Privacybeleid
Privacy Policy
Last updated: September 2026
We take the protection of your personal data seriously. This policy explains what data we collect when you visit or buy from Mockora, why we collect it and what rights you have under the General Data Protection Regulation (GDPR).
1. Controller
Daniel Dantas Miranda, trading as Mockora
Straßburger Str. 42, 10405 Berlin-Bezirk Pankow, Germany
Email: dantas.mirandasa@atomicmail.io
Phone: +49 30 23125 742
2. Visiting our website
Our shop is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit the shop, technical data is processed automatically: IP address, browser type and version, operating system, referring page, pages visited, and date and time of access. This is necessary to display the website, keep it secure and prevent misuse.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working shop). Shopify may transfer data to Shopify Inc. in Canada and the USA. Canada has an EU adequacy decision; transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or EU standard contractual clauses.
3. Placing an order
When you buy from us we process your name, email address, billing address, the products ordered, the price and the payment status. We need this data to conclude and fulfil the contract, deliver your download and issue an invoice.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). We are legally required to keep invoices and order records for up to 10 years under German commercial and tax law (§ 147 AO, § 257 HGB). Legal basis: Art. 6(1)(c) GDPR.
4. Payment
Payments are handled by the payment provider you select at checkout, for example Shopify Payments (Stripe) or PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The provider receives the data needed to process your payment and processes it under its own privacy policy. We never see or store your full card details.
Legal basis: Art. 6(1)(b) GDPR.
5. Digital delivery
Your files are delivered through a digital downloads app inside Shopify, which uses your email address and order number to provide the download link.
Legal basis: Art. 6(1)(b) GDPR.
6. Contacting us
When you contact us by email or through the contact form, we process your name, email address, order number (if given) and your message in order to answer you. We delete this data once your request has been fully handled, unless we are legally required to keep it.
Legal basis: Art. 6(1)(b) GDPR for questions about an order or purchase, otherwise Art. 6(1)(f) GDPR.
7. Newsletter
If you subscribe to our newsletter, we use your email address to send you information about new products and offers. You can unsubscribe at any time using the link in every email or by writing to us. We then delete your address from the mailing list.
Legal basis: your consent, Art. 6(1)(a) GDPR.
8. Cookies
We use cookies that are strictly necessary for the shop to work, such as keeping items in your cart and completing checkout (§ 25(2) TDDDG). Analytics and marketing cookies are only set if you agree in the cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time through the cookie settings.
9. Fonts and icons
Our website loads fonts from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and icons from cdnjs (Cloudflare, Inc., USA). To do this, your browser connects to their servers, which transmits your IP address.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a consistent and fast presentation of the shop).
10. How long we keep data
We keep personal data only as long as necessary for the purposes described above. Order and invoice data is kept for the statutory retention periods (up to 10 years). Newsletter data is kept until you unsubscribe. Contact requests are deleted once resolved.
11. Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- restrict processing (Art. 18 GDPR)
- receive your data in a portable format (Art. 20 GDPR)
- object to processing based on legitimate interest (Art. 21 GDPR)
- withdraw any consent at any time, with effect for the future (Art. 7(3) GDPR)
To exercise these rights, email dantas.mirandasa@atomicmail.io.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.