Privacy policy

This English version is provided for convenience only. Only the German version is legally binding. In the event of any discrepancy between the German and the English version, the German version shall prevail.

Last updated: 10 April 2026

Controller within the meaning of the General Data Protection Regulation (GDPR):

CW Colognewatch GmbH
Benesisstraße 24–32
50672 Köln
Deutschland

Represented by the Managing Director: Abdullah Yalcin

Telephone: +49 (0) 221 270 988 18
Email: info@colognewatch.de

CW Colognewatch GmbH operates the online shop at www.colognewatch.de and the associated services (hereinafter “Website” or “Services”). The Website is hosted on the e-commerce platform Shopify. In this privacy policy, we inform you which personal data we collect, for which purposes and on which legal basis we process it, and which rights you have.

Personal data is any information relating to an identified or identifiable natural person. If there is a conflict between our general terms and conditions and this privacy policy, this privacy policy takes precedence with regard to the collection, processing and disclosure of your personal data.

Which personal data do we collect or process?

When we use the term “personal data”, we refer to information that identifies you or another person or can be directly linked to you. Personal data does not include information that has been collected anonymously or anonymised in such a way that identification or attribution to you is not possible. Depending on how you interact with the Services, where you live and as permitted or required by applicable law, we may collect or process the following categories of personal data:

Contact data including name, postal address, billing address, delivery address, telephone number and email address.
Financial data including payment card information, bank details, transaction details, payment method and payment confirmation. Payments are processed via Shopify Payments (operated by Stripe). Your payment data is processed directly by Shopify Payments / Stripe and is not stored on our servers.
Account information including username, password (encrypted), and configurations and settings of your customer account.
Transaction information including the items you view, add to your shopping cart, put on your wishlist, or purchase, return, exchange or cancel, as well as your past transactions.
Communication data including the information you provide to us in enquiries to customer support, via our contact form, by email, telephone, WhatsApp or live chat.
Device information including information about your end device, your browser, your operating system, your IP address and other unique identifiers.
Usage information including information about your interaction with our Website, such as pages visited, time spent, click behaviour, search terms and referrer URLs.

Sources of personal data

We collect personal data from the following sources:

Directly from you We collect the data, among other occasions, when you create an account, place an order, use our contact form, contact us by email, telephone or WhatsApp, or sign up for our newsletter.
Automatically through the Services We collect the data, among other sources, from your device or when you use our products or Services or visit our Website, as well as through the use of cookies and similar technologies (see section “Cookies and tracking technologies”).
From our service providers We collect the data, among other sources, from Shopify, Klaviyo, Tidio, Trustpilot and other providers named under “Third-party services” who collect or process data on our behalf.
From our partners and other third parties We may receive data from advertising and marketing partners (e. g. Google, Meta, TikTok) who support us in evaluating and optimising our advertising measures.

Purposes and legal bases of data processing

Depending on how you interact with us or which of the Services you use, we may use personal data for the following purposes:

Providing, customising and improving the Services. We use your personal data to provide the Services to you. This includes, among other things, performing our contract with you, processing your payments, fulfilling your orders, storing your configurations and the items you are interested in, sending notifications in connection with your account, creating, maintaining and otherwise managing your account, organising shipping, facilitating returns and exchanges, enabling you to submit reviews, and creating a personalised shopping experience for you, for example by recommending products based on your purchases. This may also include using your personal data to better customise and improve the Services.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Marketing and advertising. We use your personal data for marketing and advertising purposes, for example to send marketing and advertising communications by email and to show you online advertising for products or services on our Website or on third-party platforms, including on the basis of items you have previously purchased or added to your shopping cart. This includes in particular the use of Google Ads, Meta (Facebook/Instagram) Ads, TikTok Ads and retargeting measures (see sections “Cookies and tracking technologies” and “Third-party services”).
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Newsletter and email marketing. If you sign up for our newsletter, we process the email address you provide for the purpose of regularly sending information about our products, offers and news. The newsletter is sent via the service Klaviyo (Klaviyo, Inc., 225 Franklin Street, Boston, MA 02110, USA). On our behalf, Klaviyo analyses opening and click behaviour within the newsletters. Further information can be found in the Klaviyo privacy policy.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by using the unsubscribe link in any newsletter email or by contacting us at info@colognewatch.de.
Double opt-in procedure. Sign-up for our newsletter takes place using the so-called double opt-in procedure. After entering your email address, you will receive a confirmation email with an activation link. Your sign-up only becomes effective once you click this link. This procedure serves to prove your consent. As part of the sign-up, we store the time of sign-up, the time of confirmation and your IP address. This data serves exclusively to prove your consent in the event of a dispute.
Security and fraud prevention. We use your personal data to authenticate your account, to provide a secure payment and shopping experience, to detect and investigate possible fraudulent, illegal, unsafe or malicious activity or take action in respect of it, to protect public safety and to ensure the security of our Services. If you choose to use the Services and register an account, you are responsible for protecting your account login credentials. We strongly recommend that you do not share your username, password or other access credentials with other persons.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security of our Services).
Communication with you. We use your personal data to provide you with customer support and effective Services, to respond promptly to your enquiries and to maintain our business relationship with you.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest).
Legal reasons. We use your personal data to comply with applicable law or to respond to lawful procedural steps, including requests from law enforcement or supervisory authorities, to investigate or participate in civil investigations, potential or actual legal disputes or other adversarial proceedings, and to investigate potential violations of our terms or policies or to enforce the terms and policies.
Legal basis: Art. 6(1)(c) GDPR (legal obligation) or Art. 6(1)(f) GDPR (legitimate interest in enforcing our rights).

Retention period

We store your personal data only for as long as is necessary for the respective processing purposes or statutory retention periods exist:

Order data and invoices: 10 years (Section 147 of the German Fiscal Code (AO), Section 257 of the German Commercial Code (HGB)).
Business letters and contract documents: 6 years (Section 257 HGB).
Customer account data: until you delete the account, unless statutory retention obligations prevent this.
Newsletter data: until you withdraw your consent (unsubscribe).
Log data of the newsletter sign-up (double opt-in proof): 3 years after unsubscribing (limitation period).
Web analytics and cookie data: depending on the tool and cookie type, a maximum of 24 months (see section “Cookies and tracking technologies”).
Enquiries via contact form/email/WhatsApp/chat: 3 years after final processing, unless a contractual relationship exists.

After the respective periods have expired, your data is routinely deleted or anonymised.

How do we disclose personal data?

In certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this privacy policy. We only disclose your personal data if this is necessary for the stated purposes:

Shopify Inc. – hosting and e-commerce platform (see section “Relationship with Shopify”).
Shopify Payments / Stripe – payment processing (see section “Payment providers”).
Shipping service providers (UPS, FedEx) – for delivery of your orders.
Klaviyo, Inc. – email marketing and newsletter dispatch.
Google Ireland Limited – web analytics (Google Analytics), advertising (Google Ads), tag management (Google Tag Manager) and map integration (Google Maps).
Meta Platforms Ireland Ltd. – advertising and conversion tracking (Meta Pixel).
TikTok Technology Limited – advertising and conversion tracking (TikTok Pixel).
Tidio LLC – live chat function on the Website.
Trustpilot A/S – customer reviews.
Searchanise – search function on the Website.
Swish (Wishlist King) – wishlist function.
WhatsApp Ireland Ltd. (Meta) – customer communication via WhatsApp.
Reputon – integration of Google reviews.
Vizup – video and UGC widget for displaying video content.
Minmaxify – order limits and quantity control in the shop.
HulkApps – form creation (Form Builder).
We disclose personal data to business and marketing partners who provide marketing services for you and show you advertising. Our business and marketing partners use your data in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to disclose information about you in order to show you targeted advertising based on your online activities.
If you request us or otherwise give your consent to disclose certain information to third parties, for example in order to deliver products to you, or if you use social media widgets or login integrations.
We disclose personal data to our affiliates or otherwise within our corporate group.
In connection with a business transaction such as a merger or insolvency, to comply with applicable legal obligations (including responding to subpoenas, search warrants and similar requests), to enforce applicable terms of service or policies, and to protect or defend the Services, our rights and the rights of our users or others.

Where required, we have concluded data processing agreements pursuant to Art. 28 GDPR with the aforementioned service providers. Some of these service providers are based outside the EU/EEA (in particular in the USA, Canada and India). To safeguard data transfers, we rely on the EU Standard Contractual Clauses (SCCs), adequacy decisions of the EU Commission and, where available, the EU-US Data Privacy Framework (see section “International transfers”).

Relationship with Shopify

The Services are hosted by Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland), whereby Shopify collects and processes personal data about your access to and use of the Services in order to provide and improve the Services for you. Data that you submit to the Services is disclosed to Shopify and to third parties who may be located in countries other than your country of residence, in order to provide and improve the Services for you. To protect, grow and improve our business, we also use certain advanced Shopify features that incorporate data and information from your interactions with our shop, with other merchants and with Shopify. To provide these advanced features, Shopify may use personal data collected through your interactions with our shop, other merchants and Shopify. In these circumstances, Shopify is responsible for the processing of your personal data, including for responding to your requests to exercise your rights regarding the use of your personal data for these purposes. For further information on how Shopify uses your personal data and which rights you have, please see the Shopify Privacy Policy for Consumers. Depending on where you live, you can exercise certain rights in relation to your personal data listed here at: Link to the Shopify privacy portal.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in a functioning online shop).

Cookies and tracking technologies

Our Website uses cookies and similar technologies. Cookies are small text files that are stored on your end device. We distinguish between:

Technically necessary cookies
These cookies are required for the operation of the Website (e. g. shopping cart, login status, language settings). They cannot be deactivated.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest) and Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Analytics cookies
These cookies help us to analyse and improve the use of our Website. They are only set after your consent via the cookie banner.
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Marketing/advertising cookies
These cookies are used to show you relevant advertising on our Website and on third-party platforms. They are only set after your consent via the cookie banner.
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Your cookie settings are managed via the integrated cookie banner from Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland). You can adjust or withdraw your cookie settings at any time via the cookie banner.

In detail, we use the following services:

Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager is a management tool with which we centrally integrate other tracking and analytics tools. The Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analyses. It merely serves to manage the tools described below.
Further information: https://policies.google.com/privacy

Google Analytics 4
We use Google Analytics 4 (Google Ireland Limited) for the statistical evaluation of Website usage. Google Analytics uses cookies to collect information about your usage behaviour. The information generated in this way is generally transmitted to a Google server and stored there, possibly also in the USA. Google Analytics 4 does not store IP addresses. IP addresses are used briefly by Google for geolocation and then discarded.
Retention period: up to 14 months.
Further information: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout
Legal basis: Art. 6(1)(a) GDPR (consent).

Google Ads Conversion Tracking
We use Google Ads Conversion Tracking (Google Ireland Limited) to measure the effectiveness of our advertisements on Google. If you reach our Website via a Google advertisement, a cookie is set on your device that enables us to trace whether you have carried out a certain action (e. g. a purchase). No personal identification takes place in the process.
Retention period: up to 90 days.
Further information: https://policies.google.com/privacy
Legal basis: Art. 6(1)(a) GDPR (consent).

Meta Pixel (Facebook/Instagram)
We use the Meta Pixel (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) to measure the effectiveness of our advertisements on Facebook and Instagram and for retargeting purposes. The Meta Pixel collects information about your usage behaviour on our Website (e. g. pages visited, purchases) and transmits it to Meta. Meta may use this information to show you personalised advertising on Facebook and Instagram.
Retention period: up to 180 days.
Further information: https://www.facebook.com/privacy/policy/
Legal basis: Art. 6(1)(a) GDPR (consent).

TikTok Pixel
We use the TikTok Pixel (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) to measure the effectiveness of our advertisements on TikTok and for retargeting purposes. The TikTok Pixel collects information about your usage behaviour on our Website (e. g. pages visited, purchases) and transmits it to TikTok. TikTok may use this information to show you personalised advertising on TikTok. The data may also be processed in the USA.
Retention period: up to 13 months.
Further information: https://www.tiktok.com/legal/privacy-policy
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Klaviyo tracking
In addition to sending the newsletter, Klaviyo sets cookies on our Website to analyse your browsing behaviour and to provide you with personalised emails and content.
Retention period: up to 24 months.
Further information: https://www.klaviyo.com/legal/privacy
Legal basis: Art. 6(1)(a) GDPR (consent). For the storage and reading of information on your end device in the context of tracking (web beacons / tracking pixels), Section 25(1) TDDDG additionally applies.

Third-party services

Tidio (live chat)
We use Tidio (Tidio LLC, 149 New Montgomery St, San Francisco, CA 94105, USA) as a live chat solution on our Website. If you use the chat, the content of your messages, your IP address and, where applicable, your email address are processed. The chat widget is only loaded after your consent via the cookie banner.
Further information: https://www.tidio.com/privacy-policy/
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG for loading the widget. For the processing of the chat content in the context of your enquiry, Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication) applies.

Trustpilot (reviews)
We integrate review widgets from Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark) on our Website. When the widgets are loaded, Trustpilot may set cookies and collect your IP address. The widgets are only loaded after your consent via the cookie banner.
Further information: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Reputon (Google reviews)
We use Reputon (2093 Philadelphia Pike, Claymont, DE 19703, USA) to integrate Google reviews on our Website. When the widget is loaded, data (IP address, device information) may be transmitted to the servers of Reputon and Google in the USA. The widget is only loaded after your consent via the cookie banner.
Further information: https://reputon.com/privacy-policy
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Searchanise (search function)
We use Searchanise (Searchanise LLC / Bolide Network LLC, 815 E St, #12709, San Diego, CA 92112, USA) as an enhanced search function on our Website. When you use the search, your search queries and technical data (IP address, browser) are transmitted to the servers of Searchanise in the USA. The data transfer to the USA is safeguarded by EU Standard Contractual Clauses (SCCs).
Further information: https://searchanise.io/privacy-policy/
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional search function) and Section 25(2) TDDDG (technically necessary for the search function).

Wishlist King / Swish (wishlist)
We use the app “Wishlist King” by Scope Digital Ventures Limited (13 Adelaide Rd, Dublin 2, D02 P950, Ireland) to provide the wishlist function. If you add items to your wishlist, this data is stored in your customer account.
Further information: https://www.appmate.io/legal/privacy-policy
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest).

WhatsApp (customer communication)
We offer you the option of contacting us via WhatsApp (WhatsApp Ireland Limited, Merrion Centre, Block 2, Merrion Road, Dublin 4, D04 P2K8, Ireland, a company of the Meta group). If you contact us via WhatsApp, your telephone number, your name (to the extent stored in your WhatsApp profile) and the content of your messages are processed. The data is stored on the servers of WhatsApp / Meta, possibly also in the USA. We point out that WhatsApp has access to metadata of the communication. We recommend that you do not transmit any sensitive personal data (e. g. health data, bank details) via WhatsApp.
Further information: https://www.whatsapp.com/legal/privacy-policy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication). Our legitimate interest consists in providing a low-threshold and prompt communication channel. Processing only takes place if you actively contact us via WhatsApp.

Google Maps
We integrate maps from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our Website to show you the locations of our stores. When a page with an embedded Google Maps map is accessed, a connection to Google’s servers is established. In the process, your IP address and other device information are transmitted to Google. Google may also process this data in the USA.
Further information: https://policies.google.com/privacy
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG. The map is only loaded after your consent via the cookie banner.

Vizup (video/UGC widget)
We use Vizup (ShopGracias Technologies, Manikonda, Hyderabad, TS 500089, India) to integrate video content and user-generated content (UGC) on our Website. When the widget is loaded, technical data (IP address, device information) may be transmitted to Vizup’s servers. The widget is only loaded after your consent via the cookie banner. The data transfer is safeguarded by EU Standard Contractual Clauses (SCCs).
Further information: https://vizupcommerce.com/blog/privacy/
Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Minmaxify (order limits)
We use the Shopify app Minmaxify (Intillium Inc., PO Box 762, Bolton, ON, L7E 2A0, Canada) to control minimum and maximum order quantities. When the shop is used, technical data may be transmitted to Minmaxify’s servers in Canada. An adequacy decision of the EU Commission exists for Canada.
Further information: https://docs.minmaxify.com/article/66-privacy-policy
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in functional order processing).

HulkApps Form Builder (forms)
We use the Shopify app Form Builder by HulkApps (Shop Circle BH d.o.o, Zmaja od Bosne 74, Sarajevo 71000, Bosnia and Herzegovina) to provide forms on our Website. If you fill in and submit a form, the data you enter is transmitted to HulkApps’ servers and processed there. The data transfer is safeguarded by EU Standard Contractual Clauses (SCCs).
Further information: https://www.hulkapps.com/pages/privacy-policy
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication).

Payment providers

Payments in our online shop are processed via Shopify Payments, which is operated by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you select a payment method, the data required for payment processing (e. g. credit card number, bank details, billing address) is transmitted directly to Stripe and processed by Stripe.

We accept the following payment methods: bank transfer, Mastercard, American Express, Visa, Apple Pay and Google Pay.

Further information on data processing by Stripe: https://stripe.com/de/privacy

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Websites and links of third parties

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliate websites or are not controlled by us, you should review their privacy and security policies and other terms and conditions. We give no guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness or reliability of the information found on these websites. Information that you provide in public or semi-public places, including information that you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of those third-party platforms, without restrictions on its use by us or by a third party. Our inclusion of such links does not mean that we endorse the content of these platforms or their owners or operators, unless this is expressly mentioned in the Services.

Children’s data

The Services are not intended for use by children, and we do not knowingly collect personal data from children who have not yet reached the age of majority in your country. If you are the parent or guardian of a child who has provided us with their personal data, you can contact us using the contact details provided below to request the deletion of this data. As of the date this privacy policy comes into effect, we are not aware that we “share” or “sell” personal data of persons under 16 years of age (as these terms are defined in applicable law).

Security and retention of your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These include, among others, SSL encryption, access controls and regular security reviews. Please note that no method of transmission over the internet and no electronic storage is 100 % secure. We recommend that you do not use insecure channels when transmitting sensitive or confidential information to us and that you treat the access credentials for your customer account as confidential.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute, may only apply in certain circumstances, and in certain cases we may refuse your request to the extent permitted by law.

Right of access (Art. 15 GDPR). You have the right to obtain information about the personal data we process.
Right to erasure (Art. 17 GDPR). You have the right to request that we erase the personal data stored about you, provided there is no legitimate reason for further processing.
Right to rectification (Art. 16 GDPR). You have the right to request that we rectify inaccurate personal data or complete incomplete personal data.
Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller.
Management of communication preferences. We may send you promotional emails. You can object to receiving these emails at any time by using the unsubscribe option contained in our emails to you. If you opt out, we may continue to send you non-promotional emails, e. g. about your account or about orders you have placed.
Right to restriction of processing (Art. 18 GDPR). You have the right to request that we restrict the processing of your personal data under certain conditions.
Withdrawal of consent (Art. 7(3) GDPR). Where we rely on consent for the processing of your personal data, you have the right to withdraw this consent at any time. The lawfulness of processing carried out until the withdrawal remains unaffected.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (see section “Complaints”).

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time on grounds relating to your particular situation. Where we process your data for the purpose of direct marketing, you have the right to object at any time without giving any reasons. Following your objection, we will no longer process the data concerned for the respective purpose, unless we can demonstrate compelling legitimate grounds that override your interests.

You can exercise these rights by contacting us using the contact details provided below. We will respond to your request within one month of receipt. In complex cases, this period may be extended by a further two months, of which we will inform you. More information on how Shopify uses your personal data and which rights you have, including rights in relation to the data processed by Shopify, can be found at https://privacy.shopify.com/en.

You will not suffer any disadvantage as a result of exercising these rights. Where permitted or required by applicable law, we may need to verify your identity before we can process your requests. In accordance with applicable laws, you may appoint an authorised agent to make requests to exercise your rights on your behalf. Before we accept such a request from an agent, we require proof that you have authorised them to act on your behalf. In this case, you may be required to confirm your identity directly with us. We will respond to your request promptly within the scope of applicable law.

Automated decision-making

In the context of payment processing, an automated fraud check may be carried out by Shopify Payments / Stripe. In individual cases, this may result in a transaction being declined. Beyond this, no automated decision-making, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning you takes place. You have the right to have any decision made by automated means reviewed by a member of staff.

Complaints

If you have complaints about how we process your personal data, please contact us using the contact details provided below. You have the right to lodge your complaint with the competent data protection authority.

The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4, 40213 Düsseldorf
Telephone: +49 (0) 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

For the European Economic Area, there is a list of the competent data protection supervisory authorities. If you would like to access it, you can do so here.

International transfers

Please note that we may transfer, store and process your personal data outside the country in which you live. Some of our service providers are based outside the EU or the EEA, in particular in the USA (Google, Meta, TikTok, Klaviyo, Tidio, Stripe, Searchanise, Reputon), in Canada (Minmaxify), in India (Vizup) and in Bosnia and Herzegovina (HulkApps).

Where we transfer your personal data outside the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms:

EU-US Data Privacy Framework: Where the service provider is certified under the EU-US Data Privacy Framework, an adequacy decision of the EU Commission applies.
EU Standard Contractual Clauses (SCCs): Where no adequacy decision exists, we rely on the standard contractual clauses approved by the EU Commission.
Supplementary measures: Where necessary, we take additional technical and organisational measures to protect your data.

Changes to this privacy policy

We may update this privacy policy from time to time, for example to reflect changes in our practices or for other operational, legal or regulatory reasons. We publish the revised privacy policy on this Website, adjust the date of the “Last updated” accordingly and provide the notice required under applicable law.

Contact

If you have any questions about our privacy practices or this privacy policy, or if you wish to exercise any of the rights to which you are entitled, please contact us:

CW Colognewatch GmbH
Benesisstraße 24–32
50672 Köln, Deutschland

Telephone: +49 (0) 221 270 988 18
Email: info@colognewatch.de

For the purposes of applicable data protection laws, we are the controller of your personal data.
Controller: Abdullah Yalcin (Managing Director)