privacy policy

1. Data Controller

​

The controller responsible for the processing of personal data on this website is:

Paula Gutmann
GUTFRAU
Saalgasse 14
60311 Frankfurt am Main
Germany

shop@gutfrau.com

​

​

2. General Information on Data Processing

​

I take the protection of your personal data seriously. I process your personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the applicable data protection regulations in Germany.

This Privacy Policy explains which personal data is collected when you visit this website or use the online shop, for what purposes it is processed, and what rights you have.

Personal data means any information relating to an identified or identifiable individual, such as your name, address, email address or payment information.

​

​

3. Hosting and Website Platform

​

This website and online shop are created and hosted using Wix.

When you visit this website, Wix may process certain technical information, including your IP address, browser type, device information, operating system and information about your use of the website. This processing is necessary to provide, secure and technically operate the website.

Wix may process personal data on behalf of the website operator as a service provider. Further information about data processing by Wix can be found in Wix's own Privacy Policy.

The legal basis for the processing of technically necessary data is Article 6(1)(f) GDPR. My legitimate interest is the secure and functional operation of this website.

​

​

4. Visiting the Website

​

When you visit this website, technical information may be automatically transmitted to the website server. This may include:

• IP address

• date and time of access

• browser type and version

• operating system

• device information

• referring website

• pages visited on this website

This information is processed to ensure the secure and technically reliable operation of the website and to detect and prevent misuse.

The legal basis for this processing is Article 6(1)(f) GDPR.

​

​

5. Cookies and Similar Technologies

​

This website uses cookies and similar technologies. Cookies are small text files stored on your device.

Some cookies are technically necessary for the operation of the website and online shop. These may be used, for example, to enable basic website functionality, shopping cart functionality, language settings and security features.

Other cookies or similar technologies may only be used based on your consent where required by applicable law.

Your cookie preferences are managed using the Consentik GDPR Cookie Banner. Through the cookie banner, you can manage your consent preferences for the relevant categories of cookies.

You can change or withdraw your consent at any time via the available cookie settings on the website.

The exact cookies and technologies used may depend on the current configuration of the website, Wix and installed applications.

​

​

6. Online Shop and Orders

​

When you place an order through the online shop, we process the personal data necessary to process and fulfil your order.

This may include:

• first and last name

• billing and delivery address

• email address

• telephone number, if provided

• details of the products ordered

• order and transaction information

• payment-related information

​

The data is processed for the following purposes:

• processing and fulfilling your order

• arranging delivery

• processing payments

• communicating with you regarding your order

• handling returns, refunds and customer service requests

• complying with legal obligations

​

The legal basis for processing is Article 6(1)(b) GDPR, as processing is necessary for the performance of a contract with you, and Article 6(1)(c) GDPR where processing is necessary to comply with legal obligations.

I do not require you to create a customer account. Orders can be placed as a guest without creating a user account.

​

​

7. Payment Processing

​

Payment processing is carried out through the payment methods and payment service providers made available during the checkout process.

Depending on the payment method selected, payment-related data may be processed directly by the respective payment service provider. The relevant provider may process personal data in accordance with its own privacy policy.

I generally receive only the information necessary to confirm and process your order. Payment details such as complete credit card information are not stored by me unless explicitly stated otherwise.

The legal basis for processing is Article 6(1)(b) GDPR.

​

​

8. Shipping and Delivery

​

To fulfil your order, I may share the personal data necessary for delivery with the shipping service provider selected for your order.

This may include:

• your name

• delivery address

• email address and/or telephone number, where necessary for delivery or shipment notifications

• order-related information

The data is shared solely for the purpose of delivering your order.

Depending on the destination and shipping service used, the shipping provider may process personal data in accordance with its own privacy policy.

Orders may be shipped from Germany to other countries. For international deliveries, additional customs or import procedures may apply. Where necessary, the data required for customs clearance may be transmitted to the relevant shipping and customs service providers.

​

​

9. Contacting Me

​

If you contact me by email or through another communication channel, I process the information you provide in order to respond to your request.

This may include:

• your name

• email address

• contact details

• the content of your message

• any other information you voluntarily provide

The legal basis for processing is Article 6(1)(f) GDPR. My legitimate interest is responding to enquiries and maintaining communication with you. If your enquiry relates to the initiation or performance of a contract, Article 6(1)(b) GDPR may also apply.

The data will be deleted when the enquiry has been finally resolved, unless statutory retention obligations apply or there is another legal basis for continued storage.

​

​

10. Newsletter

​

If you subscribe to my newsletter, I process your email address in order to send you newsletters and information about new products, shop updates and other information related to GUTFRAU.

Newsletter registration is based on your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future. You can unsubscribe from the newsletter by using the unsubscribe link included in each newsletter or by contacting me directly.

After unsubscribing, your email address will be removed from the newsletter mailing list unless there is another legal basis for retaining it.

​

​

11. Instagram

​

This website may contain links to Instagram and, where applicable, embedded Instagram content.

If you click on a link to Instagram, you leave this website and your data may be processed by Meta Platforms Ireland Limited and other companies belonging to the Meta group in accordance with their own privacy policies.

If Instagram content is embedded directly into the website, technical data may be transmitted to Instagram or Meta when the relevant content is loaded. Depending on the technical implementation and your cookie consent settings, this may require your prior consent.

Further information can be found in Instagram's and Meta's privacy policies.

​

​

12. Data Retention

​

I retain personal data only for as long as necessary for the purposes for which it was collected.

In addition, I may be legally required to retain certain business and transaction records for specific periods under German commercial and tax law.

Once the applicable retention periods have expired and the data is no longer required for other lawful purposes, the data will be deleted.

​

​

13. Recipients of Personal Data

​

Personal data may be shared with the following categories of recipients where necessary:

• Wix as website and e-commerce platform provider

• payment service providers

• shipping and delivery service providers

• providers of technical services and website applications

• newsletter service providers

• tax advisors and other professional service providers, where necessary

• public authorities and other bodies where legally required

Personal data is only shared where there is a legal basis for doing so and where the data is necessary for the relevant purpose.

 

 

14. Transfers to Countries Outside the European Economic Area

 

Some service providers used for the operation of this website may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, such transfers will only take place where the requirements of applicable data protection law are met, for example on the basis of an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.

​

​

15. Your Rights

​

Subject to the applicable legal requirements, you have the following rights:

• the right to access your personal data

• the right to rectification of inaccurate or incomplete data

• the right to erasure of your personal data

• the right to restriction of processing

• the right to data portability

• the right to object to certain processing

• the right to withdraw consent at any time where processing is based on consent

The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, please contact me using the contact details provided above.

​

​

16. Right to Lodge a Complaint

​

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

You may contact the supervisory authority responsible for your place of residence, place of work or the place of the alleged infringement.

 

 

17. Changes to this Privacy Policy

​

I reserve the right to amend this Privacy Policy from time to time in order to reflect changes to the website, the services used or applicable legal requirements.

​

​

The current version of this Privacy Policy is always available on this website. Last updated: July 2026