Privacy

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Community of heirs after Djahangir Momeni
Poppenbütteler Weg 90
22339 Hamburg
Germany
Phone: 040 / 365353
E-mail: info@momeni.de

2. General Information on Data Processing

We process personal data of users of this website only to the extent necessary to provide a functional website, to process orders, to handle inquiries, and to fulfill legal obligations.

Personal data means any information by which you can be personally identified, for example your name, address, e-mail address, telephone number, IP address, or order data.

The processing is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

3. Accessing the Website and Server Log Files

When you access our website, your browser automatically transmits technically necessary data to the server. In particular, the following data may be processed:

• IP address
• date and time of access
• page or file accessed
• amount of data transferred
• notification of successful retrieval
• browser type and browser version
• operating system used
• referrer URL
• requesting provider

This data is processed in order to technically provide the website, ensure its stability and security, and prevent misuse.

Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: Secure and uninterrupted operation of the website

The log files are stored only for as long as necessary to ensure secure operation and for error analysis.

4. Hosting

This website is hosted by an external technical service provider. As part of the hosting services, personal data generated when using the website is processed on the host's servers.

Where legally required, we have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

5. Orders in the Online Shop

As part of an order, we process the data required for the performance of the contract. In particular, the following data may be processed:

• first and last name
• billing and delivery address
• e-mail address
• telephone number
• ordered products
• payment and order data
• customer number and order history
• communication data related to the order

The processing is carried out for the initiation, performance, and handling of the purchase contract, including delivery, customer communication, handling of complaints, and compliance with statutory retention obligations.

Legal basis: Art. 6(1)(b) GDPR
Where statutory retention obligations apply: Art. 6(1)(c) GDPR

6. Customer Account / Login Area

If you create or use a customer account, we process the data required for this purpose, such as login data, master data, and order history.

The processing serves to provide the customer account and simplify the ordering process.

Legal basis: Art. 6(1)(b) GDPR

The data will be stored for as long as the customer account exists and no statutory retention obligations prevent deletion.

7. Contacting Us

If you contact us by e-mail, telephone, or via a contact form, we process the data you provide in order to handle your inquiry.

In particular, the following data may be processed:

• name
• e-mail address
• telephone number
• content of your message
• any other information you voluntarily provide

Legal basis:
Art. 6(1)(b) GDPR if the inquiry relates to a contract or pre-contractual measures
Art. 6(1)(f) GDPR for other inquiries

Legitimate interest: Efficient handling of customer and prospective customer inquiries

8. Product Inquiries

If you send us an inquiry about a specific product via a form, we process your information in order to respond to your inquiry regarding that product.

Legal basis:
Art. 6(1)(b) GDPR for pre-contractual inquiries
alternatively Art. 6(1)(f) GDPR

Legitimate interest: Handling specific product inquiries

The data will be deleted as soon as the inquiry has been conclusively processed and no statutory retention obligations apply.

9. Callback Service, Guestbook, and Other Interactive Features

If you use additional features such as a callback service, guestbook, references, or similar interactive services on our website, we process the data you enter in each case in order to provide the requested function.

Depending on the function, the following data in particular may be processed:

• name
• contact details
• content data of your post or inquiry
• other information provided voluntarily

Legal basis:
Art. 6(1)(b) GDPR insofar as use is contract-related
Art. 6(1)(a) GDPR insofar as consent is obtained
Art. 6(1)(f) GDPR for general communication or presentation purposes

10. Payment Processing

To the extent that payments are processed as part of an order, we process the payment and order data required for this purpose. If payment processing is carried out via external payment service providers or banks, the data required for this purpose will be transferred to those recipients.

Legal basis: Art. 6(1)(b) GDPR

11. Shipping Service Providers

For the delivery of ordered goods, we transfer the data required for this purpose to the commissioned shipping company, in particular the name and delivery address and, where necessary for delivery or delivery notification, the e-mail address or telephone number.

Legal basis: Art. 6(1)(b) GDPR

12. Accounting and Tax Retention

We process and store billing and tax-related data to the extent required by law.

Legal basis: Art. 6(1)(c) GDPR

The data is retained in accordance with the applicable commercial and tax retention periods.

13. Cookies and Similar Technologies

Our website may use technically necessary cookies, in particular for shopping cart, login, or language settings.

Technically necessary cookies serve to provide the website in a user-friendly and functional manner.

Legal basis: Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR
Legitimate interest: Technically error-free and user-friendly operation of the website

If non-essential cookies or comparable technologies are used beyond this, this will only take place on the basis of your consent.

Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR

14. YouTube Linking

If our website contains a link to YouTube, data will only be transmitted to YouTube or Google once you actively click on that link.

Legal basis for the link: Art. 6(1)(f) GDPR
Legitimate interest: Presentation of supplementary information and media content

15. Recipients of Personal Data

Your personal data will only be disclosed where this is legally permitted. Recipients may in particular include:

• hosting service providers
• IT and shop system service providers
• payment service providers
• shipping service providers
• tax advisors, accounting service providers, or authorities where legally required

16. Transfer to Third Countries

If we use services involving the transfer of data to countries outside the European Union or the European Economic Area, this will only take place in compliance with the legal requirements, in particular on the basis of an adequacy decision or appropriate safeguards within the meaning of Art. 44 et seq. GDPR.

If only internal or European systems are used, no transfer to third countries takes place.

17. Storage Period

We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.

Relevant periods include in particular:

• inquiry data: until final processing of the inquiry, unless further retention is required
• contract and order data: for the duration of the contractual relationship and in accordance with commercial and tax retention periods
• account data: until deletion of the customer account, unless statutory obligations prevent deletion
• server log files: generally only for a short period to ensure system security

18. Your Rights

Under the GDPR, you have the following rights in particular:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw any consent given at any time with effect for the future

To exercise your rights, you may contact us at any time.

19. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

In particular, the authority responsible is the supervisory authority at your habitual residence, place of work, or the place of the alleged infringement.

20. Obligation to Provide Data

The provision of personal data may be partly required by law or contract, or may be necessary for the conclusion of a contract. Without this data, we may not be able to process orders or inquiries.

21. Automated Decision-Making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place unless expressly stated otherwise in this privacy policy.

22. Data Security

We take technical and organizational security measures to protect your data against loss, manipulation, unauthorized access, or other unauthorized processing. Our security measures are continuously improved in line with technological developments.

23. Current Version and Changes to this Privacy Policy

This privacy policy is currently valid as of 23/04/2026.

It may become necessary to amend this privacy policy due to the further development of our website, the shop, or changes in legal requirements.