1. Data Controller

The data controller according to Article 4 (7) of the GDPR is:
Urns of Nature

Woodimex GmbH
c/o Kontier-Service Schleswig-Holstein
Feldstraße 10
D – 24983 Handewitt
Email: info@urnsofnature.com

Urns of Nature is a brand of Woodimex GmbH.

2. General Information

The protection of your personal data is important to us.
We treat your personal information confidentially and in accordance with the legal data protection regulations and this Privacy Policy.

3. Data Collection When Placing Orders

When you place an order in our online shop, we process your personal data (name, address, email, payment, and shipping information) in order to process your order and fulfil our contractual obligations (Art. 6 (1) lit. b GDPR).
For delivery, your data is shared with the shipping provider DPD Deutschland GmbH.
For payment processing, we transmit the necessary data to the payment service provider you have selected (e.g., PayPal or Klarna).
These providers process your data independently in accordance with their respective privacy policies.

4. Product Reviews, Cookies & Embedded Content

Product Reviews
When you submit a product review in our online shop, we process the data you provide as part of the review (e.g. name or pseudonym, review text, star rating). In addition, we store your IP address and technical browser information (user agent).

This data is processed in order to:

• display your review in the shop
• ensure the quality and authenticity of reviews
• prevent misuse and spam

Product reviews may be publicly visible on our website. Publication may take place only after a content review.

Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and enable certain website functions. We primarily use technically necessary cookies to:

• provide the shopping cart
• enable the ordering process
• provide customer accounts and login functions (if used)

These cookies are required for the operation of the shop and cannot be disabled.
Any additional cookies (e.g. for analytics or marketing purposes) are used exclusively on the basis of your consent via our cookie banner. Further information can be found in the cookie settings on our website.

Embedded Content from Other Websites
Our website may include embedded content from third-party providers (e.g. videos, maps, payment or social media services). When accessing such content, the respective third party may collect data about you and set cookies.

The embedded content behaves as if you had visited the respective third-party website directly. We have no influence over the type and scope of the data collected.

Legal Basis
The processing of the above-mentioned data is based on Article 6(1)(f) GDPR (legitimate interest) to ensure the technical functionality, security and prevention of misuse of our website.

Where consent is obtained for the use of certain cookies or embedded services, processing is additionally based on Article 6(1)(a) GDPR.

5. Web Analytics (etracker)

This website uses services from etracker GmbH, Hamburg, Germany (www.etracker.com), to analyze usage data.
By default, we do not use cookies for web analytics.
If we use analysis or optimization cookies, your explicit consent will be obtained in advance.
If you consent, cookies are used that enable statistical analysis of website reach, measurement of the success of our online marketing campaigns, and testing of different versions of our online offerings or their components.
Cookies are small text files stored by the internet browser on the user’s device.
etracker cookies do not contain any information that can identify a user.

The data generated by etracker is processed and stored on behalf of this website’s provider exclusively in Germany and is therefore subject to strict German and European data protection laws and standards.
etracker has been independently audited, certified, and awarded the ePrivacyseal for data protection compliance.

Data processing is carried out based on the legal provisions of Art. 6 (1) lit. f (legitimate interest) of the General Data Protection Regulation (GDPR).
Our legitimate interest under the GDPR is the optimization of our online offering and our website.
Since the privacy of our visitors is important to us, any data that could potentially identify an individual, such as IP addresses or login/device identifiers, is anonymized or pseudonymized as early as possible.
No further use, combination with other data, or disclosure to third parties occurs.

You may object to the data processing described above at any time by clicking on the toggle switch.
The objection will have no adverse consequences.
If no toggle switch is displayed, data collection has already been prevented by other blocking measures.

Further information about data protection at etracker can be found on their website.

6. Data Security

We use SSL or TLS encryption on this website to protect the transmission of confidential content (e.g., orders or inquiries).
You can recognize an encrypted connection by the “https://” prefix and the padlock icon in your browser’s address bar.

7. Your Rights

If you have an account on this website or have left comments, you may request an export of your personal data — including all data you have provided to us.
You may also request the erasure of all personal data we hold about you.
This does not include data that we are obliged to retain for legal, administrative, or security reasons.

8. Storage and Deletion

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by statutory retention periods.
After this period, the data will be deleted or anonymized.

9. Changes

We reserve the right to amend this Privacy Policy as needed to comply with legal or technical developments.
The current version is always available on our website.