Data Protection and Information on the Processing of Personal Data pursuant to Art. 13 GDPR

1. General
We process your personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1.1. Scope
This privacy policy applies to:

• Use of our website

• Purchase and shipment of goods

• Customer communication and marketing

1.2. Controller
Intiwawa
Represented by Nicole Toledo Linder
Phone: +49 176 45914166
Email: info@intiwawa.shop

1.3. Data Protection Officer
Nicole Toledo Linder
Email: info@intiwawa.shop

​

2. Purposes and Legal Bases of Data Processing

2.1. Website operation and IT security
When accessing our website, the following data is temporarily collected:

• Date and time of access

• IP address

• Hostname of the computer

• Referring website

• Accessed subpages

• Browser type and version

• Operating system

The data is processed based on our legitimate interest pursuant to Art. 6(1)(f) GDPR to ensure the functionality of the website and IT security.

2.2. Purchase and payment
We process personal data (name, address, order and payment details) for the performance of the contract. Legal basis: Art. 6(1)(b) GDPR.
Data is only shared with service providers necessary for delivery or payment.

2.3. Customer service
Contact inquiries via email or contact form are processed to handle your request. Legal basis: Art. 6(1)(b) GDPR or your consent, Art. 6(1)(a) GDPR.

2.4. Returns and warranty
For returns or warranty cases, personal data is processed. Legal basis: Art. 6(1)(b) GDPR.

2.5. Customer account
When creating a customer account, your data is stored (name, address, email, payment details, username, password). Legal basis: Art. 6(1)(b) GDPR and your consent, Art. 6(1)(a) GDPR.

2.6. Email marketing
When subscribing to the newsletter, we use your email address for promotional messages. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time.

2.7. Contests / Sweepstakes
Processing of participant data (name, email, etc.) for running contests. Legal basis: Art. 6(1)(a) GDPR.

2.8. Cookies / Consents
Consents for tracking and marketing cookies are obtained via the cookie banner. Withdrawal is possible at any time. Legal basis: Art. 6(1)(a) GDPR.

​

3. Storage and Deletion
Data is stored as long as necessary for the purposes of processing or as required by law (usually 3 years for claims, up to 10 years for tax documentation).

​

4. Data Sharing
Personal data may be transferred to:

• Logistics providers (for shipping)

• Payment service providers (for payment)

• IT service providers (for website and databases)

• Other companies within the corporate group (if there is a legitimate interest)

Legal basis: Art. 6(1)(b) or (f) GDPR.

​

5. Rights of Data Subjects

5.1. Access
You can request information about your stored data in accordance with Art. 15 GDPR.

5.2. Objection
You can object to the processing of your data for specific reasons (see §6).

5.3. Rectification
Incorrect or incomplete data can be corrected or completed (Art. 16 GDPR).

5.4. Deletion
You can request the deletion of your personal data (Art. 17 GDPR).

5.5. Restriction of Processing
You can request the restriction of processing of your data (Art. 18 GDPR).

5.6. Complaint
If there are violations of data protection law, you can file a complaint with a data protection authority (Art. 77 GDPR).

5.7. Data Portability
Under certain conditions, you can receive your data in a machine-readable format (Art. 20 GDPR).

5.8. Withdrawal
Consents given can be withdrawn at any time for the future. The legality of processing up to the time of withdrawal remains unaffected (Art. 7(3) GDPR).

​

6. Objection to Data Processing Based on Legitimate Interest
You can object at any time to processing based on Art. 6(1)(f) GDPR. We will then only continue to process your data if there are compelling reasons or legal claims to be asserted.