Privacy Policy
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Prosatz Communication GmbH & Co. KG
Rheinstr. 20
41836 Hückelhoven
Germany
Phone: +49 (0)2433 93992-0
Email: info@prosatz.de
WANDINI is a brand of Prosatz Communication GmbH & Co. KG.
2. General Information
The protection of your personal data is important to us. We process your personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant statutory provisions.
This Privacy Policy explains which personal data is processed when you visit our website and use our online store, the purposes for which it is processed, and the rights available to you.
3. Scope of Data Processing
This Privacy Policy applies to all offers and services available at www.wandini.shop.
In particular, it covers the processing of personal data in connection with:
visiting our website
using our online store
orders
customer accounts
contact requests
newsletters (if offered)
individual product configurations
the purchase of wall murals and other printed products
4. Legal Bases for Processing
Depending on the type of processing, personal data is processed on the basis of:
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(b) GDPR (contract or pre-contractual measures)
Art. 6(1)(c) GDPR (legal obligation)
Art. 6(1)(f) GDPR (legitimate interests)
5. Hosting and E-Commerce Platform
Our online store is operated using the Shopify e-commerce platform.
The provider is:
Shopify International Ltd.
2nd Floor
1–2 Victoria Buildings
Haddington Road
Dublin 4
D04 XN32
Ireland
When you visit our website, Shopify processes various technical data required for the operation of the online store. This may include, in particular:
IP address
browser type
operating system
device information
date and time of access
referrer URL
pages visited
order information
customer account data
The processing is carried out to provide a secure and functional online store and to process orders.
Further information is available at:
https://www.shopify.com/legal/privacy
6. Server Log Files
When you visit our website, information is automatically collected and stored in so-called server log files.
This includes, in particular:
IP address
browser type
operating system
date and time
pages visited
referrer
access status
amount of data transferred
This data is used exclusively to ensure trouble-free operation, system security, and error analysis.
The legal basis is Art. 6(1)(f) GDPR.
7. SSL/TLS Encryption
To protect confidential content and personal data, this website uses SSL/TLS encryption in accordance with current technological standards.
This ensures that all data transmitted between your browser and our server is encrypted.
8. Contacting Us
If you contact us via a contact form, email, or other means, we process the personal data you provide solely for the purpose of handling your request.
Depending on your request, this may include:
name
email address
telephone number
order number
content of your message
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).
The data will be deleted as soon as it is no longer required to process your request and provided that no statutory retention obligations prevent its deletion.
9. Customer Account
You have the option of creating a customer account on our website. In doing so, we process the personal data you provide, including in particular:
first and last name
billing and delivery address
email address
telephone number (optional)
password (stored in encrypted form)
order history
Your customer account allows you, among other things, to view previous orders, manage your personal data, and simplify the ordering process.
The processing is carried out on the basis of Art. 6(1)(b) GDPR.
You may request deletion of your customer account at any time. Statutory retention obligations remain unaffected.
10. Orders and Contract Processing
To process your order, we process the personal data required to enter into and perform the contract.
This includes, in particular:
first and last name
billing address
delivery address
email address
telephone number
payment information
order data
product configurations
communication history
The processing is carried out exclusively for:
processing your order
producing your products
processing payments
delivery
customer support
compliance with statutory documentation obligations
The legal basis is Art. 6(1)(b) GDPR.
After the expiry of statutory retention periods, personal data will be deleted unless legal or contractual reasons prevent its deletion.
11. Individually Configured Printed Products
WANDINI offers individually configurable printed products, in particular wall murals, as well as other customizable printed products that may be offered in the future, such as posters or similar products.
As part of the ordering process, the following additional data may be processed:
entered dimensions
material selection
product variants
individual configurations
uploaded files (if offered)
order notes
production data
This data is processed exclusively to the extent necessary for the production and delivery of the ordered products.
The processing is carried out in accordance with Art. 6(1)(b) GDPR.
Production-related data may be shared with production and shipping partners where necessary for the performance of the contract.
12. Payment Processing
We work with external payment service providers to process payments.
Depending on the selected payment method, the necessary payment and order data is transmitted to the respective payment service provider.
This may include, in particular:
name
billing address
delivery address
email address
order value
payment information
order number
The processing is carried out exclusively for payment processing in accordance with Art. 6(1)(b) GDPR.
Depending on the payment methods offered, the following payment service providers may be used, among others:
Shopify Payments
PayPal
Klarna
Apple Pay
Google Pay
Shop Pay
other payment methods offered during checkout
The respective payment service providers' own privacy policies apply to their processing of personal data.
13. Shipping Providers
To deliver your order, we share the personal data required for delivery with the respective shipping provider.
This includes, in particular:
name
delivery address
email address (where required for shipment notifications)
telephone number (where required for delivery)
The processing is carried out exclusively for the purpose of performing the contract in accordance with Art. 6(1)(b) GDPR.
Different shipping providers may be used depending on the selected shipping method.
14. Communication Related to Orders
To process your order or service requests, we may contact you by:
email
telephone
SMS
or other appropriate means of communication
This applies in particular to:
order confirmations
shipping information
questions regarding your order
complaints
returns
customer service
The legal basis is Art. 6(1)(b) GDPR.
15. Storage of Order Data
Order and invoice data is stored in accordance with statutory commercial and tax retention obligations.
After these periods have expired, personal data will be deleted unless it is still required for contract processing or for the establishment, exercise, or defence of legal claims.
16. Disclosure of Personal Data
Personal data is disclosed only where this:
is necessary for the performance of a contract,
is required by law,
is based on consent,
or is based on a legitimate interest pursuant to Art. 6(1)(f) GDPR.
Recipients may include, in particular:
payment service providers
shipping providers
hosting providers
IT service providers
production and printing service providers
tax advisors
public authorities where required by law
Your personal data will not be disclosed beyond these purposes.
17. Cookies
Our website uses cookies and comparable technologies. Cookies are small text files stored on your device that contain certain information.
We use cookies to:
ensure the operation of our online store,
provide the shopping cart,
enable checkout,
store user preferences,
ensure the security of our website,
perform statistical analyses (where you have given your consent),
carry out marketing activities (where you have given your consent).
Depending on their function, these may include:
strictly necessary cookies
functional cookies
analytics cookies
marketing cookies
18. Cookie Consent (Consent Management)
When you first visit our website, you will be asked via a cookie banner to consent to the use of cookies that are not technically necessary.
You may change or withdraw your consent at any time with effect for the future. The settings can be accessed again using the relevant link in the website footer.
Legal basis:
Art. 6(1)(a) GDPR (consent)
Section 25(1) TDDDG
Strictly necessary cookies are used on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and Section 25(2) TDDDG.
19. Google Fonts
Our website may use Google Fonts to ensure the consistent display of fonts.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When fonts are loaded, your IP address may be transmitted to Google.
If Google Fonts are hosted locally on our server, no connection to Google's servers is established.
Further information:
https://policies.google.com/privacy
20. Adobe Fonts
Adobe Fonts may be used to ensure the consistent display of our website.
The provider is:
Adobe Systems Software Ireland Limited
4–6 Riverwalk
Citywest Business Campus
Dublin 24
Ireland
When you access a page using Adobe Fonts, a connection to Adobe servers is established.
The following data may be processed in particular:
IP address
browser information
operating system
time of page access
Further information:
21. Contact Form
If you use our contact form, we process the data you enter exclusively for the purpose of handling your request.
This includes, in particular:
name
email address
telephone number (optional)
subject
message
The processing is carried out pursuant to Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
22. Newsletter
If you subscribe to our newsletter, we use your email address exclusively to send information about:
new collections
new products
promotions
offers
inspiration
company information
Registration is carried out using a double opt-in procedure.
You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link included in every newsletter.
The legal basis is Art. 6(1)(a) GDPR.
23. Social Media Profiles
We maintain company profiles on various social networks.
When you visit our profiles, the respective platform operators process personal data under their own responsibility.
Depending on the platform, these may include:
Meta (Facebook, Instagram)
Pinterest
LinkedIn
TikTok
Please refer to the respective privacy policies of the platform operators.
24. Embedded External Content
Content from external providers may be embedded on individual pages.
This may include, for example:
maps
videos
social media content
product reviews
external widgets
When such content is loaded, your IP address may be transmitted to the respective provider.
Where legally required, such content will only be embedded after you have given your consent.
25. AI-Assisted Design of Motifs
Some of the designs offered by WANDINI are developed or creatively supported using modern AI-assisted design tools.
No personal data belonging to our customers is used to create these designs.
Personal data is processed exclusively in connection with your order, contract processing, or use of our website in accordance with this Privacy Policy.
26. Product Configurations
For individually configurable products, we store the settings you select exclusively for the purpose of processing your order.
This may include, in particular:
dimensions
material selection
orientation
product variants
quantities
individual configurations
This data is used exclusively for the production and delivery of your order.
27. Product Images and Print Quality
The product images displayed on our website are for illustrative purposes.
Depending on the device used, monitor settings, material surface, and printing process, colors, contrast, texture, and brightness may differ from the actual finished product.
This information is provided for informational purposes only and does not relate to the processing of personal data.
28. Web Analytics and Marketing
Where you have given your consent, we use analytics and marketing services to evaluate the use of our website, optimize our offering, and analyze and improve advertising activities.
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future via the cookie settings.
29. Google Tag Manager
Our website may use Google Tag Manager.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Tag Manager itself does not process personal data for analytics purposes. It is used exclusively to manage and integrate other services on our website.
If additional services are integrated via Google Tag Manager, the respective privacy policies of those services apply.
Further information:
https://policies.google.com/privacy
30. Google Analytics
Where you have given your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited.
Google Analytics helps us evaluate the use of our website and continuously improve our offering.
The following information may be processed in particular:
IP address (shortened or anonymized where enabled)
browser information
device information
operating system
pages visited
time spent on pages
click behavior
referrer
location information (regional)
language settings
Analysis is carried out exclusively in aggregated form.
Further information:
https://policies.google.com/privacy
31. Google Ads and Conversion Tracking
Our website may use Google Ads, including conversion tracking.
This makes it possible to determine whether visitors reached our website through a Google advertisement and subsequently performed certain actions, such as placing an order, contacting us, or subscribing to the newsletter.
Cookies or comparable technologies may be used for this purpose.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
32. Remarketing
Where you have given your consent, we may use remarketing technologies.
This allows visitors to our website to receive interest-based advertising for our products on other websites or platforms.
The processing is carried out exclusively on the basis of your consent.
33. Meta Pixel (Facebook and Instagram)
Our website may use the Meta Pixel provided by Meta Platforms Ireland Limited.
The provider is:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
The Meta Pixel enables us to evaluate advertising campaigns and helps us understand which visitors reach our website through Facebook or Instagram advertisements.
The following data may be processed in particular:
IP address
browser information
device information
page views
click behavior
completed purchases
conversion data
We do not personally identify individual users based on this data.
Further information:
https://www.facebook.com/privacy/policy/
34. Personalized Advertising
Where you have given your consent, personal data may be used to display interest-based advertising to you on other websites or platforms.
No sensitive personal data is processed for this purpose.
You may withdraw your consent at any time via the cookie settings.
35. Integration of Social Networks
Our website may contain links to or integrations with social networks, in particular:
Instagram
Facebook
Pinterest
LinkedIn
TikTok
When you click on a corresponding link, you leave our website and are redirected to the respective platform.
The respective platform operators are solely responsible for processing personal data on those platforms.
36. External Payment and Security Services
Our payment service providers or Shopify may process technical information for fraud prevention, payment processing, and system security purposes.
This relates exclusively to data required to process your order securely.
37. Transfers of Data to Third Countries
When certain services are used, personal data may be transferred to countries outside the European Union or the European Economic Area.
Such transfers take place only where the legal requirements of the GDPR are met, in particular through:
adequacy decisions of the European Commission,
Standard Contractual Clauses (SCCs),
or other appropriate safeguards pursuant to Art. 44 et seq. GDPR.
38. Retention Period for Analytics and Marketing Data
Analytics and marketing data is stored only for as long as necessary for the respective purpose or until you withdraw your consent.
The specific retention periods depend on the respective service used and its applicable deletion periods.
39. Changes to the Services Used
We reserve the right to add, modify, or replace analytics, marketing, or other technical services with equivalent services in the future where necessary to further develop our online store or optimize our services.
Where consent is legally required for such processing, personal data will be processed only after you have given your prior consent.
40. Retention Period for Personal Data
We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.
In particular, the following retention periods apply:
contract and order data in accordance with commercial and tax retention obligations (generally up to 10 years)
communication data until your request has been fully processed, provided no statutory retention obligations prevent deletion
data processed on the basis of consent until that consent is withdrawn
analytics and marketing data in accordance with the respective retention periods of the services used or until you withdraw your consent
After the respective periods have expired, personal data will be deleted or anonymized unless legal or contractual obligations prevent deletion.
41. Data Security
We use appropriate technical and organizational measures to protect your personal data against loss, manipulation, unauthorized access, or other unauthorized processing.
Our security measures are regularly reviewed and adapted in line with technological developments.
These measures include, in particular:
encrypted data transmission (SSL/TLS)
access restrictions
authorization concepts
data backups
protection against unauthorized access to our IT systems
Despite all security measures, complete security of data transmission over the internet cannot be guaranteed.
42. Your Rights as a Data Subject
Under the General Data Protection Regulation, you have, in particular, the following rights:
right of access pursuant to Art. 15 GDPR
right to rectification pursuant to Art. 16 GDPR
right to erasure pursuant to Art. 17 GDPR
right to restriction of processing pursuant to Art. 18 GDPR
right to data portability pursuant to Art. 20 GDPR
right to object pursuant to Art. 21 GDPR
right to withdraw consent pursuant to Art. 7(3) GDPR
You may contact us at any time to exercise your rights.
Contact:
Prosatz Communication GmbH & Co. KG
Rheinstr. 20
41836 Hückelhoven
Germany
Email: info@prosatz.de
43. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority responsible for our company is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Phone: +49 (0)211 38424-0
Website: https://www.ldi.nrw.de
You may also contact any other data protection supervisory authority within the European Union.
44. Automated Decision-Making and Profiling
We do not carry out decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR, unless this is expressly stated in connection with a service used or is permitted by law.
45. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary due to technological developments, changes in legislation, or new or modified services.
The version published on our website at the time of your visit shall apply.
46. Scope
This Privacy Policy applies to the use of the website www.wandini.shop and to all products and services offered through it.
In particular, it applies to the sale of individually manufactured printed products, including wall murals and other printed products that may be offered through our online store in the future.
47. Data Protection Contact
If you have any questions about the processing of your personal data or wish to exercise your data protection rights, you may contact us at any time:
Prosatz Communication GmbH & Co. KG
Rheinstr. 20
41836 Hückelhoven
Germany
Phone: +49 (0)2433 93992-0
Email: info@prosatz.de