Datenschutzerklärung

Last Updated: August 11, 2026
This Privacy Policy applies to the website www.bellissa.com operated by Bellissa. It is fully compliant with the General Data Protection Regulation (GDPR/DSGVO), German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG). This document explains how we collect, process, store and protect your personal data, as well as your statutory data protection rights when you browse our website, register an account or place online orders within Germany and the European Union.
By accessing our website and using our services, you explicitly acknowledge and consent to the data processing practices stated in this Privacy Policy.

1. Data Controller & Legal Information

Bellissa is the exclusive data controller responsible for all personal data collected on this platform, in compliance with German and EU data protection regulations.
Website: www.bellissa.shop
Support Email: hello@bellissa.shop
Contact Phone: +49 341 5478476
Registered Address: Schloßstraße 35, 90478 Nürnberg, Germany
You may contact us at any time to submit data access requests, correction requests, deletion requests, data portability applications, or privacy-related complaints.

2. Personal Data We Collect

We only collect personal data that is necessary for contractual performance and legitimate business purposes, strictly following GDPR and BDSG principles of data minimisation:
  • Voluntarily Provided User Data: Full name, email address, contact phone number, German/EU billing and delivery address, postal code, order information, customer service messages, return and refund application details.
  • Transaction Data: Order records, payment verification information and purchase preferences. We do not store complete credit card or sensitive payment data. All payment processing is completed by EU-GDPR compliant payment providers with PCI DSS certification.
  • Automated Technical Data: Device type, browser information, IP address, website browsing logs and cookie data, used for website optimisation, security maintenance, fraud prevention and user experience improvement.

3. Legal Basis & Purpose of Data Processing

We process your personal data based on GDPR legal bases including contract performance, legitimate interest and user consent:
  • To process, confirm, pack and deliver orders across Germany and the European Union
  • To respond to customer enquiries, after-sales support, return and refund matters
  • To send order confirmations, shipping tracking updates and official service notifications
  • To maintain website security and prevent fraudulent transactions
  • To deliver promotional marketing content only with your explicit opt-in consent
  • To retain business and financial records to comply with German commercial law and tax retention obligations

4. Third-Party Data Disclosure

We will never sell, rent or trade your personal data for commercial purposes. We only share limited essential data with GDPR-compliant third-party service providers located within the EU, including authorised payment institutions, German logistics carriers, website hosting providers and analytics tools. All third-party partners are contractually bound to comply with EU and German data protection laws.

5. Cookies & Online Tracking

This website uses functional and analytical cookies to optimise user experience, complying with the EU ePrivacy Directive and German TMG regulations. You may adjust, disable or clear cookie permissions via your browser settings at any time.

6. Your GDPR & German Data Protection Rights

As a data subject under GDPR and BDSG, you hold full legal rights: the right to access your stored personal data, the right to correct inaccurate data, the right to request data erasure, the right to restrict processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with a German regional data protection authority.

7. Data Retention Rules

Personal data is only stored for the duration required by law and business needs. Financial and order records are retained according to German tax law retention periods. Customer service data is stored until case closure, and marketing data is permanently deleted upon user opt-out.

8. Data Security Protection

We adopt end-to-end SSL encryption, secure server infrastructure and strict internal access control mechanisms to protect your personal data. We implement technical and organisational security measures to prevent data leakage, unauthorised access and data breaches in line with GDPR requirements.

9. Minors Data Protection

Our website and products are intended for users aged 18 years and above. We do not knowingly collect personal data from minors. Any unauthorised minor personal data will be permanently deleted immediately upon discovery or request.

10. Policy Updates

We reserve the right to update this Privacy Policy to comply with amendments to EU GDPR and German data protection laws. All updated versions will be published on this page with the latest revision date displayed.