Privacy Policy

Navmeda GmbH, Alexanderstraße 12, 10178 Berlin, datenschutz@navmeda.de. You can reach our data protection officer at the same address.

• Order processing: Name, address, email, phone number, payment data and order data, in order to fulfill the purchase contract with the merchant (Art. 6(1)(b) GDPR). Disclosure to the respective merchant and to payment and shipping service providers.
• Customer account: Login credentials and order history for contract performance (Art. 6(1)(b) GDPR).
• Newsletter: Email address and sign-up timestamp based on your consent (Art. 6(1)(a) GDPR), double opt-in. You may withdraw consent at any time via the unsubscribe link.
• Statistics/analytics: pseudonymous usage data only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).
• Marketing and personalization: advertising and recommendation profiles only with your consent.
• Merchant verification (KYBC): company, register and contact details of sellers to fulfill Art. 30 DSA (Art. 6(1)(c) GDPR).
• Security and abuse prevention: server logs including IP address (legitimate interest, Art. 6(1)(f) GDPR).

We only set non-essential cookies after your active consent. We log your decision in a tamper-proof way with a timestamp, the version of the consent text, the categories selected and browser identifier. Details in the Cookie Policy.

• Order and invoice data: 10 years (§ 147 German Fiscal Code (AO), § 257 German Commercial Code (HGB)).
• Customer account: until the account is deleted, thereafter only statutory retention.
• Newsletter data: until withdrawal.
• Consent logs: 3 years after withdrawal, as evidence.
• Server logs: 14 days.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) as well as a right to object to processing based on legitimate interests (Art. 21). You may withdraw consent you have given at any time. To do so, contact datenschutz@navmeda.de.

Right to complain: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.

Where service providers process data outside the EU/EEA, this is done on the basis of the European Commission's standard contractual clauses or an adequacy decision.