Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit this website or use our online shop.
Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the following sections of this Privacy Policy.
Data collection on this Website
Wo is responsible for data collection?
Data processing on this website is carried out by the website operator. The relevant contact details can be found in the section “Controller”.
How do we collect your data?
Some of your data is collected when you provide it to us. This includes, for example, data that you enter into a contact form, when subscribing to the newsletter, or during the ordering process.
Other data is collected automatically by our IT systems when you visit the website, or after you have given your consent. This primarily includes technical data such as your internet browser, operating system, IP address, and the time at which the page was accessed.
What do we use your data for?
Some of the data is processed to ensure the technically error-free provision of the website.
Other data is processed in order to:
- process orders and payments,
- ship goods,
- respond to customer enquiries,
- provide customer accounts,
- send Newsletters,
- comply with statutory retention obligations,,
- ensure the security of the website..
User behaviour is analysed only where there is an appropriate legal basis for doing so or where you have given your prior consent.
What rights do you have?
Subject to the applicable legal requirements, you have, in particular, the right to:
- obtain information about your stored personal data,
- have inaccurate data corrected,
- have your data deleted,
- restrict the processing of your data,
- data portability,
- object to certain types of processing,
- withdraw consent already given,
- lodge a complaint with a data protection supervisory authority.
You may withdraw any consent you have given at any time with effect for the future.
2. Controller
The controller responsible for data processing on this website is:
Paul Krause
Mineralien-weltweit.com
Scheringerstraße 37 E
02791 Oderwitz
Germany
Phone: +49 178 7608088
E-Mail: info@mineralien-weltweit.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
3. Hosting
This website is hosted by the following provider:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
When you visit this website, the hosting provider may process, in particular, the following data:
- IP-address,
- date and time of access,
- page or file accessed
- amount of data transferred,
- browser type and browser version,
- operating system,
- referrer URL
- access status and HTTP status code
The processing is carried out on the basis of Article 6(1)(f) GDPR in order to provide the website securely, reliably, and without technical errors.
Where the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, it is additionally carried out on the basis of Article 6(1)(b) GDPR.
Where required, a data processing agreement has been concluded with the hosting provider.
4. 4. General Information on Data Processing
Legal bases
We process personal data in particular on the following legal bases:
- Article 6(1)(a) GDPR, where you have given your consent,
- Article 6(1)(b) GDPR, where the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract,
- Article 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation,
- Article 6(1)(f) GDPR, where processing is necessary for the purposes of a legitimate interest and the interests or fundamental rights and freedoms of the data subject do not override those interests.
Where information is stored on or accessed from your terminal device, Section 25 TDDDG also applies. Cookies and similar technologies that are not strictly necessary are generally used only with your consent.
Storage Period
Unless a more specific storage period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose.
If you withdraw your consent or request the deletion of your data, we will delete the data unless statutory retention obligations or other lawful grounds prevent deletion.
Documents relevant under commercial and tax law may be stored for longer periods in accordance with the applicable statutory retention requirements.
Recipients of Personal Data
Personal data is disclosed only where this is necessary or legally permissible. Recipients may include in particular:
- hosting and IT service providers,
- payment service providers,
- shipping and logistics companies
- tax advisers and tax authorities,
- newsletter service providers,
- public authorities and courts where there is a legal obligation to disclose the data.
Data Transfers to Third Countries
Individual service providers may process personal data outside the European Union or the European Economic Area.
Such a transfer will take place only where the legal requirements are met, for example on the basis of:
- an adequacy decision by the European Comission,
- appropriate safeguards such as the EU Standard Contractual Clauses,
- or your explicit consent, where required.
SSL or TLS Encryption
For security reasons, this website uses SSL or TLS encryption.
You can recognise an encrypted connection in particular by the browser address bar beginning with “https://” and by the padlock symbol.
5. Cookies and Consent Management
Our website uses cookies and similar technologies.
Cookies are small files that are stored on your terminal device. Some cookies are technically necessary to enable basic functions such as the shopping cart, login, language settings, or the ordering process.
Technically necessary cookies are used on the basis of Article 6(1)(f) GDPR and Section 25(2) TDDDG.
Non-essential cookies and similar technologies are used only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You can give, refuse, or later change your consent using the consent or cookie banner provided on the website.
The cookies actually used, their providers, purposes, and storage periods are set out in the settings of the consent banner or in the cookie overview displayed there.
The legal basis for cookies and access to terminal devices is governed by Section 25 TDDDG.
6. Server Log Files
The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits.
This may include:
- browser type and browser version,
- operating system used,
- referrer URL,
- hostname of the accessing device,
- time of the server request,
- IP address
- file or page accessed
The processing is carried out on the basis of Article 6(1)(f) GDPR in order to ensure the functionality, stability, and security of the website.
The data is not combined with other data sources unless there is a legal basis for doing so.
7. Contact
Contact Form
If you contact us using a contact form, we process the data you enter. This may include in particular:
- name,
- email address,
- subject,
- content of your message,
- information about a specific mineral or product,
- technically necessary connection data
The data is processed in order to handle your enquiry and respond to any follow-up questions.
If your enquiry relates to a contract or pre-contractual measures, the processing is carried out on the basis of Article 6(1)(b) GDPR.
In other cases, the processing is carried out on the basis of our legitimate interest in handling enquiries pursuant to Article 6(1)(f) GDPR or on the basis of your consent pursuant to Article 6(1)(a) GDPR, where such consent is requested.
The data will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations or legitimate reasons for further storage.
Contact by Email or Telephone
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry.
The legal bases correspond to those stated above for the contact form.
8. Onlineshop and Orders
Processing of Order Data
When you place an order in our online shop, we process the data required to handle the order. This may include:
- first and last name,
- billing address,
- delivery address,
- email address,
- telephone numnber, where provided or required,
- products ordered,
- prices and shipping costs,
- payment method,
- order number,
- payment and order status,
- customer messges
- IP address and time of the order
The processing is carried out on the basis of Article 6(1)(b) GDPR for the purpose of initiating and performing the purchase contract.
Where data is stored in order to comply with commercial or tax law obligations, the processing is carried out on the basis of Article 6(1)(c) GDPR.
WooCommerce
We use WooCommerce, a WordPress extension, for the technical operation of the online shop.
WooCommerce processes the data required for the shopping cart, checkout, order management, and, where applicable, customer accounts within our WordPress installation.
Depending on the configuration, WooCommerce extensions may process additional data. Such processing is described in the relevant sections of this Privacy Policy.
Customer Account
If you create a customer account, we process the data you enter in order to provide you with access to your account, your orders, and your stored address details.
The processing is carried out on the basis of Article 6(1)(b) GDPR.
You may request the deletion of your customer account. Statutory retention obligations relating to completed orders remain unaffected.
9. Payment Processing
During the ordering process, the payment service providers selected by you may receive personal data.
The processing is necessary to provide the payment method selected by you and to process the payment. The legal basis is Article 6(1)(b) GDPR.
PayPal
If you select a PayPal payment method, the data required for payment processing will be transmitted to PayPal.
The provider for customers in the European Economic Area is generally:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxemburg
PayPal processes the data under its own responsibility. This may include in particular your name, address, email address, payment data, order amount, and transaction information.
PayPal may process additional data for fraud prevention and creditworthiness checks. Further details can be found in PayPal’s Privacy Policy.
Stripe and Card Payments
Stripe may be used as the payment service provider for card payments.
The provider for European customers is generally:
Stripe Payments Europe, Limited
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Irland
When Stripe is used, the data required for payment processing is transmitted to Stripe. This may include in particular:
- name,
- billing address,
- email address,
- payment amount,
- currency,
- card details,
- technical connection data,
- transaction information.
Full card details are generally processed directly by Stripe and are not stored by us in full.
Stripe may process data for fraud prevention, risk assessment, and payment processing and may disclose such data to financial partners or service providers.
Visa and Mastercard are card organisations or payment networks. The actual processing is generally carried out through Stripe, banks, and the payment service providers involved.
Payment in Advance
When payment is made by bank transfer, we process the data shown on the bank statement, in particular the name, bank account details, amount, and payment reference.
The processing is carried out on the basis of Article 6(1)(b) GDPR for the performance of the contract.
10. Shipping and Delivery
In order to deliver the goods ordered, we transmit the necessary data to the selected shipping company.
This may include in particular:
- name,
- delivery address,
- email address, where applicable,
- telephone number, where applicable,
- shipment and order details.
The data is disclosed for the performance of the purchase contract on the basis of Article 6(1)(b) GDPR.
Where your email address or telephone number is transmitted to the shipping service provider for delivery notification or shipment tracking and this is not strictly necessary for the performance of the contract, the data will be disclosed only on an appropriate legal basis, in particular with your consent.
DHL or Deutsche Post may be used as the shipping service provider.
11. Newsletter
If you subscribe to our newsletter, we process your email address as well as, where applicable, your name and technical data relating to the subscription.
The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.
Double-Opt-in Procedure
As a general rule, we use a double opt-in procedure for newsletter subscriptions.
After subscribing, you will receive an email asking you to confirm your subscription. Your email address will be added to the newsletter mailing list only after this confirmation.
In order to document your consent, the following data may be stored in particular:
- email address,
- time of subscription
- time of confirmation,
- IP address
- content of the declaration of consent.
These records are stored in order to comply with our legal documentation obligations and on the basis of Article 6(1)(c) or (f) GDPR.
Unsubscribing
You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link at the end of each newsletter or by contacting us.
After you unsubscribe, your email address will be removed from the active mailing list unless there are legal grounds for continued storage.
To prevent further mailings, your email address may be stored on a suppression list. This storage is based on our legitimate interest in respecting your unsubscribe request pursuant to Article 6(1)(f) GDPR.
Sending with MailPoet
We use MailPoet and the MailPoet Sending Service to send our newsletter. MailPoet is a newsletter service for WordPress.
As part of the newsletter subscription and delivery process, the following data may be processed in particular:
- email address,
- name, where appicable,
- IP address
- time of subscription,
- time of confirmation,
- subscription status,
- sending and delivery information,
- technical information about failed or undeliverable emails.
The processing is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.
The subscription process uses a double opt-in procedure. After subscribing, you will receive a confirmation email. You will be added to the newsletter mailing list only after confirming the link contained in that email.
The MailPoet Sending Service is used to deliver the newsletter. The data required for delivery is processed on the service provider’s servers. MailPoet provides a data processing agreement for this purpose.
Advanced cookie, website, and e-commerce tracking by MailPoet is currently not enabled.
You may withdraw your consent at any time with effect for the future. In particular, you may use the unsubscribe link at the end of each newsletter or send us a message at info@mineralien-weltweit.com.
After unsubscribing, you will no longer receive newsletters. Your email address may be stored on a suppression list where this is necessary to ensure that no further newsletters are sent to that address.
Unconfirmed subscriptions are deleted after the period specified by us. MailPoet requires recipients’ consent and an unsubscribe option for emails sent through its Sending Service.
12. Social Networks
We maintain a publicly accessible profile on Facebook.
The provider is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
Our website may contain links to our Facebook profile. A simple link does not automatically establish a connection to Facebook merely by visiting our website. You will be redirected to Facebook only when you click the link.
Facebook may then process personal data and associate your visit with your user account, particularly if you are logged in to Facebook.
We do not have full control over any further processing carried out by Facebook.
We maintain a publicly accessible profile on Instagram.
Instagram is also operated by Meta Platforms Ireland Limited.
Our website may contain links to our Instagram profile. A connection to Instagram or Meta is established only when you click the link.
Instagram may process technical connection data, your IP address, and information about the content accessed, and may associate this information with your user account.
Embedded Content from Facebook or Instagram
Where content from Facebook or Instagram is embedded directly on individual pages, such as posts, feeds, or social media plugins, a connection to Meta may be established as soon as this content is loaded.
Such non-essential embedded content is generally loaded only with your consent. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time through the cookie or privacy settings.
13. WordPress, WPML, and Technically Necessary Functions
This website is based on WordPress and uses, among other things, extensions to provide the online shop, multilingual functionality, and other features.
WPML may use technically necessary cookies to store the language selected by the visitor or to display the correct language version.
The processing is carried out on the basis of Article 6(1)(f) GDPR in order to provide the multilingual website without technical errors and, where technically necessary, on the basis of Section 25(2) TDDDG.
14. Your Rights
Right of Access
You have the right to request information as to whether we process personal data concerning you and, if so, what personal data we process.
Right to Rectification
You have the right to request the correction of inaccurate data and the completion of incomplete data.
Right to Erasure
Subject to the applicable legal requirements, you have the right to request the deletion of your personal data.
Right to Restriction of Processing
Subject to the applicable legal requirements, you have the right to request the restriction of processing.
Right to Data Portability
Where the processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the relevant data in a structured, commonly used, and machine-readable format.
Withdrawal of Consent
You may withdraw consent already given at any time with effect for the future.
The lawfulness of the processing carried out before the withdrawal remains unaffected.
Right to Object
Where we process personal data on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time without giving any reason.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
This may in particular be the supervisory authority at your place of residence, your place of work, or the place of the alleged infringement.
15. Objection to Unsolicited Advertising
We object to the use of contact details published in connection with the legal notice requirements for the purpose of sending unsolicited advertising or informational materials.
We reserve the right to take legal action in the event of unsolicited advertising, particularly spam emails.
16. Current Status of This Privacy Policy
This Privacy Policy will be updated if the services used, the legal requirements, or the data processing activities change.
Last updated: July 2026