Deutsch
1. Controller
ORising Deutschland Olha Vdovychenko Zettachring 4 70567 Stuttgart Germany
Telephone: +49 174 4363584 E-mail: info@orisingofficial.de
2. Hosting
Our website is hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting service provider.
When our website is accessed, technically necessary data is processed in server log files (e.g. IP address, date and time of access, accessed URL, referrer URL, browser used, and operating system). The processing is carried out to ensure the technically error-free and secure operation of the website on the basis of Art. 6 para. 1 lit. f GDPR.
3. Cookies and Consent Management
We use cookies and similar technologies. Technically necessary cookies are required for the operation of the website and are used on the basis of Art. 6 para. 1 lit. f GDPR.
For statistical, marketing, and convenience cookies, we use a consent management platform (CMP). Through this tool, you can grant, manage, and withdraw your consent to the setting of technically non-essential cookies. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 TTDSG.
4. Web Analysis with Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics enables us to evaluate the use of our website and improve our offerings.
Usage data (e.g. pages accessed, interactions, approximate location data, technical information about the browser and end device) may be processed and assigned to pseudonymous user profiles. It cannot be ruled out that data may be transferred to Google LLC in the USA.
The legal basis is your consent via the consent management tool pursuant to Art. 6 para. 1 lit. a GDPR. Transfers to the USA are carried out on the basis of the EU-US Data Privacy Framework and, additionally, the European Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.
5. Marketing Tools (Meta Pixel, TikTok Pixel)
We use marketing tools such as the Meta Pixel (Meta Platforms Ireland Limited) and the TikTok Pixel (TikTok Technology Limited) to evaluate visitor actions on our website and display interest-based advertising on the respective platforms.
In this context, visited pages, completed purchases, interactions with content, and technical data may be processed and assigned to the respective users of the platforms. Data may be transferred to the USA and other third countries.
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR via the consent management tool. Transfers to third countries take place on the basis of the EU-US Data Privacy Framework, where applicable, and additionally on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR.
6. Order Processing and Customer Account
For the processing of orders, we process the data you provide during the ordering process. This includes in particular: name, address, e-mail address, telephone number, date of birth where applicable, and order data.
If you create a customer account, we also store your login data (e-mail and password in hashed form) as well as your order history in your customer account.
The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract and implementation of pre-contractual measures).
7. Payment Service Providers
For the processing of payments, we use payment service providers (e.g. PayPal, Sofortüberweisung, Klarna, Stripe, and credit card providers). The data required for payment processing (e.g. name, invoice amount, IBAN, credit card data, e-mail address) is passed on to these service providers.
The legal basis for the processing is Art. 6 para. 1 lit. b GDPR (performance of a contract). In addition, further legal bases of the respective payment service providers may apply, to which we refer in their privacy notices.
8. Shipping Service Providers
For the purpose of delivering the ordered goods, we pass on your address data to the shipping service providers we use (in particular DHL, Hermes, DPD, UPS, and FedEx).
The legal basis is Art. 6 para. 1 lit. b GDPR, as the disclosure is necessary for the performance of the contract.
9. Newsletter
If you subscribe to our newsletter, we use your e-mail address and, where applicable, further voluntary information to regularly send you information about our products and offers.
The newsletter is sent via an e-mail service provider or the newsletter function of the shop system. We use the double opt-in procedure for registration, in which you must verify your registration via a confirmation link. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter.
10. Contact Form
If you use our contact form, we process the data you provide (name, e-mail address, telephone number, message) for the purpose of handling your inquiry.
Depending on the content of the inquiry, the legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual communication) or Art. 6 para. 1 lit. f GDPR (legitimate interest in handling inquiries).
11. Product Reviews
When submitting product reviews, we process the name you provide and the stored e-mail address in order to assign the review and prevent misuse.
The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in transparent, abuse-free reviews) as well as Art. 6 para. 1 lit. b GDPR insofar as the review is closely related to a purchase contract.
12. Social Media (Plugins, Feeds, Social Login)
Functions of social networks such as Facebook, Instagram, TikTok, YouTube, and Pinterest may be integrated into our website (e.g. share buttons, embedded feeds, social logins).
When activating or using these functions, personal data (e.g. IP address, browser data, interactions) may be transmitted to the respective providers and processed by them for their own purposes.
The legal basis is your consent via the consent management tool pursuant to Art. 6 para. 1 lit. a GDPR. Further information can be found in the privacy notices of the respective platforms.
13. Storage Period
As a matter of principle, we process and store personal data only for as long as this is necessary to fulfill the respective purposes.
In addition, we are subject to statutory retention obligations, in particular under commercial and tax law, for periods of up to ten years. After the expiry of the respective periods, the data is deleted or anonymized, unless other legal bases (e.g. the establishment, exercise, or defense of legal claims) prevent this.
14. Legal Bases for Processing
The processing of personal data is based on the following legal grounds:
- Art. 6 para. 1 lit. a GDPR – Consent
- Art. 6 para. 1 lit. b GDPR – Performance of a contract or pre-contractual measures
- Art. 6 para. 1 lit. c GDPR – Compliance with legal obligations
- Art. 6 para. 1 lit. f GDPR – Safeguarding legitimate interests
15. Your Rights
Within the scope of the statutory provisions, you have the following rights in relation to your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent granted with effect for the future
To exercise your rights, you can contact us at any time using the contact details provided above.
16. Right to Lodge a Complaint with a Supervisory Authority
You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.
17. Version
Version of this Privacy Policy: March 2026.