Privacy Policy

This Privacy Policy explains how personal data is collected, used, and processed when you visit or place an order on this website, in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for the processing of personal data is:

Elena Zahn
Email: elena@noblime.com

2. Scope of This Privacy Policy

This Privacy Policy applies to all users of this website and governs the collection and processing of personal data in connection with:

Browsing the website
Placing and fulfilling orders
Customer communication
Legal and accounting obligations

This website operates as an online store for resale and secondhand items.

3. Personal Data We Collect

We collect only the personal data necessary to operate the online store and fulfill our legal obligations. This may include:

Identification data (first name, last name)
Contact data (email address)
Billing and shipping addresses
Order and transaction data
Payment-related references (no full payment data is stored by us)
Technical data required for website functionality
Internal product interaction data (such as product views or cart actions)

We do not currently operate a newsletter or marketing subscription.

4. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes and legal bases:

a) Order Processing and Fulfillment

Including order confirmation, shipping, delivery, and customer support.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

b) Payment Processing

Payments are processed via external payment service providers.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

c) Shipping and Delivery

Customer address data is used to deliver purchased items.
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

d) Legal and Accounting Obligations

Including tax, invoicing, and record-keeping requirements.
Legal basis: Legal obligation (Article 6(1)(c) GDPR)

e) Website Functionality and Internal Demand Analysis

We process limited, non-identifying interaction data (such as product views or cart actions) to display product availability or demand indicators. This data is used solely for internal operational purposes and not for marketing or profiling.
Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

5. Service Providers and Data Sharing

Personal data is shared only where necessary with the following service providers:

Backend infrastructure and database services used to securely store customer, order, and operational data
Payment service providers used to process payments securely
Shipping and logistics providers used to fulfill deliveries (including carriers such as DHL or similar partners)

These service providers process data only for the purposes described above and in accordance with applicable data protection laws.

6. Data Transfers Outside the European Union

Some service providers may process personal data outside the European Union. Where applicable, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used to ensure an adequate level of data protection.

7. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal and tax regulations.

8. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Request correction or deletion of your data
Restrict or object to processing
Withdraw consent at any time where processing is based on consent
Request data portability

To exercise your rights, please contact: elena@noblime.com

9. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact: