Last updated: 6 November 2026
Who is responsible
Arima Watches UG (haftungsbeschränkt), 71638 Ludwigsburg, Germany
Managing director: Joshua Don Bosco
Email: info@arimawatches.com · Phone: +49 163 431 5136
We are not required to appoint a data protection officer. For any privacy question, write to the email address above.
Overview
We process personal data only as far as needed to run this website, sell and deliver our watches, answer your questions and, if you agree, send you news. We do not sell your data.
The legal bases we rely on (GDPR):
- Art. 6(1)(a) – your consent
- Art. 6(1)(b) – performing a contract with you, or steps before one
- Art. 6(1)(c) – a legal obligation (for example tax and accounting rules)
- Art. 6(1)(f) – our legitimate interests, which we name each time
Hosting and shop system (Shopify)
Our shop runs on Shopify, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland. Shopify hosts the website and processes all data you enter in the shop (orders, account, checkout) on our behalf under a data processing agreement. Data may also be processed by Shopify Inc. in Canada (covered by an EU adequacy decision) and by service providers in the USA (covered by the EU-US Data Privacy Framework or standard contractual clauses).
When you visit the site, Shopify's servers automatically log technical data: IP address, date and time, page requested, browser and operating system, referring page. We need this to deliver the site securely and to detect misuse (Art. 6(1)(f)). Logs are deleted as soon as they are no longer necessary for these purposes, in line with statutory retention obligations.
Cookies and consent
We use cookies and similar technologies. Those strictly needed to run the shop (cart, checkout, security, saving your cookie choice) are set without consent (§ 25(2) TDDDG; Art. 6(1)(b) and (f) GDPR). All others, including analytics, are only set if you agree in our cookie banner (§ 25(1) TDDDG; Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via "Cookie settings" in the footer.
Analytics
If you consent, we use Shopify's built-in analytics to understand how visitors use the shop (pages viewed, time on site, where visitors leave), so we can improve it. Legal basis: Art. 6(1)(a). Google analytics also is used to understand the number of visitors, devices and regions.
Orders and pre-orders
When you order, we process your name, billing and delivery address, email, phone number (if given), order details, payment status and, for pre-orders, your serial number. We need this to perform the contract (Art. 6(1)(b)) and keep it as required by German commercial and tax law (Art. 6(1)(c)). For pre-orders, we also email you production updates and the shipping notice; this is part of the contract.
Payment
Payments are processed by the provider you choose. We never see or store your full card details.
- Shopify Payments (credit and debit cards, Apple Pay, Google Pay, Shop Pay), operated by Stripe Payments Europe, Limited, Ireland, together with Shopify.
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose PayPal, you are redirected to PayPal and its privacy notice applies.
Payment providers may run fraud and credit checks under their own responsibility. Legal basis: Art. 6(1)(b) and (f) (preventing fraud).
[Pre-order app: name the app and provider here, e.g. Downpay by Shopify, and what it processes.]
Shipping
To deliver your watch we pass your name, delivery address and, so the carrier can notify you of delivery, your email address and phone number to DHL Express / UPS . Legal basis: Art. 6(1)(b) for the address; Art. 6(1)(f) for delivery notifications. For deliveries outside the EU, the carrier also uses this data for customs clearance.
Contact form and email
If you write to us, we process your name, email and message to answer you (Art. 6(1)(b) if it concerns an order or a possible purchase, otherwise Art. 6(1)(f)). We delete these messages once your request is closed, unless statutory retention periods apply.
Newsletter and waitlist
If you sign up for our newsletter or waitlist, we send you news about Arima and our watches. We use the double opt-in procedure: you only receive emails after confirming your address via the link we send you. We log the time of sign-up and confirmation as proof of consent. Legal basis: Art. 6(1)(a). You can unsubscribe at any time via the link in every email or by writing to us.
Customer account
If you create an account, we store your details so you can see your orders and check out faster (Art. 6(1)(b)). You can ask us to delete your account at any time.
Fonts
Our fonts are hosted on our own servers. No data is sent to font providers.
Social media
We link to our Instagram profile. Plain links do not transfer any data until you click them. After that, the platform's privacy notice applies.
How long we keep data
We delete personal data as soon as it is no longer needed for its purpose. Order and invoice data are kept for the periods required by German commercial and tax law (generally up to 10 years). Newsletter data is deleted when you unsubscribe, except the proof of your consent, which we keep for as long as we may need it.
Your rights
You have the right to:
- access your data (Art. 15 GDPR)
- have it corrected (Art. 16)
- have it deleted (Art. 17)
- restrict its processing (Art. 18)
- receive it in a portable format (Art. 20)
- withdraw any consent at any time, with effect for the future (Art. 7(3))
Right to object (Art. 21 GDPR): where we process your data based on legitimate interests, you can object at any time for reasons arising from your particular situation. You can object to direct marketing at any time without giving reasons.
To exercise any of these rights, email info@arimawatches.com.
Right to complain
You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. The authority responsible for us is: [Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart – if the UG is seated in Baden-Württemberg].
No automated decisions
We do not make decisions about you based solely on automated processing, including profiling.
Changes
We update this policy when our services or the law change. The current version is always on this page.