Tuning products & digital license codes for your model
E-Scooter License
0

Search

NinebotNaveeXiaomiBosch
For your modelDigital licensesDE · EN · FR

Privacy policy

Last updated: 3 October 2026

1. Controller and contact

The controller responsible for processing personal data in connection with escooterlicense.com is:

ECOSIAMAX LIMITED
FLAT 1506, 15/F, CHEUNG FUNG COMM BLDG
21–25 CHEUNG SHA WAN ROAD, SHAM SHUI PO
HONG KONG
Email: ecosiamaxlimited@gmail.com

This policy describes processing when you visit our shop, place orders and communicate with us. Using the website does not, in itself, constitute consent to processing that requires consent.

2. The data we process

The data collected depends on which functions you use:

  • Contact and order data: name, email address, billing address and, where applicable, delivery address, telephone number, products ordered, order number and order status.
  • Payment and transaction data: selected payment method, amount, payment status and the information required to process the payment. The payment data required depends on the selected payment method and the relevant payment service provider.
  • Account data: if you use a customer account, the information required for login and account management, settings and order history.
  • Communication data: the content of your messages and the information required to handle a question, complaint or withdrawal.
  • Device and usage data: IP address, browser and device information, technical identifiers, pages visited, time and type of use and, where applicable, cookie and consent settings.

We receive data directly from you, automatically through the operation of the shop and from service providers involved in your order or the provision of the shop. When accessing a digital product, the order and technical information required to provide and use it may be processed.

3. Purposes and legal bases

Where the General Data Protection Regulation (GDPR) applies, processing takes place on the following bases:

  • Performance of the contract and pre-contractual enquiries: We handle orders, payments, digital provision, shipping, returns and product-related enquiries on the basis of Article 6(1)(b) GDPR.
  • Legal obligations: Article 6(1)(c) GDPR applies to necessary statutory retention, accounting and compliance with binding obligations imposed by public authorities, insofar as the relevant legal obligation can serve as a legal basis under the GDPR.
  • Secure operation and enforcement of rights: Technical operation, prevention of abuse and fraud, troubleshooting and the assertion or defence of claims may be based on Article 6(1)(f) GDPR. Our legitimate interests are a secure, functioning shop and the protection of our company and our customers. Your rights and interests are taken into account.
  • Consent: Analytics, personalisation, advertising and marketing communications that require consent are based on Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.

For an order, we need the information required to perform the contract. If it is not provided, we may be unable to fulfil the order. Voluntary information and consent are generally not a prerequisite for making a purchase.

4. Shopify and the provision of the shop

Our shop is operated using Shopify. Shopify processes contact, order, device and usage data, among other data, to provide the shop platform, checkout, technical security and other shop functions we use.

When processing data on our behalf, Shopify acts as a processor. For processing subject to European data protection requirements, Shopify's Data Processing Addendum contains additional provisions relating, among other matters, to Shopify International Ltd. in Ireland and international data transfers. Information about the subprocessors used is available in the current service provider list linked there.

The shop also uses enhanced Shopify features. For these features, Shopify may use information about your interactions with our shop, other merchants and Shopify to support personalisation, advertising and the improvement of these features, among other purposes. Shopify is itself responsible for the processing it carries out as a controller for these purposes. This also applies to a direct relationship between you and Shopify, for example when using Shop or Shop Pay.

Further information and options for exercising your rights in relation to Shopify are available in the Shopify Consumer Privacy Policy and the Shopify privacy portal. Consent requirements and your privacy settings also remain applicable to enhanced features.

5. Recipients of personal data

For the purposes stated, necessary data may be transferred to the following categories of recipients:

  • Shopify and its service providers used to operate the platform;
  • payment service providers for your selected payment method;
  • shipping and fulfilment service providers where a physical item is ordered or a separate provision service is required;
  • service providers for technical support, customer communication and the analytics or marketing functions actually used, where an appropriate legal basis exists;
  • public authorities, courts and professional advisers where there is a legal obligation or this is necessary to lawfully assert or defend claims.

Where service providers process data on our instructions, they must be engaged as processors. Where a recipient determines its own purposes and means, it processes the data as a controller in its own right. Only the data necessary for the respective purpose is disclosed.

6. Cookies and similar technologies

Shopify and the shop functions used may employ cookies or comparable technologies. Necessary functions support, for example, the cart, checkout, security or a language you have selected. Where the requirements are met, strictly necessary storage or access is based on section 25(2) of the German Telecommunications and Digital Services Data Protection Act (TDDDG). Any subsequent processing of personal data additionally requires a legal basis under the GDPR.

Storage or access that is not strictly necessary, for analytics, advertising or similar purposes, requires your consent under section 25(1) TDDDG where required by law. You may withdraw consent through the Cookie settings or by sending us a message. Withdrawal does not affect the lawfulness of earlier processing.

You can delete existing cookies and restrict or block future cookies in your browser settings. This may limit individual shop functions. Deleting cookies may also remove a saved consent or language choice. Further privacy options for Shopify are available in the Shopify privacy portal.

7. Communication and advertising

We use your contact details to reply to your enquiries and for necessary messages relating to orders, payment, provision or shipping. Such contractual messages are distinct from marketing messages.

Where we send marketing emails or other direct marketing, we do so only on the applicable required legal basis. You can unsubscribe from marketing emails using the unsubscribe option provided in them or by sending us a message. You may object to the processing of your data for direct marketing at any time.

8. International processing

Our company is based in Hong Kong. Data you send us to handle an order or enquiry may therefore also be processed in Hong Kong. Shopify and its service providers operate internationally; processing may also take place outside your country of residence and outside the European Economic Area (EEA), in particular in Canada and Singapore, which Shopify identifies.

Shopify's Data Processing Addendum describes the relevant safeguards for the transfers governed by it, including adequacy decisions, binding corporate rules and standard contractual clauses. The mechanism that applies depends on the specific data flow and recipient. This information about Shopify's provisions does not mean that Hong Kong is covered by a general EU adequacy decision.

You may ask us for information about the safeguards applicable to a specific data flow and for a copy of, or an appropriate reference to, those safeguards. Transfers subject to the requirements of the GDPR may take place only on a permitted basis.

9. Retention and security

We retain personal data for as long as necessary for the respective purpose. In doing so, we take into account fulfilment of your order, any customer account you use, statutory retention obligations and the necessary handling of complaints or legal claims. Once the purpose no longer applies and no obligations prevent deletion, data is deleted or anonymised.

For data that Shopify processes as a controller in its own right, the criteria described in Shopify's privacy policy apply. Cookies and saved settings may have their own lifetimes.

Appropriate technical and organisational measures are required to protect personal data. Absolute security of every transmission or instance of storage cannot be promised. Please do not send us passwords or complete payment details in support messages.

10. Your data protection rights

Where the statutory conditions are met, you have the following rights in particular:

  • access to your personal data and a copy of that data (Article 15 GDPR);
  • rectification of inaccurate data and completion of incomplete data (Article 16 GDPR);
  • erasure (Article 17 GDPR) or restriction of processing (Article 18 GDPR);
  • data portability where the processing qualifies for it (Article 20 GDPR);
  • objection to processing based on legitimate interests on grounds relating to your particular situation; you may object to direct marketing at any time (Article 21 GDPR);
  • withdrawal of consent with effect for the future, without affecting the lawfulness of processing previously based on that consent.

Send enquiries about our processing to ecosiamaxlimited@gmail.com. We may request information necessary to verify your identity and will handle your request within the statutory time limits. For processing for which Shopify itself is responsible, you may also use the Shopify privacy portal.

11. Complaints, children and external links

You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the country of your habitual residence, place of work or the location of the alleged infringement. You do not need to contact us beforehand. The European Data Protection Board's member list can help you find an EEA supervisory authority.

Our offering is not specifically directed at children. If you are a parent or guardian and believe that a child has provided us with data without the required authorisation, you may contact us.

The privacy notices of the respective operators additionally apply to linked external websites and the functions used on them. Where a third-party function requires separate consent, merely visiting our shop does not replace that consent.

12. Changes to this policy

We will adapt this policy when processing or legal requirements change. The published version will bear an updated date. Where required by law, we will inform you separately of material changes.