Privacy Policy

At Lys et Lune, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, place an order, subscribe to our communications or otherwise interact with us.
 

This Privacy Policy applies in accordance with the General Data Protection Regulation ("GDPR") and applicable German data protection law.

 

1. Data Controller

The controller responsible for the processing of personal data on this website is:
 

Lys et Lune
Hauffstraße 28
71111 Waldenbuch
Germany

Email: info@lysetlune.com
 

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us using the details above.

 

2. Personal Data We Collect

Depending on how you interact with our website, we may collect and process the following categories of personal data:

• Name

• Billing and shipping address

• Email address

• Telephone number

• Order and purchase information

• Payment-related information

• Account information, if customer accounts are available

• Communication and customer service correspondence

• Newsletter preferences

• IP address

• Browser type and device information

• Website usage information

• Cookie and consent preferences

We only collect personal data that is necessary for the relevant purpose.
 

3. Visiting Our Website

When you access our website, certain technical information may automatically be transmitted by your browser to our hosting provider.

This may include:

• IP address

• Date and time of access

• Requested pages or files

• Referring website

• Browser type and version

• Operating system

• Device information

This information is processed to ensure the secure, reliable and technically functional operation of our website.

The legal basis for this processing is Article 6(1)(f) GDPR, based on our legitimate interest in operating and securing our website.

Server log data is generally retained only for as long as necessary for security and technical purposes, unless longer storage is required by law or necessary to investigate security incidents.

Our website is hosted by:

[Hosting provider]
[Provider address / country]

Where required, we have entered into an appropriate data processing agreement with our hosting provider.
 

4. Orders and Purchases

When you place an order through our website, we process the information required to fulfil the purchase contract.

This may include:

• Name

• Email address

• Billing address

• Shipping address

• Telephone number, where required for delivery

• Products ordered

• Order value

• Payment method

• Transaction and order information

The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to perform our contract with you and to take steps requested by you before entering into a contract.

We may also retain certain transaction information where necessary to comply with legal accounting, tax and commercial retention obligations. In these cases, processing is based on Article 6(1)(c) GDPR.
 

5. Payment Processing

Payments made through our website may be processed by third-party payment service providers.

Depending on the payment methods offered on the website, these may include:

[PayPal / Stripe / Klarna / Shopify Payments / Apple Pay / Google Pay / other providers]

When you select a payment method, the information required to process your payment may be transmitted directly to the relevant payment provider.

Payment providers process personal data in accordance with their own privacy policies and applicable data protection laws.

We generally do not receive or store your complete credit or debit card details.

​

6. Shipping and Delivery

To fulfil your order, we may share the information necessary for delivery with shipping and logistics providers.

This may include your:

• Name

• Delivery address

• Email address

• Telephone number, where necessary for delivery notifications

Our shipping partners may include:

[DHL / UPS / DPD / FedEx / other shipping providers]

The legal basis is Article 6(1)(b) GDPR because this processing is necessary to fulfil your order.

​

7. Contacting Us

If you contact us by email, contact form, social media or another communication channel, we process the information you provide in order to respond to your enquiry.

This may include your name, email address, message content and any additional information you voluntarily provide.

Where your enquiry relates to an existing or potential purchase, processing is based on Article 6(1)(b) GDPR.

For other enquiries, processing may be based on Article 6(1)(f) GDPR and our legitimate interest in communicating with customers and interested parties.

​

8. Newsletter and Marketing Communications

If you subscribe to our newsletter or other email marketing communications, we process your email address and, where provided, your name and marketing preferences.

Marketing emails are generally sent on the basis of your consent under Article 6(1)(a) GDPR.

Where required, we may use a double opt-in process to confirm your subscription.

You may withdraw your consent at any time by using the unsubscribe link included in our marketing emails or by contacting us directly.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Our email marketing provider is:

[Klaviyo / Mailchimp / Brevo / Shopify Email / other provider]

Depending on the provider used, personal data may be processed outside the European Economic Area. Where required, appropriate safeguards are used for international transfers.
 

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device. They may be used to operate the website, remember your preferences, analyse website usage or provide personalised advertising.

We distinguish between:

Strictly necessary cookies

These cookies are required for functions such as shopping carts, checkout, security, language preferences or consent management.

Consent is generally not required where access to or storage of information on your device is strictly necessary to provide a digital service explicitly requested by you.

Analytics and performance cookies

These cookies help us understand how visitors interact with our website, for example which pages are viewed and how users navigate through the website.

Marketing and advertising cookies

These technologies may be used to measure advertising performance, create audiences and display more relevant advertising across third-party platforms.

Where legally required, analytics and marketing technologies are activated only after you have provided your consent.

You can manage or withdraw your cookie preferences at any time through [Cookie Settings / Privacy Settings] on our website.

​

10. Analytics

Subject to your consent, we may use analytics services to understand how visitors use the Lys et Lune website and to improve the website, our products and our marketing activities.

Services may include:

[Google Analytics 4]
[Shopify Analytics]
[Other analytics tools]

Depending on the service, information such as your IP address, device information, browser information and interaction with the website may be processed.

Where these services are not technically necessary, processing takes place only with your consent under Article 6(1)(a) GDPR and, where applicable, Section 25 of the German TDDDG.

You may withdraw your consent at any time through our cookie settings.

​

11. Advertising and Social Media Technologies

Subject to your consent, we may use advertising and conversion measurement technologies from third-party platforms.

These may include:

• Meta Platforms, including Facebook and Instagram

• Google Ads

• Pinterest

• TikTok

• [Other advertising platforms]

These services may process information regarding your interaction with our website and our advertisements.

The information may be used to:

• Measure advertising performance

• Understand conversions

• Create advertising audiences

• Display personalised advertising

• Improve our marketing campaigns

Where required, these technologies are used only after you provide consent.

Some providers may process personal data outside the European Economic Area. Where required, international transfers are protected through appropriate mechanisms such as adequacy decisions or Standard Contractual Clauses.

 

12. Social Media

Lys et Lune may operate profiles on platforms such as Instagram, Facebook, Pinterest, TikTok and other social networks.

When you interact with our social media profiles, the respective platform provider may process your personal data independently.

Please refer to the privacy policies of the respective social media providers for additional information regarding their processing activities.

​

13. Recipients of Personal Data

We may share personal data with trusted service providers where necessary for operating our business.

These may include:

• Website hosting providers

• E-commerce platform providers

• Payment providers

• Shipping and logistics providers

• Email and newsletter providers

• Customer service providers

• Analytics providers

• Advertising and marketing platforms

• IT and technical service providers

• Accountants, tax advisors and professional advisors

• Public authorities where disclosure is legally required

Service providers acting on our behalf are contractually required to process personal data only in accordance with applicable law and our instructions where required.

​

14. International Data Transfers

Some of the services we use may process personal data outside Germany or the European Economic Area.

Where personal data is transferred to a country outside the EEA, we take appropriate measures to ensure an adequate level of data protection.

Depending on the country and recipient, these measures may include:

• An adequacy decision by the European Commission

• Standard Contractual Clauses approved by the European Commission

• Additional contractual or technical safeguards

You may contact us for further information regarding safeguards applicable to international transfers.

​

15. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

The applicable retention period depends on the type of data and the purpose of the processing.

For example:

• Customer enquiries are retained for as long as necessary to process the enquiry.

• Newsletter information is generally retained until you unsubscribe or withdraw your consent.

• Order, payment and transaction information may be retained for longer periods where required by German commercial or tax law.

• Consent records may be retained where necessary to demonstrate compliance with data protection obligations.

After the applicable retention period has expired, personal data is deleted or anonymised unless continued storage is legally required.

​

16. Your Rights

Under the GDPR, you have various rights regarding your personal data.

Subject to the applicable legal requirements, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate personal data

• Request deletion of your personal data

• Request restriction of processing

• Object to certain processing activities

• Receive certain personal data in a structured, commonly used and machine-readable format

• Withdraw consent at any time

• Lodge a complaint with a competent data protection supervisory authority

Where processing is based on our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing where the legal requirements are met.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

To exercise your rights, please contact:

info@lysetlune.com

​

17. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

As Lys et Lune is located in Baden-Württemberg, the competent supervisory authority is generally:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
(Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

You may also contact the supervisory authority responsible for your place of residence, your place of work or the location of the alleged infringement.

 

18. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no transmission or storage method can guarantee complete security.

​

19. Automated Decision-Making

Unless explicitly stated otherwise, we do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you within the meaning of Article 22 GDPR.

 

20. Children's Privacy

Our website and products are not specifically directed at children.

We do not knowingly collect personal data from children where parental consent would be legally required.

If we become aware that personal data has been collected from a child unlawfully, we will take appropriate steps to delete it.

​

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies or legal requirements.

The most current version will always be available on this page.

​

Last updated: October 2026

​

22. Contact

For questions concerning privacy or the processing of your personal data, please contact:

​

Lys et Lune
Hauffstraße 28
71111 Waldenbuch
Germany

Email: info@lysetlune.com