1. General information

The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process when you visit our website and use our online shop, for what purposes this is done, and what rights you have.

Personal data is any data with which you can be personally identified, for example, name, address, email address, IP address, order data, or payment information.

2. Controller

The controller for data processing on this website is:

Thomas Pilgrim
August-Engel-Str. 24
59872 Meschede
Germany
Email: info@pilgrim.im

3. Hosting and Shop System Shopify

This website is operated as an online shop via Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

When you visit our website and use the shop, data is processed that is necessary for the operation, the display of the website, the processing of orders, and technical security. This may include, in particular, IP address, device information, browser information, pages accessed, date and time of access, order data, contact data, and payment information.

Processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR, insofar as it is necessary for the implementation of pre-contractual measures or for the fulfillment of the contract. Insofar as processing is necessary for the secure and stable provision of the website, it takes place on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable operation of our online shop.

Shopify may also process data on servers outside the European Union. Insofar as data is transferred to third countries, this is done on the basis of suitable data protection guarantees, in particular standard contractual clauses.

4. Collection of access data and server log files

When you access our website, technical data is automatically processed. This includes, in particular:

• IP address
• Date and time of access
• Accessed page or file
• Browser used
• Operating system used
• Referrer URL
• Amount of data transferred

This data is required to correctly display the website, ensure technical stability, and detect misuse or attacks. The legal basis is Art. 6 Para. 1 lit. f GDPR.

5. Contact by email

If you contact us by email, we process the data you provide, in particular your email address, your name, the content of your message, and any other voluntary information.

Processing takes place to handle your request. The legal basis is Art. 6 Para. 1 lit. b GDPR if your request is related to an order or pre-contractual measures. In all other cases, processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in answering your request.

The data will be deleted as soon as your request has been fully processed, provided there are no legal retention obligations preventing deletion.

6. Orders in the online shop

If you place an order in our online shop, we process the data required for the order. This includes, in particular:

• Name
• Billing and shipping address
• Email address
• Order data
• Payment data
• If applicable, telephone number, if voluntarily provided or required for delivery

Processing takes place for contract fulfillment, delivery of goods, payment processing, invoicing, and handling of possible queries. The legal basis is Art. 6 Para. 1 lit. b GDPR.

In addition, we process certain data to fulfill legal obligations, in particular tax and commercial law retention obligations. The legal basis is Art. 6 Para. 1 lit. c GDPR.

7. Payment processing

Payment service providers may be used for payment processing. Depending on the payment method offered in the shop and selected by you, payment data may be transmitted to the respective payment service provider.

The processed data may include name, billing address, email address, order amount, payment method, and transaction-related information. Processing takes place for contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.

Please also note the data protection information of the respective payment service provider.

8. Shipping and delivery

To deliver your order, we pass on the necessary data to the commissioned shipping service provider. This includes, in particular, name, delivery address, and, if applicable, email address or telephone number, if these are required for delivery or shipment notification.

Processing takes place for contract fulfillment in accordance with Art. 6 Para. 1 lit. b GDPR.

9. Customer account

If a customer account is offered in the shop and you create such an account, we process the data required for this, for example, name, email address, addresses, and order history.

Processing takes place to provide the customer account and to facilitate the processing of future orders on the basis of Art. 6 Para. 1 lit. b GDPR.

You can request the deletion of your customer account at any time, provided there are no legal retention obligations preventing it.

10. Cookies and comparable technologies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your end device.

Some cookies are technically necessary for the website and the online shop to function. These include, for example, shopping cart functions, login functions, security functions, and language settings. The processing of technically necessary cookies takes place on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the functional and secure provision of our website.

Insofar as cookies or comparable technologies are used for analysis, marketing, or external media, this only happens on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

If a cookie banner or consent tool is used, you can change or revoke your selection there.

11. Analytics and marketing services

If analytics or marketing services are used on this website, for example for reach measurement, conversion measurement or for displaying personalized advertising, this is generally only done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Depending on the service, information about your user behavior, visited pages, technical device information and interactions with our website may be processed.

Please review this section and specifically add the services used here, such as Google Analytics, Google Ads, Meta Pixel, TikTok Pixel, Pinterest Tag or similar services, if they are actively used.

12. Newsletter

If you subscribe to a newsletter, we process your email address and any other voluntary information to send you the newsletter.

Registration is only with your consent. The legal basis is Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time, for example via the unsubscribe link in the newsletter or by email to info@pilgrim.im.

If no newsletter is currently offered, this section can be removed.

13. Embedded content and external services

Our website may include content or services from third-party providers, such as videos, maps, fonts, payment services, review functions, or social media content.

When accessing such content, personal data, in particular IP address and technical device information, may be transmitted to the respective providers. Insofar as consent is required for this, the integration will only take place on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Please review this section and specifically add the services used, for example, YouTube, Google Maps, Instagram, Facebook, TikTok, Trustpilot, Judge.me, Klaviyo or other apps, if they are used.

14. Storage duration

We store personal data only as long as it is necessary for the respective purposes or if legal retention obligations exist.

Order and invoice data are regularly stored for the legally prescribed periods due to commercial and tax law requirements. Data from inquiries are deleted as soon as the inquiry has been finally processed, provided there are no legal obligations or legitimate interests preventing deletion.

15. Recipients of personal data

Personal data may be passed on to service providers and contractors as required. This includes, in particular:

• Shop and hosting service providers
• Payment service providers
• Shipping service providers
• IT and maintenance service providers
• Tax consultants or accounting service providers
• Authorities, if there is a legal obligation

Disclosure only takes place if there is a legal basis for it or you have consented.

16. Transfer to third countries

When using certain service providers, particularly in connection with Shopify, payment services, analytics or marketing services, personal data may be transferred to countries outside the European Union or the European Economic Area.

If such a transfer takes place, it will only be done on the basis of appropriate safeguards, for example, an adequacy decision by the European Commission or EU standard contractual clauses.

17. Your Rights

You have the following rights under applicable data protection laws:

• Right to information about the personal data stored by us
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing
• Right to withdraw granted consents with effect for the future
• Right to lodge a complaint with a data protection supervisory authority

To exercise your rights, you can contact us at any time by email at info@pilgrim.im.

18. Right to object

If we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves to assert, exercise or defend legal claims.

19. Security

We take technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. Data transmission on our website is generally encrypted.

20. Timeliness of this privacy policy

This privacy policy may be adjusted if legal requirements change or new functions, services or apps are introduced on the website.

Status: May 2026