DATA PROTECTION
Privacy Policy
As of April 2026
1. Responsible person
The entity responsible for the collection, processing and use of your personal data within the meaning of the GDPR is:
Nadine Lotterjouk
Crealumi
Bessemerstr. 51, 1st floor
12103 Berlin, Germany
Email: office@crealumi.de
Website: https://crealumi.de
2. General Information
We take the protection of your personal data seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
The use of our website is generally possible without providing personal data. Insofar as personal data is collected on our site, this is always done on a voluntary basis. This data will not be passed on to third parties without your explicit consent.
3. Hosting
Our website is hosted by Hostinger. Provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit our website, connection data (IP address, date and time of access, pages visited, browser type) is automatically stored in server log files. This data is technically necessary to provide the website and is not combined with other data sources.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical provision of the website).
4. Cookies and consent
Our website uses cookies. Cookies are small text files that are stored on your device. We distinguish between technically necessary cookies (without your consent) and optional cookies (only with your consent).
Your cookie settings are managed via our cookie consent tool, Complianz. You can withdraw your consent at any time.
5. Shop and Orders (WooCommerce)
Our online shop is powered by WooCommerce (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA). When you place an order, we collect the following data:
First name, last name, email address, delivery address (for physical products), order details and payment information
This data is processed solely for contract fulfillment. Order data is stored in accordance with legal retention requirements (10 years).
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract).
6. Payment processing
Payment processing is handled via your chosen payment method. We do not store complete payment details ourselves. This is processed by the respective payment service providers. Further information will follow after you activate your payment method.
7. Digital Downloads
When you purchase a digital download (e.g., timetables as a PDF), your order data will be processed to provide the download file. The files will be made available to you in your customer area under My Account → Downloads.
Legal basis: Art. 6 para. 1 lit. b GDPR.
8. Fulfillment partners (physical products)
For the production and shipping of physical products, we work with the following service providers:
Printful Europe, SIA Gata Plienciema 1, Riga, LV-1046, Latvia. For the production and shipping of posters, wall art, and other printed products. Printful processes order and delivery data (name, address) to fulfill the order. Privacy policy: https://www.printful.com/policies/privacy
Wallyboards (SATTO MEDIA SP. Z OO) Owsiana 62, 40-780 Katowice, Poland. For the production and shipping of magnetic boards (planned). Wallyboards processes order and delivery data for order fulfillment.
Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 28 GDPR (data processing on behalf of a controller).
9. Email marketing and newsletters (Brevo)
With your explicit consent (double opt-in), you will receive our Crealumi Postkurier newsletter. We process the following data for this purpose:
First name Email address Language (for language-specific delivery)
The newsletter is sent via Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin). Brevo processes the data as a data processor based on a data processing agreement. Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/
You can withdraw your consent at any time — via the unsubscribe link in every email or by email to office@crealumi.de.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
10. Contact forms
When you contact us via our forms (contact, cancellation, complaint), the data you provide will be stored to process your request. We will not share this data without your consent.
Incoming form data is processed with Fluent Forms Pro and forwarded via WP Mail SMTP to support@crealumi.de. Brevo stores contact details for processing tracking purposes.
Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest).
11. Translation service (Linguise)
Our website uses Linguise for the automatic translation of content into various languages (German, English, French, Spanish). Linguise processes page content for translation purposes. Privacy policy: https://www.linguise.com/privacy-policy/
12. Spam protection
To protect our forms from spam, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) in invisible mode. Cloudflare processes technical data (IP address, browser information) for spam detection. Privacy policy: https://www.cloudflare.com/privacypolicy/
We also use Antispam Bee. This plugin does not process any data outside of your server.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in protection against spam).
13. Safety
Our website uses SSL/TLS encryption for all data transmissions. Additionally, we use Really Simple Security to protect our website from unauthorized access.
14. Search function (FiboSearch)
Our shop's search function is provided by FiboSearch (WPDesk, ul. Kościuszki 32/4, 52-000 Wrocław, Poland). Search queries are processed locally on our server and are not transmitted to external services.
15. Value Added Tax (OSS)
To fulfill our tax obligations to EU tax authorities, we are registered with the German Federal Central Tax Office (BZSt) under the One-Stop-Shop Non-EU procedure (NETPID: EU276078484). As part of this registration, we submit aggregated sales data quarterly. No personal customer data is transmitted to the BZSt.
16. Your rights
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): Information about the data we have stored about you. Right to rectification (Art. 16 GDPR): Correction of inaccurate data. Right to erasure (Art. 17 GDPR): Erasure of your data, provided there are no legal obligations to retain it. Right to restriction of processing (Art. 18 GDPR): Restriction of processing. Right to data portability (Art. 20 GDPR): Receipt of your data in a structured format. Right to object (Art. 21 GDPR): Objection to processing based on legitimate interests. Right to withdraw consent (Art. 7 para. 3 GDPR): Withdrawal of consent at any time
To exercise these rights, please contact: office@crealumi.de
You also have the right to lodge a complaint with a data protection supervisory authority. The relevant authority for Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, https://www.datenschutz-berlin.de
17. External Links
Our website contains links to external websites. We are not responsible for the privacy practices of these websites.
18. Currentness of this privacy policy
This privacy policy is current as of April 2026. We reserve the right to update it as needed to reflect changes in the law or modifications to our services.
