Privacy Policy
Data protection, explained in an easy-to-understand way.
Here you can find out what data we process when you visit our shop, place an order and use our services – and what rights you have in this regard.
1. Responsible Person & Basics
The company responsible for processing personal data on t-blade.shop is t-blade sports GmbH , Lindauer Str. 1a, 86842 Türkheim, Germany, represented by Christian Walk. You can reach us at +49 (0) 8247 – 387 99 81 or [email protected].
Personal data is information relating to an identified or identifiable person. This includes, for example, contact details, orders, IP addresses, and online identifiers.
Depending on the reason, we process data to fulfill a contract or to process pre-contractual inquiries (Art. 6 para. 1 lit. b GDPR), due to legal obligations (lit. c), with your consent (lit. a), or to protect our legitimate interests (lit. f). We explain the respective purposes and interests in the following sections.
2. Hosting, Cloudflare & Security
Hosting with netcup in Germany
Our shop is hosted on a server provided by netcup in Germany. The provider is netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. When you access our shop, technically necessary connection data is processed, in particular your IP address, the time of access, the requested address, status messages, and browser and device information. The server also stores the account, order, and form data required for the operation of the shop.
The purposes are to provide the website, analyze errors, and prevent misuse. The legal basis for technical operation is Article 6(1)(f) GDPR; for contract data, Article 6(1)(b) GDPR also applies. See netcup's privacy policy.
Cloudflare DNS and Workers
We use services from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare DNS ensures that our domain is technically accessible. This involves processing DNS queries and technical connection information. A DNS query alone does not transmit the content of an order or form.
Cloudflare Workers execute functions of our web applications. When such a function is called, in addition to IP address, browser information, and time, the content transmitted to this function may also be processed – for example, input required to process a request or configuration. The legal basis depends on the function: Article 6(1)(b) GDPR for contractual and support matters, and Article 6(1)(f) GDPR for secure and reliable operation.
The fact that the shop server is located in Germany does not mean that all data is processed exclusively in Germany. Cloudflare operates an international network. Information on transfers outside the EEA can also be found in the section "Recipients & International Processing". Cloudflare Privacy Policy · Information on Data Processing.
Protection against spam and attacks
We use Cloudflare Turnstile to check form submissions and Wordfence to protect the website. This may involve processing IP addresses, browser and device information, technical interactions, and suspicious access attempts. Turnstile is provided by Cloudflare, and Wordfence by Defiant, Inc., USA. This processing is based on our legitimate interest in preventing spam, automated attacks, and unauthorized access (Art. 6 para. 1 lit. f GDPR). Access to your device is subject to the exception in Section 25 para. 2 of the German Telemedia Act (TDDG) only to the extent that it is absolutely necessary for the requested security function.
Data privacy at Turnstile · Data privacy at Wordfence . The transmission between your browser and our shop is encrypted via HTTPS/TLS.
4. Customer account, orders & shipping
When you create an account or place an order, we process, in particular, your name, billing and shipping address, email address, phone number (if provided), login details, ordered items, configuration, payment status, and communication. Required fields are marked on the respective form. We cannot process a purchase without the necessary order and shipping information.
The processing of your data serves the purposes of account management, contract fulfillment, delivery, handling inquiries, returns, and warranty claims (Art. 6 para. 1 lit. b GDPR). For compliance with legal documentation and retention obligations, Art. 6 para. 1 lit. c GDPR applies. Necessary data is received in particular by shipping companies, payment service providers, and service providers commissioned with the technical processing.
Configurator and Style League
In the configurator, we process your selection to display the chosen ice skate and enable you to place an order. If a configuration is saved or ordered, it can be associated with your account or order. Public mention of your name in the Style League is based on your explicit consent, which you can revoke at any time by contacting us via our data protection contact form.
Affiliate program
We use SliceWP for our referral program. This involves processing partner assignments, referred visits and orders, and commissions. For participating partners, account, contact, and payment data are also processed. The processing of the partner agreement is based on Article 6 Paragraph 1 Letter b GDPR, and legal documentation on Letter c. Appropriate consent is required for non-essential cookies and cross-website tracking.
5. Payment services
You can see which payment methods are available at checkout. To process your selected payment, the necessary contact, billing, order, and transaction data will be transmitted to the respective payment service provider (Art. 6 para. 1 lit. b GDPR). Payment providers also process data under their own responsibility, for example, for fraud prevention and to comply with legal obligations. Identity or credit checks may be carried out for certain payment methods; further information can be found in the respective provider's terms and conditions.
- PayPal: PayPal (Europe) S.à rl et Cie, SCA, Luxembourg. Privacy Policy.
- Stripe: Payment processing, especially for credit cards, is handled by Stripe Payments Europe, Ltd., Ireland, and the respective payment companies involved. Privacy Policy.
- Klarna: When selecting this payment method, Klarna Bank AB (publ), Sweden, is involved. Privacy Policy.
- Revolution: Selecting this payment method will include the Revolut payment service specified in the payment process. Privacy Policy.
6. Contact, Support & Comments
When you submit an inquiry via form, support center, email, or telephone, we process your contact details, the message content, any attachments, and the information necessary for processing your request. Please only provide information that is required for your inquiry. We use, among other things, WPForms for forms and technical delivery services for message delivery.
For inquiries regarding a contract or order, Article 6(1)(b) GDPR applies. We process other requests based on our legitimate interest in responding to inquiries (Article 6(1)(f) GDPR). Any separate consent given in the form is based on Article 6(1)(a) GDPR.
When you post a comment or review, your chosen display name and your post will be publicly visible. Your email address and technical information may be processed for moderation and spam prevention purposes. Akismet by Automattic is used for spam checking; this may involve transmitting the comment content, IP address, and data entered in the comment form to the service. The legal basis for moderation and spam prevention is Article 6(1)(f) GDPR. See Automattic's privacy policy.
8. Usage statistics with Matomo
We use Matomo to analyze the use of our online shop. The integrated analytics instance can be accessed at analytics.miosmedia.com. The data processed includes page views, referring pages, timestamps, browser and device information, IP addresses, returning visits, and shop events such as shopping cart and order transactions.
The analyses help us understand which content and products are used and where we can improve the shop. The current integration uses cookies; the legal basis for these statistics is your consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). You can manage your selection via the cookie settings. Matomo is an independent analytics tool and not Google Analytics.
9. Google Ads, Meta Pixel & TikTok Pixel
We use these advertising services to measure the effectiveness of our ads and reach relevant target groups. This may involve processing page and product views, shopping cart and purchase events, order values, click IDs, IP address, and browser and device information, and linking this data to advertising identifiers or an account with the respective provider.
The legal basis for personalized advertising, its performance measurement, and non-essential tracking technologies is your marketing consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). Providers can derive interests from this information and create user profiles. You can withdraw your consent for the future via the cookie settings.
Google Ads and enhanced conversions
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Ads for ad and conversion measurement. The integration also supports enhanced conversions : provided customer data such as email address, name, and address can be used for matching with Google accounts. Identifying fields are partially hashed before transmission. A hash is a form of pseudonymization and does not make the data anonymous.
The Google integration also transmits consent signals via Consent Mode. This is a technical interface and does not replace consent. Google Privacy Policy · Extended Conversions explained.
Meta Pixels
The provider for the European region is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The pixel enables the measurement of Facebook and Instagram ads and the creation of advertising audiences. Meta can link the transmitted events to a Meta account. According to the Meta Business Tools terms and conditions, there is joint responsibility for the collection and transmission of event data; Meta is responsible for further processing.
Meta Privacy Notice · Joint Controllership Agreement . You can assert your data protection rights with both us and Meta.
tik tok pixels
The TikTok Pixel is used to measure the success and optimize our TikTok advertising. For the European region, the companies involved, as specified in the TikTok Terms of Service, are TikTok Technology Limited, Ireland, and TikTok Information Technologies UK Limited, United Kingdom. Events can be attributed to a TikTok account and used for audience targeting. Responsibilities for data collection, transmission, and subsequent processing are governed by the TikTok Business Products Terms of Service.
10. External Content & Language
Some pages may contain embedded content from external providers, such as YouTube videos or Google Maps. When such content is loaded, the provider receives, in particular, your IP address as well as browser and connection information and may use its own technologies for recognition. For non-essential embedded content, your consent is required (Art. 6 para. 1 lit. a GDPR and, where applicable, § 25 para. 1 TDDDG). Google's privacy policy applies to Google services.
Language switching is provided by GTranslate. When using the translation function, the accessed page address, the selected language, and technical connection information may be transmitted to the translation service. The legal basis for the language function you have requested is Article 6(1)(f) GDPR; our legitimate interest is to offer an understandable multilingual service. Non-essential data storage requires your consent. See GTranslate's privacy policy.
Simply displaying a link to a social network or another website does not transmit any data to the linked site. Only upon clicking on the link do the site's privacy policy apply.
11. Recipients & International Processing
Depending on the function used, the necessary data is received in particular by hosting and IT service providers, security services, payment and shipping companies, newsletter and advertising providers, and, where applicable, tax or legal advisors. Data processors may only process data within the scope of their respective mandate; other recipients, especially payment and platform providers, may be responsible for their own purposes.
With international providers, data may be processed outside the EU or the European Economic Area, particularly in the USA. Different data protection standards and regulatory access possibilities may exist there. Transfers require compliance with the requirements of Articles 44 et seq. of the GDPR, such as an applicable adequacy decision or suitable safeguards like EU Standard Contractual Clauses. An adequacy decision for certified US companies applies only to the specific recipient and scope of processing covered.
The linked provider information explains their recipients and transfer mechanisms. You can request information about the guarantees relevant to our specific processing, as well as a copy, via our data protection contact.
12. Storage period
We store personal data for as long as it is necessary for the respective purpose. This includes, in particular, the duration of a customer or partner account, the processing of an order or inquiry, legal retention obligations, and, where applicable, the securing or defense of legal claims.
Once the purpose for which the data was collected no longer applies, it will be deleted or anonymized unless there are legal grounds for retention. Invoicing and business documents that must be retained are stored for the legally required period and their use for other purposes is restricted. Security logs are assessed according to their purpose for error and misuse analysis; in specific incidents, longer retention may be necessary. You can find the expiration dates of individual cookies in the Cookie Policy.
Upon revocation of consent, any further processing based on that consent will cease. Consent documents, opt-out blocks, and data required for other legal reasons may be retained beyond this.
13. Your data protection rights
- Access about your data and its processing (Art. 15 GDPR).
- Right to rectification inaccurate or incomplete information (Art. 16 GDPR).
- Erasure and Restriction the processing under the legal requirements (Articles 17 and 18 GDPR).
- Data portability in the case of automated processing based on consent or a contract (Art. 20 GDPR).
- revocation of consent at any time with effect for the future (Art. 7 para. 3 GDPR).
Your right to object
If your personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you can object to this processing on grounds relating to your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons; this also applies to related profiling (Article 21 GDPR).
Write to [email protected] . You can also lodge a complaint with a data protection supervisory authority, in particular at your place of residence, workplace, or the location of a suspected violation. For our company, the Bavarian State Office for Data Protection Supervision (BayLDA) is the responsible authority.
Last updated: September 12, 2026. We will update these guidelines if our services or legal requirements change.
