1 GENERAL NOTICE AND MANDATORY INFORMATION
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. In accordance with Art. 13 DSGVO, this data protection declaration informs you which data we process and for what purpose.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) may involve security risks. Complete protection of data against unauthorised access by third parties is not possible.
1.1 Designation of the responsible body
The responsible body for data processing on this website is:
Colour of Stone GmbH
Friedrich Aly
Albert-Einstein-Str. 10
31135 Hildesheim / GERMANY
E-Mail: hello@colourofstone.com
Tel.: +49 5121 102309
The responsible body decides alone or jointly with others on the purposes and means of the processing of personal data (e.g. names, contact details or similar).
1.2 Withdrawal of your consent to data processing
Some data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal communication by e-mail is enough for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
1.3 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes data protection law (Art. 77 GDPR). You may contact the supervisory authority of your place of residence, your place of work or the place of the alleged infringement. The State Commissioner for Data Protection of Lower Saxony (Landesbeauftragter für den Datenschutz Niedersachsen) is responsible for our registered office. A list of the German supervisory authorities with contact details can be found here: List of supervisory authorities (bfdi.bund.de).
1.4 Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
1.5 Right to information, correction, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data. In this regard and for further questions about personal data, you can contact us at any time via the contact options listed in the imprint.
2 DATA PROCESSING
2.1 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.
2.2 Server log files
When you access our website, your browser transmits information to our server that is technically required to deliver the pages. This includes:
– Visited page on our domain
– Date and time of the server request
– Browser type and browser version
– Operating system used
– Referrer URL
– Host name of the accessing computer
– IP-adress
This data is only processed for the duration of the request in order to deliver the website to you. Server log files in which it would be stored are deactivated at our hosting provider ALL-INKL.COM; the data is therefore not stored. This data is not merged with other data sources. The data processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free delivery and the security of the website.
Embedding of our product overviews on other websites
We provide overviews of our natural stone tiles that can be embedded on other websites – in particular on the website of our affiliated company Steinwolf Naturstein Lösungen (steinwolf.de). When such an overview is displayed, your browser retrieves it directly from our server. In doing so, the data listed under 2.2 above are processed only for delivery and are not stored; as the referring page we generally receive only the domain of the embedding website, not the specific page visited there. We do not set any cookies in the embedded overview, and no visitor statistics are collected there. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in presenting our product range on partner websites.
If you click on a product in the overview, our shop opens. We add the domain of the embedding website to the link as a campaign identifier (mtm_campaign=Einbettung, mtm_kwd=domain). This information does not relate to you personally; it is only evaluated in our visitor statistics (section 3.1) to identify which website a visit came from.
2.3 Data transmission upon conclusion of a contract for the purchase and shipment of goods
Personal data will only be transmitted to third parties if there is a necessity in the context of the execution of the contract. Third parties can be, for example, payment service providers, logistics companies or our affiliated company Steinwolf (see below). No further transmission of data will take place or only if you have expressly consented to this.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
Execution of orders by Steinwolf
Individual orders may be carried out in whole or in part by our affiliated company Steinwolf Naturstein Lösungen, Inh. Friedrich Aly, Albert-Einstein-Straße 10, 31135 Hildesheim, Germany. Steinwolf only receives the data required in each case, usually your name, delivery, billing and contact details and the contents of your order. Depending on the order, this happens in one of the following ways:
– Steinwolf provides individual services for us, such as cutting, processing, delivery or installation. We remain your contractual partner; Steinwolf processes the data for this purpose under its own responsibility.
– Steinwolf processes the data exclusively on our instructions, for example when shipping on our behalf. In this case Steinwolf acts as our processor (Art. 28 GDPR); we remain the controller.
– Steinwolf takes over the entire order and becomes your contractual partner. This only happens in agreement with you. From the takeover onwards, Steinwolf is responsible for processing your data, and the Steinwolf privacy policy applies.
The legal basis in each case is Art. 6(1)(b) GDPR (performance of the contract or pre-contractual measures).
2.4 Registration on this website
You can register on our website to use certain functions. The transmitted data is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.
In the event of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address given during registration.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). You may revoke your consent at any time. An informal communication by e-mail is enough for the revocation. The legality of the data processing already carried out remains unaffected by the revocation.
We store the data collected during registration for the period that you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.
2.5 What data we collect and store
We collect personal data in order to receive and process your orders and to be able to answer your to be able to answer any questions you may have.
We collect the following data from you:
– First name
– Surname
– Company name
– Address for delivery and invoice
– Ordered goods
– Indication of which means of payment you use
– Data of the means of payment
– E-mail address
– Telephone number
Furthermore, the respective payment provider (e.g. credit card company) stores information on your means of payment.
2.6 Cookies
Our website uses only technically necessary cookies – no tracking or marketing cookies. Cookies are small text files that your web browser stores on your device.
Specifically, we use the following cookies:
– shopping cart and session (WooCommerce), as soon as you add an item to the cart
– login, when you sign in to your customer account
– wishlist (one year), as soon as you save an item or open the 3D showroom (a starting selection is saved there)
– language selection (30 days)
– business customers: validated VAT ID and switching between sub-accounts
– cookies of the payment providers Stripe and PayPal on the checkout page, which serve payment processing and fraud prevention (see section 4)
Individual settings (for example collapsed filters, your selection in the showroom or an objection to visitor statistics) are stored in your browser’s local storage and are not transmitted to us.
These cookies and stored settings are required to provide the functions you have requested (Section 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). You can delete or block cookies in your browser; individual functions such as the shopping cart will then not be available.
3 THIRD PARTY TOOLS, ANALYSIS AND APPLICATION
3.1 Matomo
Our website uses the web analytics service Matomo, an open-source software that we operate ourselves on a server in Germany. Matomo does not set any cookies on our site and does not read screen resolution, browser plugins or similar device properties. Your IP address is shortened before it is stored.
Among other things, we record the pages visited, date and time, the previously visited page, browser and operating system and the approximate country of origin. For orders, we additionally record changes to the shopping cart, order number, amounts and item numbers – no names, addresses or payment data.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in analysing the use of our website and improving it. Data on individual visits is deleted automatically after 180 days; after that, only aggregated reports remain.
You can object to this recording at any time with effect for the future (Art. 21 GDPR). The objection is stored in your browser’s local storage and applies to this browser. In addition, we respect your browser’s “Do Not Track” setting.
Visitor statistics are active in this browser. Visitor statistics are disabled in this browser.
3.2 Order processing
We have concluded a data processing agreement with our hosting provider ALL-INKL.COM – Neue Medien Münnich, where this website and the statistics software Matomo are operated.
3.3 WooCommerce
Our shop is based on the open-source software WooCommerce, which we operate ourselves on our server in Germany. Your order and customer data is stored there and is not transmitted to the manufacturer of WooCommerce.
4 PAYMENT PROVIDERS
4.1 PayPal
Our website enables payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you pay with PayPal, the payment data you enter is transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You may revoke your consent at any time. Data processing operations in the past remain effective in the event of a revocation.
4.2 Stripe
We use Stripe to process payments by credit card, Apple Pay and Google Pay. For this purpose, scripts from Stripe and PayPal are loaded on the checkout page. In the process, your IP address is transmitted to these providers, and they may set their own cookies, which serve payment processing and fraud prevention.
On this website we offer, among other things, payment with the services of Stripe. The provider for customers within the EU is Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).
When making a payment via Stripe, your payment details are forwarded to Stripe via an interface on our site in order to make the payment. You can read details about this in Stripe’s privacy policy at the following link https://stripe.com/de/privacy.
The transmission of your data to Stripe takes place on the basis of Art. 6 (1) lit. b DSGVO (contract processing) as well as on the basis of our legitimate interest in using reliable and secure payment processes (Art. 6 (1) lit. f DSGVO).
Status: 30.09.2026