Privacy Policy

This privacy policy informs you which personal data we process when you visit our online shop, what we use it for and which rights you have.

The controller responsible for data processing on this website is:

This website is hosted by Cloudflare, Inc. (Cloudflare Workers). When you visit the website, Cloudflare automatically collects technical server log data (including IP address, browser type and time of access) to ensure the website's operation. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. As Cloudflare, Inc. is based in the USA, data transfer relies on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

Customer accounts (sign-in with e-mail and password or with Google), orders, wishlist, reviews, form requests and newsletter sign-ups are stored with Supabase Inc. (database and sign-in service); passwords are only stored encrypted (hashed). The legal basis is Art. 6(1)(b) GDPR (contract / customer account) or (a) (newsletter, consent). Newsletter: sign-up by double opt-in — you only receive messages after confirming by e-mail; you can withdraw your consent at any time.

If you contact us via a WhatsApp button, WhatsApp (WhatsApp Ireland Limited) opens with a pre-filled message to our business number; processing is then also subject to WhatsApp's privacy policy. What you enter in the contact form or a request form (consultation, measuring, assembly, application) is stored in our database to handle your request; we delete it once it has been dealt with, unless statutory retention obligations apply. We process your details (e.g. name, address, e-mail, phone, order data) to handle your enquiry or order. The legal basis is Art. 6(1)(b) GDPR (contract / pre-contractual enquiry) or (f) (legitimate interest in customer communication).

On the contact page you can load a map from Google Maps (Google Ireland Limited). The map is only embedded after you click “Load map”; only then is data (including your IP address) transferred to Google. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

This website does not use analytics or marketing cookies. For the cart, wishlist, product comparison, language setting and your cookie choice, data is stored exclusively in your browser's local storage; it is not transmitted to us. This storage is technically necessary for the functions you request (§ 25(2) no. 2 TDDDG). Before any analytics tool is used, we will ask for your consent.

You have the right to access, rectify, erase, restrict the processing of and object to the processing of your personal data, as well as the right to data portability. Please contact us at mail@om-moebel.de. You can withdraw any consent given at any time with effect for the future.

This website is transmitted exclusively in encrypted form via HTTPS (TLS). We use technical and organisational measures to protect your data against loss, misuse and unauthorised access.

We store personal data only for as long as necessary for the respective purpose. Statutory retention periods (e.g. 6 or 10 years under the German Commercial Code and Fiscal Code for business records) remain unaffected.

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach — www.lda.bayern.de

You have the right to lodge a complaint with a data protection supervisory authority. The responsible authority is:

We adapt this privacy policy as soon as the website's functions or the legal situation change. The version published here applies.