Privacy policy

Last updated: 28 July 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

AS 1848 GmbH
Hauptstraße 33
78148 Gütenbach
Germany

Commercial Register: Freiburg Local Court (Amtsgericht Freiburg), HRB 734886

Represented by the managing directors:
Simon Hall
Franz von Truchseß

Telephone: +49 7723 6568040
Email: info@schneider-clocks.com

AS 1848 GmbH operates this online shop under the Anton Schneider brand.

2. Scope of this privacy policy

This privacy policy informs you about how we process personal data when you visit our online shop, create a customer account, place an order, subscribe to our newsletter, communicate with us or use other functions of our online shop.

Personal data means all information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, telephone number, order and payment information, IP address and information about the use of our online shop.

3. Categories of personal data

Depending on how you use our services, we process in particular the following data:

Master data, such as name and, where applicable, company
Contact data, such as address, email address and telephone number
Invoicing and delivery data
Order, contract, return and complaint data
Payment and transaction data
Customer account data and login information
Communication content, such as enquiries to our customer service
Consent and newsletter data
Device, browser, log and usage data, in particular IP address, browser type, operating system, time of access, pages accessed and interactions
Data for fraud prevention and for the security of the online shop

4. Purposes and legal bases of processing

a) Operation and technical provision of the online shop

We process technical data, in particular IP address, device, browser and log data, in order to provide the online shop, to ensure its stability and security and to detect errors and abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of our online shop.

b) Initiation and performance of contracts

We process your data in order to process orders, process payments, ship products, carry out returns and refunds, handle customer enquiries and fulfil statutory warranty rights.

The legal basis is Art. 6(1)(b) GDPR.

c) Compliance with legal obligations

We process and store data insofar as this is necessary to comply with commercial, tax, customs or other legal obligations.

The legal basis is Art. 6(1)(c) GDPR.

d) Customer service and communication

If you contact us by email, telephone, contact form or by any other means, we process your details in order to handle your enquiry.

Insofar as your enquiry serves the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of your enquiry.

e) Newsletter and direct marketing

If you subscribe to our newsletter, we process your email address, your consent status, the time of registration and confirmation and, where applicable, further details you provide voluntarily.

Registration generally takes place using the double opt-in procedure. After registering, you will receive an email in which you must confirm your registration.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter email.

Insofar as we inform existing customers by email about our own similar products within the limits permitted by law, the processing may additionally be based on Art. 6(1)(f) GDPR in conjunction with the applicable competition law provisions. You may object to this use at any time.

f) Analysis, personalisation and marketing

We only use analysis and marketing technologies that are not technically necessary if you have previously given your consent via our cookie banner. This includes in particular Klaviyo onsite tracking as well as the Meta Pixel including the Conversions API and Advanced Matching. Details on this can be found in section 11.

The legal basis for the storage of information on your terminal equipment or access to information already stored is your consent pursuant to Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

You may withdraw or change your consent at any time with effect for the future via the cookie settings.

5. Shopify

Our online shop is operated using the e-commerce platform Shopify. In the European area, the provider is generally Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Depending on the type of processing, further companies of the Shopify group may be involved, in particular Shopify Inc., Canada.

Shopify processes personal data in particular in order to host the online shop, to provide orders and customer accounts, to support payments and security functions, to detect fraud and to enable technical and administrative shop functions.

In this context, contact, order, payment, device, browser, usage and log data, among others, may be processed.

Insofar as Shopify processes data on our behalf, this takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR. Insofar as Shopify provides certain services under its own responsibility, in particular Shop Pay or certain advanced Shopify services, the data protection information of Shopify applies in addition.

Depending on the processing, the legal bases are Art. 6(1)(b), (c) or (f) GDPR. For cookies or comparable technologies that are not necessary, the legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

6. Shopify Network Intelligence

Shopify Network Intelligence may be activated in our Shopify shop. In this context, Shopify may use data from interactions with our shop, with Shopify and with other Shopify merchants in order to improve Shopify services, product recommendations, personalisation and advertising functions.

Insofar as cookies, device information or comparable technologies that are not necessary are used for this purpose, this only takes place after you have given your consent. Further information and options for exercising data protection rights vis-à-vis Shopify can be found in Shopify's privacy portal.

7. Customer account

Creating a customer account is voluntary. If you create a customer account, we process in particular your name, your contact data, order history and login information in order to provide the account and to facilitate future orders.

The legal basis is Art. 6(1)(b) GDPR. You may request the deletion of your customer account at any time, unless statutory retention obligations prevent this.

8. Payment processing

For payment processing, we pass on the data required for this purpose to the payment service provider selected in each case.

Depending on the payment method chosen at checkout, the following services in particular may be used:

Shopify Payments
Credit and debit card payments
Shop Pay
Apple Pay
Google Pay
Klarna and other payment methods offered via Shopify Payments
PayPal
Payment in advance or bank transfer

When PayPal is used, payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

For payment methods offered via Shopify Payments, processing takes place through Shopify and the respective payment, card and financial service providers involved. The payment method actually available and the respective provider will be shown to you at checkout.

In the case of payment in advance, we process the bank and transaction data required to allocate the incoming payment.

The legal basis is Art. 6(1)(b) GDPR. Insofar as payment service providers fulfil statutory verification and retention obligations or carry out fraud prevention, they may process data under their own data protection responsibility.

9. Shipping and logistics

In order to deliver your order, we transmit the data required for this purpose, in particular name, delivery address, email address, telephone number and shipment data, to the shipping or logistics service provider engaged in each case.

In particular, we use:

DHL
FedEx
Freight forwarders and other logistics partners, depending on the destination, type and scope of the delivery

The telephone number or email address is only transmitted insofar as this is necessary for delivery, scheduling, shipment tracking or handling.

The legal basis is Art. 6(1)(b) GDPR. Insofar as any disclosure going beyond this, for example for additional delivery notifications, is based on your consent, the legal basis is Art. 6(1)(a) GDPR.

10. Klaviyo

We use Klaviyo for newsletters, sign-up forms, marketing automations, the synchronisation of Shopify customer and order data and – subject to your consent – for onsite tracking. The provider is Klaviyo, Inc., Boston, Massachusetts, USA.

In this context, the following data in particular may be processed:

Email address
Name and contact data
Consent and unsubscribe status
Order, product and transaction data
Information about newsletters opened and clicked
Device, browser and usage data
Interactions with our online shop, insofar as you have consented to onsite tracking

For sending the newsletter, the legal basis is Art. 6(1)(a) GDPR. For the technically necessary management of consent records, the processing may additionally be based on Art. 6(1)(c) and (f) GDPR.

Klaviyo onsite tracking and analysis or marketing technologies that are not necessary are only used after you have given your consent. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Klaviyo may process data in the USA and other third countries. Appropriate safeguards are used for such transfers, in particular the standard contractual clauses of the European Commission as well as further contractual and technical protective measures.

11. Meta (Facebook and Instagram)

Our online shop is connected to our Meta business portfolio, our Facebook page and our Instagram business account via the Shopify app "Facebook & Instagram by Meta".

For users in the European Economic Area and in Switzerland, the provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data may also be transmitted to Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA.

a) Meta Pixel, Conversions API and Advanced Matching

We use the Meta Pixel and the Meta Conversions API in order to measure the effectiveness of our advertising on Facebook and Instagram, to target and optimise our ads, to build audiences and to show you interest-based advertising, including after you have left our online shop (retargeting).

The following events and data in particular may be recorded in this context:

Views of pages and product pages
Adding items to the shopping cart and to the wish list
Start of the checkout process
Completed purchases including order value, currency and the items purchased
IP address, device and browser information, operating system, screen resolution, referrer URL as well as cookie and identifier information

The transmission takes place in two ways. The Meta Pixel is a program code that is executed in your browser and sends information directly to Meta. The Conversions API additionally transmits the same events server-side, that is to say directly from the Shopify infrastructure to Meta, without the transmission running via your browser.

By means of what is known as Advanced Matching, additional details may be transmitted that Meta can allocate to a user, in particular email address, telephone number, first and last name, town or city, postcode and country. Before transmission, these details are converted into a character string by means of a cryptographic one-way procedure (hashed). Meta matches this character string against the data stored at Meta in order to allocate events to accounts. In our Shopify account, data sharing is set to the "Maximum" level; this comprises the Pixel, Advanced Matching and the Conversions API.

The legal basis is exclusively your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without your consent, neither is the Meta Pixel loaded nor are events transmitted to Meta via the Conversions API.

You may withdraw your consent at any time with effect for the future via the cookie settings in our online shop. Irrespective of this, you can deactivate interest-based advertising in the advertising settings of your Meta account.

b) Joint controllership

For the collection of your data via the Meta Pixel or the Conversions API and its transmission to Meta, we are joint controllers together with Meta Platforms Ireland Limited within the meaning of Art. 26 GDPR. The basis for this is the joint controllership agreement provided by Meta ("Controller Addendum").

It stipulates in particular that Meta assumes the information obligations under Art. 13 and 14 GDPR for the joint processing and is responsible for safeguarding data subject rights. You may therefore also assert your rights, in particular to access and erasure, directly vis-à-vis Meta.

Meta is solely responsible for the subsequent further processing of the data in its own systems. Further information on this, on purposes and retention periods and on your options can be found in Meta's privacy policy.

c) Facebook and Instagram shop and product catalogue

A Meta product catalogue is created via the app and automatically synchronised with our Shopify products. Product data such as designation, description, price, availability, images and the link to the respective product in our online shop is transmitted in this context. This data is generally not personal data.

Contracts continue to be concluded exclusively via our online shop. If you follow a product link on Facebook or Instagram, you leave the respective Meta service and are directed to us. Conversely, if you follow a link from our online shop to Facebook or Instagram, Meta is responsible for the data processing that takes place there.

d) Instagram feed on our website

On our website we display posts from our Instagram presence via the Shopify app "Square: Instagram Feed Gallery", which is offered under the developer name Square Apps.

The embedded posts open on Instagram when clicked. According to the information in the Shopify App Store, the app may process, among other things, device and activity data, IP address, browser and operating system information as well as certain shop data.

Insofar as data is transmitted to the app provider or to Meta when the feed is loaded, or information that is not necessary is stored on or read from your terminal equipment, this only takes place after you have given your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

e) Transfer to the USA

Meta may process personal data in the USA and other third countries. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; in this respect the transfer is based on the adequacy decision of the European Commission. In addition, the standard contractual clauses of the European Commission are used.

12. Google Search Console

We use Google Search Console, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in order to monitor the findability and technical presentation of our online shop in Google Search.

Search Console provides us in particular with aggregated information on search queries, positions, clicks, indexing status and technical errors. It does not serve to analyse the individual behaviour of our website visitors and, through the mere use of Search Console on our website, does not deploy any additional analytics tracking code.

An HTML meta tag is stored in the source code of our pages to verify ownership of our domain. This feature serves solely as proof vis-à-vis Google and does not collect any user data. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical optimisation and findability of our online shop.

Other Google services such as Google Analytics, Google Ads or Google Tag Manager are not used in our online shop.

13. Store locator

We use an internally developed dealer or store locator with which you can find dealer locations.

Insofar as you enter a place, a postcode or an address, we process this entry in order to display matching dealer locations. The entry is generally used only for the search query, unless expressly stated otherwise.

The legal basis is Art. 6(1)(b) GDPR insofar as the function is provided at your request, and additionally Art. 6(1)(f) GDPR. Our legitimate interest lies in showing you dealers near you.

14. Cookies and similar technologies

We use cookies and similar technologies.

Technically necessary cookies are required in order to provide the online shop, the shopping cart, the checkout, security functions, language settings and your privacy settings. The legal basis for the processing of personal data is Art. 6(1)(f) GDPR. Access to your terminal equipment is permitted pursuant to Section 25(2) TDDDG insofar as it is strictly necessary.

Cookies and similar technologies that are not necessary, in particular for analysis, personalisation or advertising, are only used with your consent. These include in particular Klaviyo onsite tracking and the Meta Pixel. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You may change or withdraw your selection at any time via the cookie settings. The withdrawal does not affect the lawfulness of the processing carried out up to the point of withdrawal.

15. Origin of the data

We receive personal data in particular:

directly from you, for example when placing orders, making enquiries, creating an account or subscribing to the newsletter
automatically when you use our online shop, for example via log data, cookies and similar technologies
from payment, shipping, marketing and other service providers
from Shopify and connected services, insofar as this is necessary for the provision and security of the shop
from Meta or other advertising platforms, insofar as you interact there with our ads or product links and a corresponding data transmission is permitted

16. Recipients and categories of recipients

We only disclose personal data if this is permitted by law or necessary.

Recipients may in particular be:

Shopify and companies of the Shopify group
Payment and financial service providers
DHL, FedEx, freight forwarders and other logistics service providers
Klaviyo, Inc.
Meta Platforms Ireland Limited and Meta Platforms, Inc.
Provider of the Instagram feed app
Hosting, IT, security and support service providers
Tax advisers, auditors, banks and insurers
Authorities, courts or other public bodies, insofar as there is a legal obligation
Affiliated companies, insofar as this is necessary for internal administrative purposes and legally permitted

17. International data transfers

Some of our service providers or their sub-processors are located outside the European Economic Area, in particular in the USA or Canada.

A transfer only takes place if the legal requirements are met. This may in particular be on the basis of an adequacy decision of the European Commission, a valid certification under the EU-US Data Privacy Framework, the standard contractual clauses of the European Commission or other appropriate safeguards.

In the case of Meta Platforms, Inc., the transfer to the USA is based on the certification under the EU-US Data Privacy Framework and, in addition, on standard contractual clauses. In the case of Klaviyo, Inc., the transfer takes place on the basis of standard contractual clauses.

Where necessary, additional technical and organisational measures are agreed.

18. Retention period

We store personal data only for as long as this is necessary for the respective purpose or as long as statutory retention obligations exist.

In particular, the following principles apply:

We store order, contract, invoice, payment and tax-relevant data in accordance with the statutory retention periods under commercial and tax law.
We store data from a voluntary customer account until the account is deleted, unless statutory retention obligations prevent this.
We store data from customer enquiries until the enquiry has been fully handled and beyond that insofar as this is necessary for the assertion of or defence against claims.
We store newsletter data until you withdraw your consent. After you unsubscribe, we may store records evidencing consent for the duration of possible legal claims.
We store cookie and consent information in accordance with the periods specified in the consent tool and insofar as this is necessary to demonstrate valid consent.
For data transmitted to Meta, the retention period is determined by Meta's specifications. We have no influence on this.
We store technical log data only for as long as this is necessary for security, error analysis and abuse prevention.

Once the respective periods have expired, the data is erased or anonymised, unless there is a further legal basis for storage.

19. Obligation to provide data

The provision of certain data is necessary for the conclusion of the contract and for order processing. Without this data, we cannot process or deliver your order.

Creating a customer account and subscribing to the newsletter are voluntary.

20. Automated decision-making

As a matter of principle, we do not take any decisions based solely on automated processing which produce legal effects concerning you or similarly significantly affect you.

Payment or security service providers may, within the scope of their own responsibility, carry out automated checks for fraud prevention, payment authorisation or creditworthiness assessment. You can obtain further information from the respective provider.

21. Children's data

Our online shop is not specifically directed at children. We do not knowingly collect personal data from children who have not yet reached the age limit required under applicable law for valid consent.

22. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, entirely risk-free data transmission over the internet cannot be guaranteed.

23. Your rights

Subject to the statutory requirements, you have in particular the following rights:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent given pursuant to Art. 7(3) GDPR
Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

You may withdraw any consent given at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Insofar as processing takes place within the scope of joint controllership with Meta, you may also assert your rights directly vis-à-vis Meta.

24. Right to object

Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time to such processing on grounds relating to your particular situation.

If personal data is processed for the purpose of direct marketing, you may object to this processing at any time without giving reasons. This also applies to profiling insofar as it is connected with such direct marketing.

25. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority.

The supervisory authority with local jurisdiction for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)

You may also contact the data protection supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

26. Links to external websites

Our online shop may contain links to third-party websites and platforms, in particular to Instagram, Facebook, payment service providers, shipping service providers or dealers.

Once you click on such a link, the privacy provisions of the respective third-party provider apply. As a matter of principle, we have no influence on the data processing that takes place there.

27. Changes to this privacy policy

We may amend this privacy policy if our data processing operations, the services we use or the legal requirements change.

The current version is published in our online shop. The date of the last amendment can be found at the beginning of this privacy policy.

28. Contact for data protection enquiries

If you have questions about the processing of your personal data or would like to exercise your rights, please contact: