Privacy policy

1. Controller

Calotti GmbH, represented by its managing director Johannes Wunderle, Weinstr. 11, 79341 Kenzingen, email: info@calotti.de. For further details, see the legal notice.

2. General information

Without your consent, this website works without tracking, without advertising cookies and without third-party scripts. Fonts and images are loaded from our own server. Only if you agree in the cookie banner is the Meta Pixel loaded (see section 7). We do not sell anything ourselves: purchase links lead to Amazon or to Wundermix.

3. Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (data processing on behalf pursuant to Art. 28 GDPR). When the website is accessed, the server processes technically necessary data (e.g. IP address, date and time, page accessed, browser) in log files in order to deliver the website and ensure security. IONOS stores the IP addresses in the log files only in anonymised form and keeps the log data for a maximum of 8 weeks. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the website.

4. Contact form and email

If you write to us via the contact form or by email, we process your details (name, email address, optionally phone, Amazon order number, product and message) in order to answer your enquiry. The form does not store your details on the website but sends an email to us. Legal basis: Art. 6(1)(b) GDPR (enquiries about products and orders) or point (f) (other enquiries). We delete the data when it is no longer needed and there are no retention obligations.

To protect against misuse (e.g. large numbers of automatically sent messages), we limit the number of messages per sender. For this purpose, our server stores, for a maximum of 24 hours, a check value (hash) of your IP address, which is generated using a random value created anew each day and does not allow any conclusions to be drawn about the IP address, as well as a check value of the message, so that a form accidentally sent twice only arrives once. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a functioning, abuse-proof contact form.

5. Hearts (“Likes”)

When you tap a heart, our own server increases the count for that image. No IP addresses, no cookies and no personal data are stored – only “image → count”. So that your heart stays visible, your browser remembers the marked images in local storage (localStorage). This information does not leave your device; you can delete it at any time via your browser settings.

6. Partner links (Amazon, Wundermix)

As an Amazon Associate we earn from qualifying purchases. We participate in the Amazon Associates programme of Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. Links to Amazon (marked with *) contain our partner ID. If you click on such a link, you are taken to Amazon; Amazon sets cookies there to track that you came via our website and to attribute a commission for qualifying purchases to us. We do not find out who bought what. On our website itself, Amazon does not load anything. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in the settlement of our commission. More on this in Amazon's privacy notice (on amazon.de in the page footer under “Datenschutzerklärung”).

For some products, we also link to the Wundermix shop (Wundermix GmbH). These links contain our partner ID (“sPartner=calotti”). Here, too, data is only transferred when you click the link; in the shop, the Wundermix privacy policy applies.

7. Meta Pixel (only with your consent)

If you click “Accept” in the cookie banner, we load the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. This allows us to measure how our advertising on Facebook and Instagram performs and to show advertising to visitors there. In doing so, data such as IP address, browser information, pages visited and, where applicable, cookies (e.g. “_fbp”) are transferred to Meta; a transfer to the USA is possible. Meta is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR). We are jointly responsible with Meta for the collection and transfer of the data to Meta (Art. 26 GDPR); the agreement on this is the Meta Controller Addendum. Meta alone is responsible for further processing.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). Without your consent, nothing from Meta is loaded. You can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). Your decision is stored only by your browser (localStorage, entry “calotti-consent”). You can change your consent at any time via the “Cookie settings” link in the footer. More at facebook.com/privacy/policy.

8. Social media

We link to our profiles (Calotti® @calotti_germany, Calotti® @calotti, Calotti® Calotti, Calotti® calotti_germany, Cookikids® @cookikids, Cookikids® @cookikidsbycalotti). These are simple links, not embedded content: data is only transferred when you click a link and visit the respective platform.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).