Last updated: 7 October 2026
1. Controller
The controller for the processing of personal data in this shop is David Koruga, OkayKoda, Am See 29, 85540 Haar, Germany, email: koda@okaykoda.com.
2. Hosting and shop system (Shopify)
This shop runs on Shopify (Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). When you visit the pages, Shopify processes technically necessary data such as IP address, date and time of access, page visited, browser type and operating system. This is required to provide the shop securely and reliably (Art. 6(1)(f) GDPR). Shopify also processes data in Canada and the USA. Canada is covered by an EU adequacy decision; otherwise Shopify relies on standard contractual clauses. More information: shopify.com/legal/privacy.
3. Orders and downloads
When you order something, including a free pack, we process the data you enter at checkout (in particular email address, name and, where applicable, billing address) as well as order and payment information. This is necessary to perform the contract and send you the download link (Art. 6(1)(b) GDPR). We keep order and invoice data for the statutory retention periods (Art. 6(1)(c) GDPR) and delete them afterwards.
4. Payment providers
For payment we pass the necessary data to the provider you choose (Art. 6(1)(b) GDPR):
- Shopify Payments (credit card, Apple Pay, Google Pay), processed by Shopify and its payment service provider Stripe Payments Europe Ltd., Ireland.
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). PayPal's privacy policy applies.
We do not receive your full payment details such as your card number.
5. Contact by email
If you write to us, we process your details in order to answer your request (Art. 6(1)(b) or (f) GDPR). We delete messages when they are no longer needed and no retention obligations apply.
6. Newsletter and marketing emails
If you sign up for the newsletter, we use your email address to send you information about new packs and offers, including automated emails related to packs you downloaded or bought. The legal basis is your consent (Art. 6(1)(a) GDPR). If you sign up with the form on the website, the sign-up only takes effect after you confirm it via a link in a confirmation email. You can also give your consent by ticking the email box at checkout. You can withdraw your consent at any time using the unsubscribe link in every email or by writing to koda@okaykoda.com. Placing an order, including for a free pack, does not sign you up unless the email box at checkout is ticked.
We send these emails with Mailchimp (Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA) and with Shopify. Your email address, your purchases in this shop and information about how you use the emails (such as opens and clicks) are processed for this purpose, also in the USA. Intuit is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are also in place.
7. Cookies and consent
The shop uses technically necessary cookies, for example for the cart and checkout (Section 25(2) TDDDG, Art. 6(1)(f) GDPR). Cookies and similar technologies for statistics and marketing are only used if you have consented via the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change your choice at any time in the cookie settings of the shop.
8. Meta Pixel
With your consent we use the Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). It lets us measure whether visits and purchases result from ads on Facebook and Instagram and show ads in a more targeted way. Data such as IP address, device information and information about pages visited and purchases is transmitted to Meta; processing in the USA is possible. We are jointly responsible with Meta for collecting and transmitting this data. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings. Without consent the pixel is not loaded.
9. Links to other platforms
The shop contains simple links to our profiles on Instagram, TikTok and BeatStars. Data is only transferred when you click a link; the privacy terms of the respective provider then apply.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. To do so, write to koda@okaykoda.com. You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision.
11. Obligation to provide data, automated decisions
To place an order we need at least your email address and, for paid products, your payment details; without them we cannot perform the contract. We do not carry out automated decision-making or profiling.