Privacy Policy
1. Who is responsible for your personal data?
The controller responsible for personal data processed through coralentis.com is:
Hallo Pet UG (haftungsbeschränkt)
Am Fleckenberg 9
65549 Limburg, Germany
Commercial Register: HRB 7591
Register Court: Amtsgericht Limburg a.d. Lahn
Managing Director: Mahmut Aslan
Email: info@coralentis.com
Phone: +49 1590 7953151
2. What personal data we may process
Depending on how you use our website and services, we may process:
- name and contact details;
- billing and delivery address;
- email address and telephone number;
- order and transaction information;
- account information if a customer account is used;
- messages sent through contact forms, email or customer support;
- technical information such as IP address, browser, device information and log data;
- cookie and consent information;
- payment-related information processed through payment providers; and
- information needed to prevent fraud, protect the website and comply with legal obligations.
We only process personal data when there is a legal basis for doing so.
3. Why we process personal data
We may process personal data for the following purposes:
a. Orders and contracts
We process the information needed to receive, process, fulfil and support orders.
Legal basis: Article 6(1)(b) GDPR.
b. Customer support and enquiries
We process contact information and messages when customers contact us about products, orders, returns or other questions.
Legal basis: Article 6(1)(b) GDPR where the request relates to a contract or steps before a contract, and Article 6(1)(f) GDPR for other legitimate customer-service interests.
c. Legal and accounting obligations
We may retain invoices, transaction records and other information where required by tax, accounting, commercial or other applicable law.
Legal basis: Article 6(1)(c) GDPR.
d. Website security and fraud prevention
Technical and transaction data may be processed where necessary to keep the website secure, detect misuse and prevent fraud.
Legal basis: Article 6(1)(f) GDPR.
e. Marketing and newsletters
Where we offer newsletters or marketing messages, we use personal data for this purpose only where there is an appropriate legal basis, including consent where required.
Legal basis: Article 6(1)(a) GDPR where consent is required.
Consent can be withdrawn at any time for the future.
4. Wix website platform
Our website is created and hosted using services provided by Wix.com.
Wix may process personal data of website visitors and customers as part of providing hosting, security, website functionality, store functions and related services.
Wix.com Ltd. is based in Israel. Wix may also use group companies and service providers in other countries. Where data is transferred outside the European Economic Area, Wix states that it uses applicable legal transfer mechanisms and safeguards, including adequacy decisions and Standard Contractual Clauses where required.
Further information is available in Wix's privacy information:
https://www.wix.com/about/privacy
5. Cookies and similar technologies
Our website may use cookies and similar technologies for essential website functions, security, shopping-cart functions, preferences, analytics and, where enabled, marketing.
Cookies that are not strictly necessary are used only in accordance with the consent choices presented through the website's cookie or privacy controls where consent is required.
Visitors can change or withdraw cookie consent through the available privacy controls. Browser settings may also be used to block or delete cookies, although this can affect website functions.
6. Payments
When a customer chooses a payment method at checkout, payment information may be processed directly by the relevant payment provider.
We receive only the information necessary to confirm, manage and document the transaction. Payment providers may process data under their own privacy terms and legal responsibilities.
The providers available to a customer are shown during checkout.
7. Shipping and order fulfilment
Where necessary to fulfil an order, we may share required delivery information with shipping, logistics or fulfilment service providers.
This may include the recipient's name, delivery address, telephone number, email address and shipment information where needed for delivery or delivery notifications.
Legal basis: Article 6(1)(b) GDPR.
8. Service providers and recipients
We may use service providers for functions such as:
- website hosting and e-commerce services;
- payment processing;
- shipping and fulfilment;
- customer communication;
- accounting and legal compliance;
- security and fraud prevention; and
- analytics or marketing where enabled and legally permitted.
Service providers receive personal data only to the extent required for their function and subject to applicable data-protection requirements.
9. International data transfers
Some service providers may process data outside Germany or the European Economic Area.
Where required, international transfers are based on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism under the GDPR.
10. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable law.
Order, accounting and tax records may need to be retained for statutory retention periods.
Where processing is based on consent, the relevant data is no longer used for that consent-based purpose after consent has been withdrawn, unless another lawful basis applies.
11. Your rights under the GDPR
Subject to the applicable legal requirements, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- receive certain personal data in a portable format;
- withdraw consent at any time for future processing; and
- lodge a complaint with a data-protection supervisory authority.
To exercise your rights, contact:
12. Right to object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing, you may object to that processing at any time.
13. Supervisory authority
You have the right to lodge a complaint with a competent data-protection authority.
For a business established in Hessen, the relevant supervisory authority is generally:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Website:
https://datenschutz.hessen.de/
14. Data security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, unauthorised access or disclosure.
No method of transmission or storage can be guaranteed to be completely secure.
15. Changes to this Privacy Policy
We may update this Privacy Policy when our website, services, providers or legal requirements change.
The current version will be published on coralentis.com with the updated revision date.
16. Contact
For privacy questions or requests:
Hallo Pet UG (haftungsbeschränkt)
Am Fleckenberg 9
65549 Limburg, Germany
Email: info@coralentis.com
Phone: +49 1590 7953151