Privacy
Policy
This Privacy Policy explains how Glamavera collects, uses, shares, stores and protects personal data when you visit the website, contact us or place an order.
Privacy information presented clearly.
In addition, this Privacy Policy explains the purposes, legal bases, recipients, storage criteria and rights that may apply to you.
Contact & orders
Data may be used to process inquiries, purchases, delivery and customer care.
Cookies & consent
Cookie preferences are managed through a consent tool where required.
Your rights
You may request access, correction, deletion or restriction of your data.
Privacy Policy overview.
Below, the Privacy Policy covers website operation, cookies, orders, payments, delivery, newsletters, analytics, marketing and your GDPR rights.
Controller
The controller responsible for the processing described in this Privacy Policy is:
Glamavera
Owner: Mohamed Es-Sadki
Hans-Böckler-Straße 25
30890 Barsinghausen
Germany
Email: contact@glamavera.com
General information
Protecting your personal data is important to us. Therefore, we process it confidentially and in accordance with the GDPR, the TDDDG and other applicable data protection rules.
For example, personal data means any information that can be used to identify you personally. Accordingly, this may include your name, address, telephone number, email address, payment information or IP address.
How data is handled
First, Glamavera processes data for defined purposes, including website operation, security, customer communication, order processing and consent management.
Four clear areas of data processing.
We use personal data only where a valid legal basis applies. Moreover, we limit processing to what is necessary for the stated purpose.
Website visit
For example, we may process technical data to maintain stability, security and proper website operation.
Contact
Likewise, we use information sent by email or form to answer your inquiry.
Order
Next, we use order data for checkout, payment, delivery, accounting and customer care.
Your rights
You may request access, correction, deletion or restriction under applicable law.
Website data
For example, when you visit the website, the hosting systems may record technical information in server log files. Accordingly, we use this information to deliver the site, detect errors and protect it against misuse.
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
Hosting
Our website is hosted by the following provider:
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca
Cyprus
Hostinger processes hosting data under a data processing agreement pursuant to Art. 28 GDPR. For further details, see Hostinger’s privacy information and data processing addendum.
Cookies & consent
For example, the website uses cookies and similar technologies. Some support essential shop functions, while optional technologies require consent where the law requires it.
Then, we use Complianz to record and manage your choices. Moreover, you can change or withdraw optional consent at any time through the cookie settings.
- Optional access to device information: consent under Section 25(1) TDDDG
- Strictly necessary access: exception under Section 25(2) TDDDG
- Subsequent personal-data processing: Art. 6(1) GDPR, depending on purpose
More details appear in our Cookie Policy. You can also review the official text of Section 25 TDDDG.
Contacting us
If you contact us by email or through a form, we use the information you provide to answer and manage your inquiry.
Accordingly, we share inquiry data only where this is necessary, legally required, covered by a processor agreement or based on another valid legal basis.
WooCommerce online store
For example, for online orders, we process the data needed to conclude and perform the contract, manage payment and delivery, provide support and meet accounting duties.
- Name and address
- Email address
- Telephone number
- Order information
- Payment information
Contract performance relies on Art. 6(1)(b) GDPR. In addition, Art. 6(1)(c) GDPR applies where tax, commercial or other legal retention duties require processing. In addition, we retain order records according to the applicable statutory periods.
Payment providers
Depending on the payment method you choose and the methods activated at checkout, payment data may be sent to an external payment provider.
- PayPal
- Klarna
- Stripe
- Credit card providers
Accordingly, we share only the information required for authorization, payment processing, fraud prevention, refunds and disputes. The provider shown at checkout may process data under its own legal responsibility. Therefore, its privacy information also applies.
Shipping providers
For example, to deliver an order, we share the required recipient and shipment data with the carrier selected for the order, such as DHL, Hermes or another carrier shown during fulfillment.
The legal basis is Art. 6(1)(b) GDPR. Moreover, if tracking notifications require a separate email or telephone transfer that is not necessary for delivery, we rely on the applicable additional legal basis or consent.
Newsletter
Likewise, if you subscribe to the newsletter, we use your email address and any voluntarily supplied details to send marketing communications. We may use Mailchimp as the newsletter service where it is activated.
The legal basis is your consent under Art. 6(1)(a) GDPR. Afterward, you can unsubscribe through the link in every newsletter or by contacting us. Withdrawal applies to the future and does not affect earlier lawful processing.
Recipients and international transfers
Recipients may include hosting, shop, payment, delivery, communication, analytics and marketing providers, professional advisers and public authorities where disclosure is legally required.
Moreover, some providers may process data outside the European Economic Area. Where this occurs, we use an applicable transfer mechanism under Art. 44 et seq. GDPR, such as an adequacy decision or approved standard contractual clauses, and additional safeguards where required.
Required and optional information
For example, data marked as required during checkout is necessary to conclude or perform the purchase contract. Consequently, without it, we may be unable to process the order. By contrast, other information, newsletter subscriptions and optional cookies remain voluntary.
Automated decisions
Glamavera does not make decisions based solely on automated processing that produce legal or similarly significant effects, unless we explain otherwise for a specific service. Moreover, payment providers may conduct their own automated fraud, identity or credit checks under their separate privacy information.
Analytics
Where activated, analytics services help us understand website use and improve content, usability and performance.
- Jetpack statistics
- Google Analytics with IP anonymization
Marketing & tracking
Where activated, marketing tools may connect the website with external platforms for reach measurement, advertising and conversion analysis.
- Meta Platforms Ireland Ltd.
- Pinterest Europe Ltd.
- Google services
- TikTok Technology Limited
We activate these tools only after consent where required. You can withdraw that consent at any time through the cookie settings.
External content
For example, the website may include external content, such as videos, maps or social media feeds.
However, we load optional external content only after consent where required. Consequently, the provider may then receive technical data, including your IP address.
Your rights
Subject to the applicable legal requirements, you may exercise the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent already given
In addition, you may lodge a complaint under Art. 77 GDPR. For Glamavera in Lower Saxony, you can contact the State Commissioner for Data Protection of Lower Saxony. Moreover, the official GDPR text is available through EUR-Lex.
Data security
The website uses SSL or TLS encryption to protect data during transmission.
In addition, we use appropriate technical and organizational measures to reduce the risk of loss, manipulation or unauthorized access. Nevertheless, no internet transmission can guarantee absolute security.
Storage period
Finally, we store personal data only for as long as the relevant purpose, contract, legal duty or potential legal claim requires it. Afterward, we delete or anonymize the data unless another legal basis permits continued storage.
Changes to this Privacy Policy
We review this Privacy Policy regularly. Therefore, we update it when services, processing activities, legal requirements or technical configurations change.
Last updated: July 2026.
Questions about your data?
Finally, these answers summarize important points from the Privacy Policy and your data-protection rights.
Why does Glamavera process personal data?
Glamavera may process personal data to operate and secure the website, answer inquiries, fulfill orders, handle payments, arrange delivery and comply with legal obligations.
Can I withdraw cookie consent later?
Yes. You can change or withdraw optional cookie consent at any time through the cookie settings. Withdrawal does not affect processing that occurred before withdrawal.
Which rights do I have?
Depending on the legal requirements, you may request access, correction, deletion, restriction or portability. You may also object to certain processing and withdraw consent for the future.
How can I contact Glamavera about privacy?
You can contact Glamavera by email at contact@glamavera.com.
Need help with privacy?
For questions about this Privacy Policy, data processing or your rights, contact Glamavera by email.