Privacy policy
Last updated: March 12, 2026
1. Introduction
Montredo operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Montredo is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal data or personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal data.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
2. Controller (data protection “responsible entity”)
The controller within the meaning of applicable data protection laws (in particular the GDPR) is:
Montredo GmbH
Friedrichstraße 122/123
10117 Berlin
Germany
Email: service@montredo.com
3. Data protection contact
If you have any questions regarding data protection or would like to exercise your rights, you can contact us at:
Email: datenschutz@montredo.com
Phone: +49 30 28886470
Postal address:
Montredo GmbH
Friedrichstraße 122/123
10117 Berlin
Germany
Please add “Data Protection” to the address.
4. Definitions
When we use the term “personal information” or “personal data,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.
5. Personal data we collect or process
Depending on how you interact with the Services, we may collect or process the following categories of personal data:
Contact details
Name, shipping address, billing address, phone number, email address.
Financial information
Payment card information and other payment details, transaction details, and payment confirmations.
Account information
Username, password, security questions (if applicable), preferences and settings.
Transaction information
Items you view, add to cart, add to wishlist, purchase, return, exchange or cancel, and past transactions.
Communications with us
Information you include in communications with us, for example customer support inquiries.
Device information
Information about your device, browser or network connection, IP address, and other unique identifiers.
Usage information
Information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
6. Server log data (technical necessity)
When you visit our website, we may process technical log data such as IP address, date and time, requested page, referrer, browser and operating system, and language. This processing is necessary to provide the website, ensure security, and prevent misuse.
7. Personal data sources
We may collect personal data from the following sources:
Directly from you
For example when you create an account, place an order, subscribe to the newsletter, or contact us.
Automatically through the Services
For example via cookies and similar technologies.
From our service providers
Processors who collect or process personal data on our behalf.
From partners or other third parties
For example advertising or social media partners, subject to your consent choices where required.
8. Purposes and legal bases (GDPR)
We process personal data for the following purposes and on the following legal bases.
8.1 Provide, tailor, and improve the Services
This includes providing the website, enabling checkout, processing orders, payments, shipping, returns and exchanges, account administration, reviews if enabled, and improving the shopping experience.
Legal basis: performance of contract or pre-contractual steps (Art. 6(1)(b) GDPR) and legitimate interests (Art. 6(1)(f) GDPR).
8.2 Marketing and advertising
This includes sending newsletters and marketing communications and showing advertisements on our site and other websites or apps.
Legal basis: consent (Art. 6(1)(a) GDPR).
8.3 Security and fraud prevention
This includes authentication, preventing misuse, securing payments, and detecting suspicious activity.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
8.4 Communicating with you
Customer support and responding to inquiries.
Legal basis: performance of contract (Art. 6(1)(b) GDPR).
8.5 Legal reasons
Compliance with legal obligations and enforcement of claims.
Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
9. Cookies and consent management (Usercentrics)
9.1 General
We use cookies and similar technologies such as pixels, tags, and SDKs to operate our website and provide essential functions. If you consent, we also use them for analytics and marketing purposes.
9.2 Consent management platform
We use a consent management platform provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. This platform displays our cookie banner, manages your cookie preferences, and records your consent decisions.
9.3 Strictly necessary cookies
Strictly necessary cookies are used to operate the website and provide core functionality such as the shopping cart and checkout.
9.4 Analytics and marketing technologies
Analytics and marketing technologies such as Google Analytics 4 are used only if you have given consent.
9.5 Changing your cookie settings
You can adjust your cookie preferences at any time via the cookie settings on our website.
10. How we disclose personal data
We may disclose personal data to third parties including:
• Shopify and service providers who operate our website and services
• Payment providers and logistics partners
• Marketing and advertising partners (subject to consent)
• Authorities where legally required
• Affiliates or business partners where necessary
10.1 Shopify
Our online store is hosted by Shopify. Shopify may process personal data to operate and improve the platform.
More information:
https://www.shopify.com/legal/privacy/app-users
https://privacy.shopify.com
11. Payments
We use Shopify Payments as well as PayPal and Klarna as payment providers.
Personal data necessary for payment processing may be transmitted to the respective provider.
Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
11.1 PayPal
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
https://www.paypal.com/webapps/mpp/ua/privacy-full
11.2 Klarna
Klarna Bank AB
Sveavägen 46
111 34 Stockholm
Sweden
https://www.klarna.com/international/privacy-policy/
12. Newsletter and Mailchimp
12.1 Newsletter
If you subscribe to our newsletter, we use your email address to send marketing communications.
We use a double opt-in process and store confirmation details to document consent.
Legal basis: Art. 6(1)(a) GDPR.
12.2 Mailchimp
We use Mailchimp to manage and send newsletters.
Mailchimp acts as a processor under Art. 28 GDPR.
https://mailchimp.com/legal/data-processing-addendum/
12.3 Analytics and marketing tools
We may use services such as Google, Microsoft Bing, Meta (Facebook/Instagram), LinkedIn, or YouTube integrations.
These tools may process usage and device data.
13. Consent requirement
Analytics and marketing tools are used only if you provide consent through the Usercentrics cookie banner.
Legal basis: Art. 6(1)(a) GDPR.
14. International transfers
Personal data may be transferred to countries outside the EEA, particularly the USA.
Where required, we use safeguards such as Standard Contractual Clauses.
15. Third-party websites
Our Services may contain links to third-party websites. We are not responsible for their privacy practices.
16. Children’s data
Our Services are not intended for children. We do not knowingly collect personal data from children.
17. Security and retention
17.1 Security
We implement appropriate technical and organizational security measures, including SSL/TLS encryption.
17.2 Retention
We retain personal data only as long as necessary to fulfill the purposes described in this policy or to comply with legal obligations.
18. Your rights (EEA / UK)
Under GDPR you may have the following rights:
• access
• rectification
• deletion
• restriction of processing
• data portability
• objection to processing
• withdrawal of consent
You may exercise these rights by contacting us.
19. Complaints
You have the right to lodge a complaint with a supervisory authority.
EU authorities:
https://edpb.europa.eu/about-edpb/about-edpb/members
Germany:
https://www.bfdi.bund.de
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page.
21. Contact
Montredo GmbH
Friedrichstraße 122/123
10117 Berlin
Germany
Email: service@montredo.com
Phone: +49 30 28886470