Privacy Policy

Privacy Policy

LANO MOEBEL

https://lanomoebel.de/

I. GENERAL INFORMATION ON DATA PROCESSING

The controller responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is:

“LANO MEBLE” SIWIK CEZARY,

Tyble 43C,

98-420 Sokolniki/Poland

VAT ID: PL6190013551

REGON: 100363308

E-mail: info@lanomoebel.de

complaint@lanofurniture.com

Tel: +49 015172504268

With the following privacy policy we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we alone or together with others decide on the purposes and means of processing. In addition, we inform you below about third-party components we use for optimization purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.
Please read these provisions carefully to learn how we handle your personal data.

II. PERSONAL DATA

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the GDPR, “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The controller declares that he pays special attention to protecting the interests of the data subjects and in particular ensures that:

personal data are processed lawfully, fairly and in a transparent manner for the data subjects;
personal data are collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes;
personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
personal data are accurate and, where necessary, kept up to date;
personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
personal data are processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Providing personal data is voluntary, but necessary for the purposes mentioned in Section III.
We guarantee the security of the data you provide to us materially, electronically and administratively. We strongly advise you to take all necessary precautions to protect your data when browsing the Internet.
On all websites where personal data are entered, we use standard SSL encryption (Secure Sockets Layer).
If, within this privacy policy, content, tools or other means of other providers (hereinafter referred to collectively as “third-party providers”) are used and their stated headquarters are in a third country, it is assumed that data will be transferred to the countries of the third-party providers. Third countries are countries in which the GDPR is not directly applicable law, i.e. countries outside the EU or the European Economic Area. The transfer of data to third countries only takes place if there is an adequate level of data protection, the user’s consent, or another legal basis.

III. PURPOSES AND GROUNDS FOR PROCESSING PERSONAL DATA

Your personal data may be processed for different purposes and on different legal grounds, depending on which functionalities of the online shop you use, in particular for concluding and performing contracts concluded with you, for carrying out marketing, analysis or statistical activities, for improving the quality of services, and for fulfilling legal obligations incumbent on the controller. Details are provided below.

ONLINE SHOP ACCOUNT / E-SERVICES

The personal data you provide in connection with creating an account in the online shop, as well as other personal data collected in connection with your activity in the online shop and the use of electronic services, are primarily processed to enable your registration in the online shop and operation of your account as well as the use of other available electronic services. The legal basis for processing your personal data for this purpose is the necessity for the performance of the service contract concluded with the controller – Art. 6 para. 1 lit. b) GDPR.

Your personal data may also be processed for marketing, analysis and statistical purposes as well as for investigation or defense of potential claims. The legal basis for processing your personal data in this case is the legitimate interest of the controller or a third party – Art. 6 para. 1 lit. f) GDPR.

PLACING ORDERS AND PERFORMANCE OF THE SALES CONTRACT

The personal data you provide in connection with an order and conclusion of a sales contract in the online shop are primarily processed for the purpose of executing the purchase process, i.e.:

a) for processing your request and the concluded sales contract. The legal basis for processing your personal data for this purpose is the necessity for the performance of the sales contract concluded with the controller – Art. 6 para. 1 lit. b) GDPR;

b) for processing your order and the concluded sales contract, including issuing and storing sales documents, processing returns and complaints. The legal basis for processing personal data for this purpose is compliance with legal obligations imposed on the controller, including accounting and tax obligations – Art. 6 para. 1 lit. c) GDPR.

PAYMENT PROCESSING

When processing payments in our online shop, we cooperate with the following partners: technical service providers, credit institutions, payment service providers.

a) DATA PROCESSING FOR TRANSACTION PROCESSING

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act for us as processors, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfillment of the contract according to Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies. If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact us at the contact option described in this privacy policy.

b) DATA PROCESSING FOR FRAUD PREVENTION AND OPTIMIZATION OF OUR PAYMENT PROCESSES

We may also provide our service providers with further data, which they use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, processing disputed payments, supporting accounting). This serves, pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our overriding legitimate interests in protecting against fraud or in efficient payment management.

CUSTOMER CONTACT

The personal data you provide in connection with contacting the controller by e-mail, telephone or contact form are primarily processed for the purpose of handling your inquiry and responding to your request. The legal basis for processing your personal data for this purpose is the legitimate interest of the controller – Art. 6 para. 1 lit. f) GDPR.

Your personal data may also be processed for marketing, analysis and statistical purposes as well as for investigation or defense of potential claims. The legal basis for processing your personal data for this purpose is the legitimate interest of the controller or a third party – Art. 6 para. 1 lit. f) GDPR.

NEWSLETTER

If you sign up for the newsletter (consent to receive commercial information), your personal data will be processed to send you marketing content (receiving the newsletter). The legal basis for processing your personal data for this purpose is the necessity for the performance of the newsletter contract concluded with the controller – Art. 6 para. 1 lit. b) GDPR.

Your personal data may also be processed for marketing purposes (independent of the newsletter), for analytical and statistical purposes, as well as for investigation or defense of potential claims. The legal basis for processing your personal data in this case is the legitimate interest of the controller or a third party – Art. 6 para. 1 lit. f) GDPR.

Personalized marketing and advertising customization (Google Customer Match) – provided you have given your consent (Art. 6 para. 1 lit. f) GDPR). Your personal data in the form of your e-mail address may be used for personalized marketing campaigns in the Google advertising ecosystem (e.g. in Google search, on YouTube, in Gmail). This process involves transmitting an encrypted version of your e-mail address to Google, which matches the received data with its user database to determine whether you have an account with Google services. If the match is successful, you will be added to a list of custom audiences, enabling us to send you personalized advertising messages. The personal data will be processed until you withdraw your consent.

IV. RECIPIENTS OF PERSONAL DATA

The controller may share your personal data with third parties with whom he cooperates in operating the online shop. These may include companies that provide technical support for the operation of the online shop, such as hosting or ICT service providers, carriers or intermediaries for the shipment of ordered products, companies that process electronic or card payments, companies that provide support in customer communication and the implementation of marketing campaigns, as well as providers of legal and consulting services. Third parties to whom the controller discloses personal data within the online shop are obliged to take appropriate measures to ensure the security and protection of your personal data. Your personal data may also be transferred to companies within the group to which the controller belongs.
If payment is made using a payment method offered by PayPal, payment processing is carried out via the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If payment is made using a payment method offered by Klarna, payment processing is carried out via the payment service provider Klarna Bank AB (publ). Sveavägen 46, 111 34 Stockholm.
If payment is made using a payment method offered by Stripe, payment processing is carried out via the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin.
Processing of your personal data generally takes place in the European Economic Area (EEA). In connection with the controller’s cooperation with third parties regarding online shop activities, however, your personal data may be transferred to a country outside the EEA where the cooperating entity maintains tools for processing personal data in cooperation with the controller. In such a case, the transfer only takes place to the extent necessary for the provision of services by these entities for the controller.
When transferring personal data to entities based outside the EEA, the controller ensures compliance with the requirements set out in Chapter 5 of the GDPR, including the use of appropriate safeguards for the transfer in the form of standard contractual clauses adopted by a decision of the European Commission. You can obtain a copy of the safeguards for personal data transferred outside the EEA by contacting the controller: info@lanomoebel.de.

V. SOCIAL MEDIA

Social plugins from Facebook, Instagram, TikTok, Pinterest. Social buttons from social networks are used on our website. These are integrated into the page only as HTML links, so that no connection to the servers of the respective provider is established when our website is accessed. If you click on one of the buttons, the website of the respective social network will open in a new browser window where you can, for example, click the Like or Share button.
Our online presence on Facebook, Instagram, TikTok, Pinterest. If you have given your consent under Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, your data will automatically be collected and stored when you visit our online presences on the above-mentioned social media for market research and advertising purposes, from which usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights and settings options to protect your privacy, please refer to the privacy notices of the providers linked below. If you still need help in this regard, you can contact us.

VI. STORAGE DURATION

We store your personal data only for as long as we are obliged to do so under applicable legal provisions (e.g. tax laws). After expiry of the respective applicable retention period, we routinely delete the relevant data if they are no longer required for contract performance or contract initiation. If the storage purpose ceases to apply before the end of a legal retention period, we will delete the relevant data immediately. If we must delete data because you have exercised your intervention rights, this will also be done without delay.

VII. YOUR RIGHTS IN THE COLLECTION OF PERSONAL DATA

Applicable data protection law grants you extensive rights with regard to the processing of your personal data, about which we inform you below:

a) Right to confirmation (Art. 15 GDPR). You have the right to obtain confirmation from us as to whether we are processing personal data concerning you. Corresponding requests should be directed to us. If you submit the request electronically, we will provide the information in a commonly used electronic format, unless you specify otherwise.

b) Right of access (Art. 15 GDPR). If we process personal data concerning you, you have the right to obtain free access to the personal data stored about you at any time and to receive a copy of this data. You may also request information on the following:

- the purposes of processing;

- the categories of personal data being processed;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

- the existence of the right to rectification or erasure of personal data concerning you or to restriction of processing by us or the right to object to such processing;

- the existence of the right to lodge a complaint with a supervisory authority;

- where the personal data are not collected from you, any available information as to their source;

- the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for you.

c) Right to rectification (Art. 16 GDPR). You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data, including by means of providing a supplementary statement. Corresponding requests should be directed to us.

d) Right to erasure (right to be forgotten) (Art. 17 GDPR). You can request that we erase personal data concerning you without undue delay, provided one of the following reasons applies:

- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

- you withdraw your consent on which the processing was based according to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR, and there is no other legal ground for the processing;

- you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR;

- the personal data have been unlawfully processed;

- the personal data must be erased for compliance with a legal obligation in Union or Member State law to which we are subject; or

- the personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.

e) Right to restriction of processing (Art. 18 GDPR). You have the right to obtain restriction of processing from us where one of the following applies:

- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;

- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or

- you have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether our legitimate grounds override yours.

f) Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to a third party without hindrance from us, provided the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR, and the processing is carried out by automated means. Furthermore, you have the right to have the personal data transmitted directly from us to a third party, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

g) Right to object (Art. 21 GDPR). You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 e) or f) GDPR. We will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

If personal data are processed for direct marketing purposes, you also have the right to object at any time to processing of personal data concerning you for such marketing. We will then no longer process your data for this purpose.

You also have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

h) Right to withdraw data protection consent (Art. 7 para. 1 sentence 1 GDPR). You have the right to withdraw consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the affected data without undue delay, provided that there is no other legal basis for processing without consent.

i) Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with the competent supervisory authority at any time.

VIII. Cookies and Other Technologies

We use cookies on our website. Cookies are small files that are stored on your device and store certain settings and data for exchange with our system via your browser. Basically, two different types of cookies are distinguished: session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your device for a longer period or indefinitely. This storage helps us to design our website and offers for you and makes it easier for you to use, e.g. by storing certain entries you make so that you do not have to repeat them constantly.
If you consent to the use of cookies, the legal basis for processing is the declared consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
Otherwise, the data processed with the help of cookies are processed on the basis of our legitimate interests (e.g. in the economic operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations, both pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
You can change your cookie settings at any time. You can set your Internet browser to generally prevent cookies from being stored on your device or to ask you each time whether you agree to the setting of cookies. You can also delete cookies that have already been set at any time. Detailed instructions can be found in the help function of your browser. Specific instructions are available for the Safari, Firefox, Microsoft Internet Explorer and Google Chrome browsers.
In addition to the basic cookies (which we use to ensure the proper functioning of the website and the secure use of the website), we may also use the following types of cookies in the online shop:

a) analytical and functional cookies – cookies used to analyze the use of the online shop. They enable us, among other things, to determine the number of visitors to the online shop and detect malfunctions of the online shop, while continuously improving it. These cookies also make it easier for you to use the online shop (e.g. by remembering the information and settings you provide);

b) marketing cookies – cookies used to present you with advertising tailored to your interests and that can also be used to customize the content and advertising presented to you by third parties with whom we cooperate.

In many cases, web browsers allow cookies to be stored on the user’s device by default. You can delete cookies stored on your device at any time or block them in your browser settings.
Detailed information on blocking/deleting cookies can be found in the “Help” section of your browser menu. In the Mozilla Firefox browser: Tools -> Options -> Privacy; in the Google Chrome browser: Settings -> Show advanced settings -> Privacy -> Content settings -> Cookies. Access paths may vary depending on the browser version used.
When using the online shop, you have the option to select the scope of application of cookie technology and then give consent corresponding to the selected scope. Depending on the extent to which you agree to the use of cookie technology, such cookies will be installed on your device.
Cookies are neither harmful to you nor to your device. Restricting the use of cookies may affect some of the functionalities available in the online shop, make proper use of the online shop impossible or significantly hinder it.
Since the controller cooperates with other entities within the online shop, the browser also stores cookies originating from the entities with which the controller cooperates. Among other things, information about the products viewed is collected. The cookies sent by these entities are mainly used to ensure the proper functioning of the online shop and to improve the presentation of advertising corresponding to your online activities. The controller in particular uses the services of the following entities that use cookies in the online shop: Google Analytics 4, Google Ads, Facebook, Google Tag, Google UserID, Google ADS, Facebook Pixel, Pinterest Pixel, Livechat, Trustmate, Hotjar, Microsoft ADS Tag.

IX. FINAL PROVISIONS

The controller may change the privacy policy in the future. Information about such a change will be posted each time on the website of the online shop. Each change will display a new version of the privacy policy with a new date.
This version of the privacy policy is valid from 12/02/2025.