Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Moruga Kakao UG (haftungsbeschränkt) & Co. KG, Kolonnenstr. 8, 10827 Berlin, Germany, Tel.: +4915678418762, email: hello@morugacacao.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 If you use our website solely for information, without registering or otherwise providing information to us, we collect only the data that your browser transmits to the website server (“server log files”). When you access our website, we collect the following data, which are technically necessary to display the website to you:

The page of our website visited
Date and time of access
Amount of data sent in bytes
The source/referral from which you reached the page
Browser used
Operating system used
IP address used (where applicable, in anonymised form)

Processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are not shared or used for other purposes. However, we reserve the right to review server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

3) Cookies

To make our website attractive to visit and enable certain functions, we use cookies: small text files stored on your device. Some cookies are automatically deleted when you close your browser (“session cookies”); others remain on your device for longer and allow website settings to be saved (“persistent cookies”). In the latter case, you can find their storage periods in your browser’s cookie settings overview.

If individual cookies we use also process personal data, processing takes place under Article 6(1)(b) GDPR for performance of a contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to protect our legitimate interests in optimal website functionality and a user-friendly, effective website experience.

You can configure your browser to inform you when cookies are set, let you decide individually whether to accept them, or reject cookies in particular cases or generally.

Please note that rejecting cookies may restrict the functionality of our website.

4) Contacting us

4.1 WhatsApp Business

You can contact us through the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the “Business” version of WhatsApp for this purpose.

If you contact us through WhatsApp about a specific transaction (for example, an order you have placed), we store and use the mobile phone number you use on WhatsApp and, if provided, your first and last names under Article 6(1)(b) GDPR to process and respond to your enquiry. On the same legal basis, we may ask you through WhatsApp to provide further information (order number, customer number, address or email address) so that we can associate your enquiry with a particular transaction.

If you contact us through WhatsApp with general enquiries (for example, about our services, availability or website), we store and use the mobile phone number you use on WhatsApp and, if provided, your first and last names under Article 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data are used only to respond to your enquiry through WhatsApp. They are not shared with third parties.

Please note that WhatsApp Business accesses the address book on the mobile device we use for this purpose and automatically transfers the telephone numbers stored there to a server of its parent company, Meta Platforms Inc., in the United States. We operate our WhatsApp Business account on a mobile device whose address book contains only the WhatsApp contact details of users who have themselves contacted us through WhatsApp.

This ensures that everyone whose WhatsApp contact details are stored in our address book has already consented under Article 6(1)(a) GDPR to the transfer of their WhatsApp telephone number from their chat contacts’ address books by accepting WhatsApp’s terms of use when first using the app on their device. This excludes the transfer of data of users who do not use WhatsApp and/or have not contacted us through WhatsApp.

For the purpose and scope of data collection and further processing and use by WhatsApp, as well as your related rights and privacy settings, please see WhatsApp’s privacy information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits disclosure to third parties.

The processing described above may involve transfers of data to servers of Meta Platforms Inc. in the United States.

For transfers to the United States, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

4.2 When you contact us (for example, using a contact form or by email), personal data are processed solely to handle and respond to your enquiry and only to the extent necessary for that purpose.

The legal basis is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR. If your contact concerns a contract, Article 6(1)(b) GDPR provides an additional legal basis. Your data will be deleted when it is apparent from the circumstances that the matter has been fully resolved, provided no statutory retention obligations prevent deletion.

5) Comment function

When you use the comment function on this website, your comment, the time it was created and your chosen commenter name are stored and published on the website. Your IP address is also logged and stored. The IP address is stored for security reasons and in case a commenter infringes third-party rights or posts unlawful content. We need your email address to contact you if a third party challenges your published content as unlawful.

The legal bases for storing your data are Article 6(1)(b) and (f) GDPR. We reserve the right to delete comments if third parties challenge them as unlawful.

6) Data processing when opening a customer account

Under Article 6(1)(b) GDPR, personal data are also collected and processed to the extent necessary when you provide them to open a customer account. The relevant form on our website shows which data are required.

You may delete your customer account at any time by sending a message to the controller at the address above. After deletion of your account, your data will be deleted provided all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion and we no longer have a legitimate interest in continued storage.

7) Use of customer data for direct marketing

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we regularly send you information about our offers. Only your email address is required. Further information is optional and is used to address you personally. We use a double opt-in procedure to ensure that you receive newsletters only after expressly confirming your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you consent to our use of your personal data under Article 6(1)(a) GDPR. We store the IP address assigned by your internet service provider (ISP), along with the date and time of registration, so that any misuse of your email address can be traced later. Data collected when you subscribe are used strictly for the stated purpose.

You may unsubscribe at any time using the link in the newsletter or by contacting the controller named above. After you unsubscribe, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve a further use that is permitted by law and explained in this policy.

7.2 Product availability notifications by email

For temporarily unavailable items, you can register to receive an email notification of availability. We will send you a single email about the availability of the item you selected. Only your email address is required. Further information is optional and may be used to address you personally. We use a double opt-in procedure to ensure that you receive a notification only after expressly confirming your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you consent to our use of your personal data under Article 6(1)(a) GDPR. We store the IP address assigned by your ISP, along with the date and time of registration, so that any misuse of your email address can be traced later. Data collected when you register for product availability notifications are used strictly for the stated purpose.

You may unsubscribe from availability notifications at any time by contacting the controller named above. Your email address will then be deleted from the relevant distribution list without delay, unless you have expressly consented to further use of your data or we reserve a further use that is permitted by law and explained in this policy.

7.3 Shopping cart reminders by email

If you leave our shop before completing your order, you can choose to receive a one-time email reminder of the contents of your virtual shopping cart.

Only your email address is required. Further information is optional and may be used to address you personally. We use a double opt-in procedure to ensure that you receive a notification only after expressly confirming your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you consent under Article 6(1)(a) GDPR to our use of your personal data to send a shopping cart reminder. We store the IP address assigned by your ISP, along with the date and time of registration, so that any misuse of your email address can be traced later. Data collected when you register for our email notification service are used strictly for the stated purpose.

You may unsubscribe from shopping cart reminders at any time by contacting the controller named above. Your email address will then be deleted from the relevant distribution list without delay, unless you have expressly consented to further use of your data or we reserve a further use that is permitted by law and explained in this policy.

8) Data processing for order fulfilment

8.1 To the extent necessary to perform the contract for delivery and payment purposes, the personal data we collect are shared with the commissioned transport company and financial institution under Article 6(1)(b) GDPR.

If, under a relevant contract, we owe you updates for goods with digital elements or digital products, we process the contact details you provided with your order to inform you personally as part of our statutory information obligations under Article 6(1)(c) GDPR. Your contact details are used strictly for communications about updates we are obliged to provide and are processed only to the extent necessary for the relevant information.

8.2 Order Printer Pro

We use the following provider for order processing: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark.

Your name, address and, where applicable, other personal data are shared with the provider under Article 6(1)(b) GDPR to process your online order, but only to the extent actually necessary. The provider is also used for accounting. It processes our company’s incoming and outgoing invoices and, where applicable, bank transactions to capture invoices automatically, match them to transactions and produce financial accounts through a partly automated process.

Where personal data are processed for this purpose, processing takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in efficiently organising and documenting our business transactions.

8.3 Shopify Order Printer

We use the following provider for order processing: Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

8.4 Sharing personal data with shipping providers

– Deutsche Post

We use the following transport provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.

If you have expressly consented during the ordering process, we share your email address and/or telephone number with the provider under Article 6(1)(a) GDPR before delivery to arrange a delivery date or send a delivery notification. Otherwise, we share only the recipient’s name and delivery address under Article 6(1)(b) GDPR for delivery purposes. Data are shared only to the extent necessary to deliver the goods. In this case, arranging the delivery date in advance with the provider or receiving a delivery notification is not possible.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

– DHL

We use the following transport provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

– Hermes

We use the following transport provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

– UPS

We use the following transport provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

8.5 Use of payment service providers

– Apple Pay

If you choose “Apple Pay”, provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the Apple Pay function on your iOS, watchOS or macOS device by charging a payment card stored in Apple Pay. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorising a payment therefore requires entry of a code you previously set and verification through your device’s Face ID or Touch ID function.

For payment processing, the information you provide during checkout and information about your order are transmitted to Apple in encrypted form. Apple then encrypts these data again using a developer-specific key before transmitting them to the payment service provider for the payment card stored in Apple Pay to carry out the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After payment, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

If personal data are processed in these transfers, processing takes place exclusively for payment processing under Article 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymisation completely excludes identification of individuals. Apple uses these anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase made through Safari on a Mac, the Mac and the authorising device communicate through an encrypted channel on Apple’s servers. Apple does not process or store this information in a form that can identify you. You can disable Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and turn off “Allow Payments on Mac”.

Further information about privacy with Apple Pay is available at https://support.apple.com/de-de/HT203027.

– Klarna

This website offers one or more online payment methods from Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method where you pay in advance (for example, credit card payment), the payment data you provide during checkout (including name, address, bank and payment card information, currency and transaction number), together with information about your order contents, are shared with the provider under Article 6(1)(b) GDPR. Data are shared exclusively to process payment with the provider and only to the extent necessary.

If you select a payment method where the provider performs in advance (for example, purchase on account, instalment purchase or direct debit), you will also be asked during checkout to provide certain personal data (first and last names, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To protect our legitimate interest in establishing our customers’ ability to pay, we forward these data to the provider for a credit check under Article 6(1)(f) GDPR. Based on the personal data you provide and other data (such as cart contents, invoice amount, order history and payment experience), the provider assesses whether your selected payment method can be granted in view of payment and/or bad-debt risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit agencies may be used in the application assessment under Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (“scores”). Where scores form part of the credit report, they are based on a scientifically recognised mathematical and statistical method. Address data, among other information, are used to calculate scores.

You may object to this processing at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where necessary to process payment in accordance with the contract.

– PayPal

This website offers one or more online payment methods from PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method where you pay in advance, the payment data you provide during checkout (including name, address, bank and payment card information, currency and transaction number), together with information about your order contents, are shared with the provider under Article 6(1)(b) GDPR. Data are shared exclusively to process payment with the provider and only to the extent necessary.

If you select a payment method where we perform in advance, you will also be asked during checkout to provide certain personal data (first and last names, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To protect our legitimate interest in establishing your ability to pay in such cases, we forward these data to the provider for a credit check under Article 6(1)(f) GDPR. Based on the personal data you provide and other data (such as cart contents, invoice amount, order history and payment experience), the provider assesses whether your selected payment method can be granted in view of payment and/or bad-debt risks.

– Sofort bank transfer

This website offers one or more online payment methods from Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden.

– Stripe

This website offers one or more online payment methods from Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method from this provider, the payment data you provide during checkout (including name, address, bank and payment card information, currency and transaction number), together with information about your order contents, are shared with the provider under Article 6(1)(b) GDPR. Data are shared exclusively to process payment with the provider and only to the extent necessary.

8.6 Electronic cancellation of continuing contracts with consumers

Consumers who have entered into contracts on this website involving continuing obligations for a fee (such as subscriptions) can cancel them through an electronic button in accordance with the applicable notice periods.

Clicking the button leads to a confirmation page where the consumer can provide further cancellation details, clearly identify themselves and then submit their cancellation electronically.

Personal data are collected and transmitted to us under Article 6(1)(b) GDPR only to the extent necessary to process the cancellation properly. The data provided are also used under Article 6(1)(b) GDPR to confirm receipt of the cancellation and the cancellation date electronically in text form. Article 6(1)(c) GDPR provides a further legal basis. We are legally required to provide an electronic cancellation option for consumer contracts involving continuing obligations for a fee concluded through electronic commerce.

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These small text files are stored on your device and collect certain information, including your IP address. Google truncates the last digits of the IP address to prevent direct identification.

The information is transmitted to Google’s servers and processed there. Transfers to Google LLC in the United States are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The truncated IP address transmitted by your browser through Google Analytics is not combined with other Google data. Data collected through Google Analytics 4 are stored for two months and then deleted.

All processing described above, particularly the setting of cookies on your device, takes place only with your express consent under Article 6(1)(a) GDPR. Without your consent, Google Analytics 4 is not used during your visit. You may withdraw consent at any time with effect for the future by disabling this service through the cookie consent tool provided on the website.

We have entered into a data processing agreement with Google that protects our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 is available at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

Demographics
Google Analytics 4 uses a “demographics” feature to produce statistics about website visitors’ ages, genders and interests by analysing advertising and information from third-party providers. This helps identify target groups for marketing activities. However, the collected data cannot be attributed to a particular person and are deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may, subject to your consent to Google Analytics under Article 6(1)(a) GDPR, analyse your usage across devices and create database models, including for cross-device conversions. We receive only statistics, not personal data, from Google. To stop cross-device analysis, you can disable personalised advertising in your Google account settings. Follow the instructions at https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de.
Further information about Google Signals is available at https://support.google.com/analytics/answer/7532985?hl=de.

User IDs
As an extension to Google Analytics 4, this website may use the User IDs feature. If you have consented to Google Analytics 4 under Article 6(1)(a) GDPR, created an account on this website and signed into that account on different devices, your activities, including conversions, can be analysed across devices.

9.2 Lucky Orange

This website uses the web analytics service provided by Lucky Orange LLC, 8665 W 96th St, Suite 100, Overland Park, Kansas, USA.

Using cookies and/or similar technologies (tracking pixels, web beacons and algorithms that read device and browser information), the service collects and stores pseudonymised visitor data, including device information such as IP addresses and browser information, to perform statistical analyses of behaviour on our website and create pseudonymised usage profiles. This enables, among other things, analysis of movement patterns (“heatmaps”) showing visit duration and interactions with page content, such as text entry, scrolling, clicks and mouse-overs. Pseudonymisation generally prevents direct identification. These data are not combined with identifiable data about you collected by other means.

All processing described above, particularly reading or storing information on your device, takes place only with your express consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by disabling this service through the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits unauthorised disclosure to third parties.

10) Retargeting, remarketing and conversion tracking

Meta Pixel

We use the “Meta Pixel” service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) as part of our online offering.

When a user clicks an advertisement we have placed on Facebook and/or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After redirection, this URL parameter is stored in the user’s browser through a cookie set by our linked page itself.

This allows Meta to identify visitors to our online offering as a target group for displaying advertisements (“ads”). We therefore use the service to show our Facebook and/or Instagram ads only to users who have demonstrated interest in our online offering or have certain characteristics (such as interests in particular topics or products inferred from websites visited) that we communicate to Meta (“Custom Audiences”).

Meta Pixel also enables us to track whether users were redirected to our website after clicking an ad and which actions they then take there (“conversion tracking”).

The data collected are anonymous to us and do not allow us to identify users. However, Meta stores and processes the data, allowing them to be linked to the relevant user profile and used by Meta for its own advertising purposes.

All processing described above, particularly setting cookies to read information on your device, takes place only with your express consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future by disabling this service through the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits unauthorised disclosure to third parties.

Information generated by Meta is generally transmitted to and stored on a Meta server. This may also involve transfers to servers of Meta Platforms Inc. in the United States.

11) Website features

11.1 Vimeo

This website uses plugins to display and play videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you visit a page containing such a plugin, your browser establishes a direct connection to the provider’s servers to load it. Certain information, including your IP address, is transmitted to the provider.

When playback of an embedded video is started through the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent misuse.

If you are signed into an account with the provider during your visit, your data are linked directly to your account when you click a video. To avoid this, you must sign out before clicking the play button.

11.2 YouTube

This website uses plugins to display and play videos from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to Google LLC, USA.

When you visit a page containing such a plugin, your browser establishes a direct connection to the provider’s servers to load the content no later than when video playback begins. Certain information, including your IP address, is transmitted to the provider.

When playback of an embedded video is started through the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent misuse.

12) Tools and other information

Cookie consent tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. When users access the site, the tool appears as an interactive interface where they can give consent to specific cookies and/or cookie-based applications by selecting checkboxes. Cookies and services requiring consent are loaded only after the user has given the corresponding consent. This ensures that such cookies are placed on the user’s device only where consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data are generally not processed for this purpose.

If, in an individual case, personal data such as an IP address are processed to store, associate or log cookie settings, this takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, accordingly, a legally compliant website.

Article 6(1)(c) GDPR provides a further legal basis. As controller, we are legally obliged to make the use of cookies that are not technically necessary dependent on the user’s consent.

Where required, we have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about the operator and settings of the cookie consent tool is available directly in its interface on our website.

13) Rights of data subjects

13.1 Applicable data protection law grants you the following rights against the controller regarding the processing of your personal data (rights of access and intervention). The conditions for exercising each right are set out in the legal basis cited:

Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to notification under Article 19 GDPR;
Right to data portability under Article 20 GDPR;
Right to withdraw consent under Article 7(3) GDPR;
Right to lodge a complaint under Article 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THAT PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Retention periods for personal data

The retention period for personal data depends on the relevant legal basis, the processing purpose and, where applicable, the relevant statutory retention period (for example, retention periods under commercial and tax law).

Where personal data are processed on the basis of express consent under Article 6(1)(a) GDPR, the data concerned are retained until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations under Article 6(1)(b) GDPR, the data are routinely deleted after those periods expire, provided they are no longer required to perform or initiate a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data are processed under Article 6(1)(f) GDPR, they are retained until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims.

Where personal data are processed for direct marketing under Article 6(1)(f) GDPR, they are retained until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated elsewhere in this policy concerning specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Last updated: 24.09.2026, 17:58:51

Name
E-Mail
Bestellnummer
Alternative E-Mail
Grund (freiwillig)
Zurückzugebende Artikel

Currency

Currency

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when you visit our website

3) Cookies

4) Contacting us

5) Comment function

6) Data processing when opening a customer account

7) Use of customer data for direct marketing

8) Data processing for order fulfilment

9) Web analytics services

10) Retargeting, remarketing and conversion tracking

11) Website features

12) Tools and other information

13) Rights of data subjects

14) Retention periods for personal data