Privacy Policy
Last updated: 7 September 2026
This Privacy Policy explains how personal data is collected and processed when you visit the Shipako website, participate in our pre-launch survey, register or pre-register for a Shipako account, request a launch notification, subscribe to marketing communications or contact us.
1. Who is responsible for your data?
Shipako is currently a pre-launch project jointly operated by:
Alexej Meiering
Fichtenweg 5
46397 Bocholt
Germany
and
Marcel Lonnemann
Münsterstraße 246
46397 Bocholt
Germany
We jointly determine the purposes and means of processing personal data in connection with Shipako and are therefore jointly responsible for the processing of your personal data.
Our central contact point for privacy-related enquiries and requests is:
Email: support@shipako.com
Website: https://shipako.com https://shipako.de
You may also exercise your data protection rights against either of the persons named above.
2. General information about data processing
We process personal data only where there is a legal basis for doing so and only to the extent necessary for the relevant purpose.
Depending on the processing activity, we process personal data on the basis of:
- your consent under Article 6(1)(a) GDPR;
- processing necessary to take steps at your request prior to entering into a contract or to perform a contract under Article 6(1)(b) GDPR;
- compliance with a legal obligation under Article 6(1)(c) GDPR; or
- our legitimate interests under Article 6(1)(f) GDPR, provided that your interests or fundamental rights and freedoms do not override those interests.
Age restriction
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete that information.
3. Website hosting
Our website is hosted by:
HOSTINGER INTERNATIONAL LIMITED
61 Lordou Vironos str.
6023 Larnaca
Cyprus
Hostinger provides the technical infrastructure required to operate the Shipako website and related services.
When you access our website, technical data may be processed in order to securely and reliably deliver the website. This may include:
- IP address;
- date and time of access;
- requested page or file;
- browser type and version;
- operating system;
- referrer information; and
- technical security and error information.
The legal basis for processing this technical information is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of the Shipako website and the prevention of misuse and attacks.
Hostinger processes personal data on our behalf in accordance with its applicable Data Processing Addendum.
4. Shipako pre-launch survey
We use a survey to better understand the needs and preferences of potential Shipako users and to help us develop our parcel forwarding service.
Depending on your answers, we may collect:
- your city or location in Cyprus;
- information about your online shopping habits;
- stores or products you are interested in;
- expected shipping frequency;
- delivery preferences;
- other answers you voluntarily provide in the survey; and
- information submitted in optional free-text fields.
We use this information to evaluate demand for Shipako and to design and improve our planned services.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is conducting market research and developing Shipako according to the needs of potential customers.
Participation in the survey is voluntary.
Please do not provide sensitive personal information, such as health information, religious or political beliefs or other special categories of personal data, in free-text fields.
5. Use of Tally
We use Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium, to provide our online survey and registration form.
The Tally form is not loaded automatically when you visit this page. It is only loaded after you actively click the “Load survey” button. Before you click this button, no connection to Tally’s servers is established.
When you click the button, your device connects to Tally’s servers in order to display the form. As part of this connection, your IP address and certain technical information about your browser and device are transmitted to Tally, even if you do not go on to complete or submit the form. This is technically necessary to load and display the embedded form.
The legal basis for this processing is your consent, Article 6(1)(a) GDPR, given by actively clicking the button. You can decline this by simply not clicking the button.
When you complete and submit the Shipako form, the information entered into the form is processed by Tally on our behalf.
For the information contained in your form submission, we are responsible for determining how and why the information is used. Tally acts as a data processor on our behalf.
According to Tally, form submission data is encrypted in transit and at rest and stored in Europe.
Tally provides a Data Processing Agreement governing the processing of personal data on behalf of its customers.
Further information can be found in Tally’s own Privacy Policy.
After receiving your submission, we manually review the information provided. There is currently no automated transfer from Tally to your Shipako account.
6. Shipako account pre-registration
As part of the survey, you may register or pre-register for a Shipako account.
For this purpose, we may process:
- first name;
- last name;
- email address;
- account status;
- information necessary to identify your registration; and
- information relating to your €5 launch discount.
When you submit the account registration section, we use the information provided to manually create or pre-register your Shipako account.
We use this information to:
- create or pre-register your Shipako account;
- identify and administer your account;
- prevent duplicate registrations; and
- associate the €5 launch discount with your account.
The legal basis for processing the information required for the requested account registration is Article 6(1)(b) GDPR.
If you do not provide the information required to identify and create your account, we cannot complete the requested account registration.
Shipako is currently in its pre-launch phase. The pre-registered account does not yet enable you to place orders or send parcels through Shipako.
Before Shipako begins processing orders, parcels, payments or shipping information, this Privacy Policy will be updated to explain those additional processing activities.
7. Contact regarding your survey and launch updates
At the end of the survey, you may voluntarily choose whether you agree to be contacted by Shipako by email — for example, regarding launch updates or questions relating to your survey submission.
If you select this option, we process your email address for the purpose of contacting you for these specific reasons.
The legal basis for this processing is your consent under Article 6(1)(a) GDPR.
This contact consent is separate from a subscription to marketing or newsletter emails (see Section 8).
You may withdraw your consent at any time with effect for the future by contacting:
If you withdraw your consent, we will no longer contact you for these purposes
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
8. Newsletter and marketing emails
You may separately and voluntarily choose to receive Shipako news, updates and offers by email.
A newsletter or marketing subscription is not required to:
- participate in the Shipako survey;
- create or pre-register a Shipako account; or
- receive the €5 launch discount associated with your account.
The legal basis for sending newsletter and marketing emails is your consent under Article 6(1)(a) GDPR.
The marketing option is not pre-selected.
We use Hostinger Reach, an email marketing service provided within the Hostinger platform, to manage and send marketing communications.
For this purpose, your email address and, where necessary, your name and subscription status may be processed by Hostinger on our behalf.
You can withdraw your marketing consent at any time with effect for the future by:
- using the unsubscribe option provided in our marketing emails; or
- contacting us at support@shipako.com.
After you unsubscribe, we will no longer send you marketing communications.
We may retain limited information about your unsubscribe request where necessary to ensure that your preference continues to be respected and to demonstrate compliance with applicable legal requirements.
9. Contacting Shipako
If you contact us by email, we process the information necessary to respond to your enquiry.
This may include:
- your name;
- your email address;
- the content of your message; and
- any other information that you voluntarily provide.
Where your enquiry relates to a potential or existing contractual relationship with Shipako, the legal basis is Article 6(1)(b) GDPR.
For general enquiries, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries addressed to us.
Our business email services are provided through Hostinger.
10. Cookies and technically necessary technologies
Our website may use technically necessary cookies and similar technologies required for the secure operation of the website and account functionality.
For example, technical cookies may be necessary to:
- maintain website security;
- enable login functionality;
- maintain a user session; or
- remember technically necessary settings.
Where cookies or similar technologies are strictly necessary to provide a service requested by the user, they may be used without marketing consent where permitted by applicable law.
If Shipako introduces analytics, advertising, tracking or other non-essential technologies in the future, we will update this Privacy Policy and obtain consent before using such technologies where legally required.
11. Recipients of personal data
We only disclose personal data where this is necessary for the purposes described in this Privacy Policy or where disclosure is required by law.
Current service providers that may process personal data on our behalf include:
Tally BV
Sint-Pietersnieuwstraat 11
9000 Ghent
Belgium
Purpose: online survey and registration form.
HOSTINGER INTERNATIONAL LIMITED
61 Lordou Vironos str.
6023 Larnaca
Cyprus
Purpose: website hosting, technical infrastructure, business email and email marketing services.
These providers process personal data on our behalf in accordance with the applicable contractual and data-protection requirements.
We do not sell personal data.
12. International data transfers
Our primary service providers described above are located within the European Union.
Tally states that form submission data is stored in Europe.
Hostinger International Limited is established in Cyprus.
Service providers may use subprocessors as part of their technical infrastructure.
Where personal data is transferred outside the European Economic Area to a country without an adequacy decision by the European Commission, appropriate safeguards will be used where required, such as the European Commission’s Standard Contractual Clauses.
13. How long we keep your data
We retain personal data only for as long as necessary for the purpose for which it was collected.
Survey responses
Identifiable raw survey responses will generally be retained until no later than six months after the public launch of Shipako.
After this period, survey responses will be deleted or anonymised unless continued storage is necessary for a specific and documented legal purpose.
Pre-registration and account information
Pre-registration information will be retained while your Shipako registration remains active.
If you do not activate or use your Shipako account after launch, we may delete the associated pre-registration information once it is no longer necessary for the purpose for which it was collected.
Contact consent (survey and launch updates)
Your consent to be contacted regarding your survey submission or launch updates will be processed until:
- you withdraw your consent; or
- the underlying purpose (survey-related contact or the launch itself) otherwise ceases to exist.
Newsletter
Newsletter information is processed until you withdraw your consent.
Following withdrawal, limited information may be retained where necessary to document and respect your unsubscribe request.
General enquiries
Information relating to general enquiries sent to support@shipako.com will be retained only as long as necessary to process and resolve the enquiry, and will generally be deleted within 12 months thereafter unless a longer retention period is required for legal reasons.
Technical and security logs
Technical access and security logs are generally retained for a short period (typically no longer than 30 days) unless longer retention is necessary to investigate a security incident or comply with a legal obligation.
Legal retention requirements
Where we are legally required to retain particular information for a longer period, the information will be retained for the applicable statutory retention period.
14. Your rights
Under the GDPR, and subject to the applicable legal requirements, you have the right to:
- request access to personal data concerning you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- receive personal data you have provided in a structured, commonly used and machine-readable format where the requirements for data portability are met;
- object to processing based on our legitimate interests; and
- withdraw consent at any time where processing is based on your consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact:
We may request information necessary to verify your identity before fulfilling a data protection request.
15. Joint responsibility
Marcel Lonnemann and Alexej Meiering jointly determine the purposes and means of the processing of personal data in connection with Shipako.
We have designated support@shipako.com as the central point of contact for data protection matters.
Regardless of this central contact point, you may exercise your rights under the GDPR against either joint controller.
The joint controllers coordinate the handling of privacy requests and compliance with the information obligations under the GDPR.
16. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for our current establishment in North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Email: poststelle@ldi.nrw.de
You may also contact another competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.
17. Automated decision-making
We currently do not use personal data collected through the Shipako pre-launch survey or account registration for automated decision-making or profiling within the meaning of Article 22 GDPR.
Account registrations are currently reviewed and processed manually.
18. Changes to this Privacy Policy
Shipako is currently in the pre-launch phase.
We may update this Privacy Policy where:
- Shipako’s legal structure changes;
- the Shipako GbR is formally established or registered;
- new service providers are introduced;
- our website functionality changes; or
- Shipako begins offering parcel forwarding, payment, shipping or other services.
The current version of this Privacy Policy will always be published on our website together with its date of revision.
