Datenschutzerklärung

Privacy Policy

1. Overview

This Privacy Policy explains how PURPLE ARIES LIMITED, operating the Ergolea brand and website, collects, uses, stores and shares personal data when you visit our website, place an order, contact us, submit a service request or otherwise interact with us.

Personal data means any information that can identify you directly or indirectly, such as your name, email address, delivery address, order number, IP address or device information.


2. Controller Responsible for Data Processing

The controller responsible for processing personal data on this website is:

PURPLE ARIES LIMITED
Registration No.: 80464591
FLAT 2304, 23/F, HO KING COMM CENTRE
2–16 FA YUEN STREET
MONG KOK
HONG KONG

Email: support@ergolea.de

The controller is the legal person that determines the purposes and means of processing personal data.

EU Representative

[INSERT EU REPRESENTATIVE NAME, FULL ADDRESS AND CONTACT DETAILS IF APPLICABLE]


3. How We Collect Personal Data

We may collect personal data when you:

  • visit our website;

  • create or use a customer account, where available;

  • place an order;

  • enter information during checkout;

  • contact us by email, contact form or other customer-support channels;

  • subscribe to marketing communications;

  • submit a Return, Complaint & Service Form;

  • send photos, videos or other information in connection with a product complaint, service case or return request;

  • interact with our advertising, social media content or newsletters;

  • use cookies or consent-based website tools.

Some data is provided directly by you. Other data is collected automatically through your browser, device, website systems, cookies or similar technologies.


4. Categories of Personal Data We May Process

Depending on how you use our website and services, we may process:

  • name;

  • postal and billing address;

  • email address;

  • telephone number;

  • order number;

  • purchased products;

  • order value;

  • payment status and transaction-related information;

  • delivery and shipping information;

  • customer-support correspondence;

  • return, complaint and service information;

  • photos or videos voluntarily submitted in connection with a product issue;

  • device information;

  • browser type and operating system;

  • IP address;

  • time and date of website access;

  • referrer URL;

  • cookie identifiers;

  • website usage data;

  • marketing preferences and consent information;

  • interactions with emails, advertisements or website content.

Please do not submit unnecessary medical, health-related or other sensitive personal data through customer support forms or email.


5. Purposes and Legal Bases for Processing

We process personal data only where a lawful basis applies.

Depending on the situation, we process personal data for the following purposes:

Contract Performance and Pre-Contractual Measures

We process personal data when necessary to:

  • process orders;

  • provide customer support;

  • arrange delivery;

  • process payments;

  • handle returns, complaints, service requests and replacements;

  • communicate about an order;

  • respond to product or service questions;

  • prevent duplicate orders or payment issues.

Legal Obligations

We may process and retain data where necessary to comply with legal obligations, including accounting, tax, consumer-protection, fraud-prevention and record-keeping obligations.

Legitimate Interests

We may process data where necessary for our legitimate interests, provided that your rights and interests do not override those interests. This may include:

  • website security;

  • fraud prevention;

  • abuse prevention;

  • technical administration;

  • improving website performance;

  • customer-service quality;

  • internal business analysis;

  • defense or establishment of legal claims.

Consent

Where required, we process data based on your consent, including for:

  • non-essential cookies;

  • analytics tools;

  • marketing tools;

  • advertising tools;

  • newsletter or SMS marketing;

  • certain third-country transfers where consent is used as the relevant legal basis.

You can withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.


6. Website Hosting and Store Infrastructure — Shopify

We use Shopify as our eCommerce and website platform.

Shopify may process personal data required to provide the website and online store, including:

  • IP address;

  • device and browser information;

  • website access data;

  • customer account data, where applicable;

  • order details;

  • delivery and billing details;

  • payment-related information;

  • customer behavior and technical website data.

Shopify may use cookies and similar technologies to provide website functions, shopping-cart functions, checkout, fraud prevention, store administration and related services.

Shopify processes personal data in accordance with its own applicable privacy and contractual documentation.


7. Orders, Shipping and Logistics

When you place an order, we process the information necessary to fulfill the contract, including:

  • name;

  • delivery and billing address;

  • email address;

  • telephone number, where provided;

  • order number;

  • products ordered;

  • shipping method;

  • payment status;

  • delivery and tracking information.

To deliver your order, we may share the necessary information with logistics providers, warehouses, fulfillment partners and shipping companies.

Ergolea works with selected international logistics partners. Depending on availability, warehouse capacity and shipping routes, order fulfillment, storage or shipping may involve service providers located outside the European Economic Area.

We only share data that is necessary for the relevant service provider to perform its task.


8. Customer Support, Returns, Complaints and Service Requests

If you contact us by email, contact form or another support channel, we process the information you provide in order to respond to and handle your request.

This may include:

  • name;

  • email address;

  • order number;

  • delivery information;

  • correspondence;

  • product information;

  • return reason;

  • complaint reason;

  • photos or videos submitted by you;

  • service-form information;

  • shipping receipt or return-tracking information.

We use this information to:

  • answer your request;

  • verify the relevant order;

  • register returns, complaints and service cases;

  • investigate product issues;

  • arrange replacement shipments or missing components;

  • process refunds where applicable;

  • prevent fraud and misuse;

  • document customer-service interactions.

We may retain support correspondence where necessary for legal, contractual, accounting, warranty, dispute-resolution or fraud-prevention purposes.


9. International Data Transfers

PURPLE ARIES LIMITED is located in Hong Kong. In addition, selected logistics, technology, payment, marketing and analytics providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection requirements.

Depending on the transfer, safeguards may include:

  • an adequacy decision;

  • standard contractual clauses;

  • additional technical and organizational safeguards;

  • another lawful transfer mechanism permitted under applicable data-protection law.

International transfers may occur in connection with:

  • order fulfillment;

  • international logistics;

  • customer support;

  • website hosting;

  • payment processing;

  • email and marketing services;

  • analytics and advertising technologies;

  • fraud prevention.


10. Data Retention

We retain personal data only for as long as necessary for the relevant purpose.

Retention periods depend on factors such as:

  • the duration of the customer relationship;

  • the processing of an order;

  • legal retention obligations;

  • tax and accounting requirements;

  • product complaints or service cases;

  • dispute resolution;

  • fraud prevention;

  • exercise, establishment or defense of legal claims.

Where data is no longer required, we will delete or anonymize it unless a longer retention period is required or permitted by law.


11. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files or data records that are stored on your device or accessed through your browser.

We may use:

  • necessary cookies;

  • functional cookies;

  • preference cookies;

  • analytics cookies;

  • marketing cookies;

  • advertising cookies;

  • cookies used for checkout, payment, fraud prevention or shopping-cart functions.

Necessary cookies may be required for the operation, security and functionality of the website.

Non-essential cookies, analytics tools and marketing tools are used only where the required consent has been obtained through our consent-management solution.

You can withdraw or adjust your consent at any time through the cookie settings available on our website.

You may also manage cookies through your browser settings. Please note that disabling certain cookies may limit website functionality.


12. Consent Management — Usercentrics

Only keep this section if Usercentrics is active on the website.

We use Usercentrics as a consent-management platform to collect, document and manage consent for cookies and similar technologies.

Usercentrics may process information such as:

  • your consent choices;

  • withdrawal of consent;

  • IP address;

  • browser information;

  • device information;

  • date and time of your visit;

  • location information, where available;

  • technical consent identifiers.

This processing is used to document consent choices and manage the use of technologies that require consent.

Provider:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany


13. Server Log Files

When you visit our website, technical information may be collected automatically through server logs.

This may include:

  • browser type and version;

  • operating system;

  • referrer URL;

  • host name of the accessing device;

  • time of the server request;

  • IP address;

  • pages accessed;

  • technical error information.

Server-log data is processed to ensure website security, technical stability, error analysis, abuse prevention and website optimization.


14. Contact Form

If you contact us using a contact form, we process the information you provide in order to respond to your request and handle any follow-up questions.

This may include:

  • name;

  • email address;

  • telephone number, where provided;

  • order number;

  • subject of inquiry;

  • message content;

  • attachments, where provided.

We do not use this information for unrelated purposes without a valid legal basis.


15. Email Marketing and Customer Communication — Klaviyo

Only keep this section if Klaviyo is active.

We may use Klaviyo for email marketing, newsletter communication, SMS communication, customer segmentation and marketing automation.

Depending on your interaction with our website and communications, Klaviyo may process:

  • name;

  • email address;

  • telephone number, where provided;

  • address data;

  • order and product information;

  • purchase history;

  • device and browser information;

  • IP address;

  • website activity;

  • email openings;

  • clicks;

  • marketing consent;

  • interactions with campaigns.

Marketing communications are sent only where permitted by applicable law.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the relevant message or by contacting support@ergolea.de.

Provider:

Klaviyo Inc.
125 Summer Street, Floor 6
Boston, MA 02110
United States


16. Google Tag Manager

Only keep this section if Google Tag Manager is active.

We may use Google Tag Manager to manage and deploy website tags and technologies.

Google Tag Manager itself is generally used to organize other tools, such as analytics or marketing services.

Google Tag Manager may process technical information, including IP address and device-related information, in connection with the delivery and management of tags.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland


17. Google Analytics

Only keep this section if Google Analytics is active.

We may use Google Analytics to understand how visitors use our website.

Google Analytics may process information such as:

  • pages viewed;

  • time spent on pages;

  • browser type;

  • device type;

  • operating system;

  • approximate location;

  • traffic source;

  • website interactions;

  • scroll behavior;

  • clicks;

  • technical identifiers;

  • cookie identifiers;

  • IP address, subject to configured settings.

We use this information to improve website performance, content, checkout processes, usability and marketing effectiveness.

Google Analytics is used only where the necessary consent has been obtained.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland


18. Microsoft Clarity

Only keep this section if Microsoft Clarity is active.

We may use Microsoft Clarity to analyze website usage and improve usability.

Microsoft Clarity may collect information about website interactions, including:

  • mouse movements;

  • scrolling behavior;

  • clicks;

  • device information;

  • browser information;

  • IP address;

  • session information;

  • technical identifiers;

  • cookies or similar technologies.

Microsoft Clarity may create heatmaps and session recordings to help us understand how visitors use our website.

Microsoft Clarity is used only where the necessary consent has been obtained.

Provider:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland


19. Meta Pixel, Meta Conversion API and Meta Custom Audiences

Only keep the individual sections that are actually active.

We may use Meta technologies, including Meta Pixel, Meta Conversion API and Meta Custom Audiences, to measure advertising performance, understand website interactions and deliver relevant advertising on Meta platforms such as Facebook and Instagram.

Depending on the technology enabled, data may include:

  • IP address;

  • browser and device information;

  • website pages visited;

  • events and interactions;

  • purchase information;

  • cart value;

  • currency;

  • hashed contact information, where enabled;

  • cookie identifiers;

  • advertising identifiers;

  • timestamp information.

Meta technologies are used only where the required consent has been obtained.

Where applicable, we and Meta Platforms Ireland Limited may act as joint controllers for the collection and transmission of certain data to Meta. Further processing by Meta is governed by Meta’s own privacy documentation and terms.

Provider:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland


20. Google Fonts

Only keep this section if Google Fonts are hosted locally.

Our website may use Google Fonts that are hosted locally on our own website infrastructure.

Where Google Fonts are hosted locally, no connection to Google servers is required merely to display the fonts.


21. Google Maps

Only keep this section if Google Maps is active.

We may use Google Maps to display map content.

When Google Maps is activated, Google may process your IP address and technical information required to display the map.

Google Maps is used only where the required consent has been obtained.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland


22. Google reCAPTCHA

Only keep this section if reCAPTCHA is active.

We may use Google reCAPTCHA to protect forms and website functions against automated misuse, spam and fraudulent activity.

reCAPTCHA may analyze information such as:

  • IP address;

  • time spent on website pages;

  • mouse movements;

  • browser information;

  • device information;

  • interaction behavior;

  • technical identifiers.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland


23. Payment Processing

When you place an order, payment information is processed by the payment service provider selected during checkout.

We generally do not receive or store complete payment-card details where payment is processed directly by an external payment provider.

The payment provider may process:

  • name;

  • email address;

  • billing address;

  • payment amount;

  • transaction reference;

  • payment method;

  • payment status;

  • account or card-related information;

  • fraud-prevention information.

Payment processing is necessary to complete your order and prevent fraud.

PayPal

Only keep if PayPal is offered.

Provider:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

Apple Pay

Only keep if Apple Pay is offered.

Provider:

Apple Inc.
One Apple Park Way
Cupertino, CA 95014
United States

Google Pay

Only keep if Google Pay is offered.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Klarna

Only keep if Klarna is offered.

Provider:

Klarna Bank AB
Sveavägen 46
111 34 Stockholm
Sweden

Shopify Payments

Only keep if Shopify Payments is offered.

Provider:

Shopify International Limited
Victoria Buildings
1–2 Haddington Road
Dublin 4
D04 XN32
Ireland

American Express

Only keep if American Express is offered.

Provider:

American Express Europe S.A.
Theodor-Heuss-Allee 112
60486 Frankfurt am Main
Germany

Mastercard

Only keep if Mastercard is offered.

Provider:

Mastercard Europe SA
Chaussée de Tervuren 198A
B-1410 Waterloo
Belgium

Visa

Only keep if Visa is offered.

Provider:

Visa Europe Services Inc.
London Branch
1 Sheldon Square
London W2 6TT
United Kingdom


24. Recipients of Personal Data

We may share personal data with the following categories of recipients where necessary:

  • website and store-infrastructure providers;

  • hosting providers;

  • payment providers;

  • logistics and shipping providers;

  • warehouses and fulfillment partners;

  • customer-support service providers;

  • email and marketing providers;

  • analytics providers;

  • advertising providers;

  • cookie-consent providers;

  • fraud-prevention providers;

  • professional advisers;

  • authorities, courts or regulators where legally required;

  • companies involved in a merger, acquisition, restructuring or sale of assets, where permitted by law.

We share only the data necessary for the relevant purpose.


25. Security Measures

We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

Our website uses encryption technologies such as SSL/TLS where appropriate.

However, no internet transmission or data-storage method can be guaranteed to be completely secure.


26. Your Data-Protection Rights

Subject to applicable law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing;

  • withdraw consent at any time;

  • request data portability;

  • object to direct marketing;

  • lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights, contact us at:

support@ergolea.de

Please include enough information for us to identify your request and, where necessary, verify your identity.


27. Right to Object to Direct Marketing

Where we process your personal data for direct-marketing purposes, you may object to this processing at any time.

Once you object, we will no longer use your personal data for direct-marketing purposes unless another lawful basis applies to the relevant processing.

You may also unsubscribe from marketing emails using the unsubscribe link included in the relevant communication.


28. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our website, services, technologies, data-processing activities or applicable legal requirements.

The current version is published on this website.

Please review this Privacy Policy regularly.


29. Contact

For privacy-related questions, requests or concerns, contact:

PURPLE ARIES LIMITED
Registration No.: 80464591
FLAT 2304, 23/F, HO KING COMM CENTRE
2–16 FA YUEN STREET
MONG KOK
HONG KONG

Email: support@ergolea.de