1. Data Controller and Contact
Backpack Group Mykola Naruzhnyi
Belgradstr. 19, 80796 Munich, Germany
Email: info@markrydeneurope.com
Privacy Policy
Your Data. Clearly Explained.
Learn which personal data we process, why we need it, which cookies we use, and which rights you have under the GDPR.
2. General Information on Processing
We process personal data only to the extent necessary to provide a functional website, process orders, answer inquiries, protect the security of our services, and improve our online shop. The applicable legal basis depends on the purpose of the processing and may include GDPR Art. 6(1)(a), Art. 6(1)(b), and Art. 6(1)(f).
If processing is based on your consent, you may withdraw that consent at any time with effect for the future. If processing is based on our legitimate interests, you may object where the legal requirements of GDPR Art. 21 are met.
3. Hosting, Delivery, and Technical Logs
Our online shop is operated on the OpenCart platform and hosted by external technical service providers acting on our behalf. In order to deliver the website securely, the server processes technical connection data such as IP address, date and time of access, requested URL, referrer, browser information, and device metadata.
This processing is necessary to ensure website availability, stability, fraud prevention, and IT security. The legal basis is GDPR Art. 6(1)(f). Server log data is retained only as long as required for security and troubleshooting purposes.
4. Customer Account, Orders, and Contact Requests
When you place an order, create an account, subscribe to stock notifications, or contact us, we process the data you provide, for example name, billing and shipping address, email address, telephone number, ordered products, payment status, and communication content.
We process this data to perform pre contractual measures and fulfill the contract in accordance with GDPR Art. 6(1)(b), to comply with legal retention duties under GDPR Art. 6(1)(c), and, where necessary, to defend legal claims or prevent abuse under GDPR Art. 6(1)(f).
5. Shipping, Returns, and Logistics
To fulfill orders and returns, we share the data necessary for delivery and logistics, in particular name, delivery address, email address, and shipment details, with shipping and logistics providers such as Sendcloud, DHL, DPD, and other carriers used for the relevant shipment.
The legal basis is GDPR Art. 6(1)(b). Where service providers process data outside the EU or EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses in accordance with GDPR Art. 46, where required.
6. Payment Service Providers
Depending on the payment method selected during checkout, payment data required to complete the transaction is transferred to the responsible payment provider. This may include your name, billing details, order total, transaction identifier, and payment method information.
Our shop currently integrates providers such as PayPal, Klarna, Stripe, Google Pay, and Apple Pay. The legal basis is GDPR Art. 6(1)(b). The provider selected by you acts as an independent controller for its own payment processing steps and may carry out additional identity or fraud checks in accordance with its own privacy information.
7. Marketing and Advertising
With your consent, we use Google services, including Google Tag Manager and Google Ads conversion tracking, Microsoft Clarity for heatmaps and session recordings, and Meta Pixel technologies to measure the effectiveness of campaigns, attribute conversions, understand user behavior, and improve our marketing and website experience.
The legal basis for these activities is your consent under GDPR Art. 6(1)(a). These services may involve transfers to providers located outside the EU or EEA, including processing by Microsoft and other providers in accordance with their service infrastructure. Where required, such transfers are based on adequacy decisions or appropriate safeguards, including EU Standard Contractual Clauses.
8. Analytics, Consent Management, and Cookies
We use a consent management tool to collect, store, and document your cookie preferences. Non essential analytics and marketing cookies are set only after you have given consent. This includes Google analytics tags, Microsoft Clarity, Google Ads related tags, and Meta technologies. Required cookies remain active because they are necessary to provide the shop securely and reliably.
You can change your settings at any time on our Cookie Settings page. Your consent status is stored in the cookie named cc_cookie for 6 months. If consent for analytics or marketing is withdrawn, our consent tool attempts to prevent further tracking, passes an updated consent signal to Microsoft Clarity, and removes removable non essential cookies where technically possible.
| Cookie | Provider / Domain | Category | Purpose | Legal Basis | Retention | Type |
|---|---|---|---|---|---|---|
| OCSESSID | markrydeneurope.com | Required | Maintains the active store session, including cart and checkout state. | Legitimate Interest (GDPR Art. 6(1)(f)) | 7 days | First party |
| PHPSESSID | markrydeneurope.com | Required | May be used by the PHP runtime or integrated components to preserve a secure session context. | Legitimate Interest (GDPR Art. 6(1)(f)) | Session | First party |
| cc_cookie | markrydeneurope.com | Required | Stores your consent choices and the accepted cookie categories. | Legitimate Interest (GDPR Art. 6(1)(f)) | 6 months | First party |
| language | markrydeneurope.com | Required | Remembers the selected storefront language. | Legitimate Interest (GDPR Art. 6(1)(f)) | 30 days | First party |
| currency | markrydeneurope.com | Required | Remembers the selected storefront currency. | Legitimate Interest (GDPR Art. 6(1)(f)) | 30 days | First party |
| _ga, _ga_* | Google on markrydeneurope.com | Analytics | Distinguishes visitors and helps us compile aggregated usage statistics. | Consent (GDPR Art. 6(1)(a)) | Up to 2 years | First party analytics |
| _gid | Google on markrydeneurope.com | Analytics | Distinguishes visitors for short term traffic statistics. | Consent (GDPR Art. 6(1)(a)) | 24 hours | First party analytics |
| _dc_gtm_* | Google Tag Manager on markrydeneurope.com | Analytics | Controls loading and execution of Google Tag Manager tags after consent. | Consent (GDPR Art. 6(1)(a)) | Session | First party analytics |
| _clck, _clsk | Microsoft Clarity on markrydeneurope.com | Analytics | Persist a pseudonymous browser ID, connect page views into a session, and support heatmaps and session recordings after consent. | Consent (GDPR Art. 6(1)(a)) | Up to 1 year / 24 hours | First party analytics |
| CLID, ANONCHK, MR, MUID, SM | Microsoft domains | Analytics | Support Microsoft Clarity service delivery, browser recognition, consent handling, and service integrity. | Consent (GDPR Art. 6(1)(a)) | Varies | Third party analytics |
| _gcl_* | Google Ads / Google Tag Manager on markrydeneurope.com | Marketing | Stores ad click information and supports conversion attribution. | Consent (GDPR Art. 6(1)(a)) | Up to 90 days | First party marketing |
| _fbp | Meta on markrydeneurope.com | Marketing | Helps deliver and measure advertising on Facebook and Instagram. | Consent (GDPR Art. 6(1)(a)) | 90 days | First party marketing |
| _fbc | Meta on markrydeneurope.com | Marketing | Stores a campaign click identifier when you arrive via a Meta advertisement and supports conversion attribution. | Consent (GDPR Art. 6(1)(a)) | Up to 90 days | First party marketing |
9. Social Media and External Platforms
Our website contains links to social media profiles and may lead you to external platforms such as Instagram, Facebook, or YouTube. When you click such a link, you leave our website and the privacy rules of the respective platform provider apply.
10. Retention Periods
We store personal data only for as long as necessary for the respective purpose. Contract and tax relevant data is retained for the statutory retention periods, which may be up to 10 years. Support and contact information is retained for as long as needed to handle the request and any follow up obligations.
Cookie retention periods are listed in the cookie table above. Session related cookies generally expire automatically after the session or configured session lifetime ends.
11. Your Rights
Under the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time with effect for the future.
To exercise your rights, please contact us at info@markrydeneurope.com. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. For Bavaria, the competent authority is BayLDA.
12. EU Dispute Resolution
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr/.
Please note that the operation of this platform has been discontinued. We are neither obligated nor willing to participate in a dispute resolution procedure before a consumer arbitration board.