Privacy Policy

Last updated: October 2026

1. Data Controller

Klimalio UG (haftungsbeschränkt)
Gutenbergstraße 13
24558 Henstedt-Ulzburg
Germany

Managing Director: Ramin Zahabi
Email: [email protected]
Website: https://klimalio.de/

2. Processing of Personal Data

We process personal data to provide and securely operate our online shop, respond to customer inquiries, and process and fulfill orders.

This includes, in particular, contact details, addresses, order and payment information, communication data, and technical usage data.

Depending on the purpose, processing is based on Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (legal obligations), or Article 6(1)(f) GDPR (legitimate interests).

Our legitimate interests include ensuring the security and functionality of our website and properly handling customer inquiries.

When you visit our website, certain technical information, including your IP address, access time, and connection data, is processed. We use external hosting and IT service providers for this purpose.

3. Cookies and Online Advertising

Our website uses technically necessary cookies and similar technologies to enable essential functions, including the shopping cart, customer login, order processing, and privacy settings.

We also use the following services:

  • Google Analytics: To analyze website usage.

  • Google Ads: To measure advertising performance and, where applicable, deliver personalized advertising.

  • Meta Pixel (Facebook/Instagram): To analyze interactions with our online shop and evaluate advertising campaigns.

These services are provided by Google Ireland Limited and Meta Platforms Ireland Limited.

The data processed may include usage information, technical identifiers, page views, and purchase events. Depending on the functionality used, this information may be linked to user accounts held with the respective providers.

Technologies requiring consent are used only with your consent in accordance with Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(a) GDPR.

Access to or storage of information on your device that is strictly necessary for providing a service explicitly requested by you does not require separate consent under Section 25(2) TDDDG. Any associated processing of personal data is based on Article 6(1)(b), (c), or (f) GDPR, depending on the purpose.

You may change or withdraw your consent at any time with effect for the future through our Cookie Settings.

Additional information about the technologies used, their providers, purposes, and retention periods is available in the Cookie Settings.

Where joint responsibility with Meta exists for certain processing activities under Article 26 GDPR, the relevant joint controller arrangements apply. Essential information about these arrangements is available in Meta's privacy information.

4. Orders, Payments and Shipping

To process orders and manage customer accounts, we collect and process the necessary customer, delivery, order, and payment information in accordance with Article 6(1)(b) GDPR. Processing required by law is based on Article 6(1)(c) GDPR.

Depending on the selected payment method, the necessary payment information may be transferred to the following providers:

  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A.

  • Klarna: Klarna Bank AB (publ)

  • Bank Transfer / Advance Payment: The financial institutions involved.

Payment service providers may process personal data independently in connection with their services. Depending on the payment method selected, Klarna may conduct identity and credit checks and make automated decisions. Further information is available in Klarna's privacy policy.

For delivery purposes, we share the necessary information, particularly the delivery address and, where required, contact details, with DHL or contracted freight and logistics providers.

When handling technical inquiries, complaints, statutory warranty claims, or commercial warranty claims, we may also process device information, serial numbers, commissioning reports, and fault descriptions. Where necessary, this information may be shared with the manufacturers or service partners involved.

Providing the information necessary for order processing and delivery is required to fulfill the contract. Without this information, we may be unable to process an order.

5. Contact and Newsletter

When you contact us by email, telephone, contact form, or WhatsApp, we process the information you provide to handle your inquiry.

For inquiries relating to an existing or prospective contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in effective customer communication.

When you voluntarily contact us through WhatsApp, personal data may also be processed independently by WhatsApp Ireland Limited. You may alternatively contact us by email.

We generally process your email address for newsletter distribution on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by using the unsubscribe link included in our newsletters.

Where personalized email opening or click tracking is used, such processing is carried out in accordance with the applicable legal requirements.

6. Data Retention and Disclosure

We retain personal data only for as long as necessary for the respective processing purpose or as required by applicable statutory retention obligations.

The following retention periods and deletion criteria generally apply:

  • Server Log Files: Generally seven days. Where necessary to investigate specific security incidents or protect legal claims, relevant data may be retained for longer to the extent permitted by law.

  • Invoices and Accounting Vouchers: Generally eight years.

  • Commercial and Business Correspondence: Generally six years.

  • Accounting Books and Annual Financial Statements: Generally ten years.

  • Customer Accounts: Until the customer account is deleted, unless statutory retention obligations or other lawful reasons require further storage.

  • Customer Inquiries: Generally deleted no later than six months after the inquiry has been fully resolved, unless longer retention is necessary.

  • Newsletter Data: Until unsubscribing. Records of consent may be retained for longer where necessary to comply with legal documentation requirements or applicable limitation periods.

  • Analytics and Marketing Data: In accordance with the retention periods established for the respective services and the additional information provided in our Cookie Settings.

  • Complaint and Service Data: Until the matter has been resolved and, where necessary, for longer periods to comply with legal obligations or to establish, exercise, or defend legal claims.

Statutory retention periods begin in accordance with the relevant legal provisions, generally at the end of the applicable calendar year.

Personal data is disclosed to third parties only where a lawful basis exists. Recipients may include IT, payment, shipping, communication, and advertising service providers, as well as manufacturers and service partners.

International Data Transfers

When using certain services, particularly those provided by Google, Meta, WhatsApp, and payment service providers, personal data may be processed outside the European Economic Area (EEA), including in the United States.

Transfers to appropriately certified US companies may take place on the basis of the European Commission's adequacy decision concerning the EU-US Data Privacy Framework pursuant to Article 45 GDPR.

For other international data transfers, appropriate safeguards are implemented where required under Article 46 GDPR, particularly the European Commission's Standard Contractual Clauses.

Further information about the applicable transfer mechanisms and the availability of relevant safeguards can be found in the privacy policies of the respective service providers. You may also contact us at [email protected] for further information.

7. Your Data Protection Rights

Subject to the applicable legal requirements, you have the following rights:

  • Right of Access: Access to your personal data (Article 15 GDPR).

  • Right to Rectification: Correction of inaccurate personal data (Article 16 GDPR).

  • Right to Erasure: Deletion of personal data (Article 17 GDPR).

  • Right to Restriction: Restriction of processing (Article 18 GDPR).

  • Right to Data Portability: Transfer of your personal data (Article 20 GDPR).

  • Right to Object: Objection to certain processing activities (Article 21 GDPR).

  • Right to Withdraw Consent: Withdrawal of previously given consent with effect for the future (Article 7(3) GDPR).

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

You may object to the processing of your personal data for direct marketing purposes at any time without providing a reason.

To exercise your rights, please contact:

[email protected]

You also have the right to lodge a complaint with a competent data protection supervisory authority, particularly:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Independent Centre for Data Protection Schleswig-Holstein

https://www.datenschutzzentrum.de/

8. Additional Privacy Information

Further information about data processing by our service providers can be found in their respective privacy policies:

We may update this Privacy Policy as necessary to reflect changes in legal requirements or our data processing activities.

Settings

Click for more products.
No products were found.

Menu

Please sign in first.

Sign in

Create a free account to save loved items.

Sign in