Free shipping across Germany · Factory sealed · 14-day right of withdrawal

Legal

Privacy Policy

How we handle your data – explained in plain language.

1. Controller

The controller responsible for data processing on this website is:

2. General information

We only process personal data to the extent necessary to provide this website, process your orders or answer your enquiries, or where you have given your consent. The legal bases are in particular Art. 6 (1) (a) (consent), (b) (contract), (c) (legal obligation) and (f) GDPR (legitimate interest). We do not sell your data.

3. What data we process

Depending on how you use our shop, we process the following data:

  • Contact data: name, billing and shipping address, email address, optional phone number
  • Order data: products purchased, order history, shipping and payment information
  • Account and communication data: login details for your customer account and messages you send us by email or phone
  • Technical data: IP address, browser type, operating system, pages visited and referrer (server log files)

4. Hosting and server log files

This website is hosted by NameSilo, LLC (Phoenix, Arizona, USA). When you visit the website, information is automatically stored in server log files, for example your IP address, the date and time of access, the page visited and your browser type. This is necessary for secure and stable operation (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.

As the hosting provider is based in the USA, data may be transferred to the USA. Such transfers are based on appropriate safeguards under Art. 46 GDPR, in particular the EU Standard Contractual Clauses, or – where the provider is certified – on the EU-US Data Privacy Framework (Art. 45 GDPR).

5. Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser.

6. Cookies

We only use technically necessary cookies: for the cart and checkout (WooCommerce), to remember your chosen language (TranslatePress) and for fast page loading (LiteSpeed Cache). These cookies are strictly necessary to run the shop (Section 25 (2) TDDDG, Art. 6 (1) (b) and (f) GDPR). We do not use any analytics or marketing tools.

7. Orders and customer account

When you place an order, we process the data required for it: name, shipping and billing address, email address, optionally your phone number, and the order details (Art. 6 (1) (b) GDPR). If you create a customer account, we store this data until you delete your account.

8. Payment by bank transfer

When you pay by bank transfer, we process the information your bank sends us (for example name, amount and payment reference) in order to match your payment to your order (Art. 6 (1) (b) GDPR). We do not store card details or login details for your bank account.

9. Shipping

For delivery, we pass your name and shipping address on to the shipping company we use (Art. 6 (1) (b) GDPR). We only pass on your email address or phone number if you have expressly consented to this during checkout (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time.

10. Contact by email or phone

When you email or call us, we process your details in order to handle your enquiry (Art. 6 (1) (b) or (f) GDPR).

11. Withdrawal via our website

If you use the “Withdraw from contract” function, we process the data you enter there in order to handle and confirm your withdrawal (Art. 6 (1) (c) GDPR).

12. Sharing with third parties

We only share your data where this is necessary for the purposes described – with our hosting provider, the shipping company, our bank and, where applicable, our tax adviser. Authorities only receive data if we are legally obliged to provide it.

13. Advertising

We only send you promotional emails with your express consent (Art. 6 (1) (a) GDPR). We do not currently offer a newsletter. You will of course still receive messages about your order, your account or your enquiry.

14. Fonts

The fonts on this website are loaded locally from our own server. No connection is made to third-party servers such as Google.

15. Storage period

We delete personal data as soon as it is no longer needed for the respective purpose. Due to statutory retention obligations (including under the German Commercial Code and Fiscal Code), we keep order and invoice data for up to ten years.

16. Children

Our shop is aimed at adults. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, please contact us and we will delete it immediately.

17. Data security

We protect your data against loss, misuse and unauthorised access with appropriate technical and organisational measures. However, no one can guarantee completely secure data transmission over the internet.

18. Your rights

You have the right at any time to:

  • Access to your stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw any consent you have given, with effect for the future (Art. 7 (3) GDPR)

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). To make a request, simply send an email to contact@pawmony.shop. To make sure your data does not end up in the wrong hands, we may ask you to confirm your identity.

19. Changes

We will update this privacy policy if our processes or the legal situation change. The version published here always applies.

Last updated: October 2026