Privacy.

We collect what we need to fulfil orders and answer questions. Nothing more. We never sell your data.

1. Who is responsible

The controller for data processing on this site is ātem Industries GmbH, Fischerhüttenstraße 84A, 14163 Berlin, Germany. Email: hello@atemwear.com, phone +49 174 3165023. Full company details are in our Impressum.

2. What we collect

When you order: name, shipping and billing address, email, and (optionally) phone number, plus your order history. Payment-card data is processed by our payment providers. We never see or store it. When you subscribe to our newsletter: your email address and consent record. When you visit: server log data (IP address, browser, time of request) needed to serve the site securely.

3. Why, and on what legal basis

To process and deliver orders and provide support: Art. 6(1)(b) GDPR (performance of a contract). To send our newsletter: Art. 6(1)(a) GDPR (your explicit consent, which you can withdraw at any time). To keep the site secure and functioning: Art. 6(1)(f) GDPR (legitimate interest). To meet tax and commercial retention duties: Art. 6(1)(c) GDPR (legal obligation).

4. Who processes data for us

We use carefully chosen processors under data-processing agreements (Art. 28 GDPR): Shopify International Ltd. (Ireland), with infrastructure operated by Shopify Inc. (Canada), for store hosting, cart, checkout and payment processing; Quivo (our fulfilment partner) for shipping; and Klaviyo Inc. (USA) for newsletter delivery. They process your data only on our instructions and only as needed for their service.

5. Transfers outside the EU

Some processors (e.g. our newsletter provider) are based in the USA. Where data is transferred outside the EU/EEA, we rely on an adequacy decision (EU-US Data Privacy Framework) or EU Standard Contractual Clauses as the safeguard.

6. How long we keep it

Order and invoice data: retained for the statutory period (up to 10 years under German tax and commercial law). Newsletter data: until you unsubscribe. Everything else: only as long as needed for the purpose it was collected.

7. Cookies

We use two kinds of cookies. Necessary cookies keep the store working (your cart, session and checkout, and a record of your cookie choice). These run without consent because they are strictly required to provide the service you asked for (§ 25(2) no. 2 TDDDG). Statistics cookies are first-party analytics from Shopify that help us see how the site is used. These run only after you opt in (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We do not run advertising or cross-site tracking cookies.

When you first visit, a banner asks for your choice. Statistics are off until you accept. You can change or withdraw your consent at any time, with effect for the future, via the Cookie settings link in the footer, as easily as you gave it.

Necessary (no consent needed)

_shopify_essential, cart and related cart cookies, _secure_session_id, secure_customer_sig, keep_alive, localization (Shopify) keep your session, cart, login and checkout working; _tracking_consent stores your cookie choice. Durations range from the session to one year.

Statistics (only with consent)

_shopify_y (visitor, ~1 year), _shopify_s (session, ~30 min), _shopify_sa_t / _shopify_sa_p (analytics, ~30 min), _landing_page and _orig_referrer (~2 weeks) are Shopify first-party analytics. They are set only after you opt in.

8. Your rights

You have the right to access, correct, delete, restrict, and port your data, and to object to processing (Art. 15-21 GDPR). Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise any of these, write to hello@atemwear.com. You also have the right to lodge a complaint with a supervisory authority. For us, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Last updated: 17 July 2026. We’ll post any changes here.