Privacy policy

This English translation is provided for convenience only. In the event of any discrepancy, the German version shall prevail.

Last updated: 22 September 2026

This privacy policy informs you about the processing of personal data in the Carts Online shop of S.I.C. Personal data is any information by which you can be identified directly or indirectly.

1. Controller and contact

S.I.C – Entwicklungs- und Vertriebs GmbH
Am Eisberg 8
72202 Nagold, Germany
Managing director: Dipl.-Ing. (FH) Michael Schmidt
E-mail: info@sic-design.de
Phone: +49 7452 89787-0

2. Provision of the shop

We operate the shop on the Shopify platform. When you visit, technically necessary connection and usage data is processed, in particular your IP address, information about your browser and device, and the shop content requested. This processing serves to display the pages, to provide the shopping cart and checkout, and for security and troubleshooting purposes.

The legal basis for the technical operation and security of our services is Art. 6(1)(f) GDPR. Our legitimate interest lies in a secure and functioning shop. Where processing is necessary for a contract you have requested or for pre-contractual measures, it is based on Art. 6(1)(b) GDPR.

Shopify generally processes data on our behalf in order to provide the shop. Shopify International Limited in Ireland is responsible for the European region. Information about Shopify as a service provider and about data processing on our behalf can be found in the Shopify Data Processing Addendum.

3. Contact and advice

If you contact us via the contact form, by e-mail or by phone, we process your contact details and the information you provide in order to handle your enquiry. For enquiries about a quotation, a product or an order, the legal basis is Art. 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in responding to your request under Art. 6(1)(f) GDPR.

4. Orders, customer account and returns

To process an order, we process in particular your name, billing and delivery address, contact details, the items ordered, the payment status and the related communication. If you use the customer account functions, the data required for logging in, displaying your orders and handling return or cancellation requests is processed.

This processing serves to initiate and perform the purchase contract and is based on Art. 6(1)(b) GDPR. We fulfil statutory documentation and retention obligations on the basis of Art. 6(1)(c) GDPR. Mandatory fields are marked in the respective forms. Without the information required for an order or enquiry, we may not be able to process it.

5. Payment, shipping and other recipients

To process your order, the payment service providers and carriers involved receive the information required for their respective tasks. The available payment methods are shown to you in the checkout. Payment service providers may also process payment data as independent controllers; their privacy notices provided during the payment process also apply.

Other recipients may include IT and communication service providers we engage, as well as service providers engaged for accounting and tax matters, insofar as this is necessary for the respective purpose. Transfers to authorities required by law are made on the basis of the respective legal obligation. We provide these recipients with the data they need for their tasks.

6. Cookies and privacy settings

Cookies and similar technologies are used for shop functions and to store your settings. Where storing information on your device or accessing it is strictly necessary for a service you have expressly requested, this is governed by Section 25(2) of the Telecommunications Digital Services Data Protection Act (TDDDG). The subsequent processing of personal data takes place on the legal bases stated in this policy.

For analytics, personalisation or marketing technologies that require consent, your prior consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR is required. You can change or withdraw any consent you have given at any time with effect for the future via the privacy settings in the shop. The lawfulness of processing carried out before the withdrawal remains unaffected.

7. Product video and catalogues

The product video offered in the shop is loaded from the PlentyONE content delivery network via the address cdn02.plentymarkets.com. The provider is PlentyONE GmbH, Johanna-Waescher-Straße 7, 34131 Kassel, Germany. When the video file is retrieved, technically necessary connection data, in particular your IP address, is transmitted to this service. The integration serves to present our products clearly and is based on our legitimate interest under Art. 6(1)(f) GDPR. Where technologies requiring consent are also used, your prior consent is decisive. Further information can be found in the PlentyONE privacy notice.

Our product catalogues are linked as PDF files on the S.I.C website sic-design.de. When you open such a link, your browser retrieves the file there and transmits the connection data required for this. The privacy notice of that website also applies to retrieval from it.

Shopify Network Intelligence

Shopify Network Intelligence is activated in our shop. For this purpose, Shopify uses data about interactions and transactions in our shop together with data from other shops and its own services to provide advanced functions for analysing, personalising, improving and promoting offers. This may include contact, transaction, device and usage data. Other merchants do not gain access to your data from our shop as a result.

In this processing, Shopify acts as an independent controller under data protection law. Use that requires consent, in particular for personalised advertising and non-essential device technologies, is based on your consent. You can change or withdraw your choice via the privacy settings in the shop. Further information on processing by Shopify and on how to exercise your rights can be found in the Shopify Consumer Privacy Policy and in the Shopify Privacy Portal.

8. Shopify's own services and international processing

If you use a stand-alone Shopify service such as Shop or Shop Pay, Shopify also processes data within the scope of your direct relationship with Shopify. Information on this can be found in the Shopify Consumer Privacy Policy. You can also exercise your rights regarding this processing via the Shopify Privacy Portal.

When Shopify is used, data may be processed outside the European Economic Area. Shopify describes the safeguards used for this in the Data Processing Addendum, in particular in its Annex C. Depending on the transfer, these include adequacy decisions, binding corporate rules or standard contractual clauses. Further information on the relevant safeguards can be obtained from the information provided there or from us.

9. Storage period

We store personal data for as long as is necessary for the stated purposes. Enquiry data is needed for handling the enquiry and, where applicable, for the subsequent performance of a contract. We retain order and business documents in accordance with the relevant tax and commercial law obligations. Data may also be required for asserting, exercising or defending legal claims until the relevant limitation periods have expired. Once the purpose of processing no longer applies and no retention obligations prevent it, data is deleted or anonymised.

10. Your rights

Subject to the statutory requirements, you have the right of access to your personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

Objection: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object under Art. 21 GDPR on grounds relating to your particular situation. You can object to processing for direct marketing at any time without giving such grounds.

Withdrawal of consent: You can withdraw consent at any time with effect for the future. This does not make any processing carried out before the withdrawal retroactively unlawful.

To exercise your rights, please contact info@sic-design.de or write to the address given above. Where necessary to clearly identify your request, we may ask for information to verify your identity.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for our registered office is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg). Contact details and information on lodging a complaint can be found on the supervisory authority's website.