Last updated: November 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
20 Nodi S.r.l.
Via di Salpi 24/B
71121 Foggia (FG)
Italy
Email: info@20nodi.de
We have not appointed a data protection officer, as there is no legal obligation to do so. For all questions about data protection, you can reach us at the email address given above.
2. General information on data processing
We process personal data only insofar as this is necessary for providing this website, for processing orders, for answering enquiries or on the basis of your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest).
3. Hosting and shop system (Shopify)
Our online shop is operated on the Shopify platform. The provider for customers in Europe is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. On our behalf, Shopify processes the data necessary to provide the shop, including server log files (IP address, date and time of access, page accessed, browser type, operating system, referrer URL) as well as order and customer data.
The processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning online shop). A data processing agreement pursuant to Art. 28 GDPR is in place with Shopify. Data may also be transferred to Shopify Inc. (Canada) and affiliated companies in the USA. For Canada there is an adequacy decision of the European Commission; for transfers to the USA, Shopify relies on the EU-US Data Privacy Framework or on EU standard contractual clauses.
Further information: shopify.com/de/legal/datenschutz
4. Cookies and consent
Our website uses cookies and similar technologies. We use technically necessary cookies (e.g. for the cart, the checkout, the language setting and the storage of your cookie choices) on the basis of § 25 Abs. 2 Nr. 2 TDDDG and Art. 6(1)(b) or (f) GDPR.
We use all other cookies, for example for statistics or marketing, only with your consent pursuant to § 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR. You give or refuse your consent via our cookie banner. You can withdraw it at any time with effect for the future by opening the cookie settings again. For visitors outside Germany, the corresponding national provisions implementing the ePrivacy Directive 2002/58/EC (in Italy Art. 122 of Legislative Decree 196/2003) apply instead of the TDDDG.
5. Orders and customer account
When you place an order with us, we process the data required for this: name, billing and delivery address, email address, telephone number, order data and payment information. Mandatory fields are marked in the ordering process; the telephone number is mandatory because we pass it on to the transport company for delivery (see section 6). The legal basis is Art. 6(1)(b) GDPR. If you create a customer account, we store your data until the account is deleted.
Online withdrawal function (“Vertrag widerrufen”): If you declare your withdrawal using the “Vertrag widerrufen” (Withdraw from contract) button, we process the data entered there (name, email address, order number and, optionally, the reason for withdrawal), the date and time of receipt and technically necessary connection data (e.g. IP address) in order to process the withdrawal and send you the legally required acknowledgement of receipt (Art. 6(1)(c) GDPR in conjunction with § 356a BGB and Art. 6(1)(b) GDPR). The function is operated on our behalf by Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany, as a processor (Art. 28 GDPR). We store the data for as long as they are needed to handle the withdrawal and statutory retention obligations apply.
Due to retention obligations under commercial and tax law (in particular under Italian law, Art. 2220 Codice Civile), we store invoices and accounting records for up to ten years (Art. 6(1)(c) GDPR). The data is then deleted.
6. Disclosure to shipping service providers
In order to deliver your order, we pass your name, delivery address and telephone number on to the transport company we have engaged (Art. 6(1)(b) GDPR). The transport company needs the telephone number to reach you directly if there are problems with the delivery, e.g. if you are not at home or the address cannot be found. We only transmit your email address to the transport company if you have agreed to this during the ordering process, so that the transport company can inform you about the delivery (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.
7. Payment service providers
Payment data is transmitted to the payment service provider you have chosen, insofar as this is necessary for processing the payment (Art. 6(1)(b) GDPR). The payment service providers process your data partly under their own responsibility, e.g. for fraud prevention and identity verification.
Shopify Payments: Card payments and other payment methods offered via Shopify Payments (e.g. Apple Pay, Google Pay, Klarna) are processed via Shopify Payments. The payment service provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. If you use Klarna, Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, is also involved. Privacy notices: stripe.com/de/privacy, klarna.com/de/datenschutz.
PayPal: If you pay with PayPal, we transmit your order and payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy notice: paypal.com/de/legalhub/privacy-full.
Payment in advance / bank transfer: If you pay by bank transfer, we process the data that your bank transmits to us with the payment (name, IBAN, payment reference) in order to match the payment to your order.
8. Contact by email and WhatsApp
If you contact us by email, we process the information you provide in order to handle your enquiry (Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR). We delete the data as soon as your enquiry has been fully dealt with and no retention obligations apply.
For customer service, we also offer the option of contacting us via WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. If you write to us via WhatsApp, we receive your telephone number, your profile name and the content of your messages. In doing so, WhatsApp or the Meta group also processes its own data, including in the USA (EU-US Data Privacy Framework). The use of WhatsApp is voluntary; you can also reach us by email at any time. The legal basis is Art. 6(1)(a) GDPR, or Art. 6(1)(b) GDPR for questions about an order. Privacy notice: whatsapp.com/legal/privacy-policy-eea.
9. Email marketing and cart reminders (Klaviyo)
We use Klaviyo to send emails about carts, orders and offers. The provider is Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02111, USA. On our behalf, Klaviyo processes your contact details (email address, name, telephone number, address), your language, details of your cart and orders, and information on whether and when you opened our emails or clicked links in them. A data processing agreement pursuant to Art. 28 GDPR is in place with Klaviyo. For transfers to the USA, Klaviyo relies on the EU-US Data Privacy Framework and otherwise on EU standard contractual clauses.
If you start an order, enter your email address and do not complete it, we will send you an email reminder about your cart (Art. 6(1)(f) GDPR, legitimate interest in the completion of orders that have been started). You will only receive newsletters if you have consented to receiving marketing emails (Art. 6(1)(a) GDPR). If you have placed an order with us, we will also send to the email address provided with your order, without consent, a follow-up about your order and information about our own similar products (§ 7 Abs. 3 UWG or the corresponding national provisions implementing Art. 13(2) of Directive 2002/58/EC, and Art. 6(1)(f) GDPR).
You may object to the use of your email address for advertising and withdraw any consent given at any time, at no cost other than transmission costs at basic rates, using the unsubscribe link in every email or by writing to info@20nodi.de. We store your data at Klaviyo until you object or until it is no longer needed for the purposes stated.
On our website, Klaviyo records page views and cart activity only if you have accepted marketing cookies in the cookie banner (§ 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR). Further information: klaviyo.com/legal/privacy.
10. Google Ads: conversion measurement and remarketing
We use Google Ads to advertise our products in Google Search and other Google services, and we measure whether a click on an ad leads to an order (conversion measurement). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For this purpose the Google tag is integrated into our website and managed through the Shopify app “Google & YouTube”. If you reach us through a Google ad, Google stores a cookie or a click identifier. Your IP address, device and browser information, the pages viewed and events such as product view, cart, start of checkout and purchase including order value are also processed.
Enhanced conversions: after an order we transmit your email address and, where applicable, your name, telephone number and address to Google in hashed form, i.e. not readable in plain text, so that the order can be attributed to an ad click more accurately. Using the same technologies we may later show ads again to visitors of our website (remarketing).
This processing only takes place if you have accepted marketing cookies in the cookie banner (§ 25 Abs. 1 TDDDG and Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by opening the cookie settings again.
For enhanced conversions, Google processes the data on our behalf on the basis of the Google Ads Data Processing Terms (Art. 28 GDPR); in all other respects Google is an independent controller. Data may be transferred to Google LLC in the USA; such transfers rely on the EU-US Data Privacy Framework and otherwise on EU standard contractual clauses. The conversion cookie is generally deleted after 90 days. Further information: policies.google.com/privacy. You can also manage personalised advertising at adssettings.google.com.
11. Your rights
Under the GDPR, you have the following rights with respect to us:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent given at any time with effect for the future (Art. 7(3) GDPR)
Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to the use of your data for advertising at any time without giving reasons.
To exercise your rights, an email to info@20nodi.de is sufficient.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy (garanteprivacy.it).
13. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
14. Changes to this Privacy Policy
We will amend this Privacy Policy if our data processing or the legal situation changes, e.g. when a newsletter or analytics and marketing tools are introduced. The version published here applies in each case.
