Privacy policy
Last updated: 16 July 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:
AS 1848 GmbH
Hauptstraße 33
78148 Gütenbach
Germany
Commercial register: Amtsgericht Freiburg (Local Court of Freiburg), HRB 734886
Represented by the managing directors:
Simon Hall
Franz von Truchseß
Telephone: +49 7723 6568040
Email: info@schneider-clocks.com
AS 1848 GmbH operates this online shop under the Anton Schneider brand.
2. Scope of this Privacy Policy
This Privacy Policy informs you about how we process personal data when you visit our online shop, create a customer account, place an order, subscribe to our newsletter, communicate with us or use other functions of our online shop.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, telephone number, order and payment information, IP address and information about the use of our online shop.
3. Categories of personal data
Depending on how you use our services, we process in particular the following data:
- Master data, such as name and, where applicable, company
- Contact details, such as address, email address and telephone number
- Billing and delivery data
- Order, contract, return and complaint data
- Payment and transaction data
- Customer account data and login credentials
- Communication content, such as enquiries to our customer service
- Consent and newsletter data
- Device, browser, log and usage data, in particular IP address, browser type, operating system, time of access, pages visited and interactions
- Data for fraud prevention and the security of the online shop
4. Purposes and legal bases of processing
a) Operation and technical provision of the online shop
We process technical data, in particular IP address, device, browser and log data, in order to provide the online shop, to ensure its stability and security and to detect errors and unauthorised access.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and functional operation of our online shop.
b) Initiation and performance of contracts
We process your data in order to process orders, handle payments, dispatch products, process returns and refunds, deal with customer enquiries and fulfil statutory warranty rights.
The legal basis is Art. 6 (1) (b) GDPR.
c) Compliance with legal obligations
We process and store data to the extent necessary to comply with commercial, tax, customs or other legal obligations.
The legal basis is Art. 6 (1) (c) GDPR.
d) Customer service and communication
If you contact us by email, telephone, contact form or by any other means, we process the information you provide in order to handle your enquiry.
Where your enquiry relates to the initiation or performance of a contract, the legal basis is Art. 6 (1) (b) GDPR. In all other cases, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper handling of your enquiry.
e) Newsletter and direct marketing
If you subscribe to our newsletter, we process your email address, your consent status, the time of registration and confirmation and, where applicable, any further information you provide voluntarily.
Registration is generally carried out using the double opt-in procedure. After registering, you will receive an email in which you must confirm your registration.
The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter email.
Where we inform existing customers by email about our own similar products within the scope permitted by law, the processing may additionally be based on Art. 6 (1) (f) GDPR in conjunction with the applicable provisions of German unfair competition law. You may object to this use at any time.
f) Analytics, personalisation and marketing
We only use analytics and marketing technologies that are not technically necessary if you have given your prior consent via our cookie banner. This includes, in particular, Klaviyo onsite tracking.
The legal basis for storing information on your device or accessing information already stored there is your consent pursuant to Section 25 (1) of the German TDDDG. The legal basis for the subsequent processing of personal data is Art. 6 (1) (a) GDPR.
You may withdraw or change your consent at any time with effect for the future via the cookie settings.
5. Shopify
Our online shop is operated via the e-commerce platform Shopify. In the European region, the provider is generally Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Depending on the type of processing, other companies of the Shopify group may be involved, in particular Shopify Inc., Canada.
Shopify processes personal data in particular in order to host the online shop, provide orders and customer accounts, support payment and security functions, detect fraud and enable technical and administrative shop functions.
This may involve the processing of, among other things, contact, order, payment, device, browser, usage and log data.
Where Shopify processes data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. Where Shopify provides certain services under its own responsibility, in particular Shop Pay or certain advanced Shopify services, Shopify's privacy information applies in addition.
Depending on the processing, the legal bases are Art. 6 (1) (b), (c) or (f) GDPR. For non-essential cookies or comparable technologies, the legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) of the German TDDDG.
6. Shopify Network Intelligence
Shopify Network Intelligence may be activated in our Shopify shop. In this context, Shopify may use data from interactions with our shop, with Shopify and with other Shopify merchants in order to improve Shopify services, product recommendations, personalisation and advertising functions.
Where non-essential cookies, device information or comparable technologies are used for this purpose, this only takes place with your consent. Further information and options for exercising data protection rights vis-à-vis Shopify can be found in Shopify's privacy portal.
7. Customer account
Creating a customer account is voluntary. If you create a customer account, we process in particular your name, contact details, order history and login credentials in order to provide the account and facilitate future orders.
The legal basis is Art. 6 (1) (b) GDPR. You may request the deletion of your customer account at any time, provided that no statutory retention obligations prevent this.
8. Payment processing
For payment processing, we pass on the data required for this purpose to the selected payment service provider.
Depending on the payment method chosen at checkout, the following services in particular may be used:
- Shopify Payments
- Credit and debit card payments
- Shop Pay
- Apple Pay
- Google Pay
- Klarna and other payment methods offered via Shopify Payments
- PayPal
- Prepayment or bank transfer
If you use PayPal, payment data is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
For payment methods offered via Shopify Payments, processing takes place via Shopify and the payment, card and financial service providers involved in each case. The specific payment method available and the respective provider are displayed to you at checkout.
In the case of prepayment, we process the bank and transaction data required to allocate the incoming payment.
The legal basis is Art. 6 (1) (b) GDPR. Where payment service providers fulfil statutory verification and retention obligations or carry out fraud prevention, they may process data under their own data protection responsibility.
9. Shipping and logistics
To deliver your order, we transfer the data required for this purpose, in particular name, delivery address, email address, telephone number and shipment data, to the shipping or logistics service provider commissioned in each case.
We use in particular:
- DHL
- FedEx
- Freight forwarders and other logistics partners, depending on the destination, type and scope of the delivery
Your telephone number or email address is only transferred to the extent necessary for delivery, scheduling, shipment tracking or handling of the delivery.
The legal basis is Art. 6 (1) (b) GDPR. Where any transfer beyond this, for example for additional delivery notifications, is based on your consent, the legal basis is Art. 6 (1) (a) GDPR.
10. Klaviyo
We use Klaviyo for newsletters, sign-up forms, marketing automation, the synchronisation of Shopify customer and order data and – subject to your consent – for onsite tracking. The provider is Klaviyo, Inc., Boston, Massachusetts, USA.
In particular, the following data may be processed:
- Email address
- Name and contact details
- Consent and unsubscribe status
- Order, product and transaction data
- Information about opened and clicked newsletters
- Device, browser and usage data
- Interactions with our online shop, provided you have consented to onsite tracking
For sending the newsletter, the legal basis is Art. 6 (1) (a) GDPR. For the technically necessary management of proof of consent, the processing may additionally be based on Art. 6 (1) (c) and (f) GDPR.
Klaviyo onsite tracking and non-essential analytics or marketing technologies are only used with your consent. The legal bases are Art. 6 (1) (a) GDPR and Section 25 (1) of the German TDDDG.
Klaviyo may process data in the USA and other third countries. Appropriate safeguards are used for such transfers, in particular the European Commission's Standard Contractual Clauses as well as additional contractual and technical protective measures.
11. Instagram and product links
a) Instagram feed
On our website, we display posts from our Instagram account via the Shopify app "Square: Instagram Feed Gallery", which is offered under the developer name Square Apps.
The embedded posts open on Instagram when clicked. According to the information in the Shopify App Store, the app may process, among other things, device and activity data, IP address, browser and operating system information and certain shop data.
Where data is transferred to the app provider or to Meta when the feed is loaded, or where non-essential information is stored on or read from your device, this only takes place with your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) of the German TDDDG.
b) Instagram shop and product links
We may advertise or link products via Meta or Instagram. If you follow such a link, you leave our online shop and are taken to a Meta service. Meta is generally responsible for the data processing carried out there. Meta's privacy information applies.
12. Google Search Console
We use Google Search Console, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to monitor the findability and technical presentation of our online shop in Google Search.
Search Console provides us in particular with aggregated information on search queries, positions, clicks, indexing status and technical errors. It does not serve to analyse the individual behaviour of our website visitors and, through the mere use of Search Console on our website, generally does not deploy any additional analytics tracking code.
Technical verification features, such as a DNS record or an HTML file, may be used to verify our domain. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technical optimisation and findability of our online shop.
13. Store locator
We use an internally developed dealer and store locator that allows you to find dealer locations.
If you enter a place, postcode or address, we process this input in order to display suitable dealer locations. The input is generally used only for the search query, unless expressly stated otherwise.
The legal basis is Art. 6 (1) (b) GDPR, insofar as the function is provided at your request, and additionally Art. 6 (1) (f) GDPR. Our legitimate interest lies in showing you dealers near you.
14. Cookies and similar technologies
We use cookies and similar technologies.
Technically necessary cookies are required to provide the online shop, the shopping cart, the checkout, security functions, language settings and your privacy settings. The legal basis for the processing of personal data is Art. 6 (1) (f) GDPR. Access to your device is permitted pursuant to Section 25 (2) of the German TDDDG insofar as it is strictly necessary.
We only use non-essential cookies and similar technologies, in particular for analytics, personalisation or advertising, with your consent. The legal bases are Art. 6 (1) (a) GDPR and Section 25 (1) of the German TDDDG.
You may change or withdraw your selection at any time via the cookie settings. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
15. Origin of the data
We receive personal data in particular:
- directly from you, for example when you place orders, make enquiries, create an account or subscribe to the newsletter
- automatically when you use our online shop, for example via log data, cookies and similar technologies
- from payment, shipping, marketing and other service providers
- from Shopify and connected services, insofar as this is necessary for the provision and security of the shop
- from Meta or other advertising platforms, insofar as you interact with our advertisements or product links there and a corresponding data transfer is permitted
16. Recipients and categories of recipients
We only pass on personal data where this is legally permitted or required.
Recipients may include in particular:
- Shopify and companies of the Shopify group
- Payment and financial service providers
- DHL, FedEx, freight forwarders and other logistics service providers
- Klaviyo
- Meta Platforms
- The provider of the Instagram feed app
- Hosting, IT, security and support service providers
- Tax advisers, auditors, banks and insurers
- Authorities, courts or other public bodies where a legal obligation exists
- Affiliated companies, insofar as this is necessary for internal administrative purposes and legally permissible
17. International data transfers
Some of our service providers or their sub-processors are located outside the European Economic Area, in particular in the USA or Canada.
A transfer only takes place if the legal requirements are met. This may be based in particular on an adequacy decision of the European Commission, a valid certification under the EU-US Data Privacy Framework, the European Commission's Standard Contractual Clauses or other appropriate safeguards.
Where necessary, additional technical and organisational measures are agreed.
18. Storage period
We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations.
In particular, the following principles apply:
- We store order, contract, invoice, payment and tax-relevant data in accordance with the statutory retention periods under German commercial and tax law.
- We store data relating to a voluntary customer account until the account is deleted, provided that no statutory retention obligations prevent this.
- We store data from customer enquiries until they have been fully processed and beyond that insofar as this is necessary to assert or defend against legal claims.
- We store newsletter data until you withdraw your consent. After you unsubscribe, we may store proof of consent for the duration of possible legal claims.
- We store cookie and consent information in accordance with the periods defined in the consent tool and insofar as this is necessary to demonstrate valid consent.
- We store technical log data only for as long as is necessary for security, error analysis and the prevention of misuse.
Once the respective periods have expired, the data is deleted or anonymised unless there is a further legal basis for its storage.
19. Obligation to provide data
The provision of certain data is necessary for the conclusion of the contract and the processing of your order. Without this data, we cannot process or deliver your order.
Creating a customer account and subscribing to the newsletter are voluntary.
20. Automated decision-making
As a rule, we do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Payment or security service providers may, under their own responsibility, carry out automated checks for fraud prevention, payment authorisation or creditworthiness assessment. Further information is available from the respective provider.
21. Children's data
Our online shop is not specifically aimed at children. We do not knowingly collect personal data from children who have not yet reached the age required under applicable law for valid consent.
22. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
However, completely risk-free data transmission over the internet cannot be guaranteed.
23. Your rights
Subject to the statutory requirements, you have in particular the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent given pursuant to Art. 7 (3) GDPR
- Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out prior to withdrawal remains unaffected.
24. Right to object
Insofar as we process personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
Where personal data is processed for the purposes of direct marketing, you may object to this processing at any time without stating reasons. This also applies to profiling insofar as it is related to such direct marketing.
25. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority.
The supervisory authority with local jurisdiction for us is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg)
You may also contact the data protection supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.
26. Links to external websites
Our online shop may contain links to third-party websites and platforms, in particular to Instagram, Facebook, payment service providers, shipping service providers or dealers.
Once you click on such a link, the privacy policies of the respective third party apply. We generally have no influence on the data processing carried out there.
27. Changes to this Privacy Policy
We may amend this Privacy Policy if our data processing operations, the services we use or the legal requirements change.
The current version is published in our online shop. The date of the last change can be found at the beginning of this Privacy Policy.
28. Contact for data protection enquiries
If you have any questions about the processing of your personal data or wish to exercise your rights, please contact:
AS 1848 GmbH
Hauptstraße 33
78148 Gütenbach
Germany
Email: info@schneider-clocks.com
Telephone: +49 7723 6568040