Privacy Policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dumunt
Germany
Email: support@dumunt.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 Server Log Files

When you visit our website for informational purposes only (i.e., without registering or submitting information), we collect only the data that your browser automatically transmits to our server (so-called “server log files”).

This data includes:

• Visited website

• Date and time of access

• Amount of data transmitted

• Referrer URL

• Browser type

• Operating system

• IP address (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the stability, security, and proper functioning of our website.
This data is not merged with other data sources.

We reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2 SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.

3) Hosting and Content Delivery Network

3.1 Shopify

Our website is hosted using the services of the following provider:

Shopify International Limited
Victoria Buildings, 2nd Floor
1–2 Haddington Road
Dublin 4, D04 XN32
Ireland

Data may also be transferred to:
Shopify Inc., 150 Elgin Street, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on Shopify’s servers. We have concluded a data processing agreement with the provider to ensure the protection of visitors’ data and to prohibit unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Cloudflare

To enhance the security and performance of our website, we use a Content Delivery Network (CDN) provided by:

Cloudflare Inc.
101 Townsend St.
San Francisco, CA 94107
USA

Processing is carried out based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing a secure and efficient website.
A data processing agreement has been concluded with the provider.

Cloudflare is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

4) Cookies

Our website uses technically necessary cookies that are required to ensure basic website functionality.

The processing of technically necessary cookies is carried out pursuant to Art. 6(1)(b) GDPR for contract execution or pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in providing a technically secure and functional website.

Analytics cookies (e.g., Google Analytics) are used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you provide via our cookie consent tool.

You may withdraw or modify your consent at any time via our cookie consent tool.

You can also configure your browser to notify you about the use of cookies or to generally refuse cookies. Please note that disabling cookies may limit the functionality of our website.

5) Use of Google Analytics (GA4)

This website uses Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

Google Analytics 4 enables us to analyze the behavior of website visitors and optimize our online offering.

In this context, information such as:

• IP address (in anonymized form)

• Device information

• Browser type

• Pages visited

• Duration of visit

• Referrer URL

may be processed.

Google Analytics 4 uses cookies or comparable recognition technologies.

Processing is carried out pursuant to Art. 6(1)(a) GDPR on the basis of your consent given via our cookie consent tool.

Data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

IP anonymization is activated, meaning your IP address is shortened within the European Union before transmission.

You may prevent the collection of data generated by Google Analytics by adjusting your browser settings or using appropriate opt-out tools provided by Google.

 Personal data collected via Google Analytics is stored only for as long as necessary for the respective analysis purposes.

6) Use of Google Merchant Center

We use Google Merchant Center to display and promote our products within Google services (e.g., Google Shopping).

For this purpose, product-related data such as:

• Product title and description

• Price information

• Availability

• Shipping information

• Images

may be transmitted to Google.

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in promoting our products and increasing online visibility.

Data may be processed by Google Ireland Limited and may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework.

No additional personal data is transmitted to Google Merchant Center beyond what is technically necessary for product presentation.

No direct transmission of personal customer data to Google Merchant Center takes place unless technically required.

 7) Contacting Us

When you contact us (e.g., via email), personal data is processed. This data is used exclusively to process your request and for related technical administration.

Legal basis:

• Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries), or

• Art. 6(1)(b) GDPR, if the contact relates to the conclusion of a contract.

Your data will be deleted once your request has been fully processed, provided no statutory retention obligations apply.

8) Rights of the Data Subject

You have the following rights:

• Right of access pursuant to Art. 15 GDPR

• Right to rectification pursuant to Art. 16 GDPR

• Right to erasure pursuant to Art. 17 GDPR

• Right to restriction of processing pursuant to Art. 18 GDPR

• Right to notification pursuant to Art. 19 GDPR

• Right to data portability pursuant to Art. 20 GDPR

• Right to withdraw consent pursuant to Art. 7(3) GDPR

• Right to lodge a complaint pursuant to Art. 77 GDPR

Right to Object

If we process your personal data based on Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the affected data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

9) Duration of Storage of Personal Data

Personal data is stored only for as long as necessary for the respective processing purpose, taking into account statutory retention periods.

Data processed on the basis of consent pursuant to Art. 6(1)(a) GDPR is stored until consent is withdrawn.

Data processed on the basis of contractual or pre-contractual obligations pursuant to Art. 6(1)(b) GDPR is deleted after expiry of statutory retention periods, unless further storage is required for contract fulfillment or legal reasons.

Data processed pursuant to Art. 6(1)(f) GDPR is stored until an objection is exercised, unless overriding legitimate grounds exist.