Privacy Policy

Last updated: 9 September 2026

ELMONT is operated from Germany. That means the EU General Data Protection Regulation (GDPR) applies to everything we do with your personal data, wherever in the world you live. Because we sell to customers in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply alongside it.

1. Who is responsible

The controller for your personal data is:

Benjamin Huse
Ortolanweg 70
12359 Berlin
Deutschland
Email: admin@elmontofficial.com

2. What we collect, why, and on what legal basis

Data	Why we use it	Legal basis (Art. 6 GDPR)
Name, delivery and billing address, email, phone number	To take your order, deliver it, and contact you about it	Performance of a contract, Art. 6(1)(b)
Payment details (handled by our payment providers, we never see full card numbers)	To take payment and prevent fraud	Performance of a contract, Art. 6(1)(b); legitimate interest in preventing fraud, Art. 6(1)(f)
Order history, returns, refunds	To handle returns, refunds and warranty claims, and to keep the records tax law requires	Performance of a contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c)
Messages you send us	To answer you	Legitimate interest in customer service, Art. 6(1)(f)
Device and browsing data, cookies and similar technologies	To run the shop, keep your basket, and understand how the site is used	Strictly necessary cookies: legitimate interest, Art. 6(1)(f) and § 25(2) TDDDG. Everything else: your consent, Art. 6(1)(a) and § 25(1) TDDDG
Email address for our newsletter	To send you the emails you asked for	Your consent, Art. 6(1)(a)

Giving us your name, address and payment details is necessary to form a contract with us. Without them we cannot take or deliver your order. Everything else is optional.

3. Who receives your data

We only share what a recipient needs to do its job for us:

Shopify — the platform this shop runs on, and our processor for hosting, checkout and order handling.
Payment providers — they receive payment data directly and act as controllers in their own right for it.
Fulfilment and shipping partners — they receive the delivery address needed to get your parcel to you.
Email and analytics services — where you have consented, or where the service is strictly necessary to run the shop.
Tax advisers and authorities — where the law requires it.

We do not sell your personal data.

4. Transfers outside the EU and UK

Some of our processors are based outside the EU and the UK, including in the United States. Where that happens, the transfer is covered either by an adequacy decision of the European Commission or by the European Commission's Standard Contractual Clauses together with additional safeguards. You can ask us for a copy of the safeguards that apply, using the contact details in section 1.

5. How long we keep it

Order and invoice data: ten years, because German commercial and tax law requires it (§ 147 AO, § 257 HGB).
Customer account data: until you delete the account, and then only what the retention rules above still require.
Support messages: up to three years after the matter is closed.
Newsletter: until you unsubscribe.
Cookies and analytics: as set out in our cookie banner; consent-based cookies are deleted when you withdraw consent.

6. Your rights

You have the right to:

Access the personal data we hold about you and get a copy of it (Art. 15).
Correct data that is wrong or incomplete (Art. 16).
Erase your data where we no longer have a reason to keep it (Art. 17).
Restrict what we do with it while a dispute is resolved (Art. 18).
Receive it in a portable format and have it sent to another provider (Art. 20).
Object to processing based on our legitimate interests, including profiling (Art. 21). If you object to direct marketing, we stop — no reason needed.
Withdraw your consent at any time, without affecting anything we did before you withdrew it (Art. 7(3)).

Write to admin@elmontofficial.com and we will answer within one month.

7. Complaining to a supervisory authority

If you think we have handled your data badly, you can complain to a data protection authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
mailbox@datenschutz-berlin.de

If you live in the United Kingdom you can also complain to the Information Commissioner's Office, ico.org.uk.

8. Automated decisions

We do not make decisions about you by automated means alone, and we do not profile you in a way that has legal effects for you. Our payment providers may run automated fraud checks as part of authorising a payment.

9. Children

This shop is not aimed at children and we do not knowingly collect data about them. If you believe a child has given us their data, write to admin@elmontofficial.com and we will delete it.