Privacy Policy

The following information explains how Dekoli GmbH, as the operator of the online store www.werbecenter-onlineshop.de, processes personal data and what rights you have under applicable data protection laws.

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Dekoli GmbH
Sophie-Charlotten-Str. 92
14059 Berlin
Germany

Operator of the online store: www.werbecenter-onlineshop.de

Phone: +49 30 34 50 679-0
Email: info@werbecenter-berlin.de

2. What is personal data?

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, your name, address, email address, telephone number, payment details, order details, and technical data generated when you use our website, such as your IP address, browser type, operating system, time of access, or device information.

3. Purposes and Legal Bases of Data Processing

We process personal data in particular for the following purposes:

to process inquiries and communicate with you,
to create and manage customer accounts,
to process and fulfill orders and contracts,
to issue and process invoices and payments,
to produce and deliver ordered goods,
to process print data and other files supplied by customers,
to comply with statutory retention and recordkeeping obligations,
to ensure the proper and secure operation of our website,
to establish, exercise, or defend legal claims, and
for analytics, statistical, and marketing purposes where you have given your consent.

Processing is carried out in particular on the basis of:

Article 6(1)(a) GDPR – consent,
Article 6(1)(b) GDPR – performance of a contract and pre-contractual measures,
Article 6(1)(c) GDPR – compliance with legal obligations, and
Article 6(1)(f) GDPR – legitimate interests.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

4. Server Log Files and Use of Our Website

Each time you visit our website, technical information may be collected automatically by the web server or hosting provider. This may include, in particular, your IP address, date and time of access, the page or file accessed, the amount of data transferred, referrer URL, browser type, browser version, and operating system used.

This data is processed to ensure the secure and reliable operation of the website, to technically provide our content, and to detect and prevent misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and technically reliable operation of our online store.

5. Cookies and Consent Management

Our website uses cookies and comparable technologies. Cookies are small text files or pieces of information that may be stored on or read from your device.

Strictly necessary cookies and comparable technologies may be used where they are required to provide a digital service expressly requested by you or to transmit a communication.

For cookies and comparable technologies that are not technically necessary, in particular for analytics, statistics, or marketing purposes, we obtain your consent before they are used through our consent management system or cookie banner.

The storage of information on your device or access to information already stored on your device is governed in particular by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any subsequent processing of personal data is carried out on the basis of the relevant legal provisions of the GDPR.

You can change or withdraw your consent at any time with effect for the future through the cookie or privacy settings provided on our website.

6. Contacting Us

If you contact us through a contact form, by email, telephone, or by other means, we process the information you provide in order to handle your inquiry.

Where your inquiry relates to an existing or potential contractual relationship, processing is carried out on the basis of Article 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in handling inquiries pursuant to Article 6(1)(f) GDPR.

7. Customer Accounts and Registration

If you create a customer account in our online store, we process the data you provide to set up and manage the account and to facilitate future orders.

This may include, in particular, your name, company, address, email address, telephone number, login details, and order information.

The legal basis is Article 6(1)(b) GDPR.

You may request that your customer account be amended or deleted, provided that no statutory retention obligations or other legitimate grounds prevent its deletion.

8. Order and Contract Processing

We process the personal data required to process and fulfill your order. This may include, in particular, your name, company name, billing and shipping address, email address, telephone number, order information, payment information, and print data supplied by you.

Processing is carried out on the basis of Article 6(1)(b) GDPR.

Where necessary for the performance of the contract, we may disclose personal data to service providers used by us, such as production service providers, suppliers, shipping and logistics companies, and payment service providers.

9. Shipping and Delivery

For the purpose of delivering your order, we transmit the data required for delivery, in particular your name and shipping address and, where necessary, other contact details required for delivery, to the shipping or transportation company commissioned with the delivery.

The legal basis is Article 6(1)(b) GDPR.

10. Payment Processing

For the purpose of processing payments, we transmit the data required for the relevant transaction to banks, financial institutions, and payment service providers where this is necessary to process your chosen payment method.

The legal basis is generally Article 6(1)(b) GDPR.

11. PayPal

If you select a payment method offered through PayPal, the data required for payment processing will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

This may include, in particular, your name, address, email address, invoice amount, payment information, and information relating to your order.

The data is transmitted for the purpose of processing the payment method selected by you on the basis of Article 6(1)(b) GDPR. PayPal may process additional data under its own data protection responsibility, for example for fraud prevention, credit checks, or compliance with legal obligations.

Further information is available in PayPal's privacy information.

12. Klarna / Sofort

Where payment methods provided by Klarna or Sofort are offered in our online store and selected by you, the data required for payment processing will be transmitted to Klarna.

The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

The data transmitted may include, in particular, your name, address, email address, invoice amount, and information relating to your order.

The legal basis is Article 6(1)(b) GDPR. Klarna may additionally process personal data under its own data protection responsibility, including for identity verification, fraud prevention, or credit checks.

13. Credit Checks

Where we provide goods or services in advance, for example where payment by invoice is permitted, we may carry out a credit check to the extent permitted by law.

For this purpose, personal data required for the credit check may be transmitted to a credit reporting agency used by us. According to the current Privacy Policy, Creditreform may be used for this purpose.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in reducing the risk of payment defaults and assessing financial risks where we provide goods or services in advance.

14. Review Reminders via eKomi

Where you have expressly consented, we may transmit your email address to eKomi following an order so that you can be sent a reminder to review your order.

Processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

15. Graphic Design and Print Services

If you order additional graphic design or artwork services, in particular the creation or editing of print artwork, the data and files required to perform the service may be disclosed to a graphic design service provider used by us.

According to the current Privacy Policy, the following service provider may be used for this purpose:

krähativ werbung
Pankstr. 8-10, Aufgang G
1. Etage links
13127 Berlin
Germany

Processing and transmission are carried out on the basis of Article 6(1)(b) GDPR insofar as this is necessary to perform the contracted service.

16. Google Analytics

Where you have given your consent through our consent management system, we use Google Analytics for statistical analysis and optimization of our online services.

For users within the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics may process information relating to the use of our website, device and browser information, usage events, and technical identifiers.

Google Analytics is used only with your consent. The legal basis for processing personal data is Article 6(1)(a) GDPR. Where information is stored on or read from your device, this is carried out on the basis of your consent pursuant to Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.

When Google services are used, it cannot be ruled out that personal data may also be processed in third countries, in particular the United States. For transfers of data to the United States, where the relevant requirements are met, the European Commission's adequacy decision concerning the EU-U.S. Data Privacy Framework or other appropriate safeguards under the GDPR may apply.

17. YouTube

Where YouTube videos are embedded on our website, we use services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube content is only loaded or activated where this is necessary according to the specific technical implementation and is permitted under applicable data protection law. Where consent is required, processing will only take place after you have given your consent.

The legal basis in such cases is Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG.

When YouTube is used, data may be transferred to Google companies or servers outside the European Economic Area, in particular in the United States.

18. Google Maps

Where we use Google Maps on our website, this is for the purpose of displaying geographic information and locations.

For users within the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Where Google Maps is not technically necessary, it will only be activated after you have given your consent. The legal basis is Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future through our cookie or privacy settings.

19. Recipients and Processors

Personal data is only disclosed to third parties where this is necessary for the relevant processing purposes, where we are legally required to do so, where you have given your consent, or where another legal basis permits the disclosure.

Recipients may include, in particular:

IT, hosting, and technical service providers,
payment service providers and financial institutions,
shipping and logistics companies,
production and graphic design service providers,
suppliers and other service providers involved in fulfilling orders,
credit reporting agencies where a credit check is legally permissible,
tax advisors, attorneys, and other professional advisors, and
public authorities and other public bodies where disclosure is required by law.

20. Transfers of Data to Third Countries

When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.

Such transfers will only take place where the requirements of Articles 44 et seq. GDPR are met. This may include, in particular, an adequacy decision by the European Commission, appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another legal basis provided for under applicable data protection law.

21. Data Retention

We generally retain personal data only for as long as it is required for the relevant processing purpose.

Where personal data is required for the performance of a contract, it will generally be retained for the duration of the contractual relationship. Data may subsequently be retained where statutory retention and recordkeeping obligations, limitation periods, or legitimate interests in establishing, exercising, or defending legal claims require further storage.

Once the relevant purpose for storage no longer applies and statutory retention periods have expired, the data will be deleted or anonymized unless another legal basis permits continued processing.

22. Your Rights

Subject to the applicable statutory requirements, you have in particular the following rights:

Right of access under Article 15 GDPR: You may request information about the personal data we process about you.
Right to rectification under Article 16 GDPR: You may request the correction of inaccurate data or completion of incomplete data.
Right to erasure under Article 17 GDPR: You may request the deletion of your personal data where the statutory requirements are met.
Right to restriction of processing under Article 18 GDPR: You may request that the processing of your personal data be restricted where the statutory requirements are met.
Right to data portability under Article 20 GDPR: Where the statutory requirements are met, you may receive the data you have provided to us in a structured, commonly used, and machine-readable format or request its transmission to another controller.
Right to object under Article 21 GDPR: You may object to the processing of your personal data where the statutory requirements are met.
Withdrawal of consent: You may withdraw consent you have given at any time with effect for the future.
Right to lodge a complaint under Article 77 GDPR: You have the right to lodge a complaint with a data protection supervisory authority.

23. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR for the purposes of legitimate interests, you have the right under Article 21 GDPR to object at any time to such processing on grounds relating to your particular situation.

We will then cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or where the processing is required for the establishment, exercise, or defense of legal claims.

24. Data Protection Contact

If you have any questions regarding data protection or wish to exercise your data protection rights, you can contact us at:

Dekoli GmbH – Data Protection
Sophie-Charlotten-Str. 92
14059 Berlin
Germany

Email: datenschutz@werbecenter-berlin.de

25. Competent Data Protection Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority.

For a company established in Berlin, the following supervisory authority is particularly relevant:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Germany

Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de

26. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy where our data processing activities, the services we use, or the applicable legal framework change.

Last updated: September 2026