Privacy policy
The controller responsible for data processing is:
Pixel Grading GmbH
Managing Director: Waldemar Felde
Am Holler 27
67697 Otterberg
Germany
info@pixel-grading.com
Phone: +49 176 61675999
Protecting your privacy matters to us. Below we explain in detail how we handle your data.
1. Access data and hosting
You can visit our website without providing any personal information. Each time a page is called up, the web server automatically stores a server log file containing, for example, the name of the file requested, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), documenting the request. This access data is evaluated solely for the purpose of ensuring trouble-free operation of the site and improving what we offer. This serves our overriding legitimate interests in the correct presentation of our offering, following a balancing of interests, pursuant to Art. 6(1)(1)(f) GDPR. Access data is deleted once it is no longer required for that purpose.
Hosting by Shopify
We operate our online store on the platform of Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides the technical infrastructure and processes, on our behalf, all data arising in the course of your visit and your order — in particular access data, order data, customer account data and payment data. This is based on a data processing agreement pursuant to Art. 28 GDPR.
Shopify may transfer data to affiliated companies, including Shopify Inc. in Canada and Shopify Inc. in the United States. An adequacy decision of the European Commission is in place for Canada. For the United States, the transfer is based on the European Commission's standard contractual clauses. Further information is available in Shopify's privacy policy at https://www.shopify.com/legal/privacy
2. Data processing for contract performance, contact and when opening a customer account
We collect personal data when you provide it to us voluntarily in the course of a request for an offer or when contacting us (for example by contact form or email). Mandatory fields are marked as such, because in these cases we require the data in order to perform the contract or to deal with your enquiry, and without it you cannot submit the order or the enquiry. Which data is collected is apparent from the respective input forms. We use the data you provide to perform the contract and to process your enquiries pursuant to Art. 6(1)(1)(b) GDPR.
As part of our service, we also record information about the items you send in, document their condition in words and images, and assign certificate and serial numbers. We process this data in order to perform the contract concluded with you pursuant to Art. 6(1)(1)(b) GDPR.
Where you have given your consent pursuant to Art. 6(1)(1)(a) GDPR by choosing to open a customer account, we use your data for the purpose of opening that account. Further information on the processing of your data, in particular on its disclosure to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy.
Once the contract has been fully performed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax and commercial law pursuant to Art. 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(1)(a) GDPR or we reserve the right to use the data beyond that, where this is permitted by law and we inform you of it in this policy. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or through the function provided for this purpose in your customer account.
3. Data processing for shipping
In order to perform the contract pursuant to Art. 6(1)(1)(b) GDPR, we pass your data to the shipping service provider commissioned with the delivery, to the extent this is necessary to deliver the goods ordered.
Disclosure to the shipping service provider for delivery notifications
If you have given us your express consent during or after your order, we will, on that basis and pursuant to Art. 6(1)(1)(a) GDPR, pass your email address to the selected shipping service provider so that it can contact you before delivery in order to announce or arrange the delivery.
You may withdraw this consent at any time by sending a message to the contact option described in this privacy policy, or directly to the shipping service provider at the address below. Following withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, where this is permitted by law and we inform you of it in this policy.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Status notifications and order lookup
For sending status notifications about your order and for looking up its progress, we use the "Custom Order Status" application provided by W3trends Inc., 8904 Fairbanks N. Houston Rd., Suite 220, Houston, TX 77064, USA. The data processed includes your name, your email address, your order number, the processing status of your order and the certificate and serial numbers belonging to it. The provider acts as our processor pursuant to Art. 28 GDPR. The processing serves to perform the contract pursuant to Art. 6(1)(1)(b) GDPR.
The processing takes place in the United States. No adequacy decision of the European Commission is in place for the United States; for the basis of this transfer, see section 9.
When our pages are loaded, the application additionally retrieves a program library (jQuery) from a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In doing so, your IP address is transmitted to Google. We have no influence over this, as it is triggered by the application we use. The legal basis is our legitimate interest in the technically faultless operation of that application pursuant to Art. 6(1)(1)(f) GDPR.
4. Data processing for payment
We work with the following partners to process payments:
Shopify Payments — Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Card payments (Visa, Mastercard, American Express, Maestro, UnionPay), Shop Pay and local payment methods (Bancontact, EPS, MobilePay) are processed through this provider.
PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
Apple Pay — Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
Google Pay — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
4.1 Data processing to complete the transaction
Depending on the payment method selected, we pass the data necessary to complete the payment transaction to our technical service providers acting as our processors, to the credit institutions commissioned, or to the selected payment service provider, to the extent this is necessary to process the payment. This serves to perform the contract pursuant to Art. 6(1)(1)(b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, for example on their own website or through a technical integration in the ordering process. In that respect, the privacy policy of the respective payment service provider applies.
If you have questions about our payment partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.
4.2 Data processing for fraud prevention and to optimise our payment processes
Where applicable, we provide our service providers with further data which they use, together with the data necessary to process the payment, as our processors for the purpose of fraud prevention and the optimisation of our payment processes (for example invoicing, handling of disputed payments, accounting support). Pursuant to Art. 6(1)(1)(f) GDPR, this serves our overriding legitimate interests, following a balancing of interests, in protecting ourselves against fraud and in efficient payment management.
5. Contacting us via Discord
We offer support through a Discord server. The platform is operated by Discord Netherlands B.V., Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands; processing is also carried out by Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA.
If you write to us there, we process the information you provide in order to deal with your enquiry pursuant to Art. 6(1)(1)(b) or (f) GDPR. We have no influence over Discord's own processing of data; their privacy terms apply. No adequacy decision of the European Commission is in place for transfers to the United States.
If you would prefer to avoid this, you can equally reach us by email at info@pixel-grading.com.
6. Newsletter
If you subscribe to our newsletter, we use your email address to send you regular information about our offerings and services. The legal basis is your consent pursuant to Art. 6(1)(1)(a) GDPR.
Subscription uses the double opt-in procedure: after signing up, you receive an email in which you must confirm your subscription. This ensures that nobody can sign you up without your knowledge. We log your subscription in order to be able to demonstrate it in the event of a dispute; the time of subscription, the time of confirmation and your IP address are stored for this purpose.
The technical dispatch is handled by Shopify International Limited, acting as our processor.
You may withdraw your consent at any time, for example via the unsubscribe link at the end of every newsletter email or by sending a message to the contact option named in this policy. After withdrawal we will remove your email address from the distribution list, unless you have expressly consented to further use.
7. Customer reviews
After your order has been completed, we invite you in our closing email to review our service on Trustpilot. We do not transmit any data to Trustpilot in doing so — we send the email ourselves, and whether you accept the invitation is your decision.
If you follow the link and leave a review there, Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark, processes your data under its own responsibility. Their privacy terms apply.
You may object to the use of your email address for review requests at any time, at no cost other than the basic transmission rates. An informal message to info@pixel-grading.com is sufficient.
8. Cookies and other technologies
General information
In order to make visiting our website attractive and to enable certain functions, we use technologies on various pages, including what are known as cookies. Cookies are small text files that are stored automatically on your device. Some of the cookies we use are deleted at the end of the browser session, that is when you close your browser (session cookies). Others remain on your device and allow us to recognise your browser on your next visit (persistent cookies).
We use technologies that are strictly necessary for the use of certain functions of our website — for example the shopping cart, the language selection and the currency selection. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website. This serves our overriding legitimate interests, following a balancing of interests, in an optimised presentation of our offering pursuant to Art. 6(1)(1)(f) GDPR.
You will find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Audience measurement by Shopify
Where you have consented pursuant to Art. 6(1)(1)(a) GDPR, Shopify collects data about your use when you visit our store — including your IP address, the time of your visit, the pages called up, device and browser information and the referring page — and evaluates this pseudonymously for statistical purposes. From this we compile an analysis of visitor numbers and of how our offering is used. Cookies are used for this purpose, including _shopify_y and _shopify_s.
Where you have consented to the use of these technologies, you may withdraw your consent at any time with effect for the future by changing your selection in the cookie notice or by notifying us using the contact option named in this policy.
9. Transfers to third countries
Some of the service providers named above process data outside the European Union, in particular in the United States. No adequacy decision of the European Commission is in place for the United States. We base these transfers on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR or, where applicable, on the recipient's certification under the EU-US Data Privacy Framework. Despite these measures, it cannot be ruled out that state authorities in the recipient country may access the data.
10. Contact options and your rights
As a data subject you have the following rights:
- pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us, to the extent set out there;
- pursuant to Art. 16 GDPR, the right to request the immediate rectification of inaccurate personal data stored by us or the completion of your personal data;
- pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- pursuant to Art. 18 GDPR, the right to request the restriction of processing of your personal data where you contest the accuracy of the data, where the processing is unlawful but you oppose its erasure, where we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or where you have objected to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence or place of work, or that of our company's registered office.
If you have questions about the collection, processing or use of your personal data, about access, rectification, restriction or erasure of data, or about withdrawing consent given or objecting to a particular use of data, please contact us directly using the contact details in our legal notice.
Right to object
Where we process personal data as explained above on the basis of our overriding legitimate interests following a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where the processing is carried out for other purposes, you have a right to object only on grounds relating to your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.
This does not apply where processing is carried out for direct marketing purposes. In that case we will no longer process your personal data for that purpose.
Last updated: October 2026