Privacy policy

1. Information About the Collection of Personal Data and Controller Details

1.1

Thank you for visiting our website and for your interest in our products and services. In this Privacy Policy, we explain how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2

The data controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Somnia

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock icon displayed in your browser.

2. Data Collection When Visiting Our Website

If you use our website for informational purposes only, meaning you do not register or otherwise submit information to us, we only collect data that your browser automatically transmits to our server (so-called server log files).

The following technically necessary data is collected:

  • Visited website
  • Date and time of access
  • Amount of data transferred (in bytes)
  • Source/referral from which you accessed the website
  • Browser used
  • Operating system used
  • IP address (where applicable, anonymized)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

This data is not shared with third parties. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

3. Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages.

Cookies are small text files stored on your device.

Some cookies are automatically deleted after the end of your browser session (session cookies). Other cookies remain on your device and enable us or our partners to recognize your browser during future visits (persistent cookies).

Cookies may collect information such as:

  • Browser information
  • Location data
  • IP address

Where personal data is processed through cookies, processing is carried out pursuant to:

  • Article 6(1)(b) GDPR for the performance of a contract
  • Article 6(1)(f) GDPR based on our legitimate interest in ensuring optimal website functionality

You can configure your browser to notify you when cookies are set and decide individually whether to accept them.

The relevant settings can be found in your browser’s help menu.

Please note that disabling cookies may limit the functionality of our website.

4. Contacting Us

When you contact us (for example via contact form or email), personal data is collected.

This data is stored solely for the purpose of responding to your inquiry and for technical administration.

The legal basis for processing is Article 6(1)(f) GDPR.

If your inquiry is related to the conclusion of a contract, the additional legal basis is Article 6(1)(b) GDPR.

Your data will be deleted once your request has been fully processed, provided there are no legal retention obligations preventing deletion.

5. Data Processing When Opening a Customer Account and for Contract Fulfilment

If you create a customer account or place an order with us, we process your personal data in accordance with Article 6(1)(b) GDPR for the purpose of fulfilling the contract.

You may request deletion of your customer account at any time by contacting us.

After completion of the contract, your data will be stored in accordance with applicable legal retention requirements and deleted thereafter.

6. Use of Your Data for Direct Marketing

Newsletter

If you subscribe to our newsletter, we will use your email address to regularly send you information about our products, offers, and promotions.

Subscription takes place through a double opt-in process.

You may unsubscribe from the newsletter at any time using the unsubscribe link included in every newsletter or by contacting us directly.

7. Data Processing for Order Fulfilment

For the purpose of fulfilling your order, we share your data with the shipping provider responsible for delivering your order, insofar as this is necessary for delivery.

Payment information is transmitted to the respective payment service provider for payment processing.

Legal basis: Article 6(1)(b) GDPR.

Payment Service Providers

PayPal

If you choose PayPal as your payment method, payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

Privacy Policy:

https://www.paypal.com/privacy

SOFORT / Klarna

If you choose SOFORT or Klarna as your payment method, payment processing is carried out by:

Sofort GmbH
Theresienhöhe 12
80339 Munich, Germany

Privacy Policy:

https://www.klarna.com/privacy

8. Review Requests

Following your order, we may send you a one-time email inviting you to leave a review of your purchase.

This is only done with your explicit consent in accordance with Article 6(1)(a) GDPR.

9. Social Media Plugins

Our website may use social media plugins from:

  • Facebook
  • Instagram
  • Google

For privacy protection, these plugins are integrated using a privacy-friendly solution that only establishes a connection with the respective provider’s servers when you actively click the relevant button.

For more information, please consult the privacy policies of the respective providers.

10. Online Marketing

Our website uses online marketing services such as:

  • Google Ads
  • Google Remarketing
  • Facebook Pixel

These services help us display more relevant advertisements and measure the effectiveness of our marketing activities.

Processing is carried out on the basis of Article 6(1)(f) GDPR.

11. Web Analytics

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies to analyze website usage.

We use Google Analytics exclusively with IP anonymization enabled.

For more information, please visit:

https://policies.google.com/privacy

12. Retargeting

We use:

  • Facebook Pixel
  • Google Remarketing

These technologies allow us to display personalized advertisements to visitors of our website on other platforms.

Processing is only carried out with your consent in accordance with Article 6(1)(a) GDPR.

13. Your Rights

Under applicable data protection laws, you have the following rights:

  • Right of access to stored data (Article 15 GDPR)
  • Right to rectification of inaccurate data (Article 16 GDPR)
  • Right to erasure ("right to be forgotten") (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to withdraw consent (Article 7 GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Right to Object

If we process your personal data based on our legitimate interests, you have the right to object to such processing at any time for reasons arising from your particular situation.

If you object, we will cease processing the affected data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms.

If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

14. Retention Period for Personal Data

The retention period for personal data is determined by applicable statutory retention requirements.

After these periods expire, the corresponding data will be routinely deleted unless it is still required for the performance of a contract or there is another legal basis for continued storage.