Privacy Policy
Last updated: 2 November 2026
1. Data Controller
The controller responsible for processing personal data through this website is:
Hoogendorn und Ade GbR
Julius-Vosseler-Straße 108B
22527 Hamburg
Germany
Email: thevellington@gmail.com
Phone: +49 152 23162810
2. Scope
This policy applies to the VELLINGTON pre-launch website. We introduce our brand, display a countdown to the planned launch and allow visitors to voluntarily subscribe for emails about our launch and leather goods. No products can currently be ordered or paid for through this pre-launch page.
3. Visiting Our Website
When you visit our website, certain technical information may be processed, including your IP address, date and time of access, pages requested, browser and device information, language preferences and security or error data. This information is used to deliver, secure and maintain the website and prevent misuse. Where no consent is required, the legal basis is Article 6(1)(f) GDPR, our legitimate interest in a secure and functional website. Strictly necessary access to information on your device is governed by Section 25(2) of the German Telecommunications-Digital Services Data Protection Act (TDDDG).
4. Email Waitlist and Marketing
When you voluntarily join our waitlist, we process your email address, subscription status and, where technically recorded, your subscription and confirmation times and related consent evidence. We use this information to email you about the launch of VELLINGTON, our collection, products and related offers.
The legal basis is your consent under Article 6(1)(a) GDPR. Where enabled in our store, double opt-in is used: you receive a confirmation email and will receive marketing emails only after confirming your subscription.
You may withdraw your consent at any time for the future by using the unsubscribe link in a marketing email or emailing thevellington@gmail.com. Your withdrawal does not affect processing carried out before withdrawal. After you unsubscribe, we stop using your address for marketing. We may retain limited consent evidence where required to comply with legal obligations or establish or defend legal claims (Article 6(1)(f) GDPR, where applicable).
5. Email Enquiries
If you contact us by email, we process the information provided to respond to your enquiry. The legal basis is Article 6(1)(f) GDPR or, for enquiries relating to requested pre-contractual steps, Article 6(1)(b) GDPR. We delete the information when it is no longer required, subject to legal retention obligations. We do not provide a contact form on this website.
6. Shopify and Service Providers
Our website is hosted on Shopify. The principal Shopify contracting entity for merchants in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify and its service providers may process personal data to operate the website and manage subscribers. Shopify may process some information for its own purposes in accordance with its privacy information.
For details, see Shopify's Privacy Policy and Shopify's Privacy Portal.
Where we use Shopify Messaging, subscriber management and email delivery are handled through Shopify's services. Delivery status, unsubscribes, complaints and, where enabled and permitted, email open and click information may be processed to deliver and manage email campaigns. Where consent is required, the legal basis is Article 6(1)(a) GDPR.
7. Cookies and Similar Technologies
We may use cookies and similar technologies. Strictly necessary technologies can support security, language settings and privacy preferences and do not require separate consent under Section 25(2) TDDDG. For non-essential cookies or similar access, including certain analytics and advertising purposes, we obtain consent where required by law (Section 25(1) TDDDG and Article 6(1)(a) GDPR). You may update your preferences using the cookie or privacy settings made available on the website. The technologies actually used depend on the active Shopify configuration and installed apps.
If Shopify Network Intelligence or related enhanced Shopify services are enabled, Shopify may process information about interactions with our store to improve services, measure activity and, subject to applicable requirements, provide personalized offers or advertising. Information may be shared with Shopify and other service providers. Details and privacy choices are available at privacy.shopify.com.
8. Recipients and International Transfers
Personal data may be disclosed to Shopify and service providers as necessary for website operation, security and communication. Processing may occur outside the European Union or European Economic Area. Where required by law, international transfers are subject to appropriate safeguards, such as adequacy decisions or contractual protections including the EU Standard Contractual Clauses. Please also refer to the privacy information of the relevant service providers.
9. Retention
We retain personal data only for as long as necessary for its purpose or as required by law, including the protection of legal claims. Waitlist data is generally used until consent is withdrawn or the relevant mailing service ends. Technical logs are deleted or anonymized when no longer required for security and operation. Limited data may be retained longer to establish or defend legal claims.
10. Your Rights
Subject to the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), and objection to certain processing (Article 21). You may withdraw consent at any time for the future (Article 7(3)). Contact thevellington@gmail.com to exercise your rights. You may lodge a complaint with a data protection authority. For a company based in Hamburg, the competent authority is generally the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany (datenschutz-hamburg.de).
11. Security and Updates
We use security features provided by Shopify and our service providers and take appropriate organizational measures to protect personal data. We may update this policy when our website, services or legal obligations change. The version published on this website applies.