Privacy policy

Last updated: 28 October 2026

Here you can find out which personal data we process when you visit lostpod.de or order from us, what we use it for and what rights you have.

1. Controller

J.M. Bodin (sole trader)
Misdroyer Str. 58
14199 Berlin
Germany
Phone: +49 30 555 918 07
Email: kontakt@bodinos.de

You can reach us at this address for all questions about data protection.

2. Legal bases

We only process data if there is a legal basis, in particular:

your consent (Art. 6(1)(a) GDPR, and for cookies and similar technologies additionally § 25(1) TDDDG [German Telecommunications Digital Services Data Protection Act]),
the performance of a contract or of pre-contractual measures (Art. 6(1)(b) GDPR),
legal obligations, e.g. retention obligations (Art. 6(1)(c) GDPR),
our legitimate interest in a secure, functioning and economically viable online shop (Art. 6(1)(f) GDPR).

We use technically necessary cookies and storage without consent in accordance with § 25(2) TDDDG.

3. Hosting and shop system (Shopify)

Our shop runs on the Shopify platform. The provider for merchants in Europe is Shopify International Limited, 2nd Floor, 1–2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify stores and processes, on our behalf, all data that arises when you visit the shop and when you place an order. We have a data processing agreement with Shopify.

Shopify also processes data in Canada (an adequacy decision of the European Commission applies to Canada) and in the USA. For transfers to the USA, Shopify relies on the standard contractual clauses of the European Commission.

When you access the shop, Shopify automatically processes technical data such as IP address, date and time, pages visited, browser and operating system. This is necessary to deliver the shop securely and without errors (Art. 6(1)(f) GDPR). Fonts and images are also loaded from Shopify servers.

4. Order and customer account

For your order, we process the data you provide at checkout: name, delivery and billing address, email address, phone number if you wish, the items ordered and payment details. We need this data to perform the contract (Art. 6(1)(b) GDPR).

If you create a customer account, we store your data for future orders until you delete the account. You log in via Shopify with a code that you receive by email.

We retain invoice and order data for as long as commercial and tax law require (usually six to ten years, Art. 6(1)(c) GDPR).

5. Payment

Depending on the payment method you choose, we pass the data required for payment on to the relevant payment service provider (Art. 6(1)(b) GDPR). In some cases, the payment service providers are themselves responsible for their data processing and may, for example, carry out a fraud check.

Shopify Payments (credit card, Shop Pay, Apple Pay, Google Pay): Shopify International Limited (see above for address) together with the payment service providers integrated for this purpose. If you use a Shop Pay account, Shopify additionally processes the data stored there. For Apple Pay and Google Pay, Apple Distribution International Ltd. (Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) or Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) respectively is also involved.
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you pay by invoice or in instalments, Klarna may check your identity and creditworthiness and transmit data to credit agencies for this purpose. Details can be found in Klarna's privacy policy.

6. Shipping

For delivery, we pass your name and delivery address on to the shipping company we have commissioned (Art. 6(1)(b) GDPR). We only pass on your email address or phone number if you have consented to this, so that the shipping company can inform you about the delivery (Art. 6(1)(a) GDPR).

7. Contact

If you contact us by email, phone or via the contact form, we process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). The contact form is provided by the app “Powerful Contact Form Builder” (provider: Globo Software / Powerful Form, contact: apps@globosoftware.net); for this purpose, your entries are processed on their servers and forwarded to us. We delete enquiries as soon as they have been dealt with and there are no retention obligations.

8. Withdrawal using the “Withdraw from contract here” function

If you withdraw from a contract using our withdrawal function, we process your name, email address, order number and the order details in order to process the withdrawal and to confirm its receipt to you (Art. 6(1)(b) and (c) GDPR). The message is sent to our email address via Shopify.

9. Cookies and consent

We use cookies and similar technologies. We use technically necessary cookies (e.g. for the basket, checkout, security and your cookie choices) without consent. All others, for example for statistics and advertising, only with your consent. You make your choice in Shopify's cookie notice. You can withdraw your consent at any time with effect for the future by changing your choice in the cookie notice or by deleting the cookies in your browser.

10. Statistics and advertising (only with consent)

Shopify statistics: Shopify analyses how the shop is used (e.g. pages visited and baskets) and provides us with the results in aggregated form.

Google Analytics: With Google Analytics, we analyse how visitors use our shop, for example pages visited, length of visit and origin (country, device, browser). Google truncates IP addresses in the EU.

Google Ads: We place ads with Google. Using conversion tracking, we measure whether a click on an ad leads to a purchase. With your consent, we can also show you ads for our products on other websites (remarketing).

Google Merchant Center: We transmit our product data (titles, prices, images, availability) to Google so that our products appear in Google Search and on Google Shopping. No data about you is transferred in this process.

We integrate these Google services via the “Google & YouTube” app with the Google tag. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Without your consent, the Google tag only sends limited, cookieless signals (Google's consent mode).

Shoparize: Our products also appear via the Google Shopping partner Shoparize B.V., Rokin 115, 1012 KP Amsterdam, Netherlands. Shoparize uses a pixel to measure whether a click on an ad leads to a purchase.

The legal basis in each case is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

11. Other services in the shop

Trustami: We display the review and trust seal of Trustami GmbH, Friedrich-Wilhelm-Str. 68, 12103 Berlin. When the seal is loaded, your IP address is transmitted to Trustami. We have a legitimate interest in displaying our reviews (Art. 6(1)(f) GDPR).

Headphone finder: The Headphone finder is a questionnaire from the app “RevenueHunt” (Dairy Capital Limited, Vision Accounting, Fortis House, Cothey Way, Ryde, PO33 1QT, United Kingdom). Your answers are processed in order to suggest suitable products to you (Art. 6(1)(b) GDPR). An adequacy decision of the European Commission exists for the United Kingdom. You can find further information in RevenueHunt's privacy policy at revenuehunt.com.

Shop app: Using the “Follow on Shop” button, you can follow our shop in Shopify's Shop app. In doing so, Shopify processes the data of your Shop account.

12. Newsletter

If we offer a newsletter and you sign up for it, we send you news and offers by email. For this, we only need your email address. You confirm your sign-up via a link in an email (double opt-in) so that no one can enter someone else's address. The legal basis is your consent (Art. 6(1)(a) GDPR). The newsletter is sent by Shopify (Shopify Email). You can unsubscribe from the newsletter at any time via the unsubscribe link in every email or by sending us a message. We then delete your address from the mailing list.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent you have given (Art. 7(3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example with the Berlin Commissioner for Data Protection and Freedom of Information.

Right to object (Art. 21 GDPR): If we process data on the basis of our legitimate interest, you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.

14. Storage period and security

We delete data as soon as it is no longer needed for the purpose and there are no statutory retention obligations. The connection to our shop is encrypted (TLS).