1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

​

Editorial Content of this Website

Jan Luley
Brunnenstr. 1
36282 Hauneck
Germany
Email: info@janluley.de
Phone: +49 6621 1867036

​

Responsible for journalistic-editorial content pursuant to Section 18 (2) German State Media Treaty (MStV):
Jan Luley

​

Online Shop and Contract Processing

LULEY’S
Owner: Eda Luley-Raufeisen
Brunnenstr. 1
36282 Hauneck
Germany

​

Responsible for all data processing in connection with orders, payment processing, shipping, and invoicing.

​

​

2. Website Hosting (Wix)

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.

​

Wix stores data on servers located in the EU, the United States, and other countries. Israel is recognized by the European Commission as providing an adequate level of data protection.

​

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure and reliable website operation).

​

​

3. Server Log Files

When you visit our website, certain information is automatically collected:

• IP address

• Browser type and version

• Operating system

• Referrer URL

• Date and time of the server request

 

This data is used to ensure technical security and to analyze system errors.

Legal basis: Art. 6 (1) lit. f GDPR.
Retention period: up to 30 days.

​

​

4. Cookies and Consent Management

We use a cookie consent tool provided by Wix.

Essential cookies are set on the basis of Art. 6 (1) lit. f GDPR.

​

Analytics and statistical cookies (e.g. Google Analytics) are only used after you have given your consent (Art. 6 (1) lit. a GDPR).

​

You may withdraw your consent at any time via the cookie settings.

​

​

5. Analytics and Security Tools

a) Google Analytics (GA4)

We use Google Analytics 4, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze website usage.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR.

With Google Analytics 4, IP addresses are not stored permanently. We are not able to directly identify individuals from the collected data.

Analytics data is retained for 14 months and then automatically deleted.

A transfer of personal data to the United States cannot be ruled out. Google relies on the European Commission’s Standard Contractual Clauses.

You may withdraw your consent at any time via the cookie settings.

​

b) Google reCAPTCHA

To protect our forms from spam and misuse, we use Google reCAPTCHA provided by Google Ireland Ltd.

reCAPTCHA analyzes user behavior (e.g. IP address, mouse movements, time spent on page) to determine whether input is made by a human or an automated system.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in preventing abuse and spam).

A transfer of data to the United States cannot be ruled out. Google uses the European Commission’s Standard Contractual Clauses.

​

​

6. Online Shop

When you place an order, we process the following data:

• Name

• Address

• Email address

• Payment details

• Order information

Purpose: Fulfillment of contractual obligations.
Legal basis: Art. 6 (1) lit. b GDPR.

 

 

7. Payment Providers

Depending on the selected payment method, payments are processed through:

• Wix Payments

• PayPal (PayPal Europe S.à r.l. et Cie, Luxembourg)

• Credit card providers

The privacy policies of the respective providers apply.

​

If you choose Apple Pay or Google Pay, the data necessary to process the payment will be transmitted to Apple or Google. Processing is carried out for the purpose of payment processing pursuant to Art. 6 (1) lit. b GDPR.

Further information:

Apple: https://www.apple.com/legal/privacy/
Google: https://policies.google.com/privacy

​

​

8. Newsletter (CleverReach)

We use CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, to send our newsletter.

Registration is carried out using the double opt-in procedure.

Processed data:

• Email address

• Name (if provided)

• Technical information (open and click statistics)

Legal basis: Art. 6 (1) lit. a GDPR.

You may withdraw your consent at any time.
A data processing agreement has been concluded with CleverReach.

​

​

9. Embedded Third-Party Content (e.g. YouTube)

This website may contain embedded content from third-party providers such as YouTube.

Such content is only loaded after you have given your consent via the cookie settings.

Provider: Google Ireland Ltd.

Accessing embedded content may result in the transmission of personal data.

Legal basis: Art. 6 (1) lit. a GDPR.

​

​

10. SSL / TLS Encryption

This website uses SSL or TLS encryption to ensure secure data transmission.

​​

​

11. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by applicable statutory retention obligations.

​​

​

12. Your Rights

Under the GDPR, you have the right to:

• Access your data (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a supervisory data protection authority.

​

Last updated: 2026

​