Privacy Policy

Deutsche Fassung: Datenschutzerklärung.

This Privacy Policy applies to the anviara.com website. The “Anviara EU Widerrufsbutton” Shopify app has its own App Privacy Policy.

1. Controller

The controller responsible for data processing on this website is:

Anviara LLC 30 N Gould St Ste N Sheridan, WY 82801, USA Email: [email protected]

As the controller is not established in the EU/UK, we have appointed representatives:

EU Representative (Art. 27 GDPR): Rickert Rechtsanwaltsgesellschaft mbH (– Anviara LLC –), Colmantstraße 15, 53115 Bonn, Germany · [email protected]

UK Representative (UK GDPR): Rickert Services Ltd UK (– Anviara LLC –), PO Box 1487, Peterborough PE1 9XX, United Kingdom · [email protected]

You can find full contact details in our Impressum (legal notice).

2. General information and international data transfers

We process personal data only to the extent necessary and on the basis of the GDPR. The legal bases are, in particular, Art. 6(1)(b) GDPR (contract / pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interests).

As the controller is based in the USA, personal data may be transferred to, or accessed from, the USA. Where data is transferred to a third country, this is done on the basis of appropriate safeguards (e.g. EU Standard Contractual Clauses, Art. 46 GDPR) or your consent (Art. 49(1)(a) GDPR).

3. Hosting and content delivery network (Cloudflare)

This website is delivered via Cloudflare:

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA

Cloudflare provides hosting, CDN, and security functions. When the website is accessed, technically necessary data (in particular the IP address, see the “Access data” section) is processed in order to deliver the website securely, quickly, and reliably. The legal basis is Art. 6(1)(f) GDPR. Data may be transferred to the USA in this process; Cloudflare bases this transfer on EU Standard Contractual Clauses (Art. 46 GDPR). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare.

4. Access data

This website is a static site delivered via Cloudflare. We do not operate our own web server and do not store our own server log files. When the site is accessed, Cloudflare, as the operator of the infrastructure, processes technically necessary connection data (in particular IP address, time of access, requested resource, and browser and device information) in order to ensure delivery and security (Art. 6(1)(f) GDPR). The storage and retention period of this data is governed by Cloudflare’s specifications.

5. Cookies and tracking

This website does not use any consent-requiring cookies and no web tracking or web analytics. Only technically necessary cookies may be set by our infrastructure provider Cloudflare to ensure security (Sec. 25(2) TDDDG, Art. 6(1)(f) GDPR).

6. Fonts

The font used on this website (“Schibsted Grotesk”) is embedded locally and served from our own infrastructure. No fonts are loaded from external providers (e.g. Google Fonts); no transfer of your data to third parties takes place in this context.

7. Marketing emails (Zoho Campaigns)

If you have consented to receive marketing emails from us — in particular as a merchant using one of our apps — we send you product news and information about our apps. For sending, we use Zoho Campaigns (contracting party Zoho Corporation, USA). The data is stored in Zoho’s EU data centres (Netherlands/Ireland). Zoho group companies outside the EU, in particular in India and the USA, may access the data for support and maintenance; this is based on EU Standard Contractual Clauses (Art. 46 GDPR). A data processing agreement (Art. 28 GDPR) is in place with Zoho.

We process the data provided with your consent: in particular your email address and name, and for merchants also the store name and domain, language, country, and the time and wording of the consent. For recipients in Germany, Austria, Switzerland and Liechtenstein, and wherever the country is unknown, signup uses a double opt-in procedure: you first receive a confirmation email, and sending only begins once you click the confirmation link it contains. Elsewhere, sending begins once you have given your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every marketing email. The lawfulness of processing carried out before the withdrawal remains unaffected. We store your data until you unsubscribe or withdraw your consent.

8. Contacting us

If you contact us by email, we process your details in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.

Our email inboxes and support system are provided by Zoho (Zoho Mail, Zoho Desk; contracting party Zoho Corporation, USA). Emails are stored in Zoho’s EU data centres (Netherlands/Ireland). Zoho group companies outside the EU, in particular in India and the USA, may access the data for support and maintenance; this is based on EU Standard Contractual Clauses (Art. 46 GDPR). A data processing agreement (Art. 28 GDPR) is in place with Zoho.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You can withdraw consent you have given at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

You may contact the data protection supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.

10. Changes

We update this Privacy Policy when the legal situation or our processing changes. The version published here at any given time applies.

Last updated: 3 October 2026