Privacy policy

Last updated: October 2026

1) Controller and general information

1.1 Thank you for visiting our websites plexiclick.de and plexiclick.uk. Below we explain which personal data we process when you use our websites and place orders. Personal data is any data that can be used to identify you personally.

1.2 The controller within the meaning of the EU General Data Protection Regulation (GDPR) and – for customers in the United Kingdom – the UK GDPR is:

AM Automotive GmbH
Charlotte-Temming-Str. 1
44135 Dortmund
Germany
Phone: +49 170 2257545
Email: info@plexiclick.de

1.3 For security reasons, our websites use SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the padlock symbol in your browser's address bar.

2) Provision of the website and server log files

When you visit our websites, your browser automatically sends data to the server (server log files): the page visited, date and time of access, amount of data transferred, referrer URL, browser and operating system used, and your IP address. This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in a stable, secure and functional website. This data is not combined with other data sources; we reserve the right to review it if there are specific indications of unlawful use.

3) Hosting by Shopify

Our online shop runs on the platform of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify processes all data collected on our websites on our behalf (Art. 28 GDPR). Data may also be transferred to Shopify Inc. in Canada and to group companies in the USA. Canada is covered by an adequacy decision of the European Commission; for transfers to the USA, Shopify relies on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses. The legal basis is Art. 6(1)(b) and (f) GDPR. More information: https://www.shopify.com/legal/privacy

4) Cookies and consent management

4.1 We use cookies and similar technologies (e.g. local storage). We use strictly necessary cookies – for example for the basket, checkout, language and country settings, or to store your cookie choices – on the basis of Section 25(2) no. 2 of the German TDDDG in conjunction with Art. 6(1)(b) or (f) GDPR.

4.2 We only use all other cookies and technologies for statistics, marketing and personalised advertising with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We obtain your consent via Shopify's cookie banner. You can change or withdraw your choice at any time via the "Your privacy choices" or "Cookie settings" link in the footer. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

4.3 You can also manage or delete cookies in your browser settings. If you block all cookies, you may not be able to use all features of the online shop.

5) Contacting us

If you contact us by email, phone or via the contact form, we process your details (e.g. name, email address, order number, content of your message) to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations apply.

6) Orders and customer account

6.1 To process your order, we process the data you provide during checkout (name, delivery and billing address, email address, phone number if applicable, order and payment information) in accordance with Art. 6(1)(b) GDPR. Mandatory fields are marked as such; without this information we cannot conclude the contract.

6.2 You may voluntarily create a customer account to view your orders. Sign-in uses Shopify's customer account system, where applicable with a one-time code sent to your email address. You can have your customer account deleted at any time by emailing info@plexiclick.de.

6.3 Once the contract has been fully performed, your data is restricted from further processing and deleted after the statutory retention periods under German commercial and tax law have expired (Art. 6(1)(c) GDPR in conjunction with Section 257 HGB and Section 147 AO).

6.4 We use the Shopify app "Order Printer" to create invoices, delivery notes and other business documents. Order data is processed exclusively within the Shopify environment (Art. 6(1)(b) GDPR).

7) Shipping

7.1 To deliver your order, we pass your name and delivery address to the shipping company we use (Art. 6(1)(b) GDPR). For deliveries from Germany, this is usually Deutsche Post AG or DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany. We create shipping labels using the Shopify app "Post & DHL Shipping".

7.2 We only pass your email address and/or phone number to the shipping company if you have expressly consented to this during checkout, so that it can notify you of the delivery date (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by contacting us or the shipping company.

7.3 Orders to the United Kingdom are dispatched from a warehouse in the United Kingdom via Amazon's "Multi-Channel Fulfilment" service (Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg, or Amazon UK Services Ltd.). For this purpose, we transfer your name, delivery address and order contents to Amazon and the carrier appointed by Amazon (Art. 6(1)(b) GDPR). More information can be found in Amazon's privacy notice.

8) Payment service providers

Depending on the payment method you choose, we pass the data required to process the payment (e.g. name, address, email address, invoice amount, order number) to the relevant payment service provider (Art. 6(1)(b) GDPR). Payment service providers may carry out their own processing for fraud prevention and credit checks on the basis of their legitimate interests (Art. 6(1)(f) GDPR); please refer to their privacy notices for details.

8.1 Shopify Payments: Credit cards, Apple Pay, Google Pay and other local payment methods (e.g. Klarna, iDEAL | Wero, Bancontact, EPS, BLIK, MB WAY, Bizum) are processed via "Shopify Payments". The technical payment service provider is Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Privacy: https://stripe.com/privacy

8.2 PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For payment methods such as "Pay Later", PayPal may carry out a credit check. Privacy: https://www.paypal.com/uk/legalhub/privacy-full

8.3 Klarna: If you choose a Klarna payment method, your data is also transferred to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, which may carry out an identity and credit check. Privacy: https://www.klarna.com/uk/privacy/

8.4 Apple Pay and Google Pay: Payment is made via the wallet function of your device. Apple (Apple Distribution International Ltd., Cork, Ireland) and Google (Google Ireland Limited, Dublin, Ireland) only transmit an encrypted payment token; we do not receive your card details.

8.5 Shop Pay: If you use Shop Pay, Shopify stores your contact, delivery and payment details so that you can pay faster in future. This is based on your registration with Shop Pay (Art. 6(1)(a) and (b) GDPR). More information: https://shop.app/privacy

9) Newsletter

If you sign up for our newsletter, we use your email address on the basis of your consent (Art. 6(1)(a) GDPR) to send you information about our products and offers. Sign-up uses a double opt-in procedure: you will receive an email asking you to confirm your subscription. We send the newsletter using Shopify's newsletter feature ("Shopify Email"). You can unsubscribe at any time via the unsubscribe link in every email or by emailing info@plexiclick.de. Your email address will then be removed from the mailing list unless you have consented to further use.

10) Statistics and marketing (only with your consent)

We only use the following services if you have consented to the relevant category in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Some services may involve data transfers to the USA; the providers are certified under the EU-US Data Privacy Framework (and the UK Extension) or rely on standard contractual clauses.

10.1 Shopify analytics: Shopify compiles statistics for us on the use of the shop (e.g. pages visited, basket and purchase events) so that we can improve our offering.

10.2 Google Ads (conversion tracking and remarketing): Via the "Google & YouTube" sales channel, we use Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). With your consent, page views, basket and purchase events are transmitted to Google via the Google tag in order to measure the success of our ads (conversion tracking) and show relevant ads to visitors of our shop (remarketing). We use Google Consent Mode so that Google tags respect the choice you make in the cookie banner. We also transmit our product data to Google Merchant Center so that it can be shown in Google Shopping; no personal data about you is transmitted in this process. Privacy: https://policies.google.com/privacy; ad personalisation settings: https://adssettings.google.com

10.3 Meta (Facebook & Instagram): Via the "Facebook & Instagram" sales channel, we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Information about your use of our shop (e.g. products viewed, purchases) is transmitted to Meta in order to measure our advertising and show ads to visitors of our shop. We are joint controllers with Meta for the collection and transmission of this data (Art. 26 GDPR); the agreement is available at https://www.facebook.com/legal/controller_addendum. Privacy: https://www.facebook.com/privacy/policy

10.4 TikTok: Via the "TikTok" sales channel, we use the TikTok Pixel of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Information about your use of our shop is transmitted to TikTok in order to measure the success of our advertising and show ads. Privacy: https://www.tiktok.com/legal/privacy-policy-eea

11) YouTube videos

Where videos from the YouTube platform are embedded on our website, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded and a connection to YouTube only established once you actively start the respective video by clicking on it; by doing so, you give your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). In this case, your IP address and information about the page visited may be transmitted to Google; if you are logged in to Google, YouTube may link the data to your account. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. Privacy: https://policies.google.com/privacy

12) Our social media presence

Our website links to our profiles on Instagram, Facebook and YouTube. These are simple links; no data is transferred to these networks when you visit our website. The privacy policy of the respective network only applies once you follow a link. We are joint controllers with Meta for the page statistics ("Insights") of our Facebook and Instagram profiles (Art. 26 GDPR): Page Insights agreement.

13) Your rights

13.1 Subject to the statutory requirements, you have the following rights:

  • access to the data we hold about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure of your data (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR),
  • to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

13.2 RIGHT TO OBJECT: WHERE WE PROCESS YOUR DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS (ART. 6(1)(F) GDPR), YOU MAY OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WE WILL THEN NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. YOU MAY OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES AT ANY TIME WITHOUT GIVING REASONS.

13.3 To exercise your rights, simply email info@plexiclick.de.

14) Information for customers in the United Kingdom

For customers in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply. You have the rights listed in section 13 accordingly. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, https://ico.org.uk. The transfer of your data from the United Kingdom to us in Germany is covered by the United Kingdom's adequacy regulations for the European Economic Area.

15) Storage period

We only store personal data for as long as necessary for the relevant purpose. Data processed on the basis of consent is stored until you withdraw your consent. We retain contract data until the statutory retention periods expire (generally six to ten years under the German Commercial Code and Fiscal Code). Data processed on the basis of legitimate interests is stored until you object or the purpose no longer applies.

16) No automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

17) Changes to this privacy policy

We will update this privacy policy whenever the services we use or the legal requirements change. The version published on this page applies.