We always store what is necessary. Statistics and Trustpilot only with your consent – you can withdraw it at any time. Privacy policy
Necessary (always active) Cart, delivery address, language, login and security. Without this storage the shop does not work.
This translation is provided to help you understand the text. The German version is the legally binding one.
The protection of your personal data is important to us. This website does without advertising cookies and external analytics networks; the few optional functions are only loaded after you have given your consent. Below we inform you in accordance with Art. 13 GDPR about which data we process when you visit wohndeko.com or place an order with us.
The controller for the data processing on this website is:
Liviano GmbH
Gneisenaustraße 9, 33330 Gütersloh, Germany
Managing director: Sultan Nassayev
Phone: 0521 73069866
Email: info(at)liviano-gmbh.de
We do not use any advertising cookies and we do not integrate any third-party analytics or advertising networks (e.g. Google Analytics, Meta Pixel). No usage profiles are created. The following are technically necessary: your cart and the delivery address you enter in the local storage of your browser (section 5), short-lived markers for notices you have closed once, as well as – if you log in to your customer account – a session cookie. This storage does not require consent pursuant to § 25 para. 2 no. 2 TDDDG; the legal basis for the associated processing is Art. 6 para. 1 lit. b or lit. f GDPR.
Only with your consent do we additionally measure the reach of our shop. For this your browser stores a random identifier in the session storage (“sessionStorage”), which expires when you close the tab. For this identifier we store on our own server (see section 3) for 90 days: the source of the visit (referring page or campaign parameters), the date, the device type as well as country and city from our hosting provider’s location estimate – and which steps you have reached in the shop (cart, shipping calculation, checkout, appointment request, purchase). If you have the shipping costs calculated, the postcode and city entered in the process are included. We do not store your IP address; it is only used for about one minute as a counter against automated abuse.
If an order is placed, we transfer the source and device type of this session into the order data – to that extent the measurement is therefore not anonymous, but assigned to your order. Without consent this too does not take place. We do not combine data across different websites, we do not create advertising profiles and we do not pass this data on to third parties. If you withdraw your consent, the measurement ends immediately and the identifier is deleted from your browser.
Likewise only with your consent do we load the invitation script of Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark). It invites you to leave a review after a purchase and confirms to Trustpilot that this domain belongs to us. In the process your IP address and – after a purchase – the order and contact data required for the invitation are transmitted to Trustpilot; Trustpilot may set its own cookies in the process. Privacy information: de.legal.trustpilot.com. Independently of this consent, you receive an invitation to leave a review by email after a purchase: it runs via our order system and not via your browser (section 12).
The legal basis for both points is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). It is voluntary: without consent you can use the shop in full and place orders. We store your selection with a time stamp exclusively locally in your browser. You can change or withdraw it at any time with effect for the future – via the item “Cookie settings” at the bottom of every page.
The technical functions of this shop – from the cart and the shipping cost calculation through to the appointment booking – were developed for us by a partner company from the IT sector, which also maintains them on our behalf: inovra GmbH. The website is delivered via the worldwide content delivery network of an internationally operating hosting provider. When the pages are accessed, this provider processes technically necessary access data (including IP address, date and time, file requested, volume of data transferred, referrer, browser type). This data is used exclusively for secure and stable provision as well as for defence against attacks and is not combined with other data.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure, functioning web presence). Data processing agreements (Art. 28 GDPR) are in place with our IT partner and with the hosting provider; the EU standard contractual clauses apply to any transfers to third countries. We will tell you on request which processors we use (for contact details see section 1).
For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.
Your cart and – if you have the shipping costs calculated – the delivery address you enter are stored exclusively locally in your browser (“localStorage”). This data only leaves your device once you trigger the shipping cost calculation (section 7) or an order (section 6). This is a technically necessary function (Art. 6 para. 1 lit. f GDPR, § 25 para. 2 no. 2 TDDDG). You can delete this data at any time via the settings of your browser.
In order to process your order we process the data you provide (name, delivery/invoice address, email address, and where applicable the delivery address for calculating the shipping costs for larger panels). Payment is handled for us by a specialised payment service provider based in the EU. You enter your payment data (e.g. card details) directly there; we do not receive any complete payment data. You can see which company handles the payment during the checkout process.
For processing purposes we store the order data (name, email address, items ordered, total amount, order status) in our shop infrastructure (see section 3). Notifications about the status of your order (e.g. shipping or collection confirmation) are sent by email via a specialised email service provider; the safeguards described in section 14 apply to any transfers to third countries.
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract). All service providers involved are contractually bound in accordance with Art. 28 GDPR and may only use the data on our instructions. We will tell you their names and the respective privacy information on request (for contact details see section 1).
For certain bulky items we calculate the shipping costs on the basis of the distance. This function was built for us by our IT partner (section 3). If you enter your delivery address (street, postcode, city) in the cart, the distance is determined via a map and routing service whose provider is based in the EU. The transmission takes place exclusively server-side: your browser does not connect to this service, no cookies are set on your device and the address is only used there to calculate the distance.
Legal basis: Art. 6 para. 1 lit. b GDPR (initiation/performance of the purchase contract). The safeguards described in section 14 apply to any transfers to third countries; we will tell you the name of the provider on request (for contact details see section 1).
In order to create the invoices required by law, we transmit the order and invoice data to an accounting and invoicing service provider based in Germany. Legal basis: Art. 6 para. 1 lit. c GDPR (compliance with retention obligations under tax and commercial law). We retain invoice documents in accordance with the statutory periods (as a rule 10 years).
If you contact us via the contact form, by email or by telephone, we process the details you provide (e.g. name, email address, telephone number where applicable and your message) in order to deal with your enquiry. The technical dispatch of the form message to our mailbox is handled by the same email service provider as for orders (section 6). No cookies are set in the process; a honeypot field protects against automated spam.
Legal basis: Art. 6 para. 1 lit. b GDPR (for contract-related enquiries) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering general enquiries). We delete the enquiry data as soon as it is no longer required and no statutory retention obligations prevent this.
To arrange a visit to our warehouse in Gütersloh, we offer our own booking calendar on this website. If you request an appointment, we process the data you provide (name, mobile number, optionally email address and message as well as the appointment you have chosen) in order to organise the visit. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of pre-contractual or contractual measures).
To confirm and to remind you of the appointment we send you an SMS. It is sent via an SMS service provider based in Germany, to whom your mobile number and the message text are transmitted for this purpose (processing on our behalf pursuant to Art. 28 GDPR, servers in the EU). The SMS is sent on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you give when submitting the appointment request and which you can withdraw at any time with effect for the future (for contact details see section 1). An appointment is only entered definitively after you have confirmed it via the link sent to you; unconfirmed requests are deleted automatically after 24 hours. Confirmed appointments are deleted after the visit.
To show our location, you can load a map on the appointment page. This too is only loaded after you click, from OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). In the process your IP address is transmitted to OpenStreetMap. The legal basis is your consent given by clicking (Art. 6 para. 1 lit. a GDPR). Privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy.
If you submit a product review, we process the data provided (name or display name, rating, text and – optionally – email address for follow-up questions) on the basis of your consent, which you give when submitting the review form. Reviews are only published after they have been checked; the name provided appears with the review, the email address is not published. Legal basis: Art. 6 para. 1 lit. a and lit. f GDPR. You can withdraw your consent at any time with effect for the future (for contact details see section 1).
After a purchase, we invite you by email to leave a review – in two ways: a copy of your order confirmation (name, email address, order number and the items purchased) goes to our review platform (section 2), which sends you the invitation. A few days after you have received the goods, we additionally send you a request of our own with a link to our review form. Both of these run server-side via our order system and therefore independently of your cookie settings, because nothing is stored in or read from your browser in the process. Legal basis: Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG, the German Act against Unfair Competition (request for a review of goods of our own that you have already purchased). You can object to this at any time – with a brief reply to the request or a message to us (for contact details see section 1); we will then withdraw any request that has already been scheduled.
We use an online form to receive declarations of withdrawal. The data entered there (first and last name, email address, order number where applicable) is transmitted to our withdrawal system at widerruf.inovra.de, which our IT partner (section 3) operates for us on a server of its own. You automatically receive a confirmation of receipt by email; a copy of the declaration goes to our mailbox. We use the data exclusively to process and document your withdrawal and delete it once the statutory retention periods have expired. Legal basis: Art. 6 para. 1 lit. b and lit. c GDPR.
Your data is only transmitted to the service providers described above within the scope of the respective purposes as well as to shipping, payment and, where applicable, tax service providers, insofar as this is necessary to perform the contract. All processors are contractually bound in accordance with Art. 28 GDPR, may only use the data on our instructions and may not evaluate it for their own purposes; we will tell you on request which companies these are in detail (for contact details see section 1). Where data is transferred to third countries (e.g. the USA), this is done on the basis of appropriate safeguards (EU standard contractual clauses), an adequacy decision (EU-US Data Privacy Framework) or your consent.
We process and store personal data only for as long as is necessary for the respective purpose or as prescribed by statutory retention periods (in particular under commercial and tax law). After that the data is deleted.
You have the right at any time to:
To exercise your rights, a message to info(at)liviano-gmbh.de is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Version of this privacy policy: September 2026. We will adapt it as soon as changes to our processing operations make this necessary.
