top of page
2222.jpg

Privacy Policy

​

This Privacy Policy describes how IrisRapids, operated by Woodycgn UG (haftungsbeschränkt) ("we," "us," "our"), collects, uses, and safeguards your personal data when you browse our website or place an order, in line with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. DATA CONTROLLER
Woodycgn UG (haftungsbeschränkt)
Curt-Stenvert-Bogen 51, 50859 Köln, Germany
Email: info@irisrapids.com

2. THE DATA WE COLLECT
Depending on how you use our website, we may collect:

  • Account & Order Data: name, email address, billing and shipping address, phone number, order history, payment details (handled by our payment providers)

  • Technical Data: IP address, browser type, device information, cookies and similar tracking technologies

  • Communication Data: any messages you send us through contact forms or email

  • Marketing Data: your email address and preferences if you opt in to our newsletter (only with your consent)

3. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASIS
We process your data for the following purposes, relying on these legal bases under Art. 6 GDPR:

  • Contract fulfilment (Art. 6(1)(b) GDPR): processing and delivering your orders, handling payments, returns, and customer support

  • Legal obligation (Art. 6(1)(c) GDPR): meeting tax, accounting, and commercial record-keeping requirements

  • Legitimate interest (Art. 6(1)(f) GDPR): keeping our website secure, preventing fraud, and improving our services

  • Consent (Art. 6(1)(a) GDPR): sending newsletter marketing and using non-essential cookies — you can withdraw this consent at any time

4. COOKIES
Our site uses cookies essential to its operation, along with optional analytics and marketing cookies that run only once you've given consent via our cookie banner. You can adjust or withdraw cookie consent anytime through your browser settings or our cookie preference tool.

5. WHO WE SHARE DATA WITH
We share personal data only where it's necessary, with:

  • Payment service providers, to process your transactions

  • Shipping and logistics partners, to deliver your orders

  • IT and hosting providers, acting as processors under Art. 28 GDPR

  • Authorities, when legally required

We never sell your personal data to third parties.

6. TRANSFERRING DATA INTERNATIONALLY
If your data is ever transferred outside the European Economic Area, we put appropriate safeguards in place — such as the EU Standard Contractual Clauses — in line with Art. 44 et seq. GDPR.

7. HOW LONG WE KEEP YOUR DATA
We only keep personal data for as long as needed for the purposes outlined above, or as required by law (for example, German commercial and tax law generally requires invoices to be kept for up to 10 years).

8. YOUR RIGHTS
Under the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15)

  • Request that inaccurate data be corrected (Art. 16)

  • Request that your data be deleted (Art. 17)

  • Request that processing be restricted (Art. 18)

  • Receive your data in a portable format (Art. 20)

  • Object to processing based on legitimate interest or direct marketing (Art. 21)

  • Withdraw consent at any time, without affecting processing done before the withdrawal (Art. 7(3))

  • File a complaint with a supervisory authority — in Germany, the data protection authority responsible for North Rhine-Westphalia, or your own local authority

To exercise any of these rights, reach out to us at info@irisrapids.com.

9. HOW WE PROTECT YOUR DATA
We use appropriate technical and organizational safeguards to protect your personal data from unauthorized access, loss, or misuse.

10. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. Any revised version will be posted here with an updated "last updated" date.

bottom of page