1. Controller
The controller within the meaning of Art. 4(7) GDPR for the Lerva online shop is:
SCS Ecom LTD
A company registered in Hong Kong
Lerva online shop, https://lerva.de
Email: kontakt@lerva.de
2. Overview
We process personal data to the extent necessary to run this online shop, to prepare and fulfil purchase contracts, to communicate with you and to meet our legal obligations. The shop runs on the Shopify platform.
3. What data we process
Order and contract data: name, billing and delivery address, email address, the goods ordered, the time of the order and messages relating to your order.
Payment data: payment is handled through Shopify Checkout, where you can choose from the payment methods shown, such as credit card, PayPal, Apple Pay or Google Pay. We do not store full card numbers.
Shipping data: we pass your name and delivery address to the carrier that delivers your parcel.
Contact: the content and sender details of any message you send to kontakt@lerva.de.
Email list: if you sign up to our email list in the shop, we use your address to send you information about the shop. You can withdraw your consent at any time with effect for the future, for example using the unsubscribe link in any such email or by writing to the address above.
Technical data: IP address, date and time of access, browser type and the page visited, where needed to run the shop and keep the platform secure.
4. Purposes and legal bases
Entering into and performing the contract, and customer service: Art. 6(1)(b) GDPR.
Legal obligations, in particular commercial and tax record-keeping, where that law applies: Art. 6(1)(c) GDPR.
Running the shop securely and preventing misuse: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the shop.
Email list and optional cookies or analytics, where consent is required: Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn.
5. Cookies and other services
The shop sets the cookies needed for it to work, for the cart and for checkout. We only use analytics or marketing services and other cookies if they are actually active in the shop and, where the law requires it, you have given consent. Recipients are Shopify as the operator of the shop platform, the payment provider shown in checkout and the carrier used for your parcel.
6. Shopify and transfers to other countries
The shop runs on Shopify. Shopify may process personal data outside the European Economic Area where this is needed for hosting, order processing and security. Where no adequacy decision applies, transfers are based on appropriate safeguards under Art. 46 GDPR, in particular the standard contractual clauses used by Shopify.
7. How long we keep data
We keep personal data only for as long as the relevant purpose requires. We keep order data for as long as it takes to complete the contract and afterwards where statutory retention periods apply. Where German commercial and tax law applies, these are generally six or ten years. We delete email-list data once you withdraw your consent, unless we are legally required to keep it.
8. Whether you have to provide data
The details needed for the contract are marked in checkout. Without them the purchase contract cannot be concluded or performed. Joining the email list is voluntary.
9. Automated decisions
We do not make decisions based solely on automated processing that have legal effects for you or similarly significantly affect you.
10. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on Art. 6(1)(f) GDPR. You can withdraw any consent you have given with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state where you live, work or where the alleged infringement took place. If you live in Australia, you may also contact the Office of the Australian Information Commissioner (OAIC).
Please send any requests to kontakt@lerva.de.
Last updated: 1 November 2026
More information: Legal Notice · Privacy Policy · Terms & Conditions · Cancellation & Refunds · Shipping, Payment & Returns · Contact