Privacy policy

Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how GRÜNWASCHEN collects, uses and protects personal data when you visit our website, place an order, create or use a customer account, subscribe to our newsletter, contact us or otherwise interact with our online services.

The controller responsible for the processing of your personal data is:

Uroš Kramberger – Einzelunternehmen
trading as GRÜNWASCHEN
Alfred-Kowalke-Str. 30
10315 Berlin
Germany

Email: info@gruenwaschen.com

Physical store:
GRÜNWASCHEN
Rosa-Luxemburg-Str. 25
10178 Berlin
Germany

1. Personal data we process

Depending on how you interact with us, we may process the following categories of personal data.

Information you provide to us

  • Contact information such as your name, email address, telephone number, billing address and shipping address.
  • Order information, including products purchased, order value, delivery information, returns and refunds.
  • Customer account and authentication information, where you create or use a customer account.
  • Payment-related information. Payments are processed through Shopify and the payment service providers offered at checkout. We generally do not receive or store your complete payment card details.
  • Communications you send to us, including customer service requests, emails, return requests and other messages.
  • Newsletter subscription information and marketing preferences.

Information collected automatically

When you use our website, certain technical information may be collected automatically, including:

  • IP address;
  • browser and device information;
  • operating system;
  • pages visited and referring pages;
  • date, time and duration of visits;
  • shopping cart and checkout interactions;
  • cookie identifiers and similar technical identifiers;
  • interaction data such as clicks, scrolling and navigation behaviour, where analytics technologies are enabled.

We may also receive limited personal data from service providers involved in processing payments, delivering orders, preventing fraud or operating our online store.

2. Why we process personal data and our legal bases

We process personal data only where we have a legal basis to do so. Depending on the purpose, the following legal bases may apply:

Performance of a contract – Article 6(1)(b) GDPR

We process personal data where necessary to:

  • process and fulfil your order;
  • process payments;
  • arrange shipping and delivery;
  • process returns and refunds;
  • manage customer accounts;
  • respond to enquiries relating to a purchase or potential purchase.

Legal obligations – Article 6(1)(c) GDPR

We process and retain certain information where required by law, particularly for accounting, tax, commercial and regulatory purposes.

Consent – Article 6(1)(a) GDPR

Where required, we rely on your consent for:

  • newsletter and promotional communications;
  • non-essential analytics technologies;
  • advertising and marketing technologies;
  • personalisation technologies.

You may withdraw your consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Legitimate interests – Article 6(1)(f) GDPR

Where appropriate, we process personal data on the basis of our legitimate interests, including:

  • maintaining the security and functionality of our website;
  • preventing fraud and misuse;
  • protecting our legal rights;
  • responding to general business enquiries;
  • understanding and improving our services where this can lawfully be done without consent.

3. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some cookies are technically necessary for the operation of the website, for example to provide shopping cart, checkout, security, authentication, language or privacy preference functions.

Where the storage of information on your device, or access to information already stored on your device, is strictly necessary to provide a service expressly requested by you, such technologies may be used without consent in accordance with Section 25(2) TDDDG.

Non-essential cookies and comparable technologies used for analytics, marketing, advertising or personalisation are activated only where the legally required consent has been obtained. The legal basis for storing or accessing information on your device is Section 25(1) TDDDG and, where personal data is subsequently processed on the basis of consent, Article 6(1)(a) GDPR.

You can manage or withdraw your cookie consent at any time through the cookie settings available on our website.

4. Analytics and advertising services

Subject to your consent where required, we may use the following analytics and advertising services:

Google Analytics and Google advertising services

We use Google services to understand how visitors use our website and, where enabled, to measure the performance of advertising campaigns.

These services may process information such as your IP address, device information, browser information, pages visited, interactions with our website, approximate location information and information about purchases or other website events.

Meta Pixel

We may use the Meta Pixel from Meta Platforms to measure advertising performance, understand actions taken after seeing or clicking an advertisement and create or improve advertising audiences.

Depending on your consent settings, Meta may receive technical device information, cookie or browser identifiers and information about actions performed on our website, such as viewing a product, adding a product to the cart or completing a purchase.

Microsoft Clarity

We use Microsoft Clarity to better understand how visitors interact with our website.

Clarity may process interaction and usage information such as page views, clicks, scrolling, navigation behaviour, device information and session information. Depending on the configuration and your consent, these insights may include session recordings and aggregated website usage analytics.

TikTok Pixel

Where enabled, we use the TikTok Pixel to measure the effectiveness of TikTok advertising and understand actions taken by users after interacting with our advertising.

Pinterest Tag

Where enabled, we use the Pinterest Tag to measure the effectiveness of Pinterest advertising and understand website actions associated with Pinterest campaigns.

Analytics and advertising technologies described in this section are used only in accordance with your consent where consent is legally required.

5. Newsletter and marketing communications

If you subscribe to our newsletter, we process your email address and, where provided, related subscription information for the purpose of sending news, product updates, events and other marketing communications.

Newsletter data may be processed using Mailchimp, an Intuit service, which provides email marketing and newsletter infrastructure.

Marketing communications are sent on the basis of your consent where consent is required by law.

You can unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting info@gruenwaschen.com .

6. Shopify

Our online store is operated using the Shopify ecommerce platform.

Shopify processes personal data required to provide the technical infrastructure of our online store, including hosting, customer accounts, shopping cart functions, checkout, order processing, security and related ecommerce services.

In many situations Shopify processes customer personal data on our behalf as a data processor. For certain Shopify consumer services or enhanced services, such as services customers use directly with Shopify, Shopify may process personal data as an independent controller in accordance with its own privacy terms.

7. Payment providers

Payments are processed by the payment providers available to you at checkout.

Depending on the payment method selected, relevant personal and payment information is transmitted to the payment provider to authorise and process the transaction, prevent fraud and comply with legal obligations.

The payment provider may process your data as an independent controller in accordance with its own privacy policy.

8. Shipping and fulfilment providers

To deliver your order, we share the information required for delivery with the shipping or logistics provider used for the relevant shipment.

This generally includes your name, delivery address and, where required for delivery coordination, your email address or telephone number.

The shipping provider used may vary depending on the destination, shipment, service availability and delivery method.

9. Other recipients of personal data

Where necessary for the purposes described in this Privacy Policy, we may disclose personal data to:

  • Shopify and its authorised subprocessors;
  • payment service providers;
  • shipping and logistics providers;
  • email and newsletter service providers;
  • analytics and advertising providers;
  • IT, hosting and security service providers;
  • accountants, tax advisers or professional advisers;
  • courts, authorities or public bodies where disclosure is required by law.

We do not sell customer personal data as a standalone commercial product. Personal data may, however, be shared with service providers and advertising partners as described in this Privacy Policy.

10. International transfers of personal data

Some of the service providers we use operate internationally. Personal data may therefore be processed in countries outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we and our service providers use legally recognised transfer mechanisms where required. These may include:

  • adequacy decisions issued by the European Commission;
  • the EU-U.S. Data Privacy Framework where the recipient is validly certified;
  • European Commission Standard Contractual Clauses;
  • Binding Corporate Rules;
  • other safeguards permitted under applicable data protection law.

Shopify may process customer personal data internationally. Depending on the transfer concerned, Shopify uses mechanisms including adequacy decisions, Standard Contractual Clauses and Binding Corporate Rules.

11. How long we keep personal data

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

In particular:

  • Order, invoice, accounting and tax-related records may be retained for statutory periods of generally 6, 8 or 10 years depending on the type of document and applicable legal requirement.
  • Customer account information is generally retained while the account exists and may be retained afterwards where necessary to comply with legal obligations or establish, exercise or defend legal claims.
  • Newsletter subscription data is generally retained until you unsubscribe or withdraw your consent. Limited information may subsequently be retained where necessary to document or respect your opt-out.
  • Customer service correspondence is retained for as long as necessary to deal with the request and, where relevant, for the establishment, exercise or defence of legal claims.
  • Cookie and analytics information is retained according to the relevant cookie, provider configuration and consent settings.

12. Your rights under the GDPR

Subject to the conditions provided by applicable law, you have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • receive certain personal data in a portable format;
  • object to processing based on legitimate interests;
  • withdraw consent at any time with effect for the future;
  • lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact us at: info@gruenwaschen.com .

13. Right to object

Where we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

14. Data security

We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, no method of transmission or storage can guarantee absolute security.

15. Children

Our online services are not specifically directed at children under the age of 16, and we do not knowingly collect personal data from children for marketing purposes.

If you believe that personal data relating to a child has been provided to us improperly, please contact us.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when our services, technologies or legal obligations change.

The current version will be published on this page together with the date of the latest update.

17. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

Our competent supervisory authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
www.datenschutz-berlin.de

18. Contact

If you have questions about this Privacy Policy or the processing of your personal data, contact:

Uroš Kramberger – GRÜNWASCHEN
Alfred-Kowalke-Str. 30
10315 Berlin
Germany
Email: info@gruenwaschen.com