Privacy policy
This is a courtesy translation. In case of doubt, the German version applies.
1. Controller
Schulz, Ehsan, Niemann, Dudek GbR
Hedwig-Dohm-Str. 47, 28279 Bremen, Germany
Phone: +49 151 6463 0984
Email: info@aji-chili.de
2. General information on data processing
We process personal data of our users only to the extent necessary to provide a functional website, our content and services (Art. 6 (1) (b), (f) GDPR) and to fulfil legal obligations (Art. 6 (1) (c) GDPR). Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations stand in the way (under commercial and tax law generally 6–10 years for business records, Section 257 HGB, Section 147 AO).
3. Provision of the shop – Shopify
Our shop is operated via Shopify International Ltd. (Dublin, Ireland; parent company Shopify Inc., Canada). Shopify processes personal data on our behalf, predominantly on servers within the EU. In individual cases data is transferred to group companies in Canada; this transfer is covered by an adequacy decision of the EU Commission. For any transfers to sub-processors in the USA, the EU-US Data Privacy Framework serves as the adequacy basis. A data processing agreement pursuant to Art. 28 GDPR is in place with Shopify (integrated into Shopify's contract as the "Data Processing Addendum").
When you visit our website, server log data (IP address, date and time, page accessed, browser type, referrer) is processed automatically to deliver the website and ensure its security (Art. 6 (1) (f) GDPR).
Further information: Shopify's privacy policy
Fonts, images and videos of our shop are delivered via Shopify's content delivery network; no fonts are loaded from Google servers.
4. Cookies, consent and analytics
Technically necessary cookies (cart, login, checkout, language setting, cookie preference) are set without consent on the basis of Section 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR.
All other cookies and technologies are used only with your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), which you give or refuse via the cookie banner on your first visit and can change or withdraw at any time via the "Cookie preferences" link in the footer. These include:
- Shopify analytics: Shopify collects anonymised visitor statistics for us (e.g. page views, visitor origin, conversions) to improve the shop.
- Meta Pixel (Facebook/Instagram): If you consent, we use the Meta Pixel of Meta Platforms Ireland Ltd. (Dublin, Ireland) to measure the effectiveness of our ads on Facebook and Instagram and to show you relevant advertising. Data may be transferred to Meta Platforms, Inc. (USA); Meta is certified under the EU-US Data Privacy Framework. Further information: Meta privacy policy.
Without your consent, no analytics or marketing cookies are set.
5. Store map (OpenStreetMap)
On our home page and the "Locations" page you can display a map. The map is only loaded when you click "Load map" (consent, Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). Map tiles are then retrieved from the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom); your IP address is transmitted to this provider. An adequacy decision of the EU Commission exists for the United Kingdom. The Leaflet map library is loaded from our own server (Shopify CDN). If you click "Remember my choice", we store this choice locally in your browser only (localStorage). You can withdraw consent at any time by deleting the website data in your browser.
The "Near me" function requests your location via your browser if you allow it. The location is used solely in your browser to calculate the distance to our partners and is not transmitted to us.
6. Order processing and payment providers
For the performance of the contract (Art. 6 (1) (b) GDPR) we process your order data (name, address, email address, phone number if provided, products ordered, payment method) and transmit the data required for payment processing to the payment provider you select:
- Shopify Payments (credit card, Apple Pay, Google Pay, Shop Pay): Shopify Payments Europe Ltd., Dublin, Ireland. Your card data is processed exclusively by the payment provider; we do not receive full card data.
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. PayPal privacy statement.
- Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For purchase on account, Klarna performs an identity and credit check. Klarna privacy notice.
Shop Pay and the Shop channel are provided by Shopify; if you create a Shop account, Shopify's privacy notices apply in addition.
7. Inventory, invoicing and shipping labels
To process your order we transfer order and invoice data to our inventory and accounting systems (Zoho Inventory and Zoho Books of Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands; servers in the EU) and create the invoice and delivery note there (Art. 6 (1) (b) and (c) GDPR). DHL shipping labels are created via an application we operate in the Microsoft Azure cloud (Microsoft Ireland Operations Ltd., Dublin; data centre in the EU). Data processing agreements are in place with both providers.
8. Shipping
For delivery we pass your name and delivery address to the shipping company (Art. 6 (1) (b) GDPR):
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
We transmit your email address to DHL so that DHL can inform you about the shipment status and coordinate the delivery date with you (Art. 6 (1) (f) GDPR; you can object at any time by emailing us).
9. Contact
If you contact us by email, phone or via our contact forms (Contact, Corporate gifts), the data you provide is stored to process your enquiry (Art. 6 (1) (b) or (f) GDPR) and deleted once the enquiry has been dealt with, unless statutory retention obligations apply.
10. Customer account
You can order as a guest. If you create a customer account, we store your master data and order history so that you can access them for later orders (Art. 6 (1) (b) GDPR). Login is via email code through Shopify. You can have your customer account deleted at any time by emailing us; afterwards we retain order data only within the statutory retention periods.
11. Newsletter
If you subscribe to our newsletter, we use your email address to send you information on new varieties, recipes and offers (Art. 6 (1) (a) GDPR). Subscription uses the double opt-in procedure: you receive an email with a confirmation link; the subscription is only completed after you click it. We log subscription and confirmation (time, IP address) to be able to prove consent. Newsletters are sent via Shopify Email (Shopify International Ltd.). You can unsubscribe at any time via the link at the end of every email or by emailing us; this withdraws your consent with effect for the future.
12. Social media
We operate pages on Instagram and Facebook (Meta Platforms Ireland Ltd.). Our website only contains links to these pages; when you click them you leave our website. Meta's privacy notices apply to data processing on the platforms.
12a. Product reviews (Judge.me)
For product reviews we use the service Judge.me (Judge.me Ltd., 124 City Road, London EC1V 2NX, United Kingdom). A few days after your order has been shipped, you will receive an email via Judge.me asking for a review (Art. 6 (1) (f) GDPR, Section 7 (3) UWG); you can object at any time, e.g. via the unsubscribe link in the email. If you submit a review, your name, email address, review text and any uploaded images are processed and – with your consent – published in the shop; the email address is not displayed. Reviews from customers whose purchase we have verified are marked as "Verified buyer". An adequacy decision of the EU Commission exists for the United Kingdom; a data processing agreement is in place with Judge.me. Further information: Judge.me privacy policy.
13. Rights of data subjects
You have the right to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7 (3) GDPR)
Right to lodge a complaint with a supervisory authority: The supervisory authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Arndtstraße 1, 27570 Bremerhaven, Germany.
14. Contact for privacy matters
Last updated: October 2026