis is Art. 6(1)(a) GDPR.

You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by contacting us.

Reminder emails for abandoned orders

If you enter your email address during the ordering process without completing the order, we may send you a reminder email about your shopping basket.

These emails are intended to remind you of a started order.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in completing initiated orders).

You can object to receiving such emails at any time.

10. Product Reviews

We use the Loox service to display and manage product reviews.

After a purchase, customers may be invited by email to leave a review.

As part of a review, photos or videos may also be uploaded.

If you submit a review with image or video content, these may be published on our website together with your first name or initials.

The legal basis is Art. 6(1)(a) GDPR (consent) as well as Art. 6(1)(f) GDPR (legitimate interest in transparent customer reviews).

11. Google Tag Manager

This website uses Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage website tags via an interface.

The service itself does not set cookies or process any personal data, but merely triggers other tags.

Further information can be found at:
https://policies.google.com/privacy

12. Online Marketing

Meta Pixel (Facebook / Instagram)

This website uses the Meta Pixel of Meta Platforms Ireland Ltd.

With the help of the Meta Pixel, visitors to our website can be defined as a target group for advertisements.

Processing only takes place with your consent in accordance with Art. 6(1)(a) GDPR.

TikTok Pixel

We use the TikTok Pixel of TikTok Technology Limited, Ireland.

The pixel enables us to measure the effectiveness of TikTok advertising campaigns and target users more precisely.

Processing only takes place with your consent in accordance with Art. 6(1)(a) GDPR.

13. Data Subject Rights

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

14. Retention Period of Personal Data

The duration of storage depends on the respective legal basis, the purpose of processing and statutory retention periods.

Data processed for the performance of a contract will be stored in accordance with statutory retention periods.

Data processed on the basis of consent will be stored until such consent is withdrawn.

Status: March 2026