Privacy policy

The controller responsible for data processing is:

Kathrin Schröder
Swisttalstr. 15
50968 Cologne
Germany

mail@miom-studio.de

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which contains information such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves our legitimate interests, which, in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR, override any conflicting interests, in ensuring the correct presentation of our services. All access data is deleted no later than seven days after the end of your visit to the website.

Third-party hosting services
As part of processing on our behalf, a third-party provider hosts and displays our website. All data collected through the use of this website or via forms provided in the online shop, as described below, is processed on their servers. Processing on other servers only takes place within the scope described here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data Collection and Use for Contract Processing, Contacting Us, and Opening a Customer Account

We collect personal data when you voluntarily provide it to us in connection with your order or when contacting us (e.g., via contact form or email). Required fields are marked as such because we absolutely need this data for contract processing or to handle your inquiry, and you cannot submit the order or contact request without providing it. The specific data collected is evident from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR for contract processing and handling your inquiries.

If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account.

After complete fulfillment of the contract or deletion of your customer account, your data will be restricted from further processing and deleted after the expiry of the statutory retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement. You can delete your customer account at any time by sending a message to the contact address provided below.

3. Data Transfer

For the purpose of fulfilling the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we transfer your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select during the ordering process, we transfer the payment data collected for this purpose to the bank commissioned with processing the payment and, if applicable, to payment service providers commissioned by us, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection policy of the respective payment service provider applies in this respect.

4. Email Newsletter

Email Advertising with Newsletter Subscription
When you subscribe to our newsletter, we use the data required for this purpose or data you have separately provided to send you our email newsletter regularly based on your consent pursuant to Art. 6 Para. 1 Sentence 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact details provided below or by using the unsubscribe link in the newsletter. After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.

The newsletter is sent by a service provider who processes data on our behalf, and to whom we transfer your email address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

5. Cookies and Web Analytics

To make your visit to our website more attractive and to enable the use of certain functions, to display relevant products, or for market research, we use cookies on various pages. This serves our legitimate interest in an optimized presentation of our offerings, which outweighs your interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find information about the storage duration in the overview in your web browser's cookie settings. You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:

If you do not accept cookies, the functionality of our website may be limited.

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes within the framework of Google Analytics (see below). This cookie enables your browser to be recognized when you visit other websites. The information automatically generated by the cookie about your visit to this website is generally transmitted to and stored on a Google server in the USA. Before transmission, the IP address is shortened within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization on this website. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The data collected in this context will be deleted once the purpose for which it was collected has been fulfilled and we have ceased using Google DoubleClick.

Google DoubleClick is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can withdraw your consent at any time with effect for the future by disabling the DoubleClick cookie via this link. You can also learn more about cookies and adjust your settings at the Digital Advertising Alliance. Finally, you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually or to block cookies in certain cases or entirely. Please note that disabling cookies may limit the functionality of our website.

Use of Google Analytics for web analytics
If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, this website uses Google Analytics for the purpose of website analysis. This web analytics service is offered by Google Ireland Limited, a company incorporated and operating under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Google Analytics uses methods that enable analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is generally transmitted to and stored on a Google server in the USA. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will generally not be merged with other Google data. Once the purpose for which Google Analytics was used has ceased and we have ended its use, the data collected in this context will be deleted.

You can revoke your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de This will prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google.

6. Social Media

Our online presence on Instagram, Pinterest, and YouTube
We maintain publicly accessible profiles on Instagram, Pinterest, and YouTube to communicate with customers, prospects, and users, and to provide information about our products and services.

When you visit our social media pages, personal data is processed by the respective platform operators. This includes, in particular, your IP address, device information, browser data, usage behavior, and interactions with our content. This processing is regularly carried out using cookies and similar technologies.

Please note that personal data may also be transferred to third countries, especially the USA. If the respective provider is certified under the EU-U.S. Data Privacy Framework (DPF), the transfer is based on the European Commission's adequacy decision.

Further information on the EU-U.S. Data Privacy Framework can be found at: https://www.dataprivacyframework.gov/

Instagram (Meta) 
Our Instagram page is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

For more information on the processing of personal data, please see:

Privacy Policy: https://privacycenter.instagram.com/policy/ 
Account Settings: https://accountscenter.instagram.com/ 
Ad Preferences: https://accountscenter.facebook.com/ad_preferences/

Pinterest 
Our Pinterest presence is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

For more information, please see:

 Personalization and Ad Preferences: https://www.pinterest.com/settings/privacy/

YouTube (Google) 
Our YouTube channel is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information can be found here:

Data & Privacy: https://myaccount.google.com/data-and-privacy Cross-Platform Opt-Out Options

You can also manage or deactivate interest-based advertising via the following services:

European Interactive Digital Advertising Alliance (EDAA): 
https://www.youronlinechoices.com/de/

Network Advertising Initiative (NAI): 
https://optout.networkadvertising.org/

Digital Advertising Alliance (DAA):
https://optout.aboutads.info/

Legal basis
Processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in effective information and communication with users. If you have given your consent to the respective platform operator, processing is based on Art. 6 para. 1 lit. a GDPR.

7. Sending Review Reminders via Email

If you have given us your explicit consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR during or after your order, we will use your email address to remind you to submit a review of your order via our review system. You can revoke this consent at any time by contacting us using the contact details provided below.

8. Contact Options and Your Rights

As a data subject, you have the following rights: 

pursuant to Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
pursuant to Article 16 GDPR, the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us;
pursuant to Article 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise, or defense of legal claims;
pursuant to Article 18 GDPR, the right to request the restriction of processing of your personal data where:
the accuracy of the data is contested by you;
the processing is unlawful, but you oppose its erasure;
We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR; you have the right, pursuant to Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller; you have the right, pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your habitual residence, your place of work, or our company's registered office.
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, rectification, restriction of processing, or erasure of data, or to withdraw your consent or object to a specific use of your data, please contact us directly using the contact details in our legal notice.

Right to object
To the extent that we process personal data as explained above to protect our overriding legitimate interests within the framework of a balancing of interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you only have a right to object if there are grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

Cloudflare

Function 
We use the Cloudflare service, provided by Cloudflare Inc., to optimize the security and loading speed of our website. Cloudflare acts as a Content Delivery Network (CDN) and protects our site from attacks. In this process, data, especially IP addresses, is transferred to Cloudflare servers. This data transfer generally takes place in the USA. Further information can be found in Cloudflare's privacy policy.

Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate Interest)
Storage period: The data is deleted as soon as it is no longer required or you object to the data processing.

Google Analytics
Measurement Our website uses Google Analytics, a web analytics service provided by Google LLC, to evaluate and optimize the use of our site. Google Analytics uses cookies to analyze your interactions on the website. The information collected is generally transmitted to a Google server in the USA. You can find more information in Google's Privacy Policy.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent)
Storage period: The data will be deleted as soon as it is no longer required or you withdraw your consent.

PayPal

Description and scope of data processing: We also offer payment via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose to pay via PayPal, your payment data, such as name, address, email address, transaction data, and bank or credit card details, will be forwarded to PayPal.

Purpose of processing: The data is processed for order fulfillment and payment processing via PayPal.

Legal basis: Data processing is based on Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest) in order to offer reliable and secure payment processing.

Storage period: Personal data is stored only as long as it is necessary to achieve the purpose of processing and as long as statutory retention periods apply.

Further information: Detailed information on data protection at PayPal can be found in PayPal's privacy policy.

Privacy policy created with the Trusted Shops Legal Text Generator in cooperation with Wilde Beuger Solmecke Attorneys at Law.