Privacy Policy

1. Data controller

The controller responsible for processing data on this website within the meaning of the GDPR is:

Maluure GmbH · Am Kölner Brett 2 · 50825 Köln · Deutschland

Represented by the managing directors Josef Kujawski and Willi Kujawski.

Data protection enquiries: hello@maluure.com

2. Your rights as a data subject

You have the following rights in relation to the personal data we process about you:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to processing (Article 21 GDPR)
• Right to withdraw consent (Art. 7 para. 3 GDPR, Article 7(3) of the GDPR)

Competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de.

3. Server log files

When you visit this website, information is automatically recorded in server log files (truncated IP address, time, URL, status code, data volume, browser/OS, referrer). Legal basis: Art. 6 para. 1 lit. f GDPR (Article 6(1)(f) of the GDPR). Logs are deleted after no more than 30 days.

4. Cookies and local storage

We only use technically necessary cookies and local storage entries (language preference, theme, session). Legal basis: § 25 para. 2 Nr. 2 TTDSG (Section 25(2), point 2 of the German Telecommunications and Telemedia Data Protection Act) in conjunction with Art. 6 para. 1 lit. f GDPR (Article 6(1)(f) of the GDPR).

5. Hosting and backend (Lovable Cloud)

The technical operation of this website is handled by Lovable. We use Lovable Cloud in a data centre region within the EU for our database, authentication and server-side functions. Legal bases: Article 6(1)(b) and (f) GDPR. Processing on our behalf is governed by Article 28 GDPR.

6. Contacting us

When you contact us by email or via a form, the data you submit (name, email address, message) is stored to handle your enquiry. Legal basis: Art. 6 para. 1 lit. b bzw. f GDPR (Article 6(1)(b) or (f) of the GDPR, as applicable).

7. User account

You can create a user account for certain areas. We store your email address (required) and your password in hashed form. Legal basis: Art. 6 para. 1 lit. b GDPR (Article 6(1)(b) of the GDPR).

8. Newsletter

If you subscribe, we process your email address solely to send you the newsletter (double opt-in). Legal basis: Art. 6 para. 1 lit. a GDPR (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time using the unsubscribe link or by sending a message to hello@maluure.com.

9. Maluure-Bot (AI-powered chatbot)

Your inputs and the generated responses are processed to answer your enquiry. Inputs are transmitted to a data processor (AI provider). Please do not enter any special categories of personal data. No automated decision-making takes place within the meaning of Article 22 GDPR.

10. Web analytics: Google Analytics 4

With your consent, we use Google Analytics 4 (Google Ireland Limited, Dublin). GA4 creates pseudonymous usage profiles with truncated IP addresses.

Legal basis: Consent under Art. 6 para. 1 lit. a GDPR (Article 6(1)(a) of the GDPR) and § 25 para. 1 TTDSG (Section 25(1) of the German Telecommunications and Telemedia Data Protection Act). You can withdraw your consent at any time using the cog icon in the footer.

Consent Mode v2: Without consent, analytics cookies are set to denied.

Retention period: 2 months. Recipients: Google Ireland Limited, Google LLC. Measurement ID: G-BM9LLJVCJ6.

11. Map display: OpenStreetMap

We use embedded maps from OpenStreetMap (OpenStreetMap Foundation) on our contact page. When the maps load, your browser establishes a direct connection to the OSMF servers. Legal basis: Art. 6 para. 1 lit. f GDPR (Article 6(1)(f) of the GDPR).

12. Fonts

This website uses fonts from the Google Fonts collection, but they are hosted exclusively locally. No connection to Google is established and no IP addresses are transmitted.

13. SSL/TLS encryption

This website uses SSL/TLS encryption. You can recognise this by the "https://" in the address bar.

14. Changes to this privacy policy

We update this privacy policy whenever legal requirements or our technical processes change.