Privacy

Privacy Policy of mbDESIGN GmbH & Co. KG

Effective: August 1, 2025

§ 1 General Information

We process your personal data (e.g., salutation, name, address, email, phone number, payment details) in compliance with the GDPR, TDDDG, and other applicable data protection regulations. This policy explains the purposes, recipients, legal bases, retention periods of processing, and your rights. Applies to our online shop (B2B/B2C) at https://mbdesign.shop. External links lead to third-party services with independent privacy practices.

§ 2 Contractual Data Processing

(1) Purpose
We process order data (address, payment information etc.) for contract fulfillment. Without this data, delivery isn't possible. For pre-contractual inquiries (e.g., via contact form), we process data to prepare offers.

(2) Legal Basis
Art. 6(1)(b) GDPR (contract performance).

(3) Recipients
Payment processors (e.g., PayPal), shipping providers (e.g., DHL), IT services, and potentially suppliers (dropshipping).

(4) Retention
Contract data: Until statutory warranty periods expire (typically 2 years).
Commercial/tax records: 10 years per § 257 HGB, § 147 AO.
Pre-contract data: Until decision about contract conclusion.

§ 3 Web Analytics & Marketing

(1) Google Analytics (anonymized)
With your consent (Art. 6(1)(a) GDPR), we use Google Analytics by Google Ireland Limited. IPs are anonymized; no personal data (names, addresses etc.) is transferred. Data may flow to the US (standard contractual clauses). Retention: 14 months.
Opt-out: Browser plugin or cookie settings.

(2) Meta Pixel (anonymized)
For ad analysis (with consent under Art. 6(1)(a) GDPR), we use Meta Pixel by Meta Platforms Ireland. No direct personal identifiers (like names) are created. Cookies: Up to 1 year; US data transfers possible.
Opt-out: Via cookie banner or Facebook settings.

(3) Microsoft Clarity (anonymized)
For behavior analysis (heatmaps, session replays), we use Microsoft Clarity with consent (Art. 6(1)(a) GDPR). All data is pseudonymized; no personal content captured. Retention: 365 days. Data may transfer to the US (EU-US Data Privacy Framework).
Opt-out: Via cookie banner.

(4) PIMS Support
From April 2025, we'll honor centralized consents via Personal Information Management Services (e.g., Privacy Sandbox) to reduce cookie banners.

§ 4 Cookies & Technologies

(1) Purpose
We use cookies for:
- Technically necessary functions (cart, login: Art. 6(1)(b/f) GDPR)
- Analytics/marketing (only with consent: Art. 6(1)(a) GDPR)

(2) Management
On first visit, choose between "Accept All" or "Reject All" in our consent banner. Settings adjustable anytime via footer.

(3) Retention
Session cookies: Until browser closure.
Persistent cookies: Up to 2 years (tool-specific).

§ 5 Third-Party Services

(1) YouTube
Embedded videos use "privacy-enhanced mode." If logged into YouTube, usage may be linked to your account (Art. 6(1)(f) GDPR).

(2) Google Maps
Maps via API; IPs transferred to Google (Art. 6(1)(f) GDPR).

(3) Google Fonts
Fonts are locally hosted; no data transfer to Google.

(4) PayPal
Payments subject to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

§ 6 Newsletter

(1) Processing
For subscriptions (double opt-in), we store email/name for product updates (Art. 6(1)(a) GDPR). Open rates analyzed anonymously.

(2) Withdrawal
Unsubscribe anytime via link in newsletters or email to [email protected].

§ 7 Your Rights

Under GDPR, you have the right to:

Access (Art. 15) your stored data
Rectification (Art. 16) of incorrect data
Erasure (Art. 17), unless retention obligations apply
Restriction (Art. 18) of processing
Data portability (Art. 20) in machine-readable format
Withdraw consent (Art. 7(3)) anytime
Object (Art. 21) to direct marketing or processing under Art. 6(1)(f)
Lodge a complaint (Art. 77) with a supervisory authority

§ 8 Controller & Contact

Controller:
mbDESIGN GmbH & Co. KG
Im Steinigen Graben 18, 63571 Gelnhausen, Germany
Phone: +49 6051 91500 | Email: [email protected]

Data Protection Officer:
Ingo Hammes
Email: [email protected]

Current version at: https://mbdesign.shop/en/privacy/