Privacy Policy

Last updated: October 26, 2025

1. Controller

MouSouTou Studio
Owner: Deniz Emin
Hangstraße 7
21075 Hamburg, Germany
Email: mousoutoustudio@gmail.com

Under the EU General Data Protection Regulation (GDPR), we are the data controller responsible for the processing of your personal data on this website.

2. Overview

We respect your privacy and process your personal data in accordance with the GDPR and other applicable data-protection laws. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have.

3. Personal Data We Process

We may collect and process the following categories of personal data when you visit, register, order, or interact with our website:

  • Contact information: Name, address, email address, phone number

  • Account information: Username, password, preferences

  • Order and payment details: Billing and shipping information, purchased products, payment method (processed via secure third-party providers)

  • Device and usage data: IP address, browser type, device identifiers, pages visited, session duration

  • Marketing and communication data: Your preferences regarding newsletters and promotional messages

We do not knowingly collect data from individuals under 16 years of age.

4. Legal Bases for Processing

We process your data based on the following legal grounds under Art. 6 GDPR:

  • Contract performance (Art. 6 (1)(b)) – to process and deliver your orders.

  • Legal obligation (Art. 6 (1)(c)) – to comply with accounting or tax laws.

  • Legitimate interests (Art. 6 (1)(f)) – to improve our website and protect it against fraud.

  • Consent (Art. 6 (1)(a)) – for newsletters, analytics, or marketing cookies.

You may withdraw your consent at any time by emailing mousoutoustudio@gmail.com.

5. Data Processing via Shopify

This website and online store are operated using Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada).
Shopify provides hosting, order management, and payment infrastructure.
Data may be transferred to Shopify’s servers in Canada and the United States under the EU Standard Contractual Clauses, ensuring an adequate level of protection.
Details: https://www.shopify.com/legal/privacy

6. Production and Fulfillment (Gelato)

We partner with Gelato ASA (Dronning Eufemias gate 8, 0191 Oslo, Norway) for print-on-demand production and order fulfillment.
For this purpose, we share necessary customer data (name, delivery address, product information).
Gelato processes this data solely to produce and ship your order.
Details: https://www.gelato.com/en/legal/privacy

7. Payment Providers

Payments may be handled by Shopify Payments, PayPal, Stripe, or Klarna.
Your payment information is processed directly by these providers.
We do not store payment card data.
Their privacy policies apply when you complete a transaction:

8. Email Marketing (MailerLite)

If you subscribe to our newsletter, we process your name and email address via MailerLite UAB (Paupio 28, LT-11341 Vilnius, Lithuania).
MailerLite helps us send newsletters and analyze performance (open and click rates).
You can unsubscribe at any time using the link in each email.
Details: https://www.mailerlite.com/legal/privacy-policy

9. Analytics and Advertising

We may use analytics and marketing tools such as Google Analytics and Meta Pixel to understand user behavior and improve our site.

You can disable cookies in your browser or use opt-out tools (e.g. https://tools.google.com/dlpage/gaoptout).

10. Data Retention

We keep personal data only as long as necessary to fulfill the purposes stated here or to comply with legal obligations (e.g. tax laws). Afterward, data will be securely deleted or anonymized.

11. Data Security

We use SSL encryption and other technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

12. International Data Transfers

Your data may be transferred to countries outside the EEA (e.g. Canada, USA).
All such transfers are based on adequacy decisions or Standard Contractual Clauses approved by the European Commission.

13. Your Rights under the GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, contact us at mousoutoustudio@gmail.com.
If you believe your data is being processed unlawfully, you also have the right to file a complaint with your local supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The updated version will always be published on this page with the revised date.

15. Contact

For questions about data protection or to exercise your rights, please contact:

MouSouTou Studio
Deniz Emin
Hangstraße 7
21075 Hamburg, Germany
Email: mousoutoustudio@gmail.com