Privacy policy
Last updated: September 16, 2026
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
FRIDAY BIRD UG (haftungsbeschränkt)
Kluckstr. 23 A
10785 Berlin
Germany
Phone: +49 155 60283926
Email: hello@fridaybird.com
2. General information on data processing
We process personal data only to the extent necessary to operate our website, respond to inquiries, process orders and payments, ship purchased goods, send our newsletter, and provide the functions offered on our website.
Personal data means any information relating to an identified or identifiable individual.
Depending on the specific processing activity, the legal basis for processing may be Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (compliance with a legal obligation), or Art. 6(1)(f) GDPR (legitimate interests).
3. Hosting and technical provision
Our website and online store are operated using Shopify.
The provider is:
Shopify International Limited
Victoria Buildings
2nd Floor, 1-2 Haddington Road
Dublin 4, D04 XN32
Ireland
Shopify processes personal data collected when our online store is used for the purpose of providing and securing the Shopify platform. Shopify may transfer personal data within the Shopify group of companies and to carefully selected sub-processors. For customers in the European Economic Area, data is initially processed by Shopify International Limited in Ireland. For international data transfers, Shopify uses, depending on the recipient, adequacy decisions, standard contractual clauses, and other appropriate data protection mechanisms.
For further information on how Shopify processes personal data, please refer to the Shopify Privacy Policy.
Shopify uses, among other things, a content delivery network (CDN) operated by Cloudflare as part of its technical infrastructure for Shopify stores. This CDN is part of the Shopify infrastructure and is not operated by us as a separate Cloudflare service.
4. Data processing when visiting our website and cookies
When you access our website, technically necessary information is processed to provide and secure the online store. This may include your IP address, browser and device information, operating system, pages visited, and the date and time of access.
Our website uses cookies and similar technologies. Some of these are technically necessary for the website and its functions to operate properly. Other technologies may be used, for example, for marketing or analytics purposes and, where required, are only activated after the necessary consent has been obtained.
We use the Shopify-integrated cookie banner for this purpose. Through the cookie banner, visitors can give or refuse consent and manage their preferences. You can change your preferences at any time using the “Cookie preferences” link in the footer of our website.
5. Contacting us
If you contact us by email, contact form, or other means, we process the personal data you provide in order to process and respond to your inquiry.
The data processed depends on the nature of your inquiry and the information you provide.
The legal basis is Art. 6(1)(f) GDPR. If your inquiry relates to the conclusion or performance of a contract, Art. 6(1)(b) GDPR also applies.
We delete the data once the relevant inquiry has been conclusively dealt with, unless statutory retention obligations or other legitimate reasons require longer storage.
6. Shopify Forms
We use Shopify Forms to collect information from visitors and customers, for example in the context of contact or marketing inquiries.
Depending on the specific form, this may include your name, email address, telephone number, and other information you provide.
If a form is used to subscribe to our newsletter or other marketing communications, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
For contact or other inquiries, processing is based, depending on the nature of the inquiry, on Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.
7. Customer account
Our website allows you to create a customer account.
When creating and using a customer account, we process the data required for this purpose, in particular your contact details and information necessary to manage the account.
Processing is carried out for the establishment and administration of the customer account and for the performance of related contracts on the basis of Art. 6(1)(b) GDPR.
You may request deletion of your customer account at any time using the contact details provided above. Statutory retention obligations relating to completed orders remain unaffected.
8. Newsletter and email marketing
If you subscribe to our newsletter, we use your email address to send you regular information about our gallery, exhibitions, artists, products, and other FRIDAY BIRD offers.
We use a double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription.
The processing of your email address for newsletter purposes is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future. You can do so by using the unsubscribe link included in every newsletter or by contacting us directly.
We use Shopify Messaging to send and manage our email campaigns. In connection with email campaigns, Shopify Messaging may process information such as email opens, link clicks, unsubscribes, and spam complaints.
9. AI chatbot by Flyweight
We use an AI-based chatbot provided by Flyweight GmbH, Jungbuschstraße 28, 68159 Mannheim, Germany, on our website to answer questions about our online store, products, and services.
When you use the chatbot, your entries may be processed together with information from our website in order to generate suitable responses. The chatbot is configured so that it generally does not request personal data.
Depending on your inquiry, separate forms may be displayed, for example for product advice or to check the status of an order. If you enter personal data into such a form, this may include your name, email address, telephone number, order number, or postal code. Such form data is processed separately and is not transmitted to the language model used to generate the chatbot response.
If you request product advice through such a form, the information you provide may be transmitted to us together with the chat history so that we can process your inquiry and, where appropriate, contact you.
Flyweight processes the relevant data on our behalf. Further information on data processing by Flyweight can be found in the Flyweight Privacy Policy.
10. hCaptcha
To protect our forms and customer account functions against spam and automated access, we use hCaptcha.
The provider is:
Intuition Machines, Inc.
350 Alabama St
San Francisco, CA 94110
USA
hCaptcha is integrated into the Shopify technology used by our online store. When relevant forms are used, hCaptcha may process technical information such as your IP address, browser and operating system information, and information about your use of the website in order to determine whether an input was made by a human or an automated system.
The processing serves to protect our online store against spam and misuse and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
11. Facebook & Instagram / Meta
We use the app pixel provided through the Facebook & Instagram app by Meta.
The provider is:
Meta Platforms Ireland Limited
4 Grand Canal Square
Dublin 2
Ireland
The pixel enables us to measure the use of our website in connection with Facebook and Instagram marketing and to analyze the effectiveness of our advertising activities.
Depending on the consent given and the configuration of the service, information about the device used, browser, IP address, browsing behavior, and, within the framework supported by Shopify, other customer information may be processed.
The Facebook & Instagram pixel in our Shopify store is configured with optimized data sharing.
Where consent is required for the relevant processing, the pixel is activated only after the necessary consent has been given through the Shopify cookie banner.
Further information on data processing by Meta can be found in the Meta Privacy Policy.
12. Google & YouTube
We use the Google & YouTube sales channel provided by Shopify.
Through this sales channel, we synchronize our product information with the Google Merchant Center so that our products can be displayed on Google platforms. Our Google Business Profile is also connected to the sales channel.
The Google & YouTube app pixel is also activated in our Shopify store. In connection with this pixel, information such as device and browser information, IP address, and browsing behavior may be processed.
The specific processing carried out through the app pixel depends on the configuration of the Google & YouTube channel and Shopify's privacy settings. Shopify states that, depending on the configuration, app pixels may transmit data to the relevant provider through web and server pixels.
Google Analytics and Google Ads conversion measurement are currently not activated through the Google & YouTube sales channel.
Further information on data processing by Google can be found in the Google Privacy Policy.
13. Payment processing
We use Shopify Payments to process payments.
The provider is:
Shopify International Limited
Victoria Buildings
2nd Floor, 1-2 Haddington Road
Dublin 4, D04 XN32
Ireland
Depending on availability, Shopify Payments allows us to offer payment methods including Visa, Mastercard, Maestro, Apple Pay, Google Pay, Klarna, and MobilePay.
As part of payment processing, the data required to process the payment is handled. This may include your name, billing and shipping address, order information, and payment information.
Processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR and, where applicable, for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.
PayPal
We also offer PayPal Express Checkout as a payment method.
The provider is:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
If you choose to pay via PayPal, the data required to process the payment is transmitted to PayPal. This may include your name, contact and address details, order information, and payment data.
Processing is carried out for the purpose of payment processing on the basis of Art. 6(1)(b) GDPR.
Further information on the processing of personal data by PayPal can be found in the PayPal Privacy Policy.
14. Shipping
To deliver the goods you order, we provide the relevant shipping provider with the data required for delivery, in particular your name and shipping address.
The transfer takes place for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
We use DHL, among other providers, for shipping. There is no technical integration between DHL and our Shopify store.
15. Appointments via Cal.com
Our website contains a link to an external booking calendar provided by Cal.com, which can be used to schedule appointments to visit our gallery.
When you click the link, you are redirected to the Cal.com website. Cal.com is not embedded into our website.
The processing of personal data in connection with an appointment booking is governed by Cal.com's privacy policy. Further information can be found in the Cal.com Privacy Policy.
16. Data retention
We retain personal data only for as long as necessary for the respective purpose.
In addition, we may be required by law to retain certain data for longer periods. This applies in particular to data that must be retained under commercial or tax law.
Once the applicable retention period has expired, the data will be deleted unless another legal basis or legitimate interest requires continued storage.
Where data is processed on the basis of consent, we generally retain the data until consent is withdrawn, unless another legal basis permits continued processing.
17. Your rights
Subject to the applicable legal requirements, you have the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
If the processing of your personal data is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
If we process your personal data on the basis of Art. 6(1)(f) GDPR, you may object to such processing on grounds relating to your particular situation.
If your personal data is processed for the purpose of direct marketing, you have the right to object to such processing at any time.
18. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.
The supervisory authority responsible for our company in particular is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de