Legal · processing of personal data
No consent banner, because nothing is set that would need one. Here is what this site actually processes — and what it does not.
NoteThis is an English translation for convenience. The binding version is the German privacy policy at memmo.eu/datenschutz.
The controller for the processing of personal data on this website is Memmo Europe LTD, Werner-von-Siemens-Straße 2–6, 76646 Bruchsal, Germany, represented by Mehmet Salman.
For questions about data protection, a message to memmo.europe@web.de or a call to +49 7251 3048080 is enough.
No data protection officer has been appointed; there is no obligation to do so under Art. 37 GDPR.
On every visit, the browser transmits technical data which the hosting provider logs briefly: shortened IP address, date and time, the address requested, status code, volume of data transferred, browser type and operating system.
This processing is necessary to operate and secure the site. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in a reachable and trouble-free website.
The logs are not merged with other data sources and are deleted after a short time.
This site sets no advertising or analytics cookies. That is why there is no consent banner either.
The cart is kept in the browser's local storage so that the selected items survive a change of page. These details only leave the device once an order is placed, and they can be deleted at any time via the browser settings.
On the way to the checkout, the payment provider sets its own cookies which are technically necessary for processing the payment. That happens on its site, not on this one.
The fonts used (Sora, IBM Plex Sans, IBM Plex Mono) are bundled when the site is built and delivered from our own server. Visiting the site creates no connection to Google Fonts and transmits no IP address there.
All images are likewise stored on our own server. No third-party content is loaded; no maps, videos or social network buttons are embedded. The references to Google Maps, eBay and Facebook are plain links — only a click on them establishes a connection to the respective provider, and from that point their privacy policy applies.
For an order we process the details needed to fulfil it: name, delivery and billing address, e-mail address, where applicable a phone number, and the items and prices ordered. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).
Payment runs through Stripe. Payment details such as card numbers are entered and processed exclusively there; we neither see nor store them. Stripe receives the details belonging to the payment transaction for this purpose. The legal basis is Art. 6 (1) (b) GDPR.
For delivery we pass the name and address to the carrier engaged (DHL, UPS, GLS or DPD) as far as this is necessary for the delivery.
Order and invoice data are subject to commercial and tax retention periods of up to ten years (Art. 6 (1) (c) GDPR). Until those periods expire, processing is limited to storage.
Anyone using the enquiry form transmits a name, one way of being contacted (e-mail or phone) and the text of the message. The transmission runs through a form service which receives the message and forwards it to the company's mailbox.
The form contains an additional field invisible to humans, to fend off automated submissions. The only thing evaluated is whether it stayed empty.
Enquiries by e-mail or phone are processed as they arrive. The legal basis is Art. 6 (1) (b) GDPR for enquiries relating to a purchase, otherwise Art. 6 (1) (f) GDPR.
Enquiries are deleted once they have been dealt with and no retention obligation stands in the way.
To see which pages are being visited, a small record is transmitted per visit: the address requested, the referring page and, where applicable, campaign parameters from the address bar.
No cookie is set, no identifier is stored in the browser and no profile is built across sessions. If the browser sends the «Do Not Track» signal, the transmission is omitted entirely.
The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in being able to judge demand for individual areas of the site.
Personal data is only received by parties necessary for operating the site and handling an order: the hosting provider, the payment provider, the form service and the respective carrier.
The agreements on processing required by Art. 28 GDPR are in place with these service providers. Data is not sold.
Where processing takes place outside the EU, it is based on the European Commission's standard contractual clauses or on an adequacy decision.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on a legitimate interest (Art. 21 GDPR).
An informal message to memmo.europe@web.de is enough to exercise these rights. Consent once given can be withdrawn at any time with effect for the future.
Independently of this, there is a right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
The site is delivered exclusively over an encrypted connection (TLS). Entries in the form and at the checkout are transmitted over this encrypted connection.
If the technology behind the site changes, this policy is adjusted. The version available here is the one that applies.
NoteThis policy describes the technical state of this website and is based on what it demonstrably does. It does not replace a legal review — especially not once further systems are added in the business (newsletter, accounting, further marketplaces). Send us your reviewed version and yours will stand here.
