Privacy policy

Last updated: July 23, 2026

This privacy policy explains how Coco IT-Solutions UG (haftungsbeschränkt) ("we", "us", "our") processes personal data when you use the Workshop Manual Hub online store at workshopmanualhub.com (the "Store"). It is provided in accordance with Article 13 of the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR.

1. Data controller

Coco IT-Solutions UG (haftungsbeschränkt)
Anton-Bruckner-Straße 2
71706 Markgröningen
Germany
Phone: +49 171 6824238
Email: shop@coco-it-solutions.com

2. Hosting via Shopify

Our Store is operated on the Shopify platform, provided by Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada, and its affiliates.

Shopify processes and stores data on secure servers, including in Canada, the United States, and other countries. Where personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, where relevant, equivalent UK transfer mechanisms, unless the destination country has been recognised as providing an adequate level of protection.

Further information is available in the Shopify Consumer Privacy Policy.

3. Collection, storage, and use of personal data

a) When you visit the Store

When you access our Store, information is automatically sent to the server (hosted by Shopify). This information is temporarily stored in a log file. The following data may be collected without your active input and deleted automatically after a defined period:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file accessed
  • Referrer URL (website from which access occurred)
  • Browser used and, where applicable, operating system of your device

We process this data for the following purposes:

  • Ensuring a stable connection to the Store
  • Ensuring comfortable use of the Store
  • Evaluating system security and stability
  • Other administrative purposes

Legal basis: Article 6(1)(f) GDPR (legitimate interests in operating and securing the Store).

b) When you use our contact form or contact us directly

If you contact us by email or via our contact form, we collect:

  • Name
  • Email address
  • Subject and content of your message
  • Any other information you choose to provide

We use this data solely to handle your enquiry.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures or contract performance) or Article 6(1)(f) GDPR (legitimate interest in responding to enquiries), as applicable.

c) When you place an order

To process your order and deliver digital products, we collect:

  • First and last name
  • Billing address
  • Email address
  • Payment information (processed by our payment providers)
  • Order and transaction details

Digital manuals are delivered by download or email after successful payment. We do not require a shipping address for digital-only orders unless you provide one voluntarily.

Legal basis: Article 6(1)(b) GDPR (contract performance).

4. Disclosure of data to third parties

We disclose personal data to third parties only where:

  • you have given explicit consent under Article 6(1)(a) GDPR;
  • disclosure is necessary for contract performance under Article 6(1)(b) GDPR (e.g. payment and delivery providers);
  • a legal obligation applies under Article 6(1)(c) GDPR; or
  • disclosure is necessary to protect legitimate interests under Article 6(1)(f) GDPR and your interests do not override those interests.

Recipients may include Shopify (hosting, checkout, analytics as configured), payment processors, and email delivery services engaged to fulfil orders.

5. Payment processing

Payments are processed via Shopify Payments and other payment methods offered at checkout. Payment data is transmitted securely and encrypted to the relevant payment service provider. We do not store full payment card details on our own systems.

Legal basis: Article 6(1)(b) GDPR.

6. Cookies and similar technologies

Our Store uses cookies and similar technologies. Cookies are small text files stored on your device by your browser.

We use:

  • Strictly necessary cookies — required for checkout, security, and basic Store operation.
  • Functional and analytics cookies — where enabled, to improve the Store and measure usage (subject to your consent where required by law).

You can configure your browser to refuse cookies or alert you before a cookie is stored. Disabling cookies may limit Store functionality. Where required, non-essential cookies are used only after consent via our cookie banner.

Legal basis: Article 6(1)(a) GDPR (consent) for non-essential cookies; Article 6(1)(f) GDPR or Article 6(1)(b) GDPR for strictly necessary cookies, as applicable.

7. International transfers

Personal data may be processed outside the country in which you live, including in Canada and the United States. Where transfers occur from the EEA or UK, we rely on recognised transfer mechanisms such as Standard Contractual Clauses or adequacy decisions, as described in section 2 above.

8. Retention

We retain personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations (e.g. tax and commercial record-keeping), resolve disputes, and enforce agreements. Order and invoice data is typically retained in accordance with applicable statutory retention periods under German law.

9. Your rights

Subject to applicable law and exceptions, you have the right to:

  • Access — request information about personal data we process about you (Article 15 GDPR / UK GDPR).
  • Rectification — request correction of inaccurate data (Article 16 GDPR / UK GDPR).
  • Erasure — request deletion where no overriding legal basis requires continued processing (Article 17 GDPR / UK GDPR).
  • Restriction — request restriction of processing in certain circumstances (Article 18 GDPR / UK GDPR).
  • Data portability — receive data you provided in a structured, commonly used, machine-readable format, or have it transferred to another controller where technically feasible (Article 20 GDPR / UK GDPR).
  • Object — object to processing based on legitimate interests (Article 21 GDPR / UK GDPR).
  • Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal (Article 7(3) GDPR / UK GDPR).
  • Lodge a complaint — with a supervisory authority. In Germany, you may contact the data protection authority responsible for your place of residence or our registered office. In the UK, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, contact us using the details in section 1. We may need to verify your identity before responding.

Depending on your location, you may also manage certain preferences via Shopify's privacy tools linked from our Store or at privacy.shopify.com.

10. Children

The Store is not directed at children. We do not knowingly collect personal data from children under the age of majority in your jurisdiction.

11. Changes to this privacy policy

We may update this privacy policy when legal requirements change or our services evolve. The current version is always published on this page with an updated "Last updated" date.