Privacy Policy

The party responsible for data processing is:

Eminia Trading GmbH

Gernotstrasse 16

44319 Dortmund

Email: datenschutz@eminiatrading.com

Phone: +49 2318868082

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access Data and Hosting

You may visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a "server log file," which documents the access and contains, for example, the name of the requested file, your IP address, the date and time of the request, the volume of data transferred, and the requesting provider (access data). This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves our legitimate interests—which, upon a balancing of interests, take precedence—in ensuring the proper presentation of our offerings, in accordance with Art. 6 Para. 1 Sentence 1 lit. f of the GDPR. All access data is deleted no later than one month after your visit to the site ends.

Hosting

Services related to hosting and the display of the website are provided in part by our service providers, who act as processors on our behalf. Unless otherwise stated in this privacy policy, all access data—as well as any data collected via forms provided on this website—are processed on their servers. If you have any questions regarding our service providers or the basis of our cooperation with them, please use the contact information provided in this privacy policy. Our service providers are based in—and/or use servers located in—the following countries, for which the European Commission has issued an adequacy decision confirming an adequate level of data protection: Canada, New Zealand, Japan, the United Kingdom, and the USA.

The adequacy decision for the USA serves as the legal basis for data transfers to that third country, provided that the respective service provider is certified. Until such certification is obtained, data transfers to these service providers are based on the European Commission’s standard contractual clauses.

Our service providers are based in—and/or use servers located in—the following countries: Australia, India, and Singapore.

There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s standard contractual clauses.

2. Data processing for contract fulfillment and communication

Data processing for contract fulfillment

We collect personal data when you voluntarily provide it to us as part of an order or when contacting us (e.g., via a contact form or email). Mandatory fields are marked as such because we require this data to fulfill the contract or to process your inquiry; without this information, you will be unable to complete your order or send your inquiry. The specific data collected can be identified from the respective input forms.

We use the data you provide to fulfill the contract and process your inquiries (including inquiries regarding, and the handling of, any potential claims arising from warranties, breaches of contract, or rights of withdrawal, as well as any statutory obligations to provide updates) in accordance with Article 6(1)(1)(b) of the GDPR. Further information regarding the processing of your data—specifically its disclosure to our service providers for the purpose of managing orders, payments, and shipping—can be found in the subsequent sections of this privacy policy. Once the contract has been fully executed, your data will be restricted from further processing and subsequently deleted following the expiration of any retention periods required under tax or commercial law, in accordance with Article 6(1)(1)(c) of the GDPR—unless you have expressly consented to the continued use of your data pursuant to Article 6(1)(1)(a) of the GDPR, or if we have reserved the right to use the data for other purposes permitted by law, about which we inform you in this policy. Contacting Us

As part of our communication with customers, we collect personal data to process your inquiries—in accordance with Article 6(1)(1)(b) of the GDPR—when you voluntarily provide such information to us (e.g., via a contact form, live chat tool, or email). Mandatory fields are marked as such, as we require this data to process your inquiry. The specific data collected can be identified from the respective input forms. Once your inquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data pursuant to Article 6(1)(1)(a) of the GDPR, or if we have reserved the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.

3. Data processing for the purpose of shipment handling

For the fulfillment of a contract in accordance with Art. 6 para. 1 sentence 1 lit. b of the GDPR, we share your data with the shipping service provider tasked with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

Data transfer to shipping service providers for the purpose of shipment notification

If you have provided us with your express consent during or after placing your order, we will—based on this consent and in accordance with Art. 6 para. 1 sentence 1 lit. a of the GDPR—share your email address with the selected shipping service provider. This allows them to contact you prior to delivery for the purpose of notifying you about the shipment or coordinating the delivery.

You may revoke your consent at any time by sending a message to the contact option described in this privacy policy. Upon revocation, we will delete the data you provided for this purpose, unless you have expressly consented to the continued use of your data or we have reserved the right to further data usage that is legally permitted and about which we inform you in this policy. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers. 4.1 Data Processing for Transaction Handling

Depending on the payment method selected, we share the data necessary for processing the payment transaction with our technical service providers, the relevant financial institutions, or the chosen payment service provider, to the extent required to complete the payment. This is done for the purpose of fulfilling the contract, in accordance with Article 6(1)(b) of the GDPR. In some cases, payment service providers collect the data required for payment processing themselves—for example, via their own websites or through a technical integration within the ordering process. In such instances, the privacy policy of the respective payment service provider applies.

Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has issued an adequacy decision confirming an appropriate level of data protection. In cases where data is transferred to third countries outside the EU/EEA for which no such adequacy decision exists, our cooperation is based on the European Commission’s standard contractual clauses for data protection.

If you have any questions regarding our payment processing partners or the legal basis for our cooperation with them, please use the contact information provided in this privacy policy.

4.2 Data processing for the purpose of fraud prevention and the optimization of our payment processes

Where applicable, we may provide the aforementioned service providers with additional data, which they use—alongside the data necessary for processing payments—for the purposes of fraud prevention and the optimization of our payment processes (e.g., invoicing, handling contested payments, or supporting accounting functions). In accordance with Article 6(1), first sentence, letter (f) of the GDPR, this serves our legitimate interests—which, following a balancing of interests, are deemed to outweigh other considerations—in protecting ourselves against fraud and ensuring efficient payment management.

5. Advertising via email

Email newsletter with subscription

If you subscribe to our newsletter, we will use the data required for this purpose—or any data you have provided separately—to send you our email newsletter on a regular basis, based on your consent pursuant to Article 6(1), first sentence, letter (a) of the GDPR. You may unsubscribe from the newsletter at any time, either by sending a message to the contact address provided below or by using the link included for this purpose in the newsletter itself. Once you have unsubscribed, we will remove your email address from our recipient list, unless you have explicitly consented to the continued use of your data under Article 6(1), first sentence, letter (a) of the GDPR, or unless we have reserved the right to use your data for other purposes that are legally permitted and about which we inform you in this policy.

6. Cookies and other technologies

6.1 General information

To make your visit to our website more engaging and to enable the use of certain features, we employ various technologies—including "cookies"—across our pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session—that is, once you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). You can find information regarding the storage duration in the overview provided within your web browser's cookie settings.

Protection of Privacy on End Devices

When you use our online services, we employ strictly necessary technologies to provide the digital service you have explicitly requested. Storing information on your end device, or accessing information already stored on your end device, does not require your consent in these cases.

For functions that are not strictly necessary, storing information on your end device—or accessing information already stored there—requires your consent. Please note that if you do not provide consent, some parts of the website may not be fully functional. Any consent you have granted will remain in effect until you adjust or reset the relevant settings on your end device.

Subsequent Data Processing via Cookies and Other Technologies

We use technologies that are essential for the operation of certain features on our website. These technologies collect and process your IP address, the time of your visit, information about your device and browser, and details regarding your use of our website. This is done on the basis of a balancing of interests, serving our legitimate interest in providing an optimized version of our services, in accordance with Article 6(1)(f) of the GDPR.

Furthermore, we use technologies to fulfill legal obligations to which we are subject (for example, to document consent given for the processing of your personal data), as well as for web analytics and online marketing purposes. Further information on this—including the specific legal basis for the data processing—can be found in the subsequent sections of this privacy policy. In some cases, we may also use technologies that are not individually listed in this privacy policy. You can find more detailed information about these technologies, including their respective legal bases for data processing, on the Usercentrics platform. You can access this platform by clicking on the fingerprint icon located in the bottom-right or bottom-left corner of the page. Cookie Settings

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Article 6(1), first sentence, point (a) of the GDPR, you may revoke your consent at any time by sending a message using the contact details provided in the privacy policy. Alternatively, you can click on the fingerprint icon located in the bottom right or bottom left corner of the page. Please note that if you choose not to accept cookies, the functionality of our website may be limited.

6.2 Use of the Usercentrics Consent Management Platform for Managing Consents

On our website, we use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about the cookies and other technologies employed on our site, and to obtain, manage, and document any consent required by law for the processing of your personal data through these technologies. This is necessary to fulfill our legal obligations under Article 6(1), first sentence, letter (c) of the GDPR, in conjunction with Article 7(1) of the GDPR, which requires us to be able to demonstrate that consent for the processing of your personal data has been obtained. Usercentrics is a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usercentrics web server creates a server log file containing your anonymized IP address, the date and time of your visit, information about your device and browser, and details regarding your consent choices. Your data will be deleted after three years, unless you have explicitly consented to further use of your data pursuant to Article 6(1), first sentence, letter (a) of the GDPR, or if we have reserved the right to use the data for other purposes that are legally permitted and about which we inform you in this statement.

Our service providers are based in—and/or utilize servers in—the following countries, for which the European Commission has issued an adequacy decision confirming an adequate level of data protection: the USA.

The adequacy decision for the USA serves as the legal basis for the transfer of data to a third country, provided that the respective service provider is certified. Such certification is in place.

7. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise specified for individual technologies, processing is based on your consent pursuant to Article 6(1) sentence 1(a) of the GDPR. Once the purpose for which the data was collected has been fulfilled and our use of the respective technology has ended, the data collected in this context will be deleted. You may revoke your consent at any time, with effect for the future. Further information regarding your options for revoking consent can be found in the "Cookies and Other Technologies" section. Additional details, including the legal basis for our cooperation with individual providers, are provided alongside the information for each specific technology. If you have any questions regarding these providers or the basis for our cooperation with them, please use the contact information provided in this privacy policy.

Use of Google Services

We use the technologies listed below, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information regarding your use of our website, which is collected automatically by these Google technologies, is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for a specific technology, data processing is carried out on the basis of an agreement between joint controllers, as defined in Article 26 of the GDPR. Further information on how Google processes data can be found in Google's privacy policy.

Some of our service providers are based in, or use servers located in, countries outside the EU and the EEA for which the European Commission has issued an adequacy decision confirming an adequate level of data protection.

Some of our service providers are based in, or use servers located in, countries outside the EU and the EEA for which no adequacy decision has been issued by the European Commission. Our cooperation with these providers is based on the European Commission’s standard contractual clauses for data protection.

Google Maps

For the visual representation of geographical information, Google Maps collects data regarding your use of its features—specifically your IP address and location data—transmits this information to Google, and subsequently processes it. We have no control over this subsequent data processing.

8. Integration of the Trusted Shops Trustbadge/other widgets

Trusted Shops widgets are embedded on this website to display Trusted Shops services (e.g., the trust seal, collected reviews).

This serves our legitimate interests—which, following a balancing of interests, take precedence—in ensuring optimal marketing by facilitating a secure shopping experience, in accordance with Article 6(1), first sentence, letter (f) of the GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"), with whom we act as joint controllers for data protection purposes pursuant to Article 26 of the GDPR. In this privacy policy, we provide you with information regarding the essential terms of our agreement under Article 26(2) of the GDPR.

When you interact with the Trustbadge AI+, session cookies are set to store your login status and display the "welcome layer," which provides details about the specific online shop (company information, reviews, information regarding buyer protection) as well as the "#trstd secret." A cookie is also set to recognize logged-in users; this cookie is stored for a maximum of 400 days following login. Furthermore, session cookies are used to send push notifications—provided the user has consented to receive them. This is necessary for Trusted Shops to provide the digital service you have requested. Trusted Shops is responsible for the data processing that occurs when you interact with the Trustbadge AI+. In the context of the joint controllership between us and Trusted Shops SE, please address any data protection-related inquiries or requests to exercise your rights primarily to Trusted Shops, using the contact options provided in the [privacy information/data protection notice]. Regardless of this, you may always contact either of the joint controllers; if necessary, your inquiry will then be forwarded to the other controller for a response.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a U.S.-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured by an adequacy decision from the European Commission, which can be viewed here for the United States. Service providers based in the U.S. are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. In cases where service providers are not certified under the DPF, standard contractual clauses have been implemented as appropriate safeguards.

When the Trustbadge is accessed, the web server automatically stores a "server log file," which includes your IP address, the date and time of the access, the volume of data transferred, and the requesting provider (access data), thereby documenting the request. The IP address is anonymized immediately upon collection, ensuring that the stored data cannot be linked to you personally. This anonymized data is used primarily for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

Following the completion of an order, order information (order total, order number, and the product purchased, if applicable) as well as your email address—hashed using a cryptographic one-way function—are transmitted to Trusted Shops. The legal basis for this is Article 6(1), first sentence, point (f) of the GDPR. This process is used to verify whether you are already registered for services provided by Trusted Shops; it is therefore necessary for the fulfillment of our legitimate interests—and those of Trusted Shops—in providing transactional review services linked to the specific order, in accordance with Article 6(1), first sentence, point (f) of the GDPR. If you are already registered, any further processing is governed by the contractual agreement between you and Trusted Shops. If you are not yet registered for these services, you will subsequently be given the opportunity to do so. Any further processing following registration is likewise governed by the contractual agreement with Trusted Shops. If you are not yet registered for these services, you will also be given the opportunity to provide your consent to receive invitations to submit reviews. If you do not provide such consent, all transmitted data will be automatically deleted by Trusted Shops, rendering it impossible to identify you personally.

Trusted Shops engages service providers for hosting, monitoring, and logging purposes. The legal basis for this is Article 6(1), point (f) of the GDPR, for the purpose of ensuring smooth, uninterrupted operation. In this context, data may be processed in third countries (the USA, the United Kingdom, and Israel). An adequate level of data protection is ensured in each case by an adequacy decision from the European Commission, which can be accessed here for the USA, here for the United Kingdom, and here for Israel. Service providers based in the USA that we engage are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information can be found here. In cases where service providers are not certified under the DPF, Standard Contractual Clauses have been implemented as an appropriate safeguard.

9. Social Media

9.1 Social buttons from Facebook (by Meta), X (formerly Twitter), and Instagram (by Meta)

Our website incorporates social buttons from various social networks. These are integrated into the page solely as HTML links; therefore, no connection to the respective provider's servers is established when you visit our website. If you click on one of these buttons, the website of the corresponding social network will open in a new browser window, where you can, for example, use the "like" or "share" buttons.

9.2 Our online presence on Facebook (by Meta), X (formerly Twitter), and Instagram (by Meta)

If you have provided your consent to the respective social media operator in accordance with Article 6(1) sentence 1(a) of the GDPR, your data will be automatically collected and stored when you visit our online presence on the aforementioned social media platforms. This data is used for market research and advertising purposes, and is processed to create usage profiles under pseudonyms. These profiles may be used, for example, to display advertisements—both on and off these platforms—that are likely to align with your interests. Cookies are generally used for this purpose. For detailed information regarding how each social media operator processes and uses your data, as well as contact details, your rights, and the settings available to protect your privacy, please refer to the providers' privacy policies linked below. Should you require further assistance in this regard, please feel free to contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is typically transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with visits to a Facebook (by Meta) fan page is carried out based on an agreement between joint controllers, in accordance with Article 26 of the GDPR. Further information (including details on “Insights” data) can be found here. Our service providers are based in and/or use servers located in the following countries, for which the European Commission has issued an adequacy decision confirming an adequate level of data protection: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the USA serves as the legal basis for the transfer of data to this third country, provided that the respective service provider is certified. Such certification is in place.

Our service providers are based in and/or use servers located in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico.

There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on the following safeguards: standard contractual clauses (standard data protection clauses) issued by the European Commission.

X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”). Information automatically collected by X regarding your use of our online presence on X is generally transmitted to and stored on a server operated by X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

Our service providers are based in and/or use servers located in countries outside the EU and the EEA for which the European Commission has issued an adequacy decision confirming an adequate level of data protection.

Our service providers are based in and/or use servers located in countries outside the EU and the EEA. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on standard contractual clauses (standard data protection clauses) issued by the European Commission.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information regarding your use of our online presence on Instagram, which is collected automatically by Meta Platforms Ireland, is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visits to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers, in accordance with Article 26 of the GDPR. Further information (regarding “Insights” data) can be found here.

Our service providers are based in—and/or utilize servers located in—the following countries, for which the European Commission has issued an adequacy decision confirming an adequate level of data protection: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the USA serves as the legal basis for the transfer of data to a third country, provided that the respective service provider is certified. Such certification is in place.

Our service providers are based in—and/or utilize servers located in—the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico.

There is no adequacy decision from the European Commission for these countries. Our cooperation with these providers is based on the following safeguards: the European Commission’s standard contractual clauses for data protection.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about the personal data concerning you that we process, to the extent specified therein;

pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate personal data or the completion of personal data concerning you that we store;

pursuant to Art. 17 GDPR, the right to request the erasure of personal data concerning you that we store, unless further processing is required:

for exercising the right of freedom of expression and information;

for compliance with a legal obligation;

for reasons of public interest; or

for the establishment, exercise, or defense of legal claims;

pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data if:

you contest the accuracy of the data;

the processing is unlawful, but you oppose the erasure of the data;

we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or

you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller;

pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. Generally, you may contact the supervisory authority of your habitual residence, your place of work, or the place of our company's registered office. Right to Object

Insofar as we process personal data as explained above for the purpose of safeguarding our legitimate interests—which, upon a balancing of interests, are deemed to prevail—you have the right to object to such processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you are only entitled to object if there are grounds relating to your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply if the processing is carried out for the purposes of direct marketing. In such cases, we will no longer process your personal data for that purpose.

10.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, withdraw previously granted consent, or object to a specific use of your data, please contact us directly using the contact details provided in our legal notice (Impressum).