Privacy Policy

Information

How we handle your personal data is explained in this privacy policy. The applicable data protection laws, especially the General Data Protection Regulation (GDPR), are the basis. Except for service providers and third parties that we name in this privacy policy, we do not share your data with third parties. If you have any questions, feel free to contact us.

Responsible person

The party responsible for data processing is:

Marke Mensch Natur GmbH
Herrenstraße 46
76133 Karlsruhe


Data Protection Officer:

Tobias O. Rink
Email: hello@goodmorning.world
Phone: 0721 151 88 65

General Information

Provision of Data

Generally, providing personal data is not required by law or contract to use our website. If the provision of data is necessary for the conclusion of a contract or if the user is obligated to provide personal data, we will inform you of this requirement and the consequences of not providing the data in this privacy policy.

Data Transfer to Third Countries

It is possible that we use service providers and third-party vendors who are located in countries outside the European Union and the European Economic Area. The transfer of personal data to such third countries takes place, unless the user has consented to the data transfer, based on an adequacy decision from the European Commission (Art. 45 GDPR) or we have provided appropriate safeguards to ensure data protection (Art. 46 GDPR). If an adequacy decision from the European Commission exists for the data transfer to a third country, we will point this out in this privacy policy. Otherwise, users can request a copy of the appropriate safeguards from us, if not already included in the privacy policies of the service providers or third-party vendors.

Automatisierte Entscheidungsfindung

Should we perform automated decision-making, including profiling, we will inform you of this circumstance in this privacy policy, including the logic involved, as well as the scope and intended effects of such processing. Otherwise, no automated decision-making takes place.

Processing for Other Purposes

Data is generally only processed for the purposes for which it was collected. If, exceptionally, the data is to be processed for other purposes, we will inform you about these other purposes before the processing takes place and provide all other relevant information (Art. 13 (3) GDPR).

Data Processing when Accessing the Website

Each time our website is accessed, the user's browser transmits various data. During the visit to the website, the following data is processed and stored in log files even after the connection ends:
  • Browser type and version used
  • Operating system
  • Accessed pages and files
  • Amount of data transferred
  • Date and time of access
  • User's provider
  • IP address
  • Referrer URL

The processing of this data is necessary to deliver the website to the user and optimize it for their device. The storage in log files serves to improve the security of our website (e.g., protection against DDoS attacks).

 

The legal basis for processing is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in providing the website and improving website security. Log files are automatically deleted after 30 days.

 

The design and operation of our online shop are managed through Shopify. Provider: Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

 

The processing of personal data is carried out on our behalf. It is possible that Shopify will transmit this data to other companies within the group that are located outside the European Economic Area. These companies will then process the data on behalf of Shopify International. For Canada, there is an adequacy decision from the European Commission. If data is transferred to other regions, appropriate safeguards for the protection of personal data have been agreed upon through internal corporate agreements between Shopify International Ltd. and the receiving companies.

 

Shopify Privacy Policy

Cookies, Tracking Pixels, and Mobile Identifiers

On our website, we use technologies to recognize the device being used. This may include cookies, tracking pixels, and/or mobile identifiers.

 

Recognizing a device can generally serve various purposes. It may be necessary to provide features on our website, such as offering a shopping cart. Additionally, these technologies can be used to track user behavior on the site, for example, for advertising purposes. We will describe the specific technologies we use and their purposes separately in this privacy policy.

 

For better understanding, we explain below how cookies, tracking pixels, and mobile identifiers generally work:
  • Cookies are small text files that contain certain information and are stored on the user's device. Usually, it is an identification number assigned to a device (cookie ID).
  • A tracking pixel is a transparent graphic file embedded on a page that allows for log file analysis.
  • A mobile identifier is a unique number (Mobile ID) stored on a mobile device and can be read by a website.

Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in providing the functions of our website.

 

For cookies that are not required for the operation of our website, we use them to make our offering more user-friendly or to track the use of our website. The legal basis here depends on whether user consent is required or whether we can rely on a legitimate interest. Any consent given can be withdrawn by the user at any time through their browser settings.

 

The user can prevent the processing of data through cookies by adjusting the settings in their browser and objecting to it. In the case of an objection, some functions of our website may no longer be available. We will inform you separately in this privacy policy about other ways to object to the processing of personal data through cookies. We may also provide links that allow you to express your objection, labeled with "Opt-Out."

Contact Information

In the case of contact, we process the user's details, date, and time for the purpose of handling the inquiry, including any follow-up questions.

 

The legal basis for the data processing is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in responding to the inquiries of our users. An additional legal basis is Art. 6 (1) Sentence 1 lit. b) GDPR if the processing is necessary for the fulfillment of a contract or for the execution of pre-contractual measures.

 

The data will be deleted once the inquiry, including any follow-up questions, has been answered. We regularly check, at least every two years, whether data related to contact inquiries needs to be deleted.

Newsletter

Users have the option to subscribe to our newsletter on our website. We process the data entered during registration to send a confirmation email to the user's email address. After confirmation, we process the data to send the newsletter. For personalization purposes, we may also process the user's name, if provided.

 

Upon registration, the date, time, and the user's IP address are stored to provide proof of the registration. We continue to process this data after unsubscribing for documentation purposes and delete it after three years at the end of the year.

 

The legal basis for processing is the user's consent under Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, processing is carried out under Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interests are sending newsletters, personalized communication with the user, and proving that the user has subscribed to the newsletter.

Existing Customer Advertising

If the user has provided their email address when purchasing goods or services, we reserve the right to use it for direct marketing related to similar goods or services in accordance with § 7 (3) UWG. This does not apply if the user has objected to the use of their email address.

 

The legal basis for processing is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in promoting our sales. The user can object to the use of their email address for direct marketing at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic rates.

Registration for a User Account

Users can register on our website for our services. In this context, we process the data entered during registration. We confirm the email address by sending a link (double opt-in) to prevent misuse of the registration function. For this purpose, we also process the date, time, and the user's IP address. For documentation purposes, we further process the date, time, and the user's IP address when the user clicks on the confirmation link.

 

The data will be deleted along with the user account after three years at the end of the year, unless a longer legal retention period applies.

 

The legal basis for processing is Art. 6 (1) Sentence 1 lit. a) GDPR, as long as we obtain the user's consent. If the processing is necessary for the fulfillment of a contract or for the execution of pre-contractual measures, it is based on Art. 6 (1) Sentence 1 lit. b) GDPR. The legal basis in other cases is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest is to provide users with access to our services requiring registration, protect us from misuse of the registration function, and be able to prove a proper registration. After the deletion of the user account, our legitimate interest is also to defend against potential claims.

Orders and Payment Processing

When placing an order in our online shop, we process the data provided during the order, such as name, bank details, or payment information, for order processing. We only pass on payment data to our payment service providers to the extent necessary for processing the payment.

 

The legal basis for processing order data is Art. 6 (1) Sentence 1 lit. b) GDPR. If the user has saved their order data in a user account, the legal basis is Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, processing is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest is in handling refunds and pursuing claims.

 

Order and payment data will be deleted as soon as they are no longer required for processing the order, including a reversal of the payment (e.g., due to a cancellation or withdrawal from the contract) or for handling warranty cases, and no legal retention obligations exist. If the user has saved their order data for future orders in their user account, the data will be deleted together with the user account when it is no longer needed for processing a specific order.

Apple Pay

For payments via Apple Pay, the payment processing is handled by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.

Google Pay

For payments via Google Pay, the payment processing is handled by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Paypal

For payments via PayPal, the payment processing is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

 

PayPal Privacy Policy

Sofortüberweisung (Instant Bank Transfer)

For payments via SOFORT, the payment processing is handled by SOFORT GmbH, Theresienhöhe 12, 80339 Munich. The company is part of the Swedish Klarna Group.

 

SOFORT Privacy Policy

Klarna

For payments via Klarna, the payment processing is handled by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

 

Klarna Privacy Policy

Other Third-Party Services

Adobe Analytics

To statistically analyze the usage of our website, improve content and quality, and for marketing purposes, we use Adobe Analytics. Provider: Adobe Software Systems Ireland Ltd., 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

 

In order to track the usage of the website, a cookie is set on the user's device. We use Adobe Analytics with IP anonymization. The user's IP address is automatically shortened on servers in the EU or EEA before being transferred to servers in third countries (e.g., the USA). Among other things, the following is analyzed: approximate geographic location, device, screen resolution, browser, and visited pages, including the duration of stay.

 

If we obtain the user's consent, data processing is based on Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, it is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in statistical analysis, improving our website, and online marketing.

 

The data collected by Adobe Analytics is automatically deleted after 12 months.

 

Opt-Out

 

Adobe Analytics Privacy Policy

Instagram

We integrate content and buttons from the social network Instagram on our website via a plugin. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

 

In order to load Instagram content, it is technically necessary to transmit the user's IP address to the company. If the user is logged into Instagram, visiting a page may be linked to their account.

 

If we obtain the user's consent, data processing is based on Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, it is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest in integrating Instagram content and buttons lies in making our website more user-friendly.

 

Instagram Privacy Policy

Pinterest

We integrate content and buttons from the social network Pinterest on our website via a plugin. Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

 

In order to load Pinterest content, it is technically necessary to transmit the user's IP address to the company. If the user is logged into Pinterest, visiting a page may be linked to their account.

 

If we obtain the user's consent, data processing is based on Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, it is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest in integrating Pinterest content and buttons lies in making our website more user-friendly.

Facebook Social Plugins

We integrate content and buttons from the social network Facebook on our website via a plugin. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

 

In order to load Facebook content, it is technically necessary to transmit the user's IP address to the company. If the user is logged into Facebook, visiting a page may be linked to their account.

 

If we obtain the user's consent, data processing is based on Art. 6 (1) Sentence 1 lit. a) GDPR. Otherwise, it is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest in integrating Facebook content and buttons lies in making our website more user-friendly.

 

Facebook Privacy Policy for Social Plugins

Google Tag Manager

We use Google Tag Manager to manage our website tags. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

 

The Tag Manager is a cookie-free domain that triggers tags from various providers, which in turn collect data. The Google Tag Manager does not access this data. To trigger tags, it is technically necessary to transmit the user's IP address to Google.

 

The use of Google Tag Manager is based on Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in the simplified management of third-party services we use.

 

Google Tag Manager Privacy Policy

Google reCaptcha

To increase the security and availability of our website, we use the reCAPTCHA service. Provider: Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

 

We use queries to ensure that actions on our site are not triggered by bots. To do this, it is technically necessary to transmit the user's IP address to Google.

 

The legal basis for processing is Art. 6 (1) Sentence 1 lit. f) GDPR. Our legitimate interest lies in ensuring website security and protecting against spam and abuse.

 

reCAPTCHA Privacy Policy

Profiles on Social Networks

We are present on one or more social networks. Specifically, these include: Facebook or Instagram. When contacting us, we process personal data as described above under "Contact Information." The providers of social networks process data in accordance with their privacy policies, which can be accessed here:

We are present on one or more social networks. Specifically, these include: Facebook and Instagram. When you contact us, we process personal data as described above under "Contact Information." The providers of these social networks process data according to their privacy policies, which can be accessed here:

Rights of Data Subjects

If personal data of the user is processed, they are considered a data subject according to the GDPR. Data subjects have the following rights:

 

Right to access: The data subject has the right to request confirmation as to whether personal data concerning them is being processed. If personal data is processed, the data subject has the right to obtain free access to and a copy of the personal data being processed.

 

Right to rectification: The data subject has the right to request the immediate correction of inaccurate or the completion of incomplete personal data.

 

Right to erasure: The data subject has the right to request the immediate erasure of personal data concerning them, in accordance with legal provisions.

 

Right to restriction of processing: The data subject has the right to request the restriction of the processing of personal data concerning them, in accordance with legal provisions.

 

Right to data portability: The data subject has the right to receive the personal data concerning them in a structured, commonly used, and machine-readable format, or to request the transmission of this data to another controller.

 

Right to object: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is based on Art. 6 (1) sentence 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.

 

Right to withdraw consent: The data subject has the right to withdraw their consent at any time.

 

Right to lodge a complaint: The data subject has the right to lodge a complaint with a supervisory authority.