Privacy Policy

Last Updated: 06 Feb. 2025

1. Data Controller

• Hein & Schoenen GbR
• Blumenstraße 43, 66111 SB
• legal@miomideal.com

2. Information We Collect

• Personal Data: We collect personal data that you provide to us, such as:
  • Name
  • Email address
  • Shipping address
  • Billing address
  • Phone number
  • Payment information (processed via Stripe; we do not store card details)
• Automatically Collected Data: We automatically collect certain information when you visit our website, including:
  • IP address
  • Browser type
  • Operating system
  • Referring URLs
  • Pages visited
  • Device information
• Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your browsing behavior. See our Cookies Section for more details.

3. How We Use Your Information

• Order Processing: To process and fulfill your orders, including shipping and payment processing.
• Customer Support: To provide customer support and respond to your inquiries.
• Account Management: To manage your user account, if you create one.
• Marketing Communications: With your consent, to send you promotional emails about new products, special offers, and other updates. You can opt-out at any time.
• Website Improvement: To analyze website usage and improve our website's functionality and user experience.
• Legal Compliance: To comply with legal obligations and protect our rights.

4. Legal Basis for Processing

We process your personal data based on the following legal bases:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you (e.g., processing your order).
• Consent: You have given us consent to process your data for specific purposes (e.g., marketing communications).
• Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests (e.g., website improvement).
• Legal Obligation: Processing is necessary to comply with legal obligations.

5. Data Sharing

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party service providers who assist us in providing our services (e.g., Stripe for payment processing, shipping companies for delivery).
• Legal Authorities: Government authorities or law enforcement agencies if required by law.
• Business Partners: Trusted business partners who help us improve our services or offer you relevant products and services.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive data
• Secure server infrastructure
• Regular security assessments
• Employee training on data protection

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Order Data: We retain order data for 8 years for accounting and legal compliance purposes.
• Account Data: If you have an account, we retain your account data until you close your account.
• Marketing Data: We retain your marketing preferences until you opt-out.

8. Your Rights

Under the GDPR and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: You have the right to access the personal data we hold about you.
• Right to Rectification: You have the right to correct inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to certain exceptions.
• Right to Restriction of Processing: You have the right to restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or based on our legitimate interests.
• Right to Withdraw Consent: If we rely on your consent to process your data, you have the right to withdraw your consent at any time.