Data protection

Privacy Policy

1. Controller
The controller for data processing on this website is:

Miliya GmbH
Brand: PALANDOS
Von-Galen-Straße 47
53757 Sankt Augustin
Germany

Email: info@palandos.de
Phone: +49 1573 3915732

2. General information on data processing
We process personal data only to the extent necessary for the provision of our website, for carrying out pre-contractual measures, for contract fulfillment, for compliance with legal obligations, and for safeguarding our legitimate interests.

Processing is carried out in particular on the basis of Art. 6 para. 1 lit. b GDPR for contract initiation and fulfillment, Art. 6 para. 1 lit. c GDPR for compliance with legal obligations, Art. 6 para. 1 lit. a GDPR based on your consent, and Art. 6 para. 1 lit. f GDPR based on our legitimate interests, especially in a secure, economical, and user-friendly operation of our online shop. The data subject rights according to Art. 15 to 21 GDPR generally exist as described below. (EUR-Lex)

3. Which data we process
When using our online shop, the following personal data may be processed in particular:

• Master data such as name, billing and delivery address

• Contact data such as email address and phone number, if provided

• Order, payment, and transaction data

• Communication data if you contact us via email, contact form, chat, or other means

• Usage data such as pages visited, products viewed, shopping cart contents, click behavior, and interactions with our shop

• Technical data such as IP address, browser type, device data, operating system, referrer URL, time zone, and access time

• Marketing and tracking data, if you have consented thereto

Shopify, Google, and Meta each describe that when using their services, depending on the integration, usage, device, cookie, page view, and interaction data can be processed in particular. (Shopify)

4. Data processing when visiting the website
When you access our website, technically necessary data is processed to provide the website, ensure system security, and deliver content correctly. This may include, in particular, IP address, date and time of access, browser information, device data, and the page accessed.

The processing of this data is based on our legitimate interest in a secure and functional operation of our website.

5. Hosting and Shop Platform Shopify
Our online shop is operated via Shopify. The provider is Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada. Shopify processes personal data to provide the technical infrastructure of the shop, the checkout, security features, payment processing, content, cookies, and other shop functions. Shopify also informs that personal data may be processed and transferred internationally, and safeguards are used for this purpose. Further information can be found in Shopify's privacy policy and in the information on cookies and customer privacy settings provided by Shopify. (Shopify)

6. Orders and contract fulfillment
When you order in our shop, we process your personal data to process your order, deliver the goods, process payments, handle inquiries, returns and complaints, and to comply with commercial and tax law obligations.

The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and, where legal retention and documentation obligations exist, on the basis of Art. 6 para. 1 lit. c GDPR. Tax retention obligations arise in particular from § 147 AO. (EUR-Lex)

7. Payment service providers
For payment processing, we work with Shopify Payments and, if applicable, other external payment service providers. The data required for payment processing is transmitted to the selected payment service provider. Which data is processed in detail depends on the payment method selected in the ordering process.

The processing takes place for contract fulfillment on the basis of Art. 6 para. 1 lit. b GDPR.

8. Contacting us
If you contact us, for example by email, contact form or chat, we process the data you provide to process your request and for any follow-up questions.

The processing takes place, depending on the content of your request, on the basis of Art. 6 para. 1 lit. b GDPR, if the request is aimed at concluding or performing a contract, or on the basis of Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficient communication.

9. Cookies and Consent Management
Our website uses cookies and similar technologies. We distinguish between technically necessary cookies and those for analysis, personalization and marketing purposes.

Technically necessary cookies are required to provide the shop, shopping cart, checkout, security features and basic page settings. We only use analysis and marketing cookies and similar technologies if you have given us your consent, provided such consent is legally required.

Shopify provides functions for merchants to manage customer privacy settings and cookie banners and expressly points out that these settings must be regularly reviewed and adapted to actual processing activities. (Shopify Help Center)

You can revoke or adjust your consent at any time with effect for the future via the cookie settings.

10. Google Analytics
If you have given your consent, we use Google Analytics, a web analysis service by Google. Google Analytics uses cookies and similar technologies to evaluate the use of our website, create reports on website activities, and provide other services related to website usage.

In particular, information about your usage behavior, your device, your browser, your interactions with our website, your IP address, and cookie and similar identifiers may be processed. Google also explains that Google Analytics uses cookies to distinguish visitors and provide usage statistics for businesses. For users from the EU, Google points out that IP addresses can be discarded before logging and additional privacy and consent controls are available. (policies.google.com)

The processing takes place on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

11. Google Ads and Conversion Tracking
If you have consented, we use functions of Google Ads, in particular conversion tracking, remarketing, and similar advertising and measurement functions. Google describes that for website conversion tracking, cookies or comparable technologies may be used to determine whether users perform certain actions on our website after an ad. Google also explicitly points out that a legally effective consent may be required for remarketing or conversion tracking for users in the EEA and the United Kingdom. (Google Help)

Through these functions, information about ad interactions, page views, conversions, technical device information, and online identifiers may be processed in particular.

The processing takes place on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

12. Meta Pixel
If you have given your consent, we use the Meta Pixel from Meta to measure the effectiveness of our advertisements, to create target audiences and to play out or optimize interest-based advertising. Information about your user behavior on our website, visited pages, actions performed, online identifiers as well as technical device data can be processed and transmitted to Meta.

Meta provides its own terms, privacy information and notes on GDPR implementation for business tools and the Meta Pixel and points out that companies must ensure their own legal compliance. (Facebook)

The processing takes place on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

13. Recipients of data
We only pass on personal data insofar as this is legally permissible and necessary for the respective purposes. Recipients may include, in particular:

• Shopify as the technical shop platform

• Payment service providers for payment processing

• Shipping service providers for the delivery of your order

• IT, hosting, analysis, consent, marketing and communication service providers

• Providers of advertising and tracking services such as Google and Meta, if you have consented thereto

14. International data transfers
When using Shopify and, if applicable, Google and Meta services, personal data may be processed in countries outside the European Union or the European Economic Area. Shopify, Google and Meta each provide information about international data processing and refer to implemented protection mechanisms and contractual measures. (Shopify)

15. Storage duration
We store personal data only for as long as necessary for the respective purposes. Where legal retention obligations exist, data is stored for the duration of these obligations. For certain tax-relevant documents, retention periods of up to ten years apply according to § 147 AO. (Gesetze im Internet)

16. Your Rights
Under the GDPR, you have the following rights in particular:

• Right to information

• Right to rectification

• Right to erasure

• Right to restriction of processing

• Right to data portability

• Right to object

• Right to withdraw consent with effect for the future

These rights arise in particular from Articles 15 to 21 GDPR. (EUR-Lex)

To exercise your rights, a message to: info@palandos.de is sufficient.

17. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia. You can find the current contact details on the official contact page of the LDI NRW; the BfDI for NRW lists, among other things, the email address poststelle@ldi.nrw.de. (ldi.nrw.de)

18. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy if this becomes necessary due to legal, technical, or business changes. The version published at the time of your visit is always authoritative.

Status: March 2026