Privacy Policy

1. Controller

2. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority. The competent authority for North Rhine-Westphalia is: www.ldi.nrw.de.

3. Hosting & Server Logs

This website is hosted on a private server (Oracle Cloud) located in Germany. When you visit the site, the server automatically records the following data in log files:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file requested
• Amount of data transferred
• Browser type and version
• Operating system

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure website operation). Log files are deleted automatically after 7 days.

4. Google Fonts

This website uses Google Fonts, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When the page loads, a connection is made to Google servers, which may transmit your IP address to Google.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent via cookie banner). More information: policies.google.com/privacy. Data transfer to the USA is based on the EU Commission's standard contractual clauses.

5. Web Analytics (Umami)

This website uses Umami, a privacy-friendly open-source analytics tool. Umami is self-hosted on our own server (Oracle Cloud) in Germany — no data is transmitted to third parties.

Umami collects only anonymised usage data: pages visited, visit duration, browser type, operating system, device type, and approximate country of origin. IP addresses are never stored or logged. No cookies are set and no personal data is collected.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymous analysis of user behaviour to improve our offering). As no personal data is processed, no consent is required.

6. Shop Embeds (Etsy, Amazon, Shopify)

This website contains links and embeds to external shop platforms. When you click these links or load content from these platforms, data (including your IP address) may be transmitted to their respective operators:

• Etsy Inc., 117 Adams Street, Brooklyn, NY 11201, USA — Privacy Policy
• Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg — Privacy Policy
• Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland — Privacy Policy

Legal basis: Art. 6 para. 1 lit. a GDPR (consent). You can decline these embeds via our cookie banner.

7. Contact

When you contact us by email, the data you provide (name, email address, message content) is stored for the purpose of processing your enquiry. Legal basis: Art. 6 para. 1 lit. b GDPR. Data is deleted once it is no longer required for the purpose for which it was collected.

8. Cookies

We use technically necessary cookies (e.g. to store your cookie consent) as well as optional cookies for analytics and shop embeds. You can withdraw your consent at any time by clearing your browser's local storage.

Necessary cookies: emundei_consent — stores your cookie consent choice (localStorage, no expiry date, no server transfer).

9. Waitlist / Launch Notification

We offer a sign-up form on the homepage through which you can register to be notified when the site launches. We collect the following data:

• Email address
• Date and time of sign-up
• IP address (for abuse prevention)

Your data is used solely to send you a single notification when emundei.com goes live. It is stored on our server (Oracle Cloud) in Germany in a JSON file and is not shared with third parties.

For sending confirmation and notification emails, we use the SMTP service of STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Your email address is transmitted to STRATO for this purpose.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent). You can withdraw your consent at any time by replying to any of our emails with "unsubscribe" in the subject line. Your data will then be deleted immediately. All waitlist data will be deleted after the site launches.

Last updated

This privacy policy was last updated in June 2026.