EN€
Language
Currency
Become Partner
SearchYour watchlistAccount Cart
Language
Currency
+49 6781 93 2 93 0Mon–Fri · 9 am – 6 pmRequest a quote Become Partner

Privacy policy

Privacy Policy

Cryonos GmbH, Gartenstraße 1, 55743 Idar-Oberstein, Germany
Version: 3 October 2026

English translation – for information only. This is a translation of the German original ("Datenschutzerklärung"). Only the German version is legally binding. In the event of any discrepancy, the German version prevails.

1. Controller

The controller responsible for processing personal data on this website and in the online shop cryonos.shop is:

Cryonos GmbH
Gartenstraße 1, 55743 Idar-Oberstein, Germany
Phone: +49 6781 93 2 93 0
Email: info@cryonos.shop
Managing Director: Thomas Coleman

We have not appointed a data protection officer, as the statutory requirements for doing so are not met. If you have any questions about data protection, please contact info@cryonos.shop.

2. Overview

We process personal data only insofar as this is necessary to provide the website, to handle enquiries and orders, to comply with legal obligations or on the basis of your consent. Personal data is any information relating to an identified or identifiable person, for example name, address, email address, telephone number, order data or IP address.

The legal bases are in particular:

  • Art. 6 (1) (a) GDPR (consent),
  • Art. 6 (1) (b) GDPR (contract and pre-contractual measures, e.g. quotation, order, delivery),
  • Art. 6 (1) (c) GDPR (legal obligation, e.g. retention under commercial and tax law),
  • Art. 6 (1) (f) GDPR (legitimate interest, e.g. secure and stable operation of the website, fraud prevention, business communication with corporate customers),
  • Section 25 (1) and (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) (storing information in, and accessing information from, your terminal device; technically necessary or with consent).

3. Hosting and shop system (Shopify)

Our online shop runs on the Shopify platform. The contracting party for merchants in Europe is Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify provides the technical infrastructure (servers, database, content delivery network, checkout, customer accounts, sending of order and shipping notifications) and, on our behalf, processes all data that you enter in the shop or that arise during your visit.

Technical access data is collected automatically: IP address, date and time, page accessed, amount of data transferred, referrer, browser and operating system. This serves to deliver the website, for security (e.g. defence against attacks and fraud) and for error analysis.

Shopify also processes data on servers in Canada and the USA. An adequacy decision of the EU Commission exists for Canada. For transfers to the USA, Shopify relies on the EU-US Data Privacy Framework or EU standard contractual clauses. A data processing agreement (Data Processing Addendum) is in place with Shopify.

Legal basis: Art. 6 (1) (b) GDPR (provision of the shop and performance of contracts) and Art. 6 (1) (f) GDPR (secure, efficient operation).

Further information: https://www.shopify.com/legal/privacy

4. Cookies, consent and consent management

We use technically necessary cookies and similar technologies so that the shop works (e.g. cart, session, language and currency selection, security, storing your cookie settings). The legal basis is Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (b) or (f) GDPR.

We only use technologies that are not necessary (statistics, marketing, personalisation) with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). On your first visit, we ask you via a consent banner. You can choose "Necessary only" or allow individual categories. You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. Withdrawal applies to the future.

Consent management uses Shopify's Customer Privacy API. Your choice is stored in a cookie in your browser.

5. Contact, quotation requests and contact forms

If you contact us by email, telephone or via a form (contact, quotation request, partner request), we process the data you provide (e.g. name, company, email, telephone, country, application, your request and, where applicable, the products and quantities you selected in the product finder or cart) in order to handle your request and prepare a quotation.

The same applies to declarations you submit via our withdrawal function ("Withdraw from contract"); here we process your name, email, order number and your declaration in order to process and confirm the withdrawal (Art. 6 (1) (c) GDPR).

Form entries are transmitted via Shopify and forwarded to us by email. The Shopify app "Forms" may be used for forms.

Legal basis: Art. 6 (1) (b) GDPR (request relating to a contract) or Art. 6 (1) (f) GDPR (general enquiries). The data is deleted once the request has been finally dealt with and no statutory retention obligations apply.

6. Email communication (STRATO)

Our email mailboxes are operated by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Emails that you send to us or that we send to you are stored there. STRATO processes the data on our behalf in data centres in Germany. Legal basis: Art. 6 (1) (b) and (f) GDPR.

7. Customer account

You can create a customer account. Customer accounts are provided by Shopify. You log in using a one-time code that we send to you by email. In your account you can see your orders and addresses. Legal basis: Art. 6 (1) (b) GDPR. You can have your account deleted at any time; an informal message to info@cryonos.shop is sufficient. Statutory retention obligations for order data remain unaffected.

8. Orders and performance of contracts

For orders, we process the data you enter at checkout: name, company, billing and delivery address, email, telephone number, VAT ID (for businesses), products ordered, payment method and order history. We need this data to perform the contract, deliver the goods, issue invoices and keep you informed about the status of your order. Legal basis: Art. 6 (1) (b) GDPR.

To create invoices, delivery notes and order emails, we use the Shopify apps "Order Printer Pro", "Order Printer Templates" and "Orderly Emails". These apps access order data within the scope of their function.

9. Payment processing

Depending on the payment method selected, we pass on the data required for payment to the respective payment service provider. The legal basis is Art. 6 (1) (b) GDPR; insofar as payment service providers carry out statutory checks (e.g. anti-money laundering), also Art. 6 (1) (c) GDPR. Payment service providers are in part themselves responsible for their processing; in that case their privacy notices also apply.

Shopify Payments (credit card, Apple Pay, Google Pay and others). Payments are processed via Shopify Payments. Payment data is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Card data is transmitted in encrypted form directly to the payment service provider; we do not receive complete card data. A transfer to the USA may take place; it is based on the EU-US Data Privacy Framework or EU standard contractual clauses. Privacy: https://stripe.com/privacy

Shop Pay. If you use Shop Pay, your checkout data is stored by Shopify for faster future purchases. Shopify itself is responsible for this. Privacy: https://www.shopify.com/legal/privacy

PayPal. If you pay with PayPal, you will be redirected to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal may transmit data to credit agencies for fraud prevention and, for certain payment methods such as purchase on account or direct debit, for credit checks. Privacy: https://www.paypal.com/de/legalhub/privacy-full

Klarna. If you pay with Klarna, you will be redirected to Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. We transmit your contact and order data (name, address, email, telephone, cart, amount). Depending on the payment method selected, Klarna checks your identity and creditworthiness and may exchange data with credit agencies for this purpose. Klarna itself is responsible for this. Privacy: https://www.klarna.com/international/privacy-policy/

Advance payment / bank transfer and purchase on account. For payment by bank transfer, we process the payment data via our bank. For purchase on account, we check creditworthiness (Section 4 (2) of our General Terms and Conditions) on the basis of the information available to us and publicly accessible sources, for example the commercial register. We do not use a credit agency for this.

Cash on delivery. For payment by cash on delivery, we pass on the data necessary for delivery and collection of payment to the shipping company (see Section 10).

10. Shipping and delivery

For delivery, we pass on your name, delivery address and, where necessary for delivery, your telephone number and email address to the commissioned shipping company. Shipping companies use the email address and telephone number to announce delivery and for shipment tracking. Legal basis: Art. 6 (1) (b) GDPR; the transfer of email address and telephone number to parcel services is also based on our legitimate interest in reliable delivery (Art. 6 (1) (f) GDPR). You may object to this at any time.

  • DHL: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (connected via the Shopify app "easyDHL"). Privacy: https://www.dhl.de/en/toolbar/footer/datenschutz.html
  • UPS: United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany (connected via the Shopify app "UPS Shipping"). Privacy: https://www.ups.com/de/en/support/shipping-support/legal-terms-conditions/privacy-notice.page
  • Forwarding carriers: For freight, we commission forwarding carriers and pass on name, delivery address and telephone number so that the delivery date can be arranged.

For deliveries to countries outside the EU, we transmit the data required for export and customs declarations to the competent authorities and to the shipping company (Art. 6 (1) (b) and (c) GDPR, Art. 49 (1) (b) GDPR).

11. Sales via marketplaces

We also offer products via online marketplaces. The connection to the marketplaces is provided by the Shopify app "Marketplace Connect". If you order via a marketplace, we receive the order data required for processing from the marketplace operator and process it as described in Sections 8 to 10. The respective operator is responsible for processing on the marketplace itself; its privacy notices apply.

12. Customer service, chat and messages

For enquiries via the chat in the shop, we use Shopify Inbox. Your messages, your name, your email address and, where applicable, information about your cart or order are stored by Shopify so that we can reply. Legal basis: Art. 6 (1) (b) or (f) GDPR. Insofar as the chat window sets cookies that are not technically necessary, it is only loaded after your consent.

13. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about new products and offers. Subscription takes place via the double opt-in procedure: you receive an email with a confirmation link; you are only added after confirmation. We store the time of subscription and confirmation as well as the IP address in order to be able to prove the subscription. The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 7 (2) No. 2 of the German Act against Unfair Competition, UWG). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending a message to info@cryonos.shop.

We use the Shopify app "Messaging" (Shopify International Limited, see Section 3) for sending. Shopify processes your email address and, unless you object, information on whether and when an email was opened and which links were clicked, on our behalf, so that we can improve the newsletter.

We may send existing customers information about our own similar products by email even without express consent (Section 7 (3) UWG). You may object to this at any time without incurring any costs other than the transmission costs according to the basic rates.

14. Statistics and shop analysis

Shopify produces statistics for us on the use of the shop (e.g. page views, visitor origin, sales, search terms). Insofar as cookies or similar technologies that are not technically necessary are used for this, this only takes place with your consent ("Statistics" category). We also use the Shopify app "DataChamp" to analyse shop data. Product search and filters are provided via the Shopify app "Search & Discovery"; search queries are analysed to improve results. Legal basis: Art. 6 (1) (a) GDPR or, insofar as no access to terminal devices takes place, Art. 6 (1) (f) GDPR.

Google Analytics 4: With your consent (category “Statistics”), we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and records how you use our shop, e.g. pages viewed, time spent, source of the visit, device and browser, approximate location and interactions such as search, product finder, watchlist, cart and purchase. Google Analytics 4 does not store IP addresses. The analysis is pseudonymous; Google signals and the use of the data for personalised advertising are deactivated. Google processes the data on our behalf (Art. 28 GDPR). A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework. The data is deleted after 14 months. Without consent, our shop does not send any analytics data to Google. Legal basis: Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG. You can withdraw your consent at any time via “Cookie settings”. Privacy: https://policies.google.com/privacy

15. Marketing and advertising

We may use Shopify sales channels and marketing functions to draw attention to our products and to measure the success of advertising. In doing so, information about your visit (e.g. products viewed, cart, purchases, shortened or hashed identifiers) may be transmitted to advertising providers. This only takes place if you have consented to the "Marketing" category in the consent banner (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw your consent at any time via "Cookie settings".

  • Google (Google & YouTube channel, Google Ads, Google Merchant Center): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework. Privacy: https://policies.google.com/privacy
  • Meta (Facebook & Instagram channel, Meta Pixel/Conversions API): Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework. Insofar as we are jointly responsible with Meta, an agreement pursuant to Art. 26 GDPR is in place. Privacy: https://www.facebook.com/privacy/policy
  • TikTok (TikTok channel, TikTok Pixel): TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. A transfer to third countries (including the USA and China) is possible; it is based on EU standard contractual clauses. Privacy: https://www.tiktok.com/legal/privacy-policy-eea
  • Shopify Marketing, Shopify Audiences, Shop app: Shopify may use data on purchases and visits to form advertising audiences and to provide cross-shop functions (e.g. the Shop app). Insofar as Shopify itself is responsible, Shopify's privacy notices apply.

16. Product finder and watchlist

The product finder and the watchlist work in your browser. Your selection in the product finder is stored in your browser's local storage (localStorage) and is not transmitted to us or third parties as long as you do not submit a request. The watchlist is stored in your browser's local storage (localStorage). When you open the watchlist page, your browser loads the product data of the saved items from our shop server (Shopify). The watchlist is neither linked to your person nor stored by us, and it is not transmitted to third parties. You can delete this data at any time via your browser settings. Legal basis: Section 25 (2) No. 2 TDDDG (function expressly requested by the user).

17. Fonts, content and embeds

We load fonts and images via Shopify's content delivery network (cdn.shopify.com, fonts.shopifycdn.com). We do not embed fonts from Google servers.

Individual blog articles may contain embedded content from earlier blog tools (e.g. product cards). These are also delivered via Shopify.

Insofar as we embed videos or maps from external providers (e.g. YouTube, Google Maps), we only load them after your consent or your click. The provider is Google Ireland Limited (see Section 15).

18. Order processing and data backup

To process quotes, orders, deliveries and invoices, we use our own order portal. It accesses the customer and order data stored in our shop via an interface. In addition, it stores the information needed for processing, for example contact persons, billing and delivery addresses, quotes, order confirmations, delivery notes and invoices, and the serial numbers of delivered devices. The order portal is operated on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, in a data centre in Germany. We send emails from the order portal via our mailbox at STRATO (Section 6).

To protect against data loss, we store encrypted backup copies of the order portal data and our shop data with Impossible Cloud GmbH, Friesenweg 12, 22763 Hamburg, Germany, in data centres in the European Union. In addition, we back up our shop data with the Shopify app "Rewind Backups" of Rewind Software Inc., 333 Preston Street, Suite 200, Ottawa, Ontario K1S 5N4, Canada. An adequacy decision of the EU Commission exists for Canada.

Contracts pursuant to Art. 28 GDPR are in place with netcup and Impossible Cloud. Legal bases: Art. 6 (1) (b) GDPR (performance of contract), Art. 6 (1) (c) GDPR (statutory retention obligations) and Art. 6 (1) (f) GDPR and Art. 32 GDPR (protection against data loss).

19. Other Shopify apps with access to shop data

To operate the shop, we use other Shopify apps that may access shop data within the scope of their function, for example to maintain product data, variants, translations, blog articles and automations (Shopify Flow). We will provide a current list of the apps used, including the provider, on request. Legal basis: Art. 6 (1) (b) and (f) GDPR.

20. Recipients and transfers to third countries

Recipients of your data are the service providers named in this policy, insofar as this is necessary for the respective purpose, as well as authorities, insofar as we are legally obliged (e.g. tax authorities, customs). Contracts pursuant to Art. 28 GDPR are in place with service providers that process data on our behalf.

Transfers to countries outside the EU or EEA only take place if an adequacy decision of the EU Commission exists (e.g. Canada, Switzerland, United Kingdom, USA for companies certified under the EU-US Data Privacy Framework), appropriate safeguards exist (in particular EU standard contractual clauses) or the transfer is necessary for the performance of the contract with you (Art. 49 (1) (b) GDPR, e.g. delivery to a third country).

21. Storage period

We store personal data only for as long as is necessary for the respective purpose. It is then deleted unless statutory retention obligations prevent this. Documents relevant under commercial and tax law (e.g. invoices, accounting vouchers) are retained in accordance with Section 257 HGB and Section 147 of the German Fiscal Code (AO) for up to eight or ten years; commercial and business letters for six years. Cookies and entries in local storage remain stored until they expire or you delete them. We store newsletter data until you unsubscribe, and proof of consent for up to three years thereafter.

22. Contacting us via WhatsApp

You can reach us via the messaging service WhatsApp at +49 6781 932930. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“WhatsApp”), a Meta group company.

Integration on our website. Our website only contains a link to WhatsApp. No scripts or content from WhatsApp or Meta are loaded. Data is only transferred to WhatsApp when you click the link and WhatsApp opens. Using WhatsApp is voluntary; you can always contact us by email, phone or via our contact form instead.

Data we process. When you message us via WhatsApp, we process your mobile number, your WhatsApp profile name and, where applicable, your profile picture, the content of your messages and any files you send us (for example a photo of your unit’s type plate), and the time of the communication.

Purposes and legal bases. We process this data to answer your enquiry. Where your enquiry relates to entering into or performing a contract, such as a quotation, an order, a spare-parts request or a service, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the legal basis is our legitimate interest in fast and straightforward communication via the channel you have chosen (Art. 6(1)(f) GDPR). We do not send advertising via WhatsApp.

Processing by WhatsApp. WhatsApp processes data as an independent controller under its own terms, including communication metadata such as phone number, device information and timestamps. According to WhatsApp, message content is end-to-end encrypted. Further information: https://www.whatsapp.com/legal/privacy-policy-eea

Transfers to third countries. Data may be transferred to Meta group companies in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR). Where this does not apply, the transfer is based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

Retention. We delete the chat history and any files transmitted once your enquiry has been fully dealt with, at the latest 6 months after the last contact, unless statutory retention obligations apply (for example for business correspondence under Section 257 German Commercial Code and Section 147 German Fiscal Code). Content needed for a contract is transferred to our order records.

Your rights. Your rights as a data subject, in particular your right to object under Art. 21 GDPR to processing based on Art. 6(1)(f) GDPR, are set out in section 24 of this privacy policy.

23. Links to social networks and our company pages

23.1 Links on our website. Our website contains links to our presence on Facebook and Instagram. These are simple links with our own icons; we do not use plugins, scripts or embedded content from these services. No data is therefore transferred to Meta when you visit our website. Only when you click a link are you taken to the respective platform, where the provider’s privacy terms apply. The provider of both services is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”).

23.2 Our company pages on Facebook and Instagram. We operate company pages on Facebook and Instagram to inform about our products and services and to stay in touch with prospects and customers. The legal basis is our legitimate interest in modern public relations (Art. 6(1)(f) GDPR).

When you visit our pages, Meta collects data about your use and provides us with anonymised statistics (“Page Insights”). We and Meta are joint controllers for this processing (Art. 26 GDPR). We have concluded a joint controller agreement with Meta (“Page Insights Controller Addendum”), under which Meta is responsible for providing you with the essential information and for fulfilling your data subject rights: https://www.facebook.com/legal/terms/page_controller_addendum. We have no influence on any further processing by Meta. You may exercise your rights against Meta and against us; where necessary, we forward requests to Meta.

Messages you send us via Facebook or Instagram are processed to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and deleted as described under 22.

Further information: Meta privacy policy https://www.facebook.com/privacy/policy and information on Page Insights https://www.facebook.com/legal/terms/information_about_page_insights_data

23.3 Transfers to third countries. Meta may transfer data to the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); where this does not apply, Meta uses the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

23.4 Links to X and LinkedIn; our company pages. Our website also contains links to our presence on X (formerly Twitter) and LinkedIn. These are simple links with our own icons; no plugins, scripts or embedded content are loaded, and no data is transferred to these providers when you visit our website. Only when you click a link are you taken to the respective platform, where the provider’s privacy terms apply.

For users in the EU, X is provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Privacy policy: https://x.com/en/privacy. LinkedIn is provided for users in the EU by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy: https://www.linkedin.com/legal/privacy-policy

We operate company pages on X and LinkedIn to inform about our products and services and to stay in touch with prospects, customers and partners. The legal basis is our legitimate interest in modern public relations (Art. 6(1)(f) GDPR). We and LinkedIn are joint controllers for the statistical analysis of visits to our LinkedIn page (Page Analytics) (Art. 26 GDPR); the agreement is available here: https://legal.linkedin.com/pages-joint-controller-addendum. We have no influence on any further processing by the providers. Messages you send us via these platforms are processed to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and deleted as described under 22.

The providers may transfer data to the USA. Where the respective provider is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR); otherwise on standard contractual clauses (Art. 46(2)(c) GDPR).

24. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): Insofar as we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

To do so, please contact info@cryonos.shop informally.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.

25. Obligation to provide data, no automated decision-making

Providing the data marked as mandatory at checkout is necessary for concluding the contract; without it we cannot carry out the order. We do not use exclusively automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Payment service providers such as Klarna or PayPal may make automated credit decisions under their own responsibility; information on this can be found in their privacy notices.

26. Security

The website is encrypted throughout via TLS. We and our service providers take technical and organisational measures to protect your data against loss, manipulation and unauthorised access.

27. Changes

We will amend this privacy policy if our services or the legal situation change. The version published on this page applies.