1. Person responsible

Faionic GbR
Nils Tischler & Fabian Manuel Bischof
School Street 7
35625 Hüttenberg
Email: info@mulled.de
Telephone: +49 1523 1910629

This website ( www.mulled.de ) is an offer from Faionic GbR.
Faionic operates the online shop for DIY mulled wine kits under the brand name “Mulled” .

2. Collection and storage of personal data as well as the type and purpose of its use

a) When visiting the website

When you access our website, information is automatically sent to our website's server. This information is temporarily stored in a log file. The following data is recorded:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• browser used and, if applicable, operating system of your computer

This data is processed to:

• to ensure a smooth connection to the website,
• to ensure comfortable use
• To evaluate system security and stability.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

b) Ordering in the online shop

When you place an order through our online shop, we collect the data necessary for processing (name, address, email address, payment details).

The processing is based on Art. 6 para. 1 lit. b GDPR for the performance of the contract.
Payment processing is handled via Shopify Payments or via your chosen payment provider (e.g. PayPal, Klarna, Apple Pay).

c) Making contact

If you have any questions, you can contact us via a form or by email.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

3. Data transfer

Data will only be shared with third parties if:

• You have given your consent in accordance with Article 6 paragraph 1 letter a GDPR,
• it is necessary for the performance of the contract (Art. 6 para. 1 lit. b GDPR),
• there is a legal obligation (Art. 6 (1) (c) GDPR),
• or legitimate interests prevail (Art. 6 para. 1 lit. f GDPR).

Examples:

• Transfer to shipping service providers (DHL etc.)
• Payment service providers (Shopify Payments, PayPal, Klarna, etc.)

4. Hosting and platform

Our online shop is powered by Shopify Inc. (151 O'Connor Street, Ottawa, ON, Canada).
Shopify processes data on the basis of a data processing agreement (Art. 28 GDPR).
Shopify uses servers in the EU and in Canada (with an adequacy decision according to Art. 45 GDPR).

Email communication is handled via IONOS SE .

5. Cookies and Tracking

Our website uses cookies and similar technologies:

• Necessary cookies: for the basic functionality of the shop (shopping cart, login, etc.)
• Statistics and marketing cookies: only with consent (e.g., Google Analytics, Meta Pixel)

A consent banner is integrated.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent) or lit. f (legitimate interest in the case of necessary cookies).

6. Storage period

Personal data will only be stored for as long as is necessary to fulfill the purposes or as required by law.
Order data is generally stored for 10 years in accordance with tax regulations.

7. Your rights

You have the right:

• right to information (Art. 15 GDPR),
• to rectification (Art. 16 GDPR),
• to erasure (Art. 17 GDPR),
• to restriction of processing (Art. 18 GDPR),
• to data portability (Art. 20 GDPR),
• and to lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Revocation and objection

You can withdraw your consent at any time (Art. 7 para. 3 GDPR).
You can object to processing based on legitimate interest (Art. 21 GDPR).

9. Data security

Our website uses SSL encryption (Secure Socket Layer) to protect data from unauthorized access.