Privacy policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://afato-surfwear.com (the “Website”).

1. PERSONAL INFORMATION WE COLLECT
a) Device Information
When you visit our website, we automatically collect certain information about your device, including:

  • Web browser, IP address, time zone
  • Cookies installed on your device
  • Pages or products viewed
  • Referrer URL or search terms
  • Interactions with the website

Technologies used for collection:
Cookies, log files, web beacons, tags, and pixels (e.g., Meta Pixel, Google Analytics)
We refer to this data as “Device Information”.

b) Order Information
When you make or attempt to make a purchase, we collect:

  • Name
  • Billing and shipping address
  • Payment details (e.g. credit card info)
  • Email address and phone number

We refer to this data as “Order Information”.
“Personal Information” in this policy refers to both Device and Order Information.

2. HOW WE USE YOUR PERSONAL INFORMATION
We use your data to:

  • Fulfill and ship your order
  • Communicate with you
  • Screen orders for potential fraud
  • Provide personalized content and advertising (if you consent)

Legal bases under GDPR:

  • Art. 6(1)(b) – performance of a contract
  • Art. 6(1)(f) – legitimate interests (e.g. website security, analytics)
  • Art. 6(1)(a) – your consent (e.g. for marketing cookies)

3. SHARING YOUR PERSONAL INFORMATION
We share your information with third parties only when necessary:

  • Shopify (eCommerce platform; data hosted in the EU)
  • Payment providers: Shopify Payments, PayPal
  • Marketing & analytics tools (only after consent via cookie banner):
    • Google Analytics
    • Meta Pixel
    • Klaviyo (newsletter, banners, tracking)

Important: these services are only activated if you consent (via the cookie banner integrated into our Shopify platform / Shopify consent management). Without your consent, no non-essential cookies are loaded.

4. E-MAIL MARKETING & NEWSLETTER (KLAVIYO)
To send our newsletter and for e-mail marketing we use Klaviyo, a service provided by Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. We process in particular your e-mail address as well as your open and click behaviour in order to send our newsletters and measure their reach.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link in every e-mail or by message to hello@afatosurfwear.com.
Klaviyo also processes data in the USA. An adequate level of data protection is ensured by Klaviyo’s certification under the EU-US Data Privacy Framework and, additionally, by EU Standard Contractual Clauses. A data processing agreement pursuant to Art. 28 GDPR is in place with Klaviyo.

5. INSTAGRAM GIVEAWAYS & PROMOTIONS
When participating in an Instagram giveaway, we may collect:

  • Instagram username
  • If selected as a winner: name, email, shipping address

Purpose: selecting winners, prize delivery
Legal basis: Art. 6(1)(b) GDPR
Retention: only as long as needed – deleted afterward
Not affiliated with Instagram. Minimum age: 18 years.

6. TARGETED ADVERTISING
With your consent, we may use your data to show personalized ads via:

You may opt out via the Digital Advertising Alliance.

7. DO NOT TRACK
Our website does not respond to “Do Not Track” browser signals.
You can control your preferences via our cookie banner instead.

8. YOUR RIGHTS (EU/DSGVO)
If you reside in the EU or United Kingdom, you have the right to:

  • Access your personal data
  • Request correction, restriction or deletion
  • Request data portability
  • Withdraw any consent given

For requests, email: hello@afato-surfwear.com
Note: Your data may be processed in third countries such as the USA or Indonesia (Bali). Shopify hosts data in the EU, but certain tools (e.g. Meta, Google, Klaviyo) may involve transfers to third countries under appropriate safeguards.

9. DATA RETENTION
We retain your personal information only:

  • As long as necessary to fulfill contracts or comply with legal obligations
  • Until you request deletion or object to processing


10. COOKIE CONSENT
We use the cookie banner integrated into our Shopify platform (Shopify consent management / Customer Privacy). When you access the Website, a cookie banner appears through which you can make your selection.
Legal basis: Art. 6(1)(a) GDPR. Withdrawal: possible at any time via the cookie settings in the footer of the Website.

11. ELECTRONIC WITHDRAWAL FUNCTION
If you withdraw from your contract using our electronic withdrawal function (“Withdraw contract”), we process the data you enter there – your name, the details identifying the contract (e.g. order number) and the email address you provide – solely to process your withdrawal and to send the confirmation of receipt required by law. The withdrawal function is permanently available in the footer of our website during the withdrawal period. The legal basis is Art. 6(1)(c) GDPR (compliance with our legal obligation under Section 356a of the German Civil Code) and Art. 6(1)(b) GDPR (performance of the contract).

12. CHANGES TO THIS POLICY
We may update this Privacy Policy occasionally to reflect legal or technical changes.
The current version is always available on this page.

13. CONTACT
AFATO Surfwear
Diandra Stelljes & Fabian Tappert Textil GbR
Eutiner Straße 30
27751 Delmenhorst – Germany
hello@afato-surfwear.com