Privacy Policy

Privacy Policy

Privacy Policy

1. Controller

The controller for data processing on this website is:

Balthasar Becker
Buchwaldstr. 16
35460 Staufenberg
Germany
Email: contact@wondaha.de
Phone: 015120796448

2. General information on data processing

We process personal data of visitors to this website only to the extent necessary to provide a functional website and our content and services.

The processing of personal data regularly takes place only with the consent of the data subject or if the processing is permitted by legal regulations.

3. Legal basis for processing

Insofar as we obtain consent for processing personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract or for the implementation of pre-contractual measures, Art. 6 para. 1 lit. b GDPR serves as the legal basis.

Insofar as the processing of personal data is necessary for compliance with a legal obligation, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis. The GDPR requires transparent information about controllers, purposes, legal bases and data subject rights. -System

This website is provided via Shopify. The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

When you visit our website, Shopify processes personal data to provide the website, ensure security, and process orders.

The processing is based on Art. 6 para. 1 lit. b GDPR, insofar as it is necessary for contract initiation or performance, and on Art. 6 para. 1 lit. f GDPR due to our legitimate interest in providing a secure and efficient online offering.

5. Access data and server log files

When you access this website, information is automatically recorded. This includes, for example:

  • IP address

  • Date and time of access

  • Page accessed

  • Referrer URL

  • Browser and operating system used

This data is processed to ensure the stability and security of the website on the basis of Art. 6 para. 1 lit. f GDPR.

6. Contacting us

If you contact us by e-mail or via a contact form, the data you provide will be processed for the purpose of handling your request.

The processing is based on Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to a contract or pre-contractual measures, or on Art. 6 para. 1 lit. f GDPR for other inquiries.

7. Orders in the online shop

If you order in our online shop, we process your personal data to process the order. This includes in particular:

  • First and last name

  • Billing and shipping address

  • Email address

  • Phone number, if required

  • Payment data

  • Ordered products

  • Order history

Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

Insofar as commercial and tax law retention obligations exist, processing also takes place on the basis of Art. 6 para. 1 lit. c GDPR.

8. Payment providers

Depending on the selected payment method, we pass on payment data to the payment service provider used, insofar as this is necessary for payment processing.

Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

Only include what you actually use:

PayPal
When paying via PayPal, payment processing is carried out by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.

Klarna
When paying via Klarna, payment processing is carried out by Klarna Bank AB, Sweden.

Shopify Payments
When paying via Shopify Payments, payment processing is carried out by the payment service providers used by Shopify.

9. Shipping service providers

To process and deliver orders, we pass on the necessary data to the commissioned shipping company.

Processing takes place on the basis of Art. 6 para. 1 lit. b GDPR.

Only include what you use:

  • DHL

  • UPS

  • DPD

  • Hermes

10. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device.

Some cookies are technically necessary to provide the website and the ordering process. These cookies are used on the basis of Art. 6 para. 1 lit. f GDPR or, if necessary, on the basis of the relevant legal provisions for absolutely necessary technologies.

Insofar as technically unnecessary cookies or similar technologies are used, this is only done on the basis of your consent.

11. Analytics and marketing tools

Insofar as we use analysis or marketing tools, this is only done after your express consent.

Only insert if active:

  • Google Analytics

  • Google Ads Conversion Tracking

  • Meta Pixel

  • TikTok Pixel

  • Pinterest Tag

  • Klaviyo / Newsletter Tracking

12. Newsletter

If you subscribe to our newsletter, we process your e-mail address for sending the newsletter.

Processing takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future.

13. Storage period

We store personal data only as long as necessary for the respective purposes or as required by statutory retention periods.

14. Data subject rights

Under the GDPR, you have the following rights in particular:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to data portability

  • Right to object

  • Right to withdraw consent with future effect

  • Right to lodge a complaint with a data protection supervisory authority. These data subject rights arise directly from the GDPR. with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

16. Obligation to provide data

The provision of personal data may be required for the conclusion of a contract. Without this data, an order may not be able to be completed or processed.