Legal

Privacy policy

The short version: this site sets no cookies, stores nothing in your browser, and its analytics cannot recognise you. The long version follows.

Controller

The controller responsible for processing personal data on this website is shopware AG, Ebbinghoff 10, D-48624 Schöppingen, Germany — phone +49 (0) 2555 92885-0, e-mail info@shopware.com.

This site is built and operated by the Agentic Commerce Lab by Shopware. For anything concerning this site you can reach the team directly at Agentic-Commerce-Lab@shopware.com.

This policy covers data processing on this website only. Further information on data processing by shopware AG in general is available in shopware's privacy policy.

Data protection officer

Sascha Kremer (lawyer and IT law specialist), c/o KREMER RECHTSANWÄLTE, Brückenstraße 21, D-50667 Cologne, Germany.

Hosting and connection data

The site is a static website delivered from Amazon S3 through Amazon CloudFront, operated by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. When you open a page, the technical connection data your browser sends (IP address, requested URL, date and time, transferred data volume, user agent) is processed insofar as this is technically necessary to deliver the site and to keep it stable and secure.

The legal basis is Art. 6 (1) point (f) GDPR — our legitimate interest in providing a fast, reliable and secure website. CloudFront may serve content from edge locations outside the EU; transfers are safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses (Art. 46 (2) point (c) GDPR).

Analytics (Amplitude, cookieless)

To understand how the site is used — which pages are read, which sections are reached, which links are clicked — we use Amplitude, a service of Amplitude, Inc., 201 Third Street, Suite 200, San Francisco, CA, USA. Usage data is processed in Amplitude's EU (Frankfurt, Germany) data centre.

Amplitude runs here in a strictly cookieless configuration: it sets no cookies and stores no information on — and reads no information from — your device (no localStorage, no session storage, no IndexedDB). Your IP address is not recorded with analytics events, and language and platform tracking are disabled. Each page view is sent with a freshly generated random identifier, so page views cannot be linked to you, to each other across visits, or to activity on any other site.

Because nothing is stored on or read from your device, no consent under § 25 (1) TDDDG is required — which is why this site shows no cookie banner. The legal basis for the processing is Art. 6 (1) point (f) GDPR (our legitimate interest in reach measurement). Any transfer to Amplitude, Inc. in the USA is safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses.

Contact by e-mail

The only way to contact us through this site is e-mail — for example the "apply as founding merchant" link, which opens your own mail program. When you write to us, we process the personal data you send (your e-mail address, your name if you give it, and the content of your message) solely to handle your inquiry.

For inquiries aimed at working with us — such as applying as a founding merchant — the legal basis is Art. 6 (1) point (b) GDPR (steps prior to entering into a contract, taken at your request). For all other inquiries it is Art. 6 (1) point (f) GDPR (our legitimate interest in answering correspondence addressed to us). Your messages are kept until your inquiry is resolved and then for as long as statutory retention obligations require.

Cookies

This website sets no cookies of any kind and stores nothing in your browser — no localStorage, no session storage, no fingerprinting. That is why there is no cookie banner: there is nothing to consent to.

Storage duration

Personal data is deleted as soon as the purpose for which it was collected no longer applies, unless statutory retention periods require longer storage. Connection data processed to deliver the site is not retained by us beyond what content delivery technically requires.

Your rights

As a data subject, you have the right to:

  • access to your personal data (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing based on legitimate interests (Art. 21 GDPR)

To exercise any of these rights, contact Agentic-Commerce-Lab@shopware.com or the controller listed above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, D-40213 Düsseldorf, Germany.

Last updated: 1 September 2026.