Privacy policy

Last updated: October 2026

This privacy policy explains how personal data is processed on our website in accordance with the General Data Protection Regulation (GDPR).

Controller

The controller responsible for data processing is Iordanis Eleftheriadis, Etui Creations, An der Mühle 28, 41352 Korschenbroich, Germany (see Imprint). If you have any questions about data protection, you can contact us at any time at this address or by email at info@etuicreations.de.

Hosting (Google)

Our website is served from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data on our behalf as a processor; we have a data processing agreement with Google under Art. 28 GDPR.

When you visit the website, access data is recorded automatically in server log files (e.g. IP address, date and time of access, page requested, browser type). This serves the technical provision and security of the website and is based on our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). The log files are deleted automatically after a short time.

The website is delivered through a worldwide network of servers (content delivery network). A transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses (Art. 46 GDPR) also apply.

Database and server functions (Google, Frankfurt region)

Enquiries from the contact form and newsletter sign-ups are stored in a database and processed by server functions. Both services are also provided by Google; we have chosen the Frankfurt am Main region (europe-west3), so the data is stored in Germany. To protect against abuse and spam, incoming enquiries are checked technically (e.g. with a hidden form field).

Contact form and enquiries by email or phone

If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, company, type of business, email address, phone number, product of interest, colour, quantity, your logo file where provided and the content of your message) to answer your enquiry and prepare a quote. Enquiries sent through the form reach us by email, and you receive a copy at the address you give.

The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) where your enquiry aims at a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We do not pass this data on without your consent and use it only to correspond with you. We delete enquiries no later than 12 months after the conversation has ended, unless a statutory retention period applies or a contract has resulted from it.

Email delivery (UniOne)

To send emails from our website (confirmation of your enquiry, forwarding to us, newsletter confirmation and the newsletter itself) we use the email service UniOne. Your email address, your name where given and the content of the email are transmitted to UniOne. UniOne processes the data on our behalf as a processor; we have a data processing agreement with the provider under Art. 28 GDPR. The legal basis is that of the respective purpose (enquiry or newsletter).

We only send our newsletter with information on products, offers and news with your express consent (Art. 6(1)(a) GDPR). We use the double opt-in procedure: after signing up you receive an email with a confirmation link, and only after you confirm do we add your address to the list. As proof of consent we store the time of sign-up and confirmation.

You can unsubscribe at any time via the link in every email or by sending us an informal message. We then delete your email address from the list.

We store your choice in the cookie banner in your browser’s local storage (localStorage) so that we don’t have to ask you again on every visit. This storage is technically necessary (Section 25(2) no. 2 TDDDG) and based on our legitimate interest (Art. 6(1)(f) GDPR). You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.

If you consent to the “Statistics” category, we use Google Analytics 4, a web analytics service of Google Ireland Limited. Google Analytics records, for example, page views, click paths, length of visit, approximate location and technical information about your browser and device, and sets cookies to recognise you on later visits. Google Analytics 4 does not store IP addresses. The data may be transferred to Google LLC in the USA (see the Hosting section on the EU-US Data Privacy Framework). We keep usage data for 14 months, after which it is deleted automatically.

We use Google’s consent mode. Without your consent, Google Analytics is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time in the cookie settings.

If you consent to the “Marketing” category, we may use the Meta Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. It shows whether visitors come to our website after seeing an ad on Facebook or Instagram, so that we can measure how well our advertising works. Your IP address, interactions on our website and technical data, among other things, are transmitted to Meta; a transfer to Meta Platforms, Inc. in the USA is possible (Meta is certified under the EU-US Data Privacy Framework). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time in the cookie settings. Without your consent, the Meta Pixel is not loaded.

Shipping providers

To deliver orders and samples we work with shipping providers, in particular DHL (Deutsche Post AG), DPD (DPD Deutschland GmbH), GLS (General Logistics Systems Germany) and UPS (United Parcel Service Deutschland). We pass on the data needed for delivery (name, delivery address and, where needed to arrange delivery, email address and phone number). This is done to perform the contract (Art. 6(1)(b) GDPR).

Fonts

The fonts used on this website are loaded from our own server. No connection is made to third-party servers (such as Google Fonts).

Legal bases

We only process personal data on a legal basis under Art. 6 GDPR:

Performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR), e.g. for enquiries, quotes and deliveries.
Consent (Art. 6(1)(a) GDPR), e.g. for the newsletter and for analytics or marketing services. You can withdraw consent at any time with effect for the future.
Legal obligation (Art. 6(1)(c) GDPR), e.g. keeping invoices under commercial and tax law.
Legitimate interest (Art. 6(1)(f) GDPR), e.g. server log files for website security or answering general enquiries.

Retention

We keep personal data only as long as needed for the purpose or as required by law:

Order and invoice data for the statutory retention periods, usually 6 to 10 years after the end of the calendar year of the last relevant entry.
Enquiries no later than 12 months after the conversation has ended, unless a contract has resulted from it.
Newsletter data until you unsubscribe.
Analytics data for 14 months (Google Analytics).
Server log files only briefly, unless a security incident requires longer retention.

Your rights

Under the GDPR you have the following rights:

Access (Art. 15 GDPR) to the data we hold about you.
Rectification (Art. 16 GDPR) of inaccurate or incomplete data.
Erasure (Art. 17 GDPR), where the legal requirements are met.
Restriction of processing (Art. 18 GDPR).
Data portability (Art. 20 GDPR).
Objection (Art. 21 GDPR) to processing based on legitimate interests, on grounds relating to your particular situation, and at any time to direct marketing.
Withdrawal of consent (Art. 7(3) GDPR) with effect for the future, e.g. in the cookie settings or via the unsubscribe link in the newsletter.

To exercise these rights, contact us informally, e.g. by email at info@etuicreations.de. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

Advertising emails

We hereby object to the use of the contact details published in the imprint for sending advertising we have not expressly requested.