top of page

Privacy Policy

1. General Information

 

We take the protection of your personal data very seriously. This Privacy Policy explains which personal data we collect when you visit our online shop or place an order, how we use it and what rights you have. We process your data in accordance with the EU General Data Protection Regulation (GDPR) and the applicable German data protection laws.

 

 

2. Controller

 

The controller responsible for data processing on this website is:

 

EvMa Creative UG (haftungsbeschränkt)

Goethestraße 21

06749 Bitterfeld-Wolfen

Germany

 

Managing Director: Yuliia Voitsikhovska

Email: [your email address]

 

We are not legally required to appoint a data protection officer. If you have any questions about data protection, please contact us at the email address above.

 

 

3. Hosting and Server Log Files

 

Our online shop is hosted by [shop platform, for example Shopify or Wix]. When you visit our website, the hosting provider automatically collects information that your browser transmits, such as your IP address, browser type and version, operating system, referring website, date and time of access and the pages visited.

 

This data is required to display the website correctly and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error free and secure operation of our shop. We have concluded a data processing agreement with our hosting provider.

 

 

4. Customer Account and Orders

 

When you place an order, we collect the data required to process the contract, in particular your name, delivery and billing address, email address, phone number (if provided), the products ordered and payment information. If you create a customer account, we also store your login details and order history.

 

We use this data to process your order, deliver your goods, handle payment and communicate with you about your order. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

 

Due to commercial and tax law retention obligations, we store order and invoice data for up to 10 years. After that, the data is deleted unless you have consented to further storage.

 

 

5. Shipping Service Providers

 

To deliver your order, we pass on your name, delivery address and, where necessary for delivery notifications, your email address or phone number to the shipping company we commission. As we ship from warehouses in Germany and France to the Netherlands, these may be carriers operating in those countries. The data is passed on only to the extent necessary for delivery. The legal basis is Art. 6 (1) (b) GDPR.

 

 

6. Payment Service Providers

 

Payments are processed through external payment service providers. Depending on the payment method you choose at checkout, we pass on the payment data required for this purpose (for example name, address, order amount and payment details) to the respective provider. These providers may carry out their own credit checks or identity verification and are responsible for the data they process under their own privacy policies. The legal basis is Art. 6 (1) (b) GDPR and, where applicable, Art. 6 (1) (f) GDPR.

 

 

7. Contacting Us

 

If you contact us by email or through a contact form, we store the data you provide (for example your name, email address and message) in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete this data once your request has been fully answered, unless statutory retention obligations apply.

 

 

8. Newsletter

 

If you subscribe to our newsletter, we use your email address to send you information about new products, offers and news from our shop. Registration takes place via the double opt in procedure, meaning you will receive an email asking you to confirm your subscription. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can unsubscribe at any time using the link in every newsletter or by sending us an email.

 

 

9. Cookies

 

Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are technically necessary for the shop to work, for example to save the contents of your shopping cart. The legal basis for these is Art. 6 (1) (f) GDPR and § 25 (2) TDDDG.

 

All other cookies, for example for analytics or marketing purposes, are only set if you have given your consent via our cookie banner (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). You can withdraw or change your consent at any time through the cookie settings on our website.

 

 

10. Analytics and Marketing Tools

 

With your consent, we may use analytics and marketing tools (for example Google Analytics or the Meta Pixel) to understand how visitors use our shop and to show relevant advertising. These tools may transfer data to the USA. Where this happens, the transfer is based on the EU US Data Privacy Framework or on EU standard contractual clauses. You can withdraw your consent at any time through the cookie settings.

 

 

11. Your Rights

 

You have the following rights regarding your personal data:

 

The right of access (Art. 15 GDPR)

The right to rectification (Art. 16 GDPR)

The right to erasure (Art. 17 GDPR)

The right to restriction of processing (Art. 18 GDPR)

The right to data portability (Art. 20 GDPR)

The right to object to processing (Art. 21 GDPR)

The right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR)

 

To exercise your rights, simply send us an email at [your email address].

 

 

12. Right to Lodge a Complaint

 

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

 

Landesbeauftragter für den Datenschutz Sachsen-Anhalt

Otto-von-Guericke-Straße 34a

39104 Magdeburg

Germany

 

As a customer in the Netherlands, you can also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

 

 

13. Data Security

 

We use SSL/TLS encryption to protect the transmission of your data. You can recognise an encrypted connection by the lock symbol in your browser's address bar.

 

 

14. Changes to this Privacy Policy

 

We may update this Privacy Policy from time to time to reflect legal changes or changes to our services. The current version is always available on this page.

 

 

Status: October 2026

bottom of page