Legal

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alexandra Kellhammer, Moebel Kolonie, Birnauer Str. 12, 80809 Munich, Germany, Tel.: +49 (0)89 - 351 18 20, Fax: +49 (0)89 - 35 121 32, E-Mail: verkauf@moebelkolonie.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: Christoph Seitenberger, Birnauer Str. 12, 80809 Munich, +49-89-3511820, christoph.seitenberger@moebelkolonie.com

2) Data Collection When Visiting Our Website

2.1 When you merely browse our website without registering or otherwise providing us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary to display the website to you:

The website visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you reached the page
Browser used
Operating system used
IP address used (where applicable: in anonymised form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

3.1 For hosting our website and presenting the page content, we use a provider that renders its services itself or through selected sub-contractors exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

3.2 Google Cloud CDN

We use a content delivery network provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. Data may also be transferred to: Google LLC, USA. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain features, we use cookies – small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"); others remain on your device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

Where individual cookies used by us also process personal data, the processing is carried out pursuant to Art. 6(1)(b) GDPR either to perform the contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can configure your browser to inform you about the setting of cookies and to decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact

5.1 Own Review Reminder

Solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we use your email address to send a one-time reminder to submit a review of our services after fulfilment of the contract. You may revoke your consent at any time by sending a message to the controller.

5.2 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (e.g. an order you have placed), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name pursuant to Art. 6(1)(b) GDPR to process and respond to your enquiry. On the same legal basis, we may ask you via WhatsApp to provide further details (order number, customer number, address or email address) in order to assign your enquiry to a specific transaction.

If you use our WhatsApp contact for general enquiries (e.g. about our range of services, availability or our website), we store and use the mobile phone number you use with WhatsApp and – if provided – your first and last name pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data is always used solely to respond to your enquiry via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have also contacted us via WhatsApp are stored.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, upon first use of the app on their device by accepting WhatsApp's terms of use, to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6(1)(a) GDPR. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits disclosure to third parties.

In the context of the processing operations mentioned above, data may be transferred to servers of Meta Platforms Inc. in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.3

When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your enquiry and only to the extent required for this purpose. The legal basis for the processing of this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that there are no statutory retention obligations to the contrary.

6) Use of Customer Data for Direct Marketing

6.1 Signing Up for Our E-Mail Newsletter

If you sign up for our e-mail newsletter, we will regularly send you information about our offers. Your e-mail address is the only mandatory information required to send the newsletter. Providing further data is voluntary and will be used to address you personally. For the newsletter dispatch we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking a verification link sent to the stated email address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when you sign up for the newsletter is used strictly for the stated purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this in ways that are permitted by law and about which we inform you in this statement.

6.2 Sending the E-Mail Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers by email for similar goods or services from our range to those already purchased. We do not need to obtain your separate consent for this pursuant to Section 7(3) of the German Act Against Unfair Competition (UWG). The data processing in this regard is based solely on our legitimate interest in personalised direct marketing pursuant to Art. 6(1)(f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send any emails.

You are entitled to object at any time with effect for the future to the use of your email address for the aforementioned advertising purpose by sending a notice to the controller named at the beginning. This will only incur transmission costs at basic rates. Once your objection has been received, the use of your email address for advertising purposes will be discontinued immediately.

6.3 Brevo

Our e-mail newsletters and other commercial e-mail communications are sent via the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

On the basis of our legitimate interest in effective and user-friendly e-mail marketing, we pass on the data provided by you when registering to this provider pursuant to Art. 6(1)(f) GDPR so that it can carry out the mail dispatch on our behalf.

We reserve the right, solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, to additionally conduct a statistical analysis of the success of mail campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated in this context, but not merged with other data records.

You may revoke your consent to mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits disclosure to third parties.

6.4 Product Availability Notification by E-Mail

For temporarily unavailable items, you can register to receive email product availability notifications. We will send you a one-time email message about the availability of the item you have selected. Your email address is the only mandatory information required to send this notification. Providing further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the stated email address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. We store the IP address registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when you register for our email notification service regarding product availability is used strictly for the stated purpose.

You can unsubscribe from the availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this in ways that are permitted by law and about which we inform you in this statement.

6.5 Advertising by Post

On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and – to the extent we have received these additional details from you in the context of the contractual relationship – your title, academic degree, year of birth and professional, industry or business designation pursuant to Art. 6(1)(f) GDPR, and to use these for sending interesting offers and information about our products by post. You may object to the storage and use of your data for this purpose at any time.

7) Data Processing for Order Fulfilment

7.1 Transmission of Image Files for Order Processing by E-Mail

On our website we offer customers the possibility of commissioning the personalisation of products by transmitting image files by email. The submitted image motif is used as a template for personalising the chosen product.

Via the email address provided on the website, the customer can transmit one or more image files from the memory of the device used to us. We then collect, store and use the files transmitted in this way exclusively for the creation of the personalised product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the creation and processing of the order, you will be explicitly informed of this in the following paragraphs. No disclosure beyond this takes place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just described are carried out exclusively for the purpose of processing your online order pursuant to Art. 6(1)(b) GDPR.

After the order has been fully processed, the transmitted image files will be automatically and completely deleted.

7.2 Transmission of Image Files for Order Processing via Messaging Function

Where the customer has the option of commissioning the personalisation of products by transmitting image files via the messaging function, the submitted image motif is used as a template for personalising the chosen product.

Via the messaging function available, the customer can transmit one or more image files from the memory of the device used to us. We then collect, store and use the files transmitted in this way exclusively for the creation of the personalised product in accordance with the respective description of our services. If the transmitted image files are passed on to special service providers for the creation and processing of the order, you will be explicitly informed of this in the following paragraphs. No disclosure beyond this takes place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just described are carried out exclusively for the purpose of processing your online order pursuant to Art. 6(1)(b) GDPR.

After the order has been fully processed, the transmitted image files will be automatically and completely deleted.

7.3

To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution pursuant to Art. 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we will process the contact details transmitted by you when placing the order in order to inform you personally as part of our statutory duty to provide information pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the stated purpose of notifications about updates owed by us and are processed by us for this purpose only to the extent required for the respective notification.

For the fulfilment of your order, we also work with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

7.4 Transfer of Personal Data to Shipping Service Providers

Deutsche Post

We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We share your email address and/or telephone number with the carrier pursuant to Art. 6(1)(a) GDPR prior to delivery for the purpose of arranging a delivery date or providing delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, we only pass on the recipient's name and delivery address to the carrier for delivery purposes pursuant to Art. 6(1)(b) GDPR. The disclosure is made only to the extent necessary for the delivery of the goods. In that case, prior arrangement of a delivery date with the carrier or delivery notification is not possible. Consent may be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the carrier.

DHL

We use the following provider as transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

DHL Freight

We use the following provider as transport service provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany

DPD

We use the following provider as transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

DPD Austria

We use the following provider as transport service provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria

Emons Services

We use the following provider as transport service provider: Emons Services GmbH, Haus 65 Leskan Lofts, Waltherstraße 49 – 51, 51069 Cologne, Germany

FedEx

We use the following provider as transport service provider: FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, Germany

GEL Express

We use the following provider as transport service provider: GEL Express Logistik GmbH, Jakob-Kaiser-Str. 3, 47877 Willich, Germany

GLS

We use the following provider as transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany

Österreichische Post

We use the following provider as transport service provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

Pamyra

We use the following provider as transport service provider: Pamyra GmbH, Lützner Str. 91, Haus K, 04177 Leipzig, Germany

Rhenus Logistics

We use the following provider as transport service provider: Rhenus SE & Co. KG, Rhenus-Platz 1, 59439 Holzwickede, Germany

Schenker

We use the following provider as transport service provider: Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main, Germany

Simplelogistik

We use the following provider as transport service provider: Simplelogistik GmbH, Friedrich-List-Str. 26, 71636 Ludwigsburg, Germany

UPS

We use the following provider as transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

8) Web Analytics Services

etracker

On this website, data is collected and stored using technologies provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com). Pseudonymised usage profiles may be created and evaluated from this data for the same purpose.

This website uses etracker exclusively without the use of cookies, which means that etracker never sets cookies on your device.

According to information from etracker, only website data from web servers is used, as well as information that the web browser transmits to the web server when retrieving web pages. This information is transmitted with each individual page request. However, no information is read from the memory of the user's device, and no information is stored on that device.

If personal data is also processed in the course of the operations described, this is done on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes pursuant to Art. 6(1)(f) GDPR.

You can permanently object to the collection and storage of your visitor data for the future by using the opt-out function set up for this purpose on our website.

Further information about etracker's privacy policy can be found at the following address: https://www.etracker.com/de/datenschutz.html

9) Website Features

9.1 Vimeo

This website uses plugins for displaying and playing videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In the process, certain information, including your IP address, is transmitted to the provider.

When the playback of embedded videos is started via the plugin, the provider also sets cookies to collect information about user behaviour, create playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not wish this assignment to your account, you must log out before pressing the play button.

All the aforementioned processing operations, in particular the setting of cookies for reading information on the device used, only take place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke the consent given at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

9.2 YouTube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest when the video starts playing, in order to load the content. In the process, certain information, including your IP address, is transmitted to the provider.

When the playback of embedded videos is started via the plugin, the provider also sets cookies to collect information about user behaviour, create playback statistics and prevent abusive behaviour.

9.3 Google Maps

This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive maps in order to present geographical information visually. Using this service, our location is shown to you and any journey to us is made easier.

When you access the subpages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is already transmitted to and stored on Google's servers; this may also involve transmission to the servers of Google LLC. in the USA. This takes place regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

Collection, storage and evaluation are carried out pursuant to Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalised advertising, conducting market research and/or designing Google websites in a way that meets requirements. You have the right to object to the creation of these user profiles; to exercise this right you must contact Google. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps, and therefore also the map display on this website, cannot then be used.

To the extent required by law, we have obtained your consent for the processing of your data described above pursuant to Art. 6(1)(a) GDPR. You may revoke the consent given at any time with effect for the future. To exercise your revocation, please follow the option for lodging an objection described above.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, the respective conditions for exercising which are set out in the cited legal basis:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT TO OBJECT

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS PURSUANT TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WHERE YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you revoke your consent.

Where statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data is routinely deleted after the expiry of the retention periods, provided it is no longer required for the performance of or preparation for a contract and/or there is no longer any legitimate interest on our part in continuing to store it.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless the other information in this statement about specific processing situations provides otherwise, stored personal data will otherwise be deleted when it is no longer required for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was prepared by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de) · As of: 18 August 2026