Privacy Policy

Data controller:
SUCCESS AND MORE GmbH
Sophienblatt 40
24103 Kiel, Germany

Email: hallo@pummys.com

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data). This access data is used solely to ensure the smooth operation of the site and to improve our services. This serves to safeguard our legitimate interests in the correct presentation of our offering, in accordance with Art. 6(1)(f) GDPR. All access data is deleted no later than seven days after your visit.

1.1 Hosting

Services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and data collected via forms on this website are processed on their servers. For questions about our service providers and the legal basis for our cooperation, please contact us using the details provided in this privacy policy.

Our service providers are based and/or use servers in the USA and other countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.

1.2 Content Delivery Network (CDN)

To reduce loading times, we use a Content Delivery Network ("CDN") for certain services. This service delivers content (e.g., large media files) via regionally distributed servers of external CDN providers. Access data is processed on these servers. Our providers act as processors on our behalf. They are based and/or use servers in countries outside the EU and EEA, for which no adequacy decision exists. Our cooperation is based on standard data protection clauses.

2. Data Processing for Contract Execution and Contact

2.1 Data Processing for Contract Execution

We collect personal data when you voluntarily provide it during your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we require this data to process your order or contact request. The data collected can be seen in the respective input forms.

We use the data you provide to process the contract and your inquiries under Art. 6(1)(b) GDPR. Further details on data processing, including sharing with service providers for order, payment, and shipping processing, can be found in the following sections. After full contract execution, your data is restricted and deleted after tax and commercial retention periods (Art. 6(1)(c) GDPR), unless you consent to further use (Art. 6(1)(a) GDPR) or we reserve the right to further use, as permitted by law.

2.2 Contact

When you contact us (e.g., via contact form or email), we process personal data to handle your inquiry under Art. 6(1)(b) GDPR. Mandatory fields are marked as required. After processing your request, data is deleted unless you consent to further use or we reserve legally permitted further use.

3. Data Processing for Shipping

To fulfill the contract (Art. 6(1)(b) GDPR), we share your data with the shipping provider if necessary for delivery.

Shipping Notification

If you explicitly consent during or after your order, we share your email and phone number with the shipping provider under Art. 6(1)(a) GDPR for delivery notification. You can revoke consent at any time via the contact details in this policy or directly with the provider:

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany

4. Payment Processing

For payments, we work with technical providers, banks, and payment services.

4.1 Transaction Processing

Depending on the payment method, we share necessary data with processors, banks, or payment providers under Art. 6(1)(b) GDPR. Some providers collect data directly (e.g., via their website). Their privacy policies apply.

4.2 Fraud Prevention and Payment Optimization

We may share additional data with processors for fraud prevention and payment optimization (e.g., invoicing, disputes, accounting) under Art. 6(1)(f) GDPR.

4.3 Identity and Credit Check (Klarna)

For Klarna services (e.g., "Pay Later"), we share data for identity/credit checks under Art. 6(1)(a) GDPR. Klarna may use credit agencies. You can revoke consent at any time.

5. Email Marketing

5.1 Newsletter Subscription

With your consent (Art. 6(1)(a) GDPR), we use your data to send newsletters. Unsubscribe anytime via the provided link or by contacting us. Data is deleted unless you consent to further use.

5.2 Newsletter Delivery

Newsletters may be sent by processors. Providers may use servers in the USA (no adequacy decision). Cooperation is based on standard data protection clauses.

6. Cookies and Technologies

We use cookies (small text files stored on your device) to enhance functionality. Session cookies expire after closing your browser; persistent cookies remain. Required cookies (e.g., for shopping cart) process data (IP, visit time, device/browser info) under Art. 6(1)(f) GDPR. You can manage cookie settings in your browser:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

7. Web Analytics and Advertising

With your consent (Art. 6(1)(a) GDPR), we use third-party technologies (e.g., Google Analytics, Facebook Pixel) for analytics and ads. Data may be transferred to the USA (no adequacy decision; standard clauses apply).

7.1 Google Services

We use Google Analytics (website analytics), Ads (remarketing, conversion tracking), reCAPTCHA (bot protection), and Fonts (uniform content display). IP anonymization is activated where possible.

7.2 Facebook Services

Facebook Pixel collects data for personalized ads and conversion tracking. Data may be transferred to the USA (standard clauses apply).

8. Social Media

8.1 Social Plugins (Facebook, Instagram, Pinterest)

Social buttons are HTML links; no connection is made until you click them.

8.2 Our Social Media Pages

When visiting our pages on Facebook, Instagram, YouTube, or Pinterest, data may be collected for market research and ads under your consent with the provider. For details, see their policies:

Facebook | Instagram | YouTube | Pinterest

9. Your Rights and Contact

9.1 Your Rights

Under GDPR, you have the right to:

  • Access (Art. 15), rectify (Art. 16), or erase (Art. 17) your data;
  • Restrict processing (Art. 18) or object (Art. 21);
  • Data portability (Art. 20);
  • Lodge a complaint with a supervisory authority (Art. 77).

Right to Object

If we process data based on legitimate interests (Art. 6(1)(f) GDPR), you may object. For direct marketing, this right is unrestricted. For other purposes, it applies only for reasons arising from your particular situation.

9.2 Contact

For questions about data processing, your rights, or to revoke consent, contact us via the details in our imprint.


Privacy policy created with Trusted Shops legal text service in cooperation with FÖHLISCH Rechtsanwälte.