📄 Privacy policy
1.Controller
The controller for data processing on this website is:
Wollmia OÜ
Tartu mnt 67/1-13b
10115 Tallinn
Estonia
Phone: +49 152 29290871
Email: [email protected]
Represented by: Ilker Cetiner
2.Data Protection Officer
We have not appointed a Data Protection Officer. For a company of our size, this is not required by law. If you have any questions about data protection, please contact us directly at [email protected].
3.Hosting
This website is hosted by:
Hostinger International Ltd.
– Server location: Germany
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of the website).
4.General data processing when visiting the website
When simply visiting our website, our server temporarily stores the following data:
- IP address
- Date and time of access
- Browser type and version
- Page visited
Legal basis: Art. 6(1)(f) GDPR (technically necessary processing).
5.Data processing for orders (contract fulfillment)
When placing an order, we collect the following data:
- Mandatory information: Last name, first name, address, email, phone number
- Voluntary information: different shipping address
Payment methods:PayPal, credit card, Klarna, bank transfer, iDEAL, Apple Pay, Google Pay, Amazon Pay
Legal basis: Art. 6(1)(b) GDPR (contract performance)
The data is passed on to the following service providers:
- PayPal (Europe) S.à.r.l. et Cie, S.C.A.
- Klarna Bank AB (publ)
- Amazon Payments Europe S.C.A.
In the case of bank transfer, the data is transmitted to the relevant credit institution.
6.Shipping carrier (DHL)
To fulfill the contract, we pass on your address data to:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Legal basis: Art. 6(1)(b) GDPR
7.Email communication (order & shipping confirmation)
After ordering, you will receive:
- a shipping confirmation with tracking link
- no separate order confirmation (the contract is concluded through the payment process)
Legal basis: Art. 6(1)(b) GDPR
8.WhatsApp communication
You can contact us via WhatsApp (phone number: +49 152 29290871).Provider: WhatsApp Ireland Limited, Ireland
We process your phone number, your name (if applicable), and the message content.
Legal basis: Art. 6(1)(b) GDPR (contract negotiation) or (f) (legitimate interest in quick communication).
WhatsApp Privacy Policy
9.Payment processing
We use the following payment service providers:
- PayPal – PayPal (Europe) S.à.r.l. et Cie, S.C.A.
- Klarna – Klarna Bank AB (publ)
- Amazon Pay – Amazon Payments Europe S.C.A.
- Apple Pay / Google Pay – via Stripe Payments Europe Ltd. (Ireland)
Legal basis: Art. 6(1)(b) GDPR
10. Google Analytics
With your consent, we use Google Analytics (Google Ireland Limited, Ireland).Data may be transferred to Google LLC (USA). Basis: EU Standard Contractual Clauses (SCC).
Data collected: anonymized IP, page views, time on site, device type.
Purpose: audience measurement, website optimization.
Revocable at any time via cookie settings.
11.Marketing cookies (Meta, TikTok, Pinterest)
With your explicit consent, we use:
- Meta Pixel (Meta Platforms Ireland Ltd.) – Advertising on Facebook/Instagram
- TikTok Pixel (TikTok Technology Ltd.)
- Pinterest Tag (Pinterest Europe Ltd.)
Data may be transferred to the USA (SCC).
Purpose: personalized advertising, conversion tracking.
Revocable at any time via cookie settings.
12. Google Ads
We use Google Ads (Google Ireland Limited) with conversion tracking. Data may be transferred to Google LLC (USA) (SCC).
Purpose: measurement of advertising campaign success.
13.Newsletter
With your explicit consent (double opt-in), we regularly send a newsletter with product news and offers.
Unsubscribe at any time via the link in the newsletter or by email to [email protected].
Legal basis: Art. 6(1)(a) GDPR
14.reCAPTCHA (Bot protection)
We use Google reCAPTCHA (Google Ireland Limited) to protect against abusive automated entries.
Data may be transferred to Google LLC (USA) (SCC).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security).
15. Login via Facebook or Google (Social Login)
You can optionally log in to or register with our shop using your Facebook or Google account. Alternatively, you can create a customer account with a username and password.
Provider:
- Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland
- Google: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Only when you click the respective button will a window from the provider open and data (e.g. your IP address) be transmitted to the provider. Simply visiting our website does not establish any connection to Facebook or Google through the login function.
After you confirm in the provider’s window, we receive your name and email address and, in the case of Facebook, your Facebook User ID. We use this data exclusively to create and manage your customer account. No other data (e.g. friends lists or date of birth) is requested.
Legal basis: Art. 6 (1) (b) GDPR (customer account or steps prior to entering into a contract) and Art. 6 (1) (a) GDPR (your decision to use login via the respective provider). Data may be transferred to the USA; see Section 19.
Data deletion
You can request the deletion of your customer account and your data at any time. To do so, send us an email to [email protected] with the subject line “Data deletion”, using the email address you used to register with us. We will delete your account and the associated personal data within 30 days and confirm the deletion by email. Data that we are legally required to retain (e.g. invoices) is excluded.
You can also revoke our app’s access at any time: on Facebook under “Settings > Apps and Websites” and on Google under “Account > Security > Third-party access”.
16. Plugins & Tools (data protection relevant)
The following plugins may process personal data:
| Plugin | Purpose |
|---|---|
| Contact Form 7 | Contact forms (data: name, email, message) |
| LiteSpeed Cache | Site optimization, temporary storage (no tracking) |
| TI WooCommerce Wishlist | Wishlist (anonymous key, 30 days) |
| Rank Math SEO | SEO optimization (no personal data) |
| TranslatePress | Translation (no data sharing) |
| PDF Invoices & Packing Slips | Invoice creation (order processing) |
| Perfmatters | Performance optimization (no personal data) |
| Popup Login (custom plugin) | Login and registration, optionally via Facebook or Google (data: name, email address and, where applicable, Facebook User ID) |
17. Your Rights (Data Subject Rights)
At any time, you have the right to:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR); see also Data deletion
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
Contact for your rights:
Email: [email protected]
Mail: Wollmia OÜ, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
18. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).Competent authority for Estonia:Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)Website: https://www.aki.ee
19. Data transfers to third countries (USA)
Data is transferred to the following companies in the USA:
- Google LLC (Analytics, Ads, reCAPTCHA, login via Google)
- Meta Platforms Inc. (Facebook/Instagram Pixel, login via Facebook)
- TikTok Inc.
- Pinterest Inc.
Basis: EU Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.
20. Data Security
We use SSL encryption (HTTPS) and technical measures to protect your data from unauthorized access.
21. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy in the event of changes in the legal situation or our services. The current version can always be found on this page.
