Skip to main content
Go to homepage

Privacy Policy

§ 1 General Information

We process personal data (e.g. title, name, address, email address, phone number, bank details, credit card number) exclusively in accordance with the provisions of German data protection law and the GDPR. In this privacy policy, we inform you about the purposes, recipients, legal bases, storage periods, and your rights as a data subject.

This policy applies only to our websites. If you are redirected to external sites via links, please inform yourself there about how your data is handled.

§ 2 Data Processing for Contract Fulfillment

(1) Purpose of Processing

The data you provide during the ordering process is required to conclude a contract with you and to process your order. Without an address, we cannot deliver the goods to you. For certain payment methods, we require payment data in order to transmit it to commissioned payment service providers.

If you contact us before concluding a contract (e.g. by email or via a form), we process this data in order to carry out pre-contractual measures and to respond to your inquiry.

When creating a customer account, we process in particular your name, address, payment method, email, and password in order to set up your account. This allows you to shop faster and view your orders at any time. Your account can be deleted at any time by contacting us or using the deletion function.

(2) Legal Basis

Art. 6 (1) lit. b GDPR (contract fulfillment or pre-contractual measures).

(3) Recipients

Payment service providers, shipping service providers, hosting providers, possibly inventory management systems, and possibly suppliers (dropshipping). In the case of complaints regarding products of the XKAH brand, additional data transfer to the manufacturer XKAH will take place; details can be found in § 4.

(4) Storage Duration

We store contract-related data until the expiry of statutory warranty periods and, if applicable, contractual guarantee periods. Data relevant under commercial and tax law is generally stored for ten years in accordance with legal obligations (§ 257 HGB, § 147 AO). Data from pre-contractual inquiries is deleted once the inquiry has been completed and no contract is concluded.

§ 3 Comments

(1) Purpose of Processing

When you leave a comment, we use your information (e.g. name/pseudonym, email address, website) exclusively for publishing the comment.

(2) Legal Basis

Art. 6 (1) lit. f GDPR (legitimate interest).

(3) Legitimate Interest

Our interest lies in the public exchange of user opinions on topics and products. You may publish comments under a pseudonym.

(4) Storage Duration

No fixed storage duration is предусмотрено. You can request deletion of your comment at any time.

(5) Right to Object

You may object at any time to processing based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation. In the case of direct marketing, you may object at any time without giving reasons.

§ 4 Complaints and Warranty for XKAH Products

(1) Purpose of Processing

Complaints and warranty requests for products of the XKAH brand are handled centrally via a dedicated form on the subdomain xkah.mozeshisha.de. This applies both to our own customers and to customers of other retailers who purchased XKAH products via us and have been referred to our complaint form by their retailer.

If you submit such a complaint, we process the data you provide in order to review, process, and communicate your request as well as to handle warranty and guarantee claims.

(2) Categories of Data Collected

As part of complaint handling, we process first and last name, email address, phone number (optional), purchase details (purchase date, order/invoice number, retailer), description of the defect, if applicable photos or videos of the defect, if applicable shipping or address data for processing a replacement, and the communication history related to the complaint.

(3) Legal Basis

For complaints arising from a purchase contract with Moze GmbH: Art. 6 (1) lit. b GDPR (contract fulfillment). For complaints submitted to us by customers of other retailers, as well as for transfer to XKAH: Art. 6 (1) lit. f GDPR (legitimate interest in standardized complaint processing and in exercising manufacturer warranty rights).

(4) Recipients and Third Country Transfer

As part of complaint handling, we transfer your data to the manufacturer XKAH. XKAH acts as an independent controller within the meaning of Art. 4 No. 7 GDPR and uses the data for its own purposes (warranty processing, handling of claims, quality assurance).

XKAH is located outside the European Union (in particular Hong Kong and the United States of America). There is no adequacy decision by the European Commission for these third countries. Therefore, the transfer is based on standard contractual clauses of the European Commission pursuant to Art. 46 (2) lit. c GDPR. Prior to the transfer, we conducted a Transfer Impact Assessment to ensure an essentially equivalent level of data protection.

Despite these safeguards, access to your data by authorities in these third countries cannot be completely ruled out. Enforcing your data subject rights against XKAH may involve additional effort.

A copy of the standard contractual clauses can be requested using the contact details provided in the imprint.

In addition, your data is shared with our hosting provider, if applicable shipping service providers (e.g. DHL), and, if applicable, our inventory management system as processors.

(5) Storage Duration

We store the data you provide as part of the complaint for as long as necessary to process your request and to safeguard any warranty or guarantee claims. Statutory retention obligations (in particular § 257 HGB, § 147 AO) remain unaffected. We have no influence on XKAH's independent storage duration.

(6) Right to Object

If we process your data based on Art. 6 (1) lit. f GDPR, particularly for transfer to XKAH, you may object to this processing at any time for reasons arising from your particular situation (see § 9). In this case, complete complaint processing may no longer be possible.

(7) Further Information

Detailed information on data processing within the complaint form can be found in the privacy policy of the subdomain at https://xkah.mozeshisha.de/datenschutz.

§ 5 PayPal Transactions

All PayPal transactions are subject to the PayPal Privacy Policy: paypal.com/de/webapps/mpp/ua/privacy-full .

§ 6 Credit Check by Klarna

When using Klarna, the privacy policy of Klarna Bank AB applies: cdn.klarna.com/…/privacy .

§ 7 Information About Cookies

(1) Purpose of Processing

We use technically necessary cookies. These are not stored permanently and enable functions such as the shopping cart. Additional cookies may be stored permanently in order to provide convenience features, such as saving login data.

(2) Legal Basis

Technically necessary cookies are based on Art. 6 (1) lit. f GDPR (legitimate interest in the secure and functional operation of the website). Non-essential cookies are only set with your consent in accordance with Art. 6 (1) lit. a GDPR.

(3) Storage Duration

Necessary cookies are usually deleted when the browser is closed. Persistent cookies may last from a few minutes to several years.

(4) Withdrawal

You can delete or disable cookies at any time via your browser. Please note that this may limit the functionality of the website.

§ 8 Newsletter

(1) Purpose of Processing

If you subscribe to the newsletter, we use your email address to inform you about products and offers. For statistical purposes, we analyze which links are clicked, without drawing conclusions about individual persons.

(2) Legal Basis

Art. 6 (1) lit. a GDPR (consent).

(3) Recipients

Newsletter service providers, if applicable.

(4) Storage Duration

Your email address is stored only as long as you are subscribed to the newsletter.

(5) Withdrawal

You can withdraw your consent at any time, e.g. via the unsubscribe link in the newsletter.

(6) Advertising to Existing Customers

If we have received your email address in connection with a purchase and you have not objected, we may send you offers for similar products on the basis of § 7 (3) UWG. You may object at any time without incurring any costs other than transmission costs at basic rates. After unsubscribing, we delete your email address from the mailing list unless another legal basis applies.

§ 9 Your Rights

As a data subject, you have the following rights:

  1. Access to your processed data (Art. 15 GDPR).
  2. Rectification of inaccurate or incomplete data (Art. 16 GDPR).
  3. Erasure of your data where the requirements are met (Art. 17 GDPR).
  4. Restriction of processing (Art. 18 GDPR).
  5. Data portability (Art. 20 GDPR).
  6. Withdrawal of consent with effect for the future (Art. 7 (3) GDPR).
  7. Complaint to a supervisory authority (Art. 77 GDPR).

Right to Object under Art. 21 GDPR

If we process data on the basis of legitimate interests (Art. 6 (1) lit. f GDPR) or in the public interest (Art. 6 (1) lit. e GDPR), you may object at any time for reasons arising from your particular situation.

If data is processed for direct marketing purposes, you may object at any time without giving reasons. After your objection, we will no longer process the data for these purposes.

Controller

Moze GmbH
An der Haarbrücke 6
49716 Meppen
Germany

Phone: 01781883338
Email: info@mozeshisha.de

Further information about our products can be found in the sections Shisha TobaccoShishaVapesShisha Charcoal and Shisha Accessories.

Support
Do you have a question about our products or your order? Our WhatsApp support is here for you.
Chat now
Mo-Do: 09:00–17:00 Uhr
Fr: 09:00–15:00 Uhr