Privacy Policy

Privacy Policy

GDPR · TDDDG · Last updated: 18 May 2026

1. Controller

Yahya Fetaiti / OCTAVIR
Hauptstraße 58, 85579 Neubiberg, Germany
Email: info@octavir.com · Phone: +49 1575 7765025

2. General Information on Data Processing

We process the personal data of our users only to the extent necessary to provide a functional website and our content and services. The legal bases are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contractual performance) and Art. 6(1)(f) GDPR (legitimate interests).

3. Hosting by Shopify

This website is hosted on servers of Shopify International Limited (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). On our behalf, Shopify processes inventory, contact, content, contract, usage, meta and communication data on the basis of a data processing agreement pursuant to Art. 28 GDPR. More information: shopify.com/legal/privacy

4. Server Log Files

Each time the website is visited, data is automatically stored in server log files: IP address, date/time, page accessed, HTTP status code, amount of data transferred, referrer, browser/operating system. Legal basis: Art. 6(1)(f) GDPR (secure operation of the website).

5. Cookies

Our website uses cookies. Technically necessary cookies (cart function, language setting) are set on the basis of Art. 6(1)(f) GDPR and § 25(2)(2) TDDDG. Optional cookies (analytics, marketing) are only set with your express consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time.

6. Order Processing

When you place an order we collect: name, delivery and billing address, email address, phone number (optional), payment data. Processed for contractual performance (Art. 6(1)(b) GDPR). Retention: 10 years pursuant to § 147 AO and § 257 HGB.

7. Payment Providers

We use the following external providers for payment processing:

  • Shopify Payments — Shopify International Ltd., Dublin, Ireland. Privacy
  • PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy
  • Apple Pay — Apple Inc., processed via Shopify Payments.
  • Google Pay — Google Ireland Ltd., processed via Shopify Payments.

The transfer is carried out for contractual performance pursuant to Art. 6(1)(b) GDPR.

8. Shipping Service Providers

For delivery, we transmit your address data to shipping service providers (DHL, DPD, UPS, Hermes, depending on the shipping method). Legal basis: Art. 6(1)(b) GDPR.

9. Newsletter

When you sign up for the newsletter, we collect your email address. Registration uses a double opt-in procedure. Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email.

10. Contact Form

When you use the contact form, your details are stored. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (general inquiries).

11. Your Rights

You have the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)

To exercise these rights: info@octavir.com

Right to lodge a complaint with the supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

12. SSL/TLS Encryption

This website uses SSL/TLS encryption, recognizable by "https://" and the padlock symbol in your browser.

13. International Transfers

Some of our service providers are located or operate servers outside the EU. Transfers are based on Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and/or the EU-US Data Privacy Framework.

14. Changes

We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements.