PRIVACY POLICY

Last updated: September 8, 2026

WHO WE ARE

This website is operated by Vialita UG (haftungsbeschränkt), registered office at Eidinghausener Straße 30c, 32549 Bad Oeynhausen, Germany, registered with the commercial register of the Amtsgericht Bad Oeynhausen under HRB 20065, represented by managing director Sergej Neufeld ("Graphaa", "we", "us", "our"). We are the controller responsible for the personal data we collect through graphaa.com.

If you have any questions about this Privacy Policy or how we handle your personal data, you can reach us at info@graphaa.com.

WHAT INFORMATION WE COLLECT

We collect information you give us directly, such as when you place an order, create an account, sign up for our newsletter, or contact our customer service. This can include your name, email address, delivery and billing address, phone number, and payment details, which are processed securely by our payment providers.

We also collect information automatically when you use our website, such as your IP address, browser type, device information, pages viewed, and how you interact with our site. This is gathered through cookies and similar technologies, as explained further below.

If you contact us with a question or complaint, we may keep a record of that correspondence, including any personal details you choose to share with us.

HOW WE USE YOUR INFORMATION

We use your personal data to process and deliver your orders, manage your account, respond to your enquiries, and provide customer support. We also use it to send you order confirmations and shipping updates, and, where you have opted in, marketing communications about new pieces, offers, or promotions.

We may use your information to improve our website, understand how customers shop with us, prevent fraud, and comply with legal obligations, such as tax and accounting requirements.

LEGAL BASIS FOR PROCESSING

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR): performance of a contract, when processing is necessary to fulfil your order or provide a service you requested; consent, for example when you sign up to our newsletter; legitimate interest, such as improving our website and preventing fraud; and legal obligation, for example retaining invoices for tax purposes.

You may withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before your withdrawal.

Our website uses cookies and similar technologies to make the site function properly, remember your preferences, and understand how visitors use our website. Some cookies are essential for the website to work, while others are optional and used for analytics or marketing purposes.

You can manage or disable cookies through your browser settings or through the cookie preference tool on our website. Please note that disabling certain cookies may affect the functionality of the website.

SHARING YOUR INFORMATION

We do not sell your personal data. We share information with trusted third parties where necessary to run our business, including payment processors, shipping and logistics providers, IT and hosting providers, and email or marketing platforms. These third parties are only permitted to use your information to provide services to us and are required to protect it in accordance with applicable law.

We may also disclose your information where required by law, to protect our rights, or in connection with a business transfer such as a merger or sale of assets.

INTERNATIONAL DATA TRANSFERS

Where your personal data is transferred outside of the European Economic Area, we take steps to ensure it receives an adequate level of protection, such as relying on the European Commission's standard contractual clauses or an adequacy decision.

HOW LONG WE KEEP YOUR INFORMATION

We keep your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including to satisfy any legal, accounting, or reporting requirements. Order and invoice information is generally retained for the period required under German commercial and tax law.

YOUR RIGHTS

Under the GDPR, you have the right to request access to the personal data we hold about you, to request correction of inaccurate data, to request deletion of your data, to request restriction of processing, to object to processing carried out on the basis of legitimate interest, and to request portability of your data.

To exercise any of these rights, please contact us at info@graphaa.com. We will respond to your request within the timeframe required by applicable law.

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

CHILDREN'S PRIVACY

Our website is not directed at children, and we do not knowingly collect personal data from individuals under the age of sixteen. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and we encourage you to review it periodically.

If you have any questions about this Privacy Policy or how your personal data is handled, please contact us.

Vialita UG (haftungsbeschränkt)

Eidinghausener Straße 30c

32549 Bad Oeynhausen

Germany

Email: info@graphaa.com

Phone: +49 179 3511045