Privacy notice
Information about personal data processing when using geckox.shop. Updated: 1 October 2026.
Controller
Geckox, proprietor Klaus Wegner, Korbitzer Str. 21a, 01662 Meissen, Germany. Contact: service@geckox.shop; telephone: +49 3521 454300.
Shop operation and technical data
We use PlentyONE to provide the shop. Visiting the site involves processing technical data such as your IP address, access time, requested page and browser information for delivery, fault analysis and security. The basis is Article 6(1)(f) GDPR; our legitimate interest is a secure, functioning online shop. The technical provider is PlentyONE GmbH, Johanna-Waescher-Straße 7, 34131 Kassel, Germany. Information: https://www.plentyone.com/de/datenschutz.
Cookies and your choices
Necessary cookies support the basket, sign-in and storage of your privacy choices. Access to your device is based on section 25(2) of the German TDDDG. Non-essential cookies and similar technologies require consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw your choices through “Privacy settings”. The services and storage periods displayed there apply to the respective choice.
Accounts, orders and delivery
We process the contact, billing, delivery, order and payment information you provide to manage your account, process orders and deliver goods under Article 6(1)(b) GDPR. Statutory retention and records are based on Article 6(1)(c) GDPR. Delivery providers receive the data needed for delivery. Required details are necessary for the respective service; without them an order or delivery cannot be completed.
Payments
Depending on your payment method, payment providers receive the data necessary to process the transaction under Article 6(1)(b) GDPR. PayPal and Mollie are integrated into this shop: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg; Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. Their notices: https://www.paypal.com/de/legalhub/paypal/privacy-full and https://www.mollie.com/de/privacy. For wallet and invoice payment methods, the additional information shown for your chosen provider also applies.
Contact and withdrawal
We use enquiry information to respond to your request. Article 6(1)(b) GDPR applies to contractual enquiries; otherwise Article 6(1)(f) applies, with our legitimate interest in responding to enquiries. The withdrawal form processes your name, order identifier, email address, optional reason, and receipt date and time to process and acknowledge your declaration under Article 6(1)(b) and (c) GDPR. A reason for withdrawal is not required.
Newsletter
We use your email address for the newsletter with your consent under Article 6(1)(a) GDPR. Subscription is confirmed by email. You can withdraw consent at any time using the unsubscribe link or contacting us. This does not affect the lawfulness of earlier processing.
External services
Google reCAPTCHA protects forms against abuse and automated attacks. It processes data including IP addresses, browser information and interactions; the _grecaptcha cookie supports security checks. We remain the controller of this data. Since 2 April 2026, Google processes reCAPTCHA customer data as a processor under the Google Cloud terms and Cloud Data Processing Addendum. Security checks serve our legitimate interest in protecting the shop (Article 6(1)(f) GDPR). We obtain consent for device access that is not technically necessary and for optional external media. Information on processing and contractual safeguards: https://docs.cloud.google.com/recaptcha/docs/faq and https://cloud.google.com/terms/data-processing-addendum.
Retention and international processing
We keep data only as long as required for its stated purpose, statutory retention or establishing, exercising or defending claims. It is then deleted or anonymised. International providers may process data outside the EEA. The linked provider notices explain recipients, countries and the transfer grounds and safeguards used by each provider.
Your rights
Subject to statutory conditions, you may request access, rectification, erasure, restriction and portability under Articles 15–20 GDPR. You may object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time under Article 21 GDPR. Consent can be withdrawn for the future. You may complain to a data protection authority under Article 77 GDPR, particularly where you live or work or where the alleged infringement occurred. The authority for our establishment is the Saxon Data Protection and Transparency Commissioner: https://www.datenschutz.sachsen.de/beschwerde-einreichen.html. Contact us using the details above to exercise your rights.
Google Tag Manager
We use Google Tag Manager to manage integrated tags. Loading it transmits technical connection data, including the IP address, to Google. Services integrated through Tag Manager are described separately below.
Google Analytics 4
Google Analytics 4 provides statistical analysis of shop use. It processes cookie identifiers, device and browser information, page views and interactions. According to Google, GA4 does not log or store IP addresses.
Google Ads
Google Ads is used for advertising and measuring its effectiveness. This can involve processing ad interactions, cookie identifiers and subsequent actions in the shop.
Provider, consent and further information
The provider in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the USA is possible. Statistics and marketing functions requiring consent are based on Article 6(1)(a) GDPR and section 25(1) TDDDG. You can change or withdraw your choices through “Privacy settings” at any time. Cookie durations are listed there.
Google – Privacy · Google – Business Data Responsibility · Google Tag Manager · Google Analytics · Google Ads