Data protection

in accordance with Art. 13, 14 GDPR | Status: May 2026

1. General Information
Protecting your personal data is a particular concern for us. In this privacy policy, we inform you about which data we collect, for what purpose we process it, and what rights you have. The processing of your personal data always takes place in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.

2. Controller
The controller in the sense of the GDPR is:
Company: Kanawezi, Frozan and Hossieni, Somaye GbR, operating under the brand "Intimotions"
Address: Kollwitzstraße 4, 63225 Langen (Hessen), Germany
Email: info@intimotions.com
Phone: +49 15678 334582

3. Collection of Personal Data
3.1 When you visit our website
Each time you access our website, the browser of your device automatically transmits the following technical data to our server:
• IP address (anonymized)
• Browser type and version
• Operating system
• Referrer URL (previously visited page)
• Date and time of access
This data is processed exclusively for technical and security-related purposes and is automatically deleted after 7 days. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interests).
3.2 When contacting us
If you contact us by email or contact form, we process the following data exclusively for processing your request:
• First and last name
• Email address
• Content of your message
Legal basis: Art. 6 para. 1 lit. b GDPR (initiation of contract) or Art. 6 para. 1 lit. f GDPR (legitimate interests).

3.3 When shopping in the online shop
To process your order, we process the following data, which is necessary for the fulfillment of the contract:
• First and last name
• Delivery and billing address
• Email address
• Telephone number (optional)
• Payment information (depending on the selected payment method)
• Order content and history
Legal basis: Art. 6 para. 1 lit. b GDPR. Tax and commercial law relevant data will be stored for 10 years in accordance with §§ 147 AO, 257 HGB.

4. Shop operation via Shopify
Our online shop is operated via the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes personal data as a processor on our behalf based on a data processing agreement in accordance with Art. 28 GDPR. Insofar as data is transferred to the USA, we rely on Shopify's certification under the EU-US Data Privacy Framework.
Shopify Privacy Policy: https://www.shopify.com/legal/privacy

5. Disclosure of data to third parties
Your personal data will only be disclosed to third parties if this is legally permitted or required. We pass on data to:
• Payment service providers (PayPal, Stripe, Klarna, Sofortüberweisung) for payment processing – Art. 6 para. 1 lit. b GDPR
• Shipping service providers (e.g. DHL, Hermes) for the delivery of your order – Art. 6 para. 1 lit. b GDPR
• Hosting and IT service providers (especially Shopify) as processors – Art. 28 GDPR
No disclosure for other purposes or to unauthorized third parties takes place. You can freely decide not to provide certain information; in this case, individual functions may be restricted.

6. Payment service providers
We use the following service providers to process payments. Data is only transferred for payment processing on the basis of Art. 6 para. 1 lit. b GDPR. Each provider has its own data protection guidelines, which you can view on the respective websites.
• PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg – https://www.paypal.com/de/webapps/mpp/ua/privacy-full
• Stripe Payments Europe, Ltd., Dublin, Ireland – https://stripe.com/de/privacy
• Klarna Bank AB (publ), Stockholm, Sweden – https://www.klarna.com/de/datenschutz/
• Sofort GmbH (Klarna Group), Munich – https://www.sofort.com/ger-DE/datenschutzerklärung-sofort-gmbh/

7. Cookies and analysis tools
Our website uses cookies. Cookies are small text files that are stored on your device. We distinguish between:
• Technically necessary cookies: Absolutely necessary for the operation of the shop (e.g. shopping cart, session management). Legal basis: Art. 6 para. 1 lit. f GDPR. These cookies cannot be deactivated without restricting shop functionality.
• Analysis and marketing cookies: Are only set with your explicit consent via our cookie banner. Legal basis: Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time.
You can deactivate cookies in your browser. If necessary cookies are deactivated, the functionality of our shop may be restricted.

8. Newsletter
With your consent, you can subscribe to our newsletter. We use the double opt-in procedure: After your registration, you will receive a confirmation email in which you must actively confirm your registration. Processed data: email address, if applicable name. Legal basis: Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time - via an unsubscribe link in the newsletter or by email to info@intimotions.com. The legality of the processing carried out until revocation remains unaffected.

9. Data Security
We implement technical and organizational security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. Our website is transmitted via SSL/TLS encryption (recognizable by the padlock symbol in your browser's address bar). All our employees and service providers are obliged to maintain confidentiality.

10. Storage Period
We store personal data only for as long as necessary for the respective purpose or as required by legal retention periods. After the purpose ceases to exist or the retention period expires, the data is routinely deleted:
• Server log files: 7 days
• Contact inquiries: until final processing, maximum 3 years
• Order data: 10 years (in accordance with §§ 147 AO, 257 HGB)
• Newsletter data: until unsubscription

11. International Data Transfer
Some of the service providers we use (e.g., Shopify, PayPal, Stripe) process data outside the EU/EEA. If there is no adequacy decision by the EU Commission, we base the transfer on appropriate safeguards pursuant to Art. 46 GDPR – in particular on EU Standard Contractual Clauses or the providers' certification under the EU-US Data Privacy Framework.

12. Data of Minors
Our services are exclusively directed at persons aged 18 and over. We do not knowingly collect personal data from minors. Should you, as a parent or guardian, discover that your child has transmitted data to us, please contact us at info@intimotions.com. We will delete this data immediately.

13. Your Rights as a Data Subject
You have the following rights with respect to your personal data:
• Right to information (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR), unless legal retention obligations prevent this
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 para. 3 GDPR)
To exercise your rights, please contact: info@intimotions.com

14. Right to Complain to the Supervisory Authority
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR). The authority responsible for Intimotions is:
Authority: The Hessian Commissioner for Data Protection and Freedom of Information
Address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Website: https://datenschutz.hessen.de

15. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy as necessary to keep it up to date with changes in legislation or changes in our services. The current version is available on our website. In the event of significant changes, registered users will be informed by email.