Privacy Notice of LUIBAN GmbH (as of January 2026)
Below we inform you about the processing of personal data by LUIBAN GmbH in accordance with the General Data Protection Regulation (GDPR). If you have any questions, you may contact us at any time using the contact details set out in section 2.
1. Overview
LUIBAN GmbH processes personal data essentially in two categories:
- Contract performance: We process data that is required to complete your purchase. This also includes disclosure to logistics partners (e.g., DHL) and payment service providers (e.g., Stripe, PayPal).
- Website optimisation & marketing: When you visit our website, technical data is exchanged to ensure the site is secure and user-friendly and, where consent has been given, to perform anonymised analyses.
2. Name and contact details of the Controller
Controller: LUIBAN GmbH, Rosa-Luxemburg-Str. 28, 10178 Berlin, Germany.
E-mail: info@luiban.com. Website: www.luiban.com
3. Details of data processing
3.1 Visiting our website
When you visit our website, log files (e.g., IP address, date/time, browser type) are stored automatically. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in ensuring security and stability). The data will be deleted after 90 days.
3.2 Contract performance and payment services
For the performance of the purchase contract (Art. 6(1)(b) GDPR), we process your name, address, e-mail address and payment data.
3.2.1 Shipping via DHL
We disclose your address data to DHL (Deutsche Post AG). For delivery notifications, we transmit your e-mail address only insofar as this is necessary for contract performance or due to your legitimate interest in shipment tracking.
3.2.2 Payment service provider Stripe
If you choose a payment method provided by Stripe, the payment details you enter will be transmitted to Stripe (Stripe Payments Europe Ltd., Ireland). Stripe acts in part as an independent controller. Stripe may process data for identity verification and fraud prevention. For details, please refer to the Stripe Privacy Policy.
3.2.3 Payment service provider PayPal
If you pay via PayPal, we disclose your order data to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal reserves the right to carry out a creditworthiness check. In this context, mathematical-statistical procedures may be used (score values). Details are available here: PayPal Privacy Policy.
3.3 Advertising and newsletter
We use your data for direct marketing purposes (Art. 6(1)(f) GDPR) provided you have not objected. You can object to the use of your data for advertising purposes at any time (see section 3.3.3).
3.4 Online presence and analytics
3.4.1 Cookies
We use technically necessary cookies (session cookies) and, subject to your consent, analytics cookies. You can disable cookies at any time in your browser settings.
3.4.2 Google Analytics
We use Google Analytics for web analytics. IP addresses are anonymised. As data may be transferred to the United States, such transfers take place on the basis of Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.
3.4.3 Own web analytics (LUIBAN Analytics)
In addition to Google Analytics, we use our own, self-hosted analytics tool to better understand the use of our website and to improve our services. The following data is collected:
- Page views: URL, page title, time on page, scroll depth
- Technical data: Screen resolution, browser window size, browser language
- Interactions: Clicks on purchase buttons and marked elements
- Product views: Which product pages are visited (product name, price)
- Referral: Referring URL and UTM campaign parameters
The data is stored on our own server in Germany (Hetzner, Falkenstein) and is not shared with third parties. IP addresses are pseudonymised before storage (daily rotating hash). No cookies are set; session assignment is based solely on your browser's session storage and ends when you close the browser tab.
Logged-in customers: If you are logged into your customer account, your customer number is additionally recorded in pseudonymised form (one-way hash) in order to recognise returning visits across multiple sessions. Re-identification is possible only by us and serves to improve our product range and service.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in optimising our online shop). You may object to this data collection at any time by contacting us at the address set out in section 2.
3.5 Recipients outside the EU
Some of our service providers (e.g., Google, Stripe) have their headquarters in the United States. We ensure an adequate level of data protection by using the European Commission’s Standard Contractual Clauses.
4. Your rights
You have the right of access, rectification, erasure and restriction of processing of your data, as well as the right to data portability and the right to object.