This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish.
Privacy Policy
1. Data Controller
The controller within the meaning of Art. 4(7) GDPR is:
Luca Gruber
Elyon Objects
Ostpreußenstraße 52B
65207 Wiesbaden
Germany
Email: info@elyonobjects.com
Email: info@luca-gruber.de
2. General Information on Data Processing
We process personal data of our users only insofar as this is necessary to provide a functional website, our content, and our services. Personal data is processed either with user consent or where permitted by law.
Legal Bases (Art. 6 GDPR)
We process personal data based on the following legal grounds:
Art. 6(1)(b) GDPR – performance of a contract (e.g. orders)
Art. 6(1)(c) GDPR – legal obligations (e.g. tax law requirements)
Art. 6(1)(f) GDPR – legitimate interests (e.g. website security, fraud prevention)
Art. 6(1)(a) GDPR – consent (e.g. cookies, marketing)
3. Data Collection When Visiting the Website
When you access our website, the following data is automatically collected:
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Pages visited
Purpose:
Ensuring website functionality
System security and stability
Legal Basis:
Art. 6(1)(f) GDPR (legitimate interest)
4. Cookies and Consent Management
Our website uses cookies and similar technologies.
Types of Cookies:
Essential cookies (required for operation, especially for WooCommerce functionality such as cart and checkout)
Analytics cookies
Marketing cookies
Legal Basis:
Essential cookies: Art. 6(1)(f) GDPR
All other cookies: Art. 6(1)(a) GDPR (consent)
Consent is obtained via a cookie consent banner in accordance with German law (TTDSG). You can withdraw or adjust your consent at any time.
5. Processing of Data for Orders (WooCommerce)
We use WooCommerce to operate our online shop. When you place an order, we process:
Name
Billing and shipping address
Email address
Phone number (if provided)
Payment details
Order details
Purpose:
Contract fulfillment
Payment processing
Delivery of goods
Legal Basis:
Art. 6(1)(b) GDPR
6. Payment Providers
Depending on the selected payment method, your payment data is transmitted to the respective payment service provider.
Typical providers may include:
PayPal
Stripe
Banks / credit card providers
Legal Basis:
Art. 6(1)(b) GDPR
International Transfers:
If data is transferred outside the EU/EEA, this is done based on appropriate safeguards such as:
Standard Contractual Clauses (SCCs)
adequacy decisions of the European Commission
7. Contact (Email)
If you contact us via email, we process:
Your email address
The content of your message
Purpose:
Responding to inquiries
Legal Basis:
Art. 6(1)(b) GDPR (contract-related inquiries)
Art. 6(1)(f) GDPR (general inquiries)
8. Email Marketing (Newsletter)
If you subscribe to our newsletter:
your email address is processed
registration is carried out via double opt-in
Legal Basis:
Art. 6(1)(a) GDPR (consent)
You may withdraw your consent at any time via the unsubscribe link in every email.
9. Data Recipients
We share personal data only where necessary. Recipients may include:
Hosting providers
Payment providers
Shipping service providers
IT and website service providers
All service providers are contractually bound in accordance with Art. 28 GDPR (Data Processing Agreements).
10. Data Retention
Personal data is stored only as long as necessary:
Contract and billing data: up to 10 years (legal obligation)
Communication data: up to 3 years
Server log files: short-term storage
11. Your Rights Under GDPR
You have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority, particularly in your place of residence or place of work.
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data against:
unauthorized access
loss or destruction
manipulation
13. International Data Transfers
If personal data is transferred to countries outside the EU/EEA, we ensure an adequate level of protection through:
Standard Contractual Clauses (SCCs)
adequacy decisions of the European Commission
14. External Links
Our website may contain links to external websites. We are not responsible for their content or privacy practices.
15. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect legal, technical, or business changes.
16. Contact
If you have any questions regarding this privacy policy, you can contact us at:
info@elyonobjects.com
info@luca-gruber.de
Last updated: April 2026
© 2026, Luca Gruber - All rights reserved.