Data Use Details
Agreement
Scope
This Agreement on the provision of data with the purpose of developing measures in the e-commerce sector (hereinafter “Agreement”) is concluded between Shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany, represented by its management (hereinafter "Shopware") and the respective existing contracting partner holding a license (hereinafter in this Agreement "Partner", collectively "Parties").
Consumers are excluded from this Agreement.
Contracts concluded between the Parties shall continue to apply without prejudice to this Agreement. In case of contradictions, this Agreement shall prevail.
Subject matter
Under this Agreement, the Partner shall provide Shopware with order data, usage data, diagnostic data and store data from Shopware 6 (hereinafter "Platform"). This is so-called "backend data" from selected Entities of the Platform and event-based data from the administration of the Platform as well as from the storefronts (hereinafter "Provided Data"). An explanation of the respective data categories is provided in Appendix 1 (data collected).
A breakdown of all recorded Entities, that means the programming objects for which information is stored (specifically: data units defined by PHP classes, e.g. products or order processes), is contained in Appendix 1 (data collected).
Shopware intends to use the provided data alone or in cooperation with third parties, for example with machine learning providers, to improve the Platform and to develop new functionalities and services in the online commerce sector. This includes, in particular, the following purposes:
Analysis of user behavior: By evaluating user behavior, areas of the Platform that are frequently visited or avoided can be identified. In this way, the acceptance of functions can be measured, and trends can be recognized. This makes it possible to focus on the further development of the platform and to develop new functionalities that are likely to have a high level of acceptance among users.
By analyzing Entity- and event-based data, functions such as predictions or recommendations can be developed. On this basis, it could become possible in the future to identify content that is particularly likely to generate sales for the Partner.
Personalization: In the future, the provision of individually customized recommendations, based on the available data, for the Partner is intended. This could include, for example, relevant statistics, applications, or recommendations that enable the partner to optimize its online store and to increase his sales.
Regarding the end customers, it could become possible to enable the display of relevant products, offers, or content without having to rely on consent-requiring and error-prone tracking of individual customer interactions. This could provide all users with a more efficient, relevant, and enjoyable experience on the platform in a way that is technically future-proof and safe from a data protection perspective.
Machine Learning: Machine learning models can be trained with provided data. This would allow Shopware to identify trends, develop new data-driven features, and provide Shopware services to business customers to make the Platform even more successful.
Shopper profiles: Shopware can create anonymized profiles of individual end customers as well as user segments of end customers from the provided data, to gain insights into individual and cohort-related usage behavior. On this basis, personalization measures can be recommended, and future features can be planned.
Performance and diagnostic measurements: The analysis of the provided data enables Shopware to analyze the potential improvements of the Platform even faster and more detailed. Predictive models can further reduce platform downtimes and irregularities.
Fraud and risk monitoring: The data can be used to create fraud detection and risk assessment models based on trusted partners. In this way, the platform can be made even more secure, rogue stores or fraudulent online shoppers can be identified even more quickly and securely, and the trust in the brand "Shopware" and its business customers can be further increased.
Granting of rights of use to Shopware
The Parties are of the unambiguous understanding, that the Partner does not hold any copyrights to the provided data, as all data formats and database systematics are specified by Shopware.
In the event that the Partner should be the owner of copyrights, Shopware shall receive a simple, transferable right of use to the data and databases provided, which shall be unlimited in terms of time, space and subject matter for its own business purposes.
Compensation
The services of both Parties under this Agreement are provided free of charge. Subject to any other arrangement in the future, the Partner shall not be entitled to get payments of any amount in money or granting of any monetary benefits for the provided data. Shopware shall not be entitled to any remuneration for development services.
Term and termination
This Agreement shall come into force with the provision of data by the Partner and shall run for an indefinite period.
The Agreement may be terminated at any time by one of the Parties without giving reasons or observing a notice period. The termination can be made in text form as well as implied by deactivation of the data exchange by either Party.
Data provided up to the time of termination shall remain with Shopware. Shopware will delete existing data associated with the partner upon his request for good cause. A good cause exists in particular if the continued processing of the data by Shopware would cause an economic or social disadvantage for the Partner.
Data Protection
Under this Agreement, only non-personal data outside the scope of the GDPR and the Federal Data Protection Act (“Bundesdatenschutzgesetz”, BDSG) shall be processed.
In case of future developments that entail the potential processing of personal data, Shopware will submit a proposal to the Partner for an appropriate amendment of this Agreement in compliance with applicable data protection legislation.
The conclusion of this Agreement shall not create any obligation for the Partner to agree to any future amendment or follow-up agreements entailing the processing of personal data.
Secrecy Protection
In case of data provided by the Partner constituting trade secrets within the meaning of Sec. 2 No. 1 of the German Trade Secrets Act (“Gesetz zum Schutz von Geschäftsgeheimnissen”, GeschGehG), Shopware will protect such trade secrets in accordance with this Section 7.
Shopware will not make any data that directly reveals the identity of the Partner available to third parties with whom comparable agreements have been concluded.
Shopware also takes the measures described in Appendix 2(Secrecy Protection) to protect the infrastructure used by Shopware and the data provided by the Partner that is processed on it.
If a Non-Disclosure Agreement between the Parties requires written consent of the Partner prior to the disclosure of information by Shopware, this provision shall be waived by this Agreement and Shopware shall be entitled to disclose the information concerned in compliance with Sections 7.2 and 7.3 of this Agreement.
Appendix 1 – Data collected
Section I – Definitions
“Order data” within the Platform refers to the detailed information about customer orders placed on the platform. This includes specifics such as products ordered, quantities, prices, origin, payment methods, shipment, etc. We analyze this data to understand trends and patterns that help us to enhance features as well as develop new services designed to improve your business success. We don’t collect personal data from your customers that can be used to identify a single person.
“Usage data” within the Platform pertains to the information related to how admin users and storefront vistors interact with our platform. This includes details like interactions with different Shopware admin modules, pages viewed, duration of visits, click paths, and user actions within the platform and storefront. By evaluating the usage data, we can identify areas of the platform that are frequently visit or avoid to measure feature adoption, leading to potential improvements in layout, design, and functionality. We don’t collect personal data that can be used to identify an admin or storefront vistors.
“Diagnostic data” within the Platform refers to the information related to system health, errors, and performance metrics of the platform. This includes details such as system logs, error messages, server response times, and other technical indicators. Analysing this data helps us to quickly identify, address, and deploy fixes for common issues or vulnerabilities, maintaining the integrity of the platform.
“Store data” within the Platform pertains to all the information related to your online storefront. Such as products, listings, prices, images, descriptions, etc., and metadata about your shop's setup, such as themes and plugins. We don’t collect personal data that can be used to identify an admin user or a storefront visitor. Using aggregated store data, we can provide insights via machine learning such as emerging market trends, allowing you to adjust product offerings or marketing strategies accordingly.
Section II – Entities
The following table provides a complete overview of the data we currently collect.
Version 1.4.0
Last update: 05/13/2025
Introduced into Shopware version 6.7.0.0 & 6.6.10.4
List of collected Shopware 6 Entities
Appendix 2 – Secrecy Protection
Data in transit (from Shopware 6 instance to shopware AG)
TLS 1.2 and TLS 1.3
Data at rest (Within the infrastructure of shopware AG):
Encrypted in AWS with AES-256-GCM
We note that the training of machine learning models trained with the data cannot be undone. However, the models have no specific memory of individual data sets and always learn from a context. Shopware or third parties can never draw direct conclusions about a specific partner, its shop, or even its customers or other individuals from the results of the models.
