Privacy Policy
This Privacy Policy explains how Wipoltoto collects, uses and protects your personal data when you visit our website, create an account, contact us or place an order. We process your data in line with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Controller
Business Name: Wipoltoto
Legal Entity: LKMK UG (haftungsbeschränkt), trading as Wipoltoto
Managing Directors: Maximilian Koch, Laurin Kuchmann
Commercial Register Number: HRB 113728
Registered Court: Amtsgericht Düsseldorf
Business Address: Fechnerweg 13, 40591 Düsseldorf, Germany
Email: info@wipoltoto.com
What Data We Collect
Depending on how you use our website, we may collect your name, email address, phone number and billing and delivery addresses; order details such as products, sizes, prices and returns; your chosen payment method and payment status (full card or bank details are handled by our payment providers, not by us); account data if you create an account; messages you send us; reviews or photos you choose to share; and technical data such as your IP address, browser, device and pages visited. Usage data from analytics and marketing cookies is collected only with your consent.
How and Why We Use Your Data
We use your data to process and deliver your orders, manage your account, handle returns and refunds, and answer your questions, for example about sizing or fit (Art. 6(1)(b) GDPR). We use it to keep our website secure and running smoothly and to prevent fraud, based on our legitimate interest (Art. 6(1)(f) GDPR). With your consent, we send newsletters, publish your reviews or photos, and use analytics and marketing cookies (Art. 6(1)(a) GDPR and § 25(1) TDDDG). We also keep records required by commercial and tax law (Art. 6(1)(c) GDPR). You can withdraw your consent or unsubscribe at any time.
Cookies
Strictly necessary cookies keep your shopping cart, checkout and login working and do not require consent (§ 25(2) TDDDG). Analytics, personalisation and marketing cookies are used only if you agree through our cookie banner, and you can change your choice at any time in the cookie settings or your browser.
Sharing Your Data
We share your data only where necessary: with payment providers to process payments, with shipping companies to deliver your order, with hosting and IT providers that work on our behalf under data processing agreements (Art. 28 GDPR), with tax advisers, and with authorities where required by law. If you visit our social media profiles, the platform operators process your data under their own policies. Where data is transferred outside the EU or EEA, we ensure adequate protection through an adequacy decision or the EU Standard Contractual Clauses. We never sell your personal data.
How Long We Keep Your Data
We keep your data only as long as needed. Order and invoice data is kept for up to 10 years as required by German commercial and tax law. Account data is kept until you delete your account, newsletter data until you unsubscribe, and reviews or photos until you ask us to remove them. Messages and technical logs are deleted once they are no longer needed.
Your Rights
You have the right to access, correct or delete your data, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time (Art. 15 to 21 and Art. 7(3) GDPR). To exercise these rights, contact us at info@wipoltoto.com. You may also lodge a complaint with a data protection authority, such as the authority responsible for us: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Düsseldorf, Germany.
Data Security
We use appropriate technical and organisational measures to protect your data, including SSL/TLS encryption on our website. No internet transmission is completely secure, but we work hard to keep your data safe.
Children
Our shop is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us so we can delete it.
Automated Decisions and Changes
We do not use automated decision-making or profiling with legal or similarly significant effects. We may update this Privacy Policy from time to time, and the current version is always available on our website.