Privacy policy
Privacy Policy
We appreciate your interest in our website. The protection of your personal data is very important to us. Below we provide detailed information about how your personal data is processed when using our online shop.
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Pacabamba OÜ
Lõõtsa tn 5
Lasnamäe linnaosa
11415 Tallinn
Harju maakond
Estonia
E-mail: contact@pacabamba.com
VAT Identification Number: EE102897302
This website is intended exclusively for business customers (B2B), in particular retailers and resellers.
---
2. Access data and server log files
You may visit our website without providing any personal information. When accessing our website, certain access data is automatically collected and stored in so-called server log files by our hosting provider.
This data may include:
– IP address
– date and time of access
– name and URL of the requested file
– referring website (referrer URL)
– browser type and operating system
– name of the access provider
This data is processed to ensure the smooth operation, security and stability of the website. It is not used to draw conclusions about your identity.
Legal basis: Art. 6(1)(f) GDPR.
---
3. Collection and use of personal data for contract processing and customer accounts
We collect personal data when you voluntarily provide it to us in the course of placing an order, contacting us (e.g. by e-mail), or registering for a customer account.
The data processed may include in particular:
– name and company name
– billing and shipping address
– e-mail address
– telephone number
– VAT identification number
– order and transaction data
We process this data for the purpose of:
– processing and fulfilling orders
– managing customer accounts
– handling enquiries
– fulfilling contractual and legal obligations
After the contract has been fully processed or the customer account has been deleted, your data will be restricted for further processing and deleted after expiry of statutory retention periods, unless further legally permitted processing applies.
Legal basis: Art. 6(1)(b) GDPR.
---
4. Data transfer for contract fulfillment
Personal data is only passed on to third parties insofar as this is necessary to fulfill contractual obligations.
This includes in particular:
– shipping and logistics service providers for the delivery of goods
– payment service providers for payment processing
– IT and hosting service providers (e.g. Shopify)
For orders of products sold under the “Mariposa” brand, the necessary personal data (such as name, address and order details) is additionally transferred to:
mariposa fair trade – Matthias Pieper
Rosenstraße 6
97256 Geroldshausen
Germany
E-mail: kontakt@mariposa-fairtrade.de
The transfer of data is carried out exclusively for the purpose of contract fulfillment, invoicing and delivery.
Legal basis: Art. 6(1)(b) GDPR.
---
5. Hosting and shop system (Shopify)
Our online shop is operated via the platform Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada.
Shopify processes personal data on our behalf. In this context, personal data may be transferred to Canada. The European Commission has issued an adequacy decision for Canada.
Further information on Shopify’s data protection practices can be found at:
https://www.shopify.com/legal/privacy
---
6. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device.
We use:
– technically necessary cookies to ensure the operation of the website
– functional cookies to improve the usability of the shop
You can configure your browser to inform you about the use of cookies and to allow cookies only in individual cases or to generally exclude cookies. If cookies are disabled, the functionality of the website may be restricted.
Legal basis: Art. 6(1)(f) GDPR.
---
7. Your rights
You have the right at any time to:
– obtain information about your stored personal data
– request rectification of inaccurate data
– request erasure or restriction of processing
– object to the processing
– request data portability
If processing is based on your consent, you may withdraw your consent at any time with effect for the future.
To exercise your rights, please contact us using the contact details provided above or in the legal notice.
---
8. Data retention
We store personal data only for as long as necessary to fulfill contractual or legal obligations. Statutory retention periods under commercial and tax law remain unaffected.
---
9. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy in order to adapt it to changes in legal requirements or changes to our services.
Status: 29 January 2026