We always store what is necessary. Statistics and Trustpilot only with your consent – you can withdraw it at any time. Privacy policy
Necessary (always active) Cart, delivery address, language, login and security. Without this storage the shop does not work.
This translation is provided to help you understand the text. The German version is the legally binding one.
The protection of your personal data is important to us. This website does without advertising cookies and external analytics networks; the few optional functions are only loaded after you have given your consent. Below we inform you in accordance with Art. 13 GDPR about which data we process when you visit wohndeko.com or place an order with us.
The controller for the data processing on this website is:
Liviano GmbH
Gneisenaustraße 9, 33330 Gütersloh, Germany
Managing director: Sultan Nassayev
Phone: 0521 73069866
Email: info(at)liviano-gmbh.de
We do not use any advertising cookies and we do not integrate any third-party analytics or advertising networks (e.g. Google Analytics, Meta Pixel). We do not create usage profiles. The following are technically necessary: your cart, the delivery address you enter and a draft of your details at checkout, each in your browser’s storage (section 5), short-lived markers for notices you have closed once, a session cookie if you log in to your customer account, and, on the checkout page, the cookies and identifiers that our payment service providers Stripe and PayPal place in your browser for the payment and for fraud prevention (section 6). This storage does not require consent pursuant to § 25 para. 2 no. 2 TDDDG; the legal basis for the associated processing is Art. 6 para. 1 lit. b or lit. f GDPR.
Only with your consent do we additionally measure the reach of our shop. For this your browser stores a random identifier in the session storage (“sessionStorage”), which expires when you close the tab. For this identifier we store on our own server (see section 3) for 90 days: the source of the visit (referring page or campaign parameters), the date, the device type as well as country and city from our hosting provider’s location estimate – and which steps you have reached in the shop (cart, shipping calculation, checkout, appointment request, purchase). If you have the shipping costs calculated, the postcode and city entered in the process are included. We do not store your IP address; it is only used for about one minute as a counter against automated abuse.
If an order is placed, we transfer the source and device type of this session into the order data – to that extent the measurement is therefore not anonymous, but assigned to your order. Without consent this too does not take place. We do not combine data across different websites, we do not create advertising profiles and we do not pass this data on to third parties. If you withdraw your consent, the measurement ends immediately and the identifier is deleted from your browser.
Likewise only with your consent do we load the invitation script of Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark). It invites you to leave a review after a purchase and confirms to Trustpilot that this domain belongs to us. In the process your IP address and – after a purchase – the order and contact data required for the invitation are transmitted to Trustpilot; Trustpilot may set its own cookies in the process. Privacy information: de.legal.trustpilot.com. Independently of this consent, you receive an invitation to leave a review by email after a purchase: it runs via our order system and not via your browser (section 12).
The legal basis for both points is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). It is voluntary: without consent you can use the shop in full and place orders. We store your selection with a time stamp exclusively locally in your browser. You can change or withdraw it at any time with effect for the future – via the item “Cookie settings” at the bottom of every page.
The technical functions of this shop – from the cart and the shipping cost calculation through to the appointment booking – were developed for us by a partner company from the IT sector, which also maintains them on our behalf: inovra GmbH. The website is delivered via the worldwide content delivery network of an internationally operating hosting provider. When the pages are accessed, this provider processes technically necessary access data (including IP address, date and time, file requested, volume of data transferred, referrer, browser type). This data is used exclusively for secure and stable provision as well as for defence against attacks and is not combined with other data.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure, functioning web presence). Data processing agreements (Art. 28 GDPR) are in place with our IT partner and with the hosting provider; the EU standard contractual clauses apply to any transfers to third countries. We will tell you on request which processors we use (for contact details see section 1).
For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.
Your cart and, if you have the shipping costs calculated, the delivery address you enter are stored exclusively locally in your browser (“localStorage”). This data only leaves your device once you use the shipping cost calculation (section 7) or go to the checkout (section 6). This is a technically necessary function (Art. 6 para. 1 lit. f GDPR, § 25 para. 2 no. 2 TDDDG). You can delete this data at any time via the settings of your browser.
For the checkout, your browser creates two further entries. When you choose “Checkout” in the cart, it stores the delivery method, the delivery country and, if the shipping costs depend on the distance, the delivery address in the local storage so that the checkout page can take over these details; the checkout page deletes the entry as soon as it has read it. While you fill in the checkout form, your browser keeps a draft of your details (email address, telephone number, names, company where applicable, addresses, delivery method) in the session storage (“sessionStorage”) so that your entries are preserved if the page is reloaded. The draft is deleted when you close the tab or once your order has been completed. The entries themselves are not transmitted: we only receive your details with your order (section 6); for distance-based shipping, we receive the delivery address beforehand in order to calculate the shipping costs (section 7). This storage is technically necessary (§ 25 para. 2 no. 2 TDDDG); the legal basis is Art. 6 para. 1 lit. b GDPR.
For the checkout, your browser also stores a random identifier (in the local storage; after 24 hours it is no longer used and is deleted the next time you open one of our pages) and the gift card and discount codes you have entered (in the session storage). The identifier is sent to us with every request from the checkout, contains no information about you and ensures that an unfinished payment attempt does not block a new one. Both are deleted as soon as your order has been completed. Legal basis: § 25 para. 2 no. 2 TDDDG, Art. 6 para. 1 lit. b GDPR.
You complete your order on our checkout page. There we collect your email address, your telephone number, your first and last name, optionally a company name, your billing address and, if we are to deliver to a different address, a delivery address with the recipient’s name. We send the order confirmation and the invoice to the email address. The telephone number is a mandatory field; we only use it for questions about your order and to arrange delivery or collection with you. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract and pre-contractual measures).
Payment via Stripe: For payments by card and with the other payment methods offered in the payment form, the payment form of Stripe Payments Europe, Ltd. (Dublin, Ireland) is integrated into the checkout page. For this, your browser loads the Stripe.js script directly from Stripe when the checkout page is opened. You enter your payment data (e.g. the card number) in fields provided by Stripe; it is transmitted in encrypted form directly to Stripe, and we do not receive any complete payment data. For the payment we transmit to Stripe the amount, your name, your email address, your telephone number, your billing address and, for deliveries, the delivery address. Depending on the payment method, Stripe passes the necessary data on to banks, card schemes or the provider of the payment method (e.g. Apple Pay, Google Pay). If the checkout page is not available or no payment method can be loaded there, we redirect you to a Stripe payment page, where you enter your contact, address and payment data directly with Stripe.
For fraud prevention, Stripe also collects information on the checkout page about your device and your browser (e.g. IP address, browser and screen properties) as well as about how the page is used (e.g. mouse movements, time spent on the page). For this purpose Stripe sets cookies: on our domain “__stripe_mid” (lifetime one year) and “__stripe_sid” (lifetime 30 minutes), as well as a further cookie on a domain of its own; to fend off automated access, Stripe may additionally integrate the verification service hCaptcha. The legal basis for payment via Stripe is Art. 6 para. 1 lit. b GDPR, and for fraud prevention Art. 6 para. 1 lit. f GDPR (our legitimate interest in secure payments and in preventing misuse). The cookies are strictly necessary for the payment you have requested (§ 25 para. 2 no. 2 TDDDG). Stripe’s privacy information: stripe.com.
Payment via PayPal: If we offer PayPal as a payment method, the payment button of PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg) is also integrated into the checkout page. Your browser loads the script required for this directly from PayPal when the checkout page is opened; in the process PayPal receives your IP address and technical information about your browser and your device. The script stores an identifier in your browser’s local storage, and PayPal may set its own cookies. If you choose PayPal, we transmit to PayPal the order data required for the payment: amount, items ordered, your name, your email address and, for deliveries, the delivery address. You confirm the payment in a PayPal window; PayPal then informs us whether the payment has been made. The legal basis is Art. 6 para. 1 lit. b GDPR, and for loading the button Art. 6 para. 1 lit. f GDPR (legitimate interest in offering you PayPal as a payment method). The storage in your browser is strictly necessary for this payment function (§ 25 para. 2 no. 2 TDDDG). PayPal’s privacy information: paypal.com.
For processing purposes we store the order data (name, company where applicable, email address, telephone number, billing and delivery address, items ordered, total amount, payment service, order status) in our shop infrastructure (see section 3). Notifications about the status of your order (e.g. shipping or collection confirmation) are sent by email via a specialised email service provider; the safeguards described in section 14 apply to any transfers to third countries.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract). Stripe processes the payment on our behalf, but also processes data for its own purposes such as fraud prevention and compliance with legal obligations; PayPal processes the payment data under its own responsibility. In this respect, the privacy information of both companies linked above applies. All other service providers involved are contractually bound in accordance with Art. 28 GDPR and may only use the data on our instructions; we will tell you their names and privacy information on request (for contact details see section 1). Section 14 applies to any transfers to third countries.
Gift cards: If you send a gift card directly to another person, we process that person’s name and email address as well as your personal message solely in order to deliver the gift card (Art. 6 para. 1 lit. b and lit. f GDPR). For each gift card we store the code, value, validity period and redemptions; we delete the details of the recipient no later than 13 months after the gift card has expired or been fully redeemed, and we retain transaction records in accordance with the statutory periods. We count invalid discount code entries per IP address for 15 minutes in order to prevent codes from being guessed by trial and error.
For certain bulky items we calculate the shipping costs on the basis of the distance. This function was built for us by our IT partner (section 3). If you enter your delivery address (street, postcode, city) in the cart or at checkout, the distance is determined via a map and routing service whose provider is based in the EU. The transmission takes place exclusively server-side: your browser does not connect to this service, no cookies are set on your device and the address is only used there to calculate the distance.
Legal basis: Art. 6 para. 1 lit. b GDPR (initiation/performance of the purchase contract). The safeguards described in section 14 apply to any transfers to third countries; we will tell you the name of the provider on request (for contact details see section 1).
In order to create the invoices required by law, we transmit the order and invoice data to an accounting and invoicing service provider based in Germany. Legal basis: Art. 6 para. 1 lit. c GDPR (compliance with retention obligations under tax and commercial law). We retain invoice documents in accordance with the statutory periods (as a rule 10 years).
If you contact us via the contact form, by email or by telephone, we process the details you provide (e.g. name, email address, telephone number where applicable and your message) in order to deal with your enquiry. The technical dispatch of the form message to our mailbox is handled by the same email service provider as for orders (section 6). No cookies are set in the process; a honeypot field protects against automated spam.
Legal basis: Art. 6 para. 1 lit. b GDPR (for contract-related enquiries) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering general enquiries). We delete the enquiry data as soon as it is no longer required and no statutory retention obligations prevent this.
To arrange a visit to our warehouse in Gütersloh, we offer our own booking calendar on this website. If you request an appointment, we process the data you provide (name, mobile number, optionally email address and message as well as the appointment you have chosen) in order to organise the visit. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of pre-contractual or contractual measures).
To confirm and to remind you of the appointment we send you an SMS. It is sent via an SMS service provider based in Germany, to whom your mobile number and the message text are transmitted for this purpose (processing on our behalf pursuant to Art. 28 GDPR, servers in the EU). The SMS is sent on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you give when submitting the appointment request and which you can withdraw at any time with effect for the future (for contact details see section 1). An appointment is only entered definitively after you have confirmed it via the link sent to you; unconfirmed requests are deleted automatically after 24 hours. Confirmed appointments are deleted after the visit.
To show our location, you can load a map on the appointment page. This too is only loaded after you click, from OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). In the process your IP address is transmitted to OpenStreetMap. The legal basis is your consent given by clicking (Art. 6 para. 1 lit. a GDPR). Privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy.
If you submit a product review, we process the data provided (name or display name, rating, text and – optionally – email address for follow-up questions) on the basis of your consent, which you give when submitting the review form. Reviews are only published after they have been checked; the name provided appears with the review, the email address is not published. Legal basis: Art. 6 para. 1 lit. a and lit. f GDPR. You can withdraw your consent at any time with effect for the future (for contact details see section 1).
After a purchase, we invite you by email to leave a review – in two ways: a copy of your order confirmation (name, email address, order number and the items purchased) goes to our review platform (section 2), which sends you the invitation. A few days after you have received the goods, we additionally send you a request of our own with a link to our review form. Both of these run server-side via our order system and therefore independently of your cookie settings, because nothing is stored in or read from your browser in the process. Legal basis: Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG, the German Act against Unfair Competition (request for a review of goods of our own that you have already purchased). You can object to this at any time – with a brief reply to the request or a message to us (for contact details see section 1); we will then withdraw any request that has already been scheduled.
We use an online form to receive declarations of withdrawal. The data entered there (first and last name, email address, order number where applicable) is transmitted to our withdrawal system at widerruf.inovra.de, which our IT partner (section 3) operates for us on a server of its own. You automatically receive a confirmation of receipt by email; a copy of the declaration goes to our mailbox. We use the data exclusively to process and document your withdrawal and delete it once the statutory retention periods have expired. Legal basis: Art. 6 para. 1 lit. b and lit. c GDPR.
Your data is only transmitted to the service providers described above within the scope of the respective purposes as well as to shipping, payment and, where applicable, tax service providers, insofar as this is necessary to perform the contract. All processors are contractually bound in accordance with Art. 28 GDPR, may only use the data on our instructions and may not evaluate it for their own purposes; we will tell you on request which companies these are in detail (for contact details see section 1). Where data is transferred to third countries (e.g. the USA), this is done on the basis of appropriate safeguards (EU standard contractual clauses), an adequacy decision (EU-US Data Privacy Framework) or your consent.
We process and store personal data only for as long as is necessary for the respective purpose or as prescribed by statutory retention periods (in particular under commercial and tax law). After that the data is deleted.
You have the right at any time to:
To exercise your rights, a message to info(at)liviano-gmbh.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Version of this privacy policy: October 2026. We will adapt it as soon as changes to our processing operations make this necessary.
