Privacy policy

§ 1 General 

Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection laws of the European Union (EU). The following regulations inform you not only about the processing purposes, recipients, legal bases, storage periods, but also about your rights and the person responsible for your data processing. This data protection declaration only refers to our web pages. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data. 

§ 2 Data processing for contract fulfilment 

(1) Processing purpose

Your personal data, which you make available to us in the ordering process, is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without informing you of your address. For some payment methods we need the necessary payment data to pass them on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore for the purpose of fulfilling the contract.

If you send us an enquiry by e-mail, via a contact form etc. before the contract is concluded, we process the data received in this way to carry out pre-contractual measures and answer e.g. your questions about our products.

(2) Legal basis

The legal basis for this processing is Article 6(1)(b) DPA.

(3) Categories of recipients

Payment service provider, shipping service provider, hosting provider, possibly merchandise management system, possibly suppliers (dropshipping).

(4) Storage period

We store the data required for the execution of the contract until the expiry of the statutory warranty and, if applicable, contractual warranty periods.

We store the data required under commercial and tax law for the legally specified periods, regularly ten years (cf. §257 HGB, §147 AO).

The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that the contract will not be concluded. 

§ 3 PayPal transactions 

Please note that all PayPal transactions are subject to the PayPal Privacy Policy: 

§ 4 Information about cookies 

(1) Processing purpose

On this website, technically necessary cookies are used. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable e.g. the insertion of several products into one shopping cart.

(2) Legal basis

The legal basis for this processing is Article 6(1)(f) DPA.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This ensures that your interest in data protection is protected.

(4) Storage period

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifetime from a few minutes to several years.


If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser. 

§ 5 Social plugins from Facebook 

We use social plugins from, operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition "Facebook Social Plugin". For example, if you click on the "Like" button or make a comment, the corresponding information is transmitted from your browser directly to Facebook and stored there. Furthermore, Facebook makes your preferences public for your Facebook friends. If you are logged in to Facebook, Facebook can assign the call to our page directly to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you have visited, your IP address), which is stored by Facebook. For details on how Facebook handles your personal data and your rights in this regard, please refer to the Facebook privacy policy. If you do not want Facebook to assign the data collected about you via our websites to your Facebook account, you must log out of Facebook before visiting our websites. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (Facebook). 

§ 6 Newsletter 

(1) Processing purpose

If you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. within the scope of the newsletter we will inform you in particular about products from our range. For statistical purposes we can evaluate which links are clicked in the newsletter. It is not possible for us to identify which specific person clicked. You have given the following consent separately or, if applicable, explicitly during the ordering process: Subscribe to our newsletter.

(2) Legal basis

The legal basis for this processing is Article 6(1)(a) DPA.

(3) Categories of recipients

if applicable, newsletter dispatch provider

(4) Storage duration

Your e-mail address will only be stored for the duration of the desired registration.

(5) Right of revocation

You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter 

§ 7 Your rights as a data subject 

If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you have the following rights against us as the person responsible:  

1. right to information

Within the scope of Art. 15 DSGVO, you can request information about your personal data processed by us. 

2. right of rectification

If the information concerning you is not (or is no longer) correct, you can request a correction in accordance with Art. 16 DSGVO. If your data is incomplete, you may request that it be completed. 

3. right to deletion

You can request the deletion of your personal data under the conditions of Art. 17 DSGVO. 

4. right to limit processing

Within the framework of the provisions of Art. 18 DSGVO, you have the right to request a restriction on the processing of data concerning you. 

5. right to data transferability

According to Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party. 

6. right to revoke the declaration of consent under data protection law

According to Art. 7 para. 3 DSGVO you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the legality of the processing that has taken place on the basis of the consent until the revocation. 

7 Right to complain to a supervisory authority

If you believe that the processing of personal data relating to you is in breach of the DPA, you have the right under Article 77 DPA to lodge a complaint with a supervisory authority (in particular in the Member State in which you are resident, your place of work or the place where the alleged breach occurred).  

Please also note your right of objection under Art. 21 DSGVO: 

(a) General: substantiated opposition required

If the processing of personal data concerning you takes place 

- to safeguard our overriding legitimate interest (legal basis under Art. 6 para. 1 f) DSGVO) or

- in the public interest (legal basis according to Art. 6 para. 1 e) DSGVO), 

you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the DSGVO. 

In the event of an objection, we will no longer process the personal data relating to you unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. 

b) Special case of direct advertising: simple objection is sufficient

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object to such processing at any time and without giving reasons, including profiling, insofar as it is related to such direct marketing.

If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.

Controller for data processing:

Handweberei Galz
Am Almenhof 2
93133 Burglengenfeld Germany
Phone: +49 (0) 9471/6050977

Document created and continuously updated by janolaw AG.