Privacy Policy (EU)

1. Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

MAFGA
Make American Football Great Again
Owner: Torsten Zeug
Gerhart-Hauptmann-Str. 15/S6
03044 Cottbus
Germany

Email: shop@mafga.global


2. General Information on Data Processing

We take the protection of your personal data very seriously.
Your personal data is processed exclusively in accordance with applicable data protection laws, in particular the GDPR.

Personal data means any information relating to an identified or identifiable natural person.


3. Data Processing When Visiting Our Website

When you visit our website, information is automatically collected by our hosting provider and stored in so-called server log files.

This data includes:

  • IP address

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

Processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest in ensuring the technical stability and security of the website).


4. Hosting and E-Commerce Platform (Shopify)

Our online shop is operated using the e-commerce platform Shopify.

Provider:
Shopify International Ltd.
Victoria Buildings
2nd Floor, 1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Shopify processes personal data on our behalf as a data processor.
Personal data may be transferred to third countries (e.g. Canada or the United States). Shopify provides appropriate safeguards in accordance with Art. 46 GDPR, such as standard contractual clauses.

Further information:
https://www.shopify.com/legal/privacy


5. Order Processing and Contract Fulfilment

When you place an order, we process personal data necessary for contract fulfilment, including:

  • Name

  • Billing and shipping address

  • Email address

  • Payment information

Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of a contract).


6. Payment Service Providers

For payment processing, we use external payment service providers.
Depending on the selected payment method, your payment data is transmitted directly to the respective provider.

The legal basis for this processing is Art. 6(1)(b) GDPR.

The privacy policies of the respective payment service providers apply.


7. Fulfilment and Shipping (Print-on-Demand)

Our products are manufactured and shipped using a print-on-demand process via external fulfilment partners (e.g. Gelato).

For this purpose, the following data is transmitted:

  • Name

  • Shipping address

  • Ordered products

Data processing is carried out on the basis of Art. 6(1)(b) GDPR (contract fulfilment).


8. Contact

If you contact us by email or via a contact form, your details will be stored for the purpose of processing your request.

The legal basis for this processing is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).


9. Cookies

Our website uses cookies.

Cookies are small text files that are stored on your device.
Some cookies are technically necessary, while others are used for statistical or marketing purposes.

Technically necessary cookies are processed on the basis of Art. 6(1)(f) GDPR.
All other cookies are only used with your consent in accordance with Art. 6(1)(a) GDPR.


10. Cookie Consent Tool

We use a cookie consent tool to manage your consent preferences.

When you first visit our website, you can choose which categories of cookies you wish to allow.
You can change or withdraw your consent at any time.


11. Your Rights

You have the right to:

  • Access your personal data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Object to processing (Art. 21 GDPR)

To exercise your rights, a simple notification by email is sufficient.


12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority.

The competent authority is the data protection authority of your habitual residence, place of work, or the place of the alleged infringement.


13. Updates to This Privacy Policy

This Privacy Policy is currently valid and was last updated on 06 January 2026.

We reserve the right to update this policy to reflect changes in legal requirements or changes to our services.