1. responsible person

Responsible for data processing on this website is:
VilaCeramica GmbH
Humboldtinsel 2
13507 Berlin
Phone: +49 160 99054960
Email: info@vila-ceramica.com

2. hosting

This website is hosted on Shopify hosted. The processing is carried out on the basis of a contract for order processing in accordance with Art. 28 GDPR. The servers are located exclusively in Germany and are subject to European data protection law.

3. access data and server log files

When you visit this website, the hosting provider automatically collects data such as IP address, date and time of access, browser used, operating system and pages accessed. This data is used exclusively to ensure technical operation and to avert danger. The legal basis is Art. 6 para. 1 lit. f GDPR.

4. cookies and consent management

We use cookies to ensure the functionality of our website and for analysis and marketing purposes. On your first visit, you will be asked for your consent via a cookie banner (Complianz | GDPR/CCPA Cookie Consent). You can withdraw your consent at any time. The legal basis is Art. 6 para. 1 lit. a GDPR (consent) or Art. 6 para. 1 lit. f GDPR (legitimate interest in the case of technically necessary cookies).

5. contact form (Contact Form 7)

If you contact us via the contact form, we will process the data you enter (e.g. name, email address, message) exclusively to process your request. The legal basis is Art. 6 para. 1 lit. b GDPR.

6. newsletter and e-mail communication (Klaviyo)

When you subscribe to our newsletter, we store your e-mail address and any other voluntary information. Registration takes place via the double opt-in procedure. The newsletter is sent via Klaviyo (server in the EU) and is certified in accordance with the EU-U.S. Data Privacy Framework. The legal basis is Art. 6 para. 1 lit. a GDPR.

7. web analysis and marketing

We use Jetpack/WordPress Stats for the statistical analysis of visitor behavior. The IP addresses processed in the process are anonymized. We also use Google for WooCommerce and Meta Pixel via Kliken for advertising campaigns. Data is only collected with your consent via the cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR.

8. payment service providers (PayPal, Stripe, WooPayments)

When you place an order via our online store, we process payment data to process the purchase. Depending on the service selected, this data is transmitted to the respective provider:
- PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
- Stripe Payments Europe Ltd, Ireland
- WooPayments (via Automattic Inc., USA, EU-U.S. DPF-certified)
The legal basis is Art. 6 para. 1 lit. b GDPR.

9th Elfsight Social Media Widgets

We use social media widgets from Elfsight to display content from Instagram, Facebook or Pinterest. Elfsight may transmit personal data (e.g. IP address, device data) to third-party providers. The integration only takes place with your active consent in the cookie banner. The legal basis is Art. 6 para. 1 lit. a GDPR.

10. spam protection (Akismet, Antispam Bee)

To prevent spam in comments, we use Akismet Anti-Spam (Automattic Inc.) and Antispam Bee (locally GDPR-compliant). Akismet transfers IP addresses and content to servers in the USA. Antispam Bee works in a data protection-friendly manner without third-party transmission. The legal basis is Art. 6 para. 1 lit. f GDPR.

11. translations and multilingualism (WPML, Loco Translate)

We use WPML and Loco Translate to provide multilingual content. WPML may use cookies to save your choice of language. The legal basis is Art. 6 para. 1 lit. f GDPR.

12. functional enhancements through plugins

This website uses other tools and plugins to enhance its functionality.

13. rights of the data subjects

You have the right to information pursuant to Art. 15 GDPR, rectification pursuant to Art. 16 GDPR, erasure pursuant to Art. 17 GDPR, restriction of processing pursuant to Art. 18 GDPR, data portability pursuant to Art. 20 GDPR and objection to processing pursuant to Art. 21 GDPR. You also have the right to withdraw your consent at any time (Art. 7 para. 3 GDPR).

14. right of appeal to the supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, for example, the Berlin Commissioner for Data Protection and Freedom of Information.

15. changes to this privacy policy

We reserve the right to adapt this privacy policy in the event of changes to our website or legal requirements. The current version at the time of your visit applies.

Status: May 2025