Skip to content
elberry Advice
EN
DeutschРусскийTürkçeEnglishPolski

LEGAL INFORMATION

Privacy policy

1. Data controller

Responsible for data processing on this website is:

elberry
Owner: Paul Walter
Oberbeckerstr. 3
44329 Dortmund
Germany
Telephone: +49 231 22 38 57 30
Email: info@elberry.de

2. General information on data processing

The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and other applicable data protection regulations.

Personal data is any information relating to an identified or identifiable natural person.

3. Access to the website / server log files

When you access this website, the hosting provider or web server automatically collects information and stores it in so-called server log files. This applies in particular to:

  • IP address
  • Date and time of access
  • page/file accessed
  • Referrer URL
  • Browser used and browser version
  • operating system used
  • Host name of the accessing computer

The processing is carried out to ensure trouble-free operation of the website, to ensure system security and for technical administration.

The legal basis is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the secure and technically error-free provision of our website.

4. Cookies and technically necessary functions

Our website uses cookies for basic shop and session functions. These include in particular:

  • Session cookies
  • Cookies for assigning the shopping cart
  • Cookies to maintain login status

These cookies are necessary to provide the website and its essential functions, in particular shopping cart and session security. Login cookies are used when using the administration area.

The legal basis for technically necessary cookies is § 25(2) TDDDG. Subsequent processing of personal data is based on Article 6(1)(f) GDPR or, where necessary to perform the contract, Article 6(1)(b) GDPR.

External payment services are only loaded after the respective provider has been selected in the payment step. Additional technical data can be processed and storage technologies can be used. Information about payment providers can be found in Section 9.

When you select a language, we store your choice in the “elberry_language” cookie for up to 365 days. It contains only the language code de, en, ru, tr or pl and is used only for your selected language. You can change your choice at any time using the language selector or delete the cookie in your browser. Storage provides the language setting you expressly requested and is based on section 25(2), point 2 TDDDG. To the extent personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is providing your selected language.

5. Orders without a customer account

Orders are possible as a guest without a customer account. Registration for a customer account is currently not offered. The data and purposes processed for orders and inquiries are described in the following sections.

6. Orders and contract processing

If you order in our online shop, we process the personal data required to process the contract. These include in particular:

  • Name
  • Billing and delivery address
  • Email address
  • Telephone number, if provided or required
  • Order details
  • Payment Information
  • If applicable, information on assembly, installation, maintenance or advice requests

The processing takes place for the purpose of contract execution, delivery, invoicing, customer service and, if necessary, scheduling appointments for services.

The legal basis is Article 6 Paragraph 1 Letter b GDPR.

7. Contact form and contact

In the advice form, we process your name and email address, together with your telephone number and message if you provide them voluntarily. In the withdrawal form, we also process your order number or other contract reference and the specified items or entire order. Required fields are marked in each form; without these details we cannot identify and process the request through that form. You can still contact us directly by email or telephone.

The processing takes place exclusively to process your request and in the event of follow-up questions.

The legal basis is Article 6(1)(b) GDPR where your inquiry concerns entering into or performing a contract, or Article 6(1)(f) GDPR for other inquiries.

For other enquiries, our legitimate interest is handling your request appropriately and answering your questions. To protect the forms against abuse, we also use time-limited counters derived with a secret key to limit requests. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the security and availability of our contact functions.

8. Customer Service and Communication

Our customer service is provided directly by elberry and can be reached by telephone or email. If you contact us by telephone or email, we will process the data you provide to process your inquiry, provide customer service and, if necessary, initiate or implement a contract.

The legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

9. Payment Processing

Depending on the payment method chosen and offered during the ordering process, data is transmitted to the respective payment service provider. This may include name, contact and billing information, delivery address, order amount, order and transaction identifiers and technical information. The processing serves to process payments and prevent fraud. The transmission required for contract processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.

PayPal

Payments via PayPal are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal processes the data needed for payment and determines the payment options offered in your PayPal account. Further information: PayPal privacy policy.

Card payments via WooPayments

If card payments are offered via WooPayments, processing is carried out via WooPayments with the integration of Automattic and the payment partner Stripe. Further information on data processing, recipients and possible international data transfers: Automattic privacy policy and Stripe privacy policy.

Payment in advance by bank transfer

If you pay in advance, we process the information provided upon receipt of payment, in particular your name, payment amount and purpose, in order to assign the payment to your order.

10. Reviews/References

Our website displays general customer reviews or testimonials managed by the administrator.

Where personal data is published, this takes place only on an appropriate legal basis, in particular consent under Article 6(1)(a) GDPR or other processing permitted under data protection law.

11. Payment-Related Technical Data

The integration of payment services may include the processing of device and connection data as well as the use of cookies or similar technologies for payment processing and fraud prevention. Details can be found in the information provided by the respective payment providers in Section 9.

12. Recipients of personal data

Personal data will only be passed on to third parties if this is necessary for the execution of the contract, there is a legal obligation, you have consented or the transfer is permitted on another legal basis.

Recipients can in particular be:

  • Hosting service provider
  • technical service providers for operation and maintenance of the website
  • Payment service provider PayPal and, if card payment is offered, WooPayments, Automattic and Stripe
  • Shipping and logistics service provider
  • If necessary, service providers in connection with appointments or services

13. Storage period

We only store personal data for as long as is necessary for the respective purposes or as long as there are legal retention requirements.

Data from contractual relationships and invoices are stored within the framework of commercial and tax retention periods. Inquiries via the contact form as well as by email or telephone will be deleted as soon as they are no longer necessary for processing and there are no legal retention requirements.

We store declarations received through the withdrawal form, including their content, receipt time and technical acknowledgement status, to process them and document receipt. The legal bases are Article 6(1)(b) GDPR and, for statutory retention, Article 6(1)(c) GDPR together with section 147 AO. We generally retain these business records for six years, starting at the end of the calendar year of receipt. Any longer retention required by law remains unaffected. Technical mail-status logs are subject to the separate 30-day period described below.

14. Your Rights

In particular, you have the following rights within the framework of the applicable legal provisions:

  • Right to information in accordance with Art. 15 GDPR
  • Right to correction in accordance with Art. 16 GDPR
  • Right to deletion in accordance with Art. 17 GDPR
  • Right to restriction of processing in accordance with Art. 18 GDPR
  • Right to data portability in accordance with Art. 20 GDPR
  • Right to object in accordance with Art. 21 GDPR
  • Right to withdraw previously given consent with effect for the future

To exercise your rights, you can contact us at any time using the contact details above.

15. Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data.

16. Data Security

We take appropriate technical and organizational measures to protect your data against loss, manipulation, unauthorized access or other unauthorized processing.

17. Currentness and changes to this data protection declaration

This data protection declaration is valid as of October 2026.

Due to the further development of our website or due to changed legal or official requirements, it may become necessary to adapt this data protection declaration.

Product Reviews

If you submit a product review, we save your name, email address, review text, stars and, if applicable, the assignment to your customer account in our WordPress shop. WordPress also records IP addresses and browser IDs to prevent misuse. Only your specified name, date, stars, text and, if applicable, the “Verified Purchase” label appear publicly. The email address will not be published. We do not use any external avatar or rating services. The review generally remains published until it is removed; You can send requests for correction or deletion to info@elberry.de. No automatic advertising or review requests will be sent from this feature.

Requested filter change reminder

On request, we will send you one email reminder on the date you choose. We process your email address, appliance, chosen date, and the times of your registration and confirmation for this purpose. Registration is activated only when you open the email link and then click to confirm. No reminder is sent without confirmation. Unconfirmed registrations expire after 48 hours.

The email address is stored encrypted on our hosting and removed from this registration after sending, unsubscribing or a final delivery failure. Remaining technical records are deleted during regular cleanup after seven days have elapsed. You can unsubscribe using the unsubscribe link without an account. We use time-limited address and network hashes, not stored in plain text, to limit registration attempts. This registration applies only to the one-time reminder and is independent of statistics and advertising.

The legal basis for your requested reminder and registration with a confirmation email is your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time using the unsubscribe link, with effect for the future. Withdrawal does not affect the lawfulness of processing before withdrawal. Time-limited hash counters used to prevent abusive registrations are processed under Article 6(1)(f) GDPR; our legitimate interest is providing a secure reminder service protected against abuse.

Technical mail statuses and backups

To monitor shop operations, we store the time, category, technical identifier and sending status of shop emails. These status logs are deleted during regular cleanup after 30 days have elapsed. Recipient addresses, subject lines, email content and attachments are not stored in this status log. “Accepted by the mail transport” does not confirm delivery to the recipient’s inbox. Private shop backups contain the data stored for its operation and are used only for restoration and operation.

Voluntary shop statistics

If you agree, Elberry will record page and product views, shopping cart contents, checkout starts, contact clicks and the acceptance of inquiries or orders on its own hosting. This helps us to improve the shop. No form entries, names, email addresses, full web addresses or raw IP addresses are stored in the statistics and no statistical data is sent to Google or other analysis providers.

After your consent, the statistics use a random visit identifier in the cookie eb_cockpit_visit (30 minutes since the last measured action). Only a hash derived from it is stored on the server. The selection in the cookie eb_stats_consent valid for 180 days. The identifier refers to a measured visit, not a clearly identified person. Events are deleted after 90 days. To limit excessive statistics requests, a hash-only, per-minute network counter is used for a maximum of two minutes.

You can voluntarily agree or decline and change your selection at any time via “Statistics Settings”. After rejection or revocation, no further statistical events occur; the visit ID is deleted. Events that have already been saved will not be deleted retroactively. Do-Not-Track and Global Privacy Control are respected. Your purchase works regardless of the statistics. The management of orders through WooCommerce remains separate.

The legal bases for voluntary shop statistics and the visit identifier used for them are your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. The cookie storing your statistics choice is used only to respect that decision; section 25(2), point 2 TDDDG and, where personal data is involved, Article 6(1)(f) GDPR apply. Our legitimate interest is reliably respecting your privacy decision. Withdrawal does not affect the lawfulness of earlier processing.