Privacy Policy
We take the protection of your personal data seriously. This policy explains what data we process when you visit this online shop and place an order, on what legal basis, and what rights you have.
Controller
Angelika Ulrich (MALUBART), Poschingerstraße 12, 81679 Munich, Germany. Email: maluba@maluba.de. The controller decides on the purposes and means of the processing of personal data.
Hosting and server log files
This website is hosted by ALL-INKL.COM — Neue Medien Münnich (Hauptstraße 68, 02742 Friedersdorf, Germany) acting as our processor. When you access the site, the server automatically stores log data (IP address, date and time, requested file, referrer, browser and operating system) for security and stable operation. The legal basis is our legitimate interest in the secure, error-free provision of the website (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
Orders in the online shop
When you place an order, we process the data you enter (name, billing and shipping address, email, order details) in order to conclude and perform the purchase contract (Art. 6(1)(b) GDPR). We retain order and invoice data for the periods required by commercial and tax law (up to 10 years, § 257 HGB, § 147 AO); the legal basis for this continued storage is Art. 6(1)(c) GDPR.
Payment via PayPal
Payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. When you pay by PayPal, the data required for the payment is transmitted to PayPal in order to perform the contract (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in a reliable payment process (Art. 6(1)(f) GDPR). PayPal may transfer data to third countries including the USA. Details: PayPal Privacy Statement.
Shipping
To deliver your order, we pass your name and delivery address to the shipping service provider commissioned with the delivery. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).
Cookies
This shop uses technically necessary cookies that are required for the shopping cart, the checkout and the session to work. These do not require consent (§ 25(2) TDDDG; Art. 6(1)(f) GDPR). Cookies or comparable technologies that are not strictly necessary — such as the Pinterest integration below — are only used with your consent (§ 25(1) TDDDG), which you can give or refuse and withdraw at any time.
This website integrates functions of the social network Pinterest, operated for users in the EEA by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When the Pinterest integration loads, your browser establishes a direct connection to Pinterest’s servers and transmits log data (which may include your IP address, the pages visited, browser type and settings, and the date and time of access). Data may be transferred to the USA. This processing takes place only on the basis of your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); you can withdraw your consent at any time with effect for the future. Details: Pinterest Privacy Policy.
Contact by email
If you contact us by email, we process the data you provide in order to handle your request. The legal basis is our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) or, where your request is aimed at concluding a contract, Art. 6(1)(b) GDPR. We delete this data once it is no longer required, unless statutory retention periods prevent deletion.
Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise your rights, please contact us using the details above.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
SSL/TLS encryption
For security, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar and the lock icon.
Changes to this policy
We may update this privacy policy so that it always complies with current legal requirements or to reflect changes to our services.