We take the protection of your data seriously and therefore handle it carefully, transparently, and securely in accordance with national and European data protection laws.

Below, we would like to inform you about the processing of your personal data when using this website and the content and services provided here, as well as your related rights.

“Personal data” means any information relating to an identified or identifiable natural person.

 

1. Name and Address of the Controller

The controller responsible for data processing pursuant to Article 4(7) of the General Data Protection Regulation (“GDPR”) is:

Kolonne Null GmbH
Frobenstraße 1
10783 Berlin
Germany

If you have any questions regarding data protection, you can reach us at the address above as well as at:
info@kolonnenull.com; 030 54907969.

 

2. Website Access / Server Log Files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted by your internet browser to us or to our web hosting provider / IT service provider and stored in server log files. This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the data volume transferred, and the requesting provider.

The legal basis for processing your data when you access our website is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the trouble-free operation of our website and improving our services.

Your data may also be transferred to Canada. For transfers to Canada, an adequacy decision by the European Commission is in place.

 

3. Customer-Initiated Contact

If you contact us via email or contact form for business purposes, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data is processed for the purpose of handling and responding to your inquiry.

If the contact is made for pre-contractual reasons (e.g., product inquiries, quotation requests) or concerns an existing contract, the data processing is based on Article 6(1)(b) GDPR.

If the contact is made for other reasons, the processing is based on Article 6(1)(f) GDPR, reflecting our overriding legitimate interest in handling and responding to your request.

 

4. Newsletter

If you would like to receive the newsletter offered on our website, we require your email address and information enabling us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. We use the so-called double opt-in process.

Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. You can unsubscribe using the link provided in each newsletter or by contacting us. Your email address will then be removed from the mailing list. Processing carried out before withdrawal remains unaffected.

 

5. Customer Account

When opening a customer account, we collect your personal data as specified during registration. The data processing serves the purpose of improving your shopping experience and simplifying order processing.

Processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time. Your customer account will then be deleted.

 

Contract Conclusion and Fulfillment

6. Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and respond to your inquiries.
Processing is based on Article 6(1)(b) GDPR and is required to perform the contract with you.

 

7. Shipping Service Providers

As part of shipping, we transmit personal data (name, address, and, if applicable, email address and/or mobile phone number as well as shipment-related information) to our shipping partners (DPD Deutschland GmbH or DHL Paket GmbH). The processing is based on Article 6(1)(f) GDPR, as our legitimate interest lies in ensuring smooth shipping via a service provider.

You may object to the transmission of additional information such as your email address or mobile number — either to us, or in the case of DPD shipments, directly to DPD at widerspruch_predictbenachrichtigung@dpd.de, or via a link included in each parcel notification.

If you explicitly consent during checkout, we will forward your email address to the shipping company so you can receive email updates on your shipping status. This processing is based on Article 6(1)(a) GDPR. You may withdraw this consent at any time by contacting us or the transport company.

 

8. Payment Service Providers

We offer various payment methods on our website, including services from providers such as PayPal and Amazon Pay. Data processing enables us to offer payment via the respective provider. To integrate the payment service, it is necessary that the provider processes data (e.g., IP address, device type, operating system, browser type, device location) when you access our website. Cookies are used for this purpose. Further information on the cookies used can be found in the footer of our website under “Privacy Settings”.

You can find information about data processing by each payment service provider here:

Paypal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Amazon payments: https://pay.amazon.com/de/help/201212490
Klarna: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

 

9. Cookies and Consent Management Platform

Our website uses cookies. Cookies are small text files stored on a user’s device via the internet browser. When you visit a website, a cookie may be stored on your device which contains a unique identifier that allows your browser to be recognized on subsequent visits and facilitates navigation. More information and settings regarding the cookies we use can be found in the footer of our website under “Privacy Settings”.

To manage cookies, we use the consent management platform provided by Usercentrics. Provider:
Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. When you access our website, the following personal data is transmitted to Usercentrics:

• Your consent(s) or withdrawal(s)
• Your IP address
• Requested URLs of the website
• Browser information
• Your geographic location
• Device information
• Time of website visit

Usercentrics also stores a cookie in your browser to assign your granted or withdrawn consents. The collected data is stored until you request deletion, delete the Usercentrics cookie, or the purpose for storage no longer applies. Mandatory legal retention obligations remain unaffected.

The use of Usercentrics is legally required to obtain cookie consent; the legal basis is Article 6(1)(c) GDPR. Further information can be found in Usercentrics’ privacy notice.

 

10. Duration of Storage

Stored data is retained until the purpose of processing ceases to apply and no statutory retention periods prevent deletion. In the event of a contract, data is stored first for the duration of the warranty period and subsequently in accordance with statutory retention periods, particularly tax and commercial law. After these periods expire, the data is deleted unless you have consented to further processing.

 

11. Rights of the Data Subject

Where the legal requirements are met, you have the rights under Articles 15–20 GDPR, including the right of access, rectification, erasure, restriction of processing, and data portability.

You also have the right to object under Article 21(1) GDPR to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes. After objection, processing will cease unless we demonstrate compelling legitimate grounds outweighing your interests or processing serves the establishment, exercise, or defense of legal claims.

You also have the right to withdraw any consent given. The withdrawal applies for the future; processing carried out before withdrawal remains unaffected.

Under Article 77 GDPR, you furthermore have the right to lodge a complaint with a supervisory authority if you believe your personal data is not being processed lawfully.

 

12. Data Disclosure to Third Parties

If we transfer your data to third parties or grant them access, this is done exclusively on the basis of a legal foundation.

We preferentially use European service providers and partners whenever your personal data needs to be processed. Transfers to third countries take place only if the requirements of Articles 44 et seq. GDPR are met. This means processing may only occur on the basis of specific safeguards, such as Standard Contractual Clauses, or, in individual cases, your consent.

If data is transferred to the USA or another country without adequate data protection levels, please note that there is a theoretical risk that your data may be accessed by authorities for monitoring purposes without adequate legal remedies.

 

13. Obligation to Provide Data

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. A lack of provision has no consequences unless otherwise indicated for specific processing operations.