PriceCalc Pro – Shopify App
Provider: Janine Fabienne Eicker, Unnersberger Allee 10, 42659 Solingen, Germany
Contact: support@jrmedia.software
1. Controller
The controller responsible for processing personal data in connection with the PriceCalc Pro app within the meaning of the General Data Protection Regulation (GDPR) is:
Janine Fabienne Eicker
Unnersberger Allee 10
42659 Solingen
Germany
E-mail: support@jrmedia.software
A data protection officer has not been appointed, as the requirements under Art. 37 GDPR in conjunction with § 38 BDSG (German Federal Data Protection Act) are not met.
2. Overview of Data Processed
PriceCalc Pro is a B2B app embedded in the Shopify Admin, used exclusively by Shopify merchants (businesses or sole traders). The app processes the following categories of data:
2.1 Shop and Product Data (via Shopify API)
The app retrieves the
following data via the Shopify Admin GraphQL API:
- Shop ID and shop currency
- Product and variant data (product title, variant, SKU, purchase price/unit cost, selling price)
- Collections, vendors, and tags
- Custom metafields (namespace
custom): calculation factor, procurement costs, handling costs, profit margin, buffer, VAT key, reference price
The app writes modified prices and metafields back to the merchant's Shopify store.
This data generally does not constitute personal data under the GDPR, as it relates to the merchant's business data (products, prices). To the extent that data (e.g., merchant email or shop URL) qualifies as personal data, this Privacy Policy applies accordingly.
2.2 Billing and Subscription Data
Billing for paid plans is processed
exclusively via the Shopify Billing API. Payment data is processed by Shopify;
the Provider has no access to credit card or bank account details. The Provider stores only plan
status and usage counters.
2.3 App Settings (Browser Storage)
User settings (autosave, price
rounding, language, backup preferences) are stored in the browser's localStorage.
This data remains local to the user's browser and is not transmitted to the Provider's servers.
Work sessions are also stored in browser storage.
2.4 Backup Files (Local Downloads)
Exported backup files (JSON) are
downloaded directly to the user's device and are not stored on the Provider's servers.
2.5 No Processing of End-Customer Data
PriceCalc Pro does not
process any personal data of the Shopify merchant's end customers. The app has no access
to orders, customer names, addresses, or other customer data.
3. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Providing app features (reading and writing product and price data) | Art. 6(1)(b) GDPR – Performance of a contract |
| Subscription management and usage tracking | Art. 6(1)(b) GDPR – Performance of a contract |
| Security and error correction | Art. 6(1)(f) GDPR – Legitimate interests of the Provider |
| Compliance with Shopify GDPR requirements (GDPR webhooks) | Art. 6(1)(c) GDPR – Legal obligation |
The Provider's legitimate interest (Art. 6(1)(f)) consists in ensuring stable and secure operation of the app and preventing misuse.
4. Processors and Third-Party Providers
4.1 Shopify Inc.
The app is embedded in the Shopify Admin and accesses
shop data via the Shopify Admin API. Shopify acts as an independent controller for the processing
of merchant data under its own privacy terms:
shopify.com/legal/privacy
4.2 Gadget Software Inc. (Hosting and Platform)
The app is hosted and
operated on the Gadget platform (Gadget Software Inc., Vancouver, Canada).
Gadget processes app data retrieved via the Shopify API as a data processor.
Gadget stores data in Canada (EU adequacy decision in place) and in the USA via sub-processors (including Google Cloud and Cloudflare). For transfers to the USA, Gadget relies on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.
A Data Processing Addendum (DPA) between the Provider and Gadget is concluded in accordance with Gadget Software Inc.'s requirements. Further information: gadget.dev/privacy and gadget.dev/data-processing-addendum
| Service Provider | Function | Location |
|---|---|---|
| Google Cloud | Infrastructure / Data hosting | USA |
| Cloudflare | CDN / Security / Logging | USA |
| Axiom | Product logs | USA |
| LaunchDarkly | Feature flags | USA |
5. Transfers to Third Countries
App data may be transferred to the USA and Canada as part of hosting by Gadget Software Inc. Canada benefits from an EU adequacy decision issued by the European Commission. For transfers to the USA, Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR are used as appropriate safeguards.
6. Shopify GDPR Webhooks
As a Shopify Partner, the Provider is required to receive and process the following GDPR webhooks from Shopify:
- customers/data_request: Requests to report stored customer data. As the app does not process end-customer data, these requests are responded to accordingly.
- customers/redact: Requests to delete end-customer data. As no such data is stored, no deletion is necessary.
- shop/redact: Requests to delete shop data after app uninstallation. Shop-related data is deleted following receipt of this request, subject to applicable statutory retention periods.
7. Retention and Deletion
| Data Category | Retention Period |
|---|---|
| Shop and product data (metafields in Shopify) | Remain in the merchant's Shopify store; no server-side storage by the Provider outside Shopify |
| Subscription and usage data | Until app uninstallation, plus statutory retention periods (up to 10 years under applicable German commercial and tax law) |
| Browser settings (localStorage) | Stored locally in the user's browser; deleted when the user clears browser storage or uninstalls the app |
| Log data | Pursuant to Gadget Software Inc.'s retention policies (typically 30–90 days) |
8. Data Subject Rights
As a data subject, you have the following rights:
- Right of access (Art. 15 GDPR): You may request information about the personal data stored about you.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your data, to the extent no statutory retention obligations apply.
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR): You may object to processing based on Art. 6(1)(f) GDPR.
- Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
To exercise your rights, please contact: support@jrmedia.software
9. Automated Decision-Making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
10. No Affiliation with Shopify
PriceCalc Pro is an independent third-party app and is not officially affiliated with, endorsed by, or connected to Shopify Inc. in any way. Shopify® is a registered trademark of Shopify Inc.
11. Changes to This Privacy Policy
The Provider reserves the right to update this Privacy Policy when required by changes in law, app features, or data processing practices. The current version is accessible within the app. Users will be notified of material changes where reasonably possible.