Privacy policy
1. Controller
The controller responsible for the processing of personal data on this website is:
Alexander Lutsyuk
Sole proprietorship
Business designation: Arnika Plau
Dr. Alban Str. 24
19395 Plau am See
Germany
Email: shop@plau.shop
Phone: +4938735 954990 (AI phone assistant)
2. General information on data processing
We process personal data of our users only to the extent necessary to provide a functioning website, to process orders, to handle enquiries and to provide our services.
Personal data is processed in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
3. Visiting our website and server log files
Each time our website is accessed, the web server automatically collects information and stores it in so-called server log files.
This may include in particular:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Amount of data transferred
- Browser used and browser version
- Operating system used
- Referrer URL
- Technical information about the access
Processing takes place, where necessary, to technically provide, secure and stabilise our website and to detect and prevent abuse and attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of our website.
Server log files are deleted as soon as they are no longer required for the purposes stated above, unless a statutory retention obligation or a legitimate interest in longer storage applies.
4. Shopware and strictly necessary cookies
We operate this online shop with Shopware 6.
Shopware uses strictly necessary cookies or comparable technologies insofar as they are required for the basic functions of the online shop. This includes in particular functions such as the shopping cart, session management, login functions, cookie settings and protection against abusive access.
These strictly necessary technologies are used solely to provide the functions of the online shop expressly requested by the user. You can use the cookie settings (“Configure”) to decide which optional statistics and marketing cookies are set.
5. Google reCAPTCHA v3
To protect our forms against spam and automated abuse, we use Google reCAPTCHA v3. reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC (USA) cannot be ruled out.
In particular, IP address, browser and device data and interactions on the website may be transmitted to Google and evaluated. reCAPTCHA uses cookies or comparable storage technologies (including _GRECAPTCHA).
The legal basis is Art. 6(1)(f) GDPR (protection against spam and abuse). Where you submit a form, Art. 6(1)(b) GDPR may also apply. reCAPTCHA is required for the forms to work and is therefore assigned to strictly necessary cookies.
Further information: Google’s privacy policy and Google’s terms of service.
6. Google Analytics 4 / Google Tag
If you consent via the cookie settings, we use Google Analytics 4 (Google Tag, measurement ID G-JVCMW8B3H4). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC (USA) cannot be ruled out.
Google Analytics collects, among other things, truncated or anonymised IP addresses (where enabled), page views, approximate location, device type and interactions in the shop. Cookies such as google-analytics-enabled and measurement cookies set by Google may be used. Online advertising may additionally require consent for “Google advertising and marketing” (google-ads-enabled).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future via the cookie settings.
Further information: Google’s privacy policy.
7. Microsoft Clarity
If you consent via the cookie settings, we use Microsoft Clarity (project ID ymb27gdp6i) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Processing by Microsoft Corporation (USA) cannot be ruled out.
Clarity creates usage statistics as well as session recordings and heatmaps. This may include IP address, mouse and keyboard input, page content and technical device data. Cookies such as microsoft-clarity-enabled, _clck and _clsk may be set.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future via the cookie settings.
Further information: Microsoft’s privacy statement.
8. Contact
If you contact us by email, telephone or via a contact form, we process the personal data you provide solely to handle and respond to your enquiry.
Processing is based on Art. 6(1)(f) GDPR. If your enquiry relates to the conclusion or performance of a contract, Art. 6(1)(b) GDPR may also apply as a legal basis.
The data will be deleted once your enquiry has been fully processed and no statutory retention obligations or other legal grounds for further storage apply.
9. Customer account and orders
If you create a customer account in our online shop or place an order, we process the personal data required to set up the customer account and/or to perform and process the purchase contract.
This may include in particular:
- Name
- Billing and shipping address
- Email address
- Telephone number, if provided
- Order information
- Payment information or information about the selected payment method
- Information relating to communication with us
Processing takes place for the performance of the contract or for pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
In addition, we process personal data where this is necessary to fulfil legal obligations, in particular tax and commercial retention obligations. The legal basis for this is Art. 6(1)(c) GDPR.
10. Disclosure of data for order processing
To fulfil our contractual obligations, it may be necessary to disclose personal data to service providers that support us with payment processing, shipping, production or the technical provision of the online shop.
Disclosure takes place only insofar as it is required for the respective service or a legal obligation exists.
Once the specific payment, shipping and production service providers used have been determined, they will be added to this privacy policy with the required information.
11. Payment processing
In the course of an order, the data required to process the selected payment method is transmitted to the respective payment service provider.
Which data is actually transmitted depends on the payment method selected by the customer.
The payment service providers used will be added to this privacy policy once the shop’s payment providers have been finally determined.
12. Rights of data subjects
Subject to the statutory requirements, you have the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object to processing pursuant to Art. 21 GDPR
- Right to withdraw consent with effect for the future pursuant to Art. 7(3) GDPR
To exercise your rights, you may contact us at any time at shop@plau.shop.
13. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
This applies in particular if you consider that the processing of your personal data infringes the GDPR.
14. Data security
We use appropriate technical and organisational security measures to protect personal data against loss, destruction, manipulation and unauthorised access.
The transmission of personal data on our website takes place via an encrypted HTTPS connection.
15. Updates to this privacy policy
We reserve the right to adapt this privacy policy if the technical functions of our online shop, the service providers used or the legal requirements change.
The current version is available on this website.
Last updated: September 2026