Privacy Policy
Privacy Policy (Datenschutzerklärung) according to the EU General Data Protection Regulation (GDPR / DSGVO). Last updated: 19 September 2026.
1. Controller
Georgela-Mariana Cucuiet
Greuner Brook 1, 21271 Hanstedt, Germany
Phone: +49 1512 0734697
E-mail: office@cleosdeco.com
A data protection officer is not appointed, as this is not required by law for this business.
2. General information
We take the protection of your personal data seriously and process it only in accordance with the GDPR, the German Federal Data Protection Act (BDSG) and the TDDDG. This policy explains what data we collect when you visit cleosdeco.com or place an order, why we collect it, and what rights you have.
3. Hosting and server log files
This website runs on a virtual server operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in Frankfurt am Main (EU). When you visit the site, the web server automatically records: IP address, date and time of the request, requested page, referrer URL, browser type and version, operating system. This data is technically necessary to deliver the website and to ensure its security (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days at the latest unless needed to investigate a security incident. A data processing agreement (Art. 28 GDPR) is in place with the hosting provider.
4. Cookies
We only use strictly necessary cookies (session and cart, CSRF protection, your language choice), set on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. We do not use analytics, advertising or tracking cookies, and no third-party content is loaded without your action. Details are listed in our Cookie Policy.
5. Orders
When you order in our shop we collect the data required to fulfil the contract: name, billing and delivery address, e-mail address, phone number (optional), ordered items and the payment status transmitted to us by the payment provider (Art. 6 (1) (b) GDPR). There are no customer accounts; you order as a guest. Order data is retained for 10 years to comply with commercial and tax retention obligations (§ 147 AO, § 257 HGB – Art. 6 (1) (c) GDPR); afterwards it is deleted or anonymised. Abandoned carts are deleted after 30 days.
6. Payment provider
Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland ("Stripe Checkout"). When you pay, you are forwarded to Stripe's payment page; the payment data you enter there (card, SEPA, PayPal via Stripe) is processed by Stripe, not by us. We transmit your name, e-mail address, order amount and order number to Stripe (Art. 6 (1) (b) GDPR). Stripe's privacy policy: stripe.com/privacy.
7. Shipping
To deliver your order we pass your name, delivery address and, where required for notification, your e-mail address or phone number to the shipping carrier (DHL or Deutsche Post) on the basis of Art. 6 (1) (b) GDPR.
8. Contact form and e-mail
If you contact us via the contact form or by e-mail, we store your details (name, e-mail address, message and, if given, phone number) to handle your request (Art. 6 (1) (b) or (f) GDPR). Contact form submissions are deleted after 12 months unless legal retention periods apply.
9. Newsletter
If you subscribe to our newsletter we store your e-mail address on the basis of your consent (Art. 6 (1) (a) GDPR) using a double opt-in procedure. You can unsubscribe at any time via the link in every newsletter or by e-mailing office@cleosdeco.com.
10. Social media, fonts and embedded content
Our pages contain plain links to our social media profiles; clicking a link opens the respective platform, whose privacy policy applies. Fonts are hosted on our own server – no connection to Google Fonts or other font services is made. Maps and videos from third parties are only loaded after you click on them.
11. Recipients and transfers to third countries
We pass personal data on only to the recipients named in this policy (hosting, payment, shipping, newsletter) and to authorities where we are legally obliged to. Where a provider processes data outside the EU/EEA, this happens on the basis of an adequacy decision or EU standard contractual clauses (Art. 44 ff. GDPR).
12. Your rights
- Access to your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interest (Art. 21 GDPR)
- Withdrawal of consent at any time with effect for the future (Art. 7 (3) GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.
To exercise your rights, e-mail office@cleosdeco.com.
13. Data security and changes to this policy
This site is delivered over an encrypted connection (TLS). We update this policy whenever our processing or the legal requirements change; the current version is always available on this page.