Privacy policy

Monolith Caviar & Co. GmbH

1. Data Controller

Monolith Caviar & Co. GmbH
Hauptstraße 49
36166 Haunetal-Neukirchen
Germany

Phone: +49 6673 20 83 609
E-Mail: info@ikrinka.de
Website: www.ikrinka.de

Managing Director: Denis Wischnakow
Registration Court: Amtsgericht Bad Hersfeld, HRB 2193
VAT Identification Number: DE 255 102 708

2. Data Protection Officer

Arthur Wischnakow
Hauptstraße 49
36166 Haunetal-Neukirchen
Germany
Phone: +49 6673 208 3606
E-Mail: a.wischnakow@erste-kaviar-company.de

3. What Personal Data We Collect and Why

We collect and process personal data only to the extent necessary to provide our services or where you have given us your consent.

3.1 Visiting Our Website

When you visit our website, the hosting provider Shopify Inc. (151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada) automatically processes the following data:

IP address (anonymised)
Date and time of access
Requested URL
Referrer URL
Browser and operating system data

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website operation). Shopify processes data under a data processing agreement pursuant to Art. 28 GDPR. Further information: https://www.shopify.com/legal/privacy

3.2 Order Processing and Contract Fulfilment

When placing an order, we collect the following data to fulfil the contract:

Name and address (delivery and billing address)
E-mail address
Phone number (optional)
Payment data (depending on the chosen payment method)
Order history

Legal basis: Art. 6(1)(b) GDPR (contract performance). Retention period: Data will be deleted after the expiry of statutory retention periods (up to 10 years under HGB/AO).

3.3 Customer Account

If you create a customer account, we store your login and profile data to manage your orders and preferences.

Legal basis: Art. 6(1)(b) GDPR. You may request deletion of your account at any time.

3.4 Contact Form and E-Mail

If you contact us via the contact form or by e-mail, we process your name, e-mail address and the content of your message in order to respond to your enquiry.

Legal basis: Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR for contract-related enquiries.

3.5 Postal Advertising

We use the delivery address you provided when placing an order to send you postal advertising (e.g. catalogues, offers, product information).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in direct marketing). Pursuant to Recital 47 GDPR, direct marketing constitutes a legitimate interest. Your interests will generally not override ours unless you assert specific circumstances.

You have the right to object at any time to the use of your address for advertising purposes, at no cost other than transmission costs at the basic rate. Please send your objection to: info@ikrinka.de or by post to: Monolith Caviar & Co. GmbH, Hauptstraße 49, 36166 Haunetal-Neukirchen, Germany.

Upon receipt of your objection, we will immediately block your address for advertising purposes.

4. Payment Service Providers

We use the following external service providers to process payments. Your payment data is transmitted directly to the respective provider and is not stored by us in full.

4.1 PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When paying via PayPal, your data is transferred to PayPal for payment processing. Legal basis: Art. 6(1)(b) GDPR.

4.2 Klarna

Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

Klarna offers payment options such as buy now pay later, instalment payments and instant bank transfer. When selecting a Klarna payment method, your data (name, address, date of birth, e-mail, phone, order details) is transmitted to Klarna to conduct a credit check and process the transaction. Legal basis: Art. 6(1)(b) GDPR.

4.3 Stripe (Credit Card Payment)

Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

Credit card payments are processed via Stripe. Your card data is transmitted directly and in encrypted form to Stripe. We do not have access to full card numbers. Legal basis: Art. 6(1)(b) GDPR.

4.4 Apple Pay / Google Pay

Apple Pay: Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.
Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When using Apple Pay or Google Pay, the payment is processed by the respective provider. The privacy policies of Apple and Google apply accordingly. Legal basis: Art. 6(1)(b) GDPR.

4.5 Bank Transfer

When paying by bank transfer, you will receive our bank details (VR Genossenschaftsbank Fulda eG, IBAN: DE70 5306 0180 0002 0848 80, BIC: GENODE51FUL). The transfer is made directly through your bank. We process payment data solely for the purpose of booking and invoicing. Legal basis: Art. 6(1)(b) GDPR.

5. Shipping Service Providers

To deliver your order, we share your name and delivery address with the following shipping providers:

DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany
DHL Express (Germany) GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Legal basis: Art. 6(1)(b) GDPR. Data is used solely for delivery purposes.

DHL Privacy Policy: https://www.dhl.de/de/toolbar/footer/informationen/datenschutz.html

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies in accordance with §25 TDDDG. Cookies are small text files stored on your device.

Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR. All other cookies are only activated with your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time via the cookie banner on our website.

6.1 Google Tag Manager

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Tag Manager to manage website tags. The Tag Manager itself does not process personal data but enables the loading of further tracking tools. Legal basis: Art. 6(1)(f) GDPR.

6.2 Google Analytics 4 (GA4)

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Analytics 4 to analyse user behaviour on our website. GA4 uses IP anonymisation and does not set third-party cookies. Data is stored on Google servers in the EU and the USA. For transfers to the USA, the EU Commission's standard contractual clauses apply.

Legal basis: Art. 6(1)(a) GDPR (consent). You may opt out of GA4 data collection via the cookie banner or by installing the opt-out add-on at: https://tools.google.com/dlpage/gaoptout

6.3 Meta Pixel (Facebook)

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram and to create target audiences (Custom Audiences). Data (including IP address, browser information, pages visited) may be transferred to Meta. Transfer to the USA is possible; standard contractual clauses apply.

Legal basis: Art. 6(1)(a) GDPR (consent).

For joint controllership with Meta, the Controller Addendum applies: https://www.facebook.com/legal/controller_addendum

Meta Privacy Policy: https://www.facebook.com/privacy/policy/

Opt-out: https://www.facebook.com/settings?tab=ads

6.4 TikTok Pixel

TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

We use the TikTok Pixel to measure the performance of our TikTok advertising campaigns and to create custom audiences. User data (including IP address, device data, pages visited) is transmitted to TikTok. Transfer to third countries (including the USA and Singapore) is possible.

Legal basis: Art. 6(1)(a) GDPR (consent).

TikTok Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

6.5 Pinterest Tag

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

We use the Pinterest Tag to measure the performance of our Pinterest campaigns and to create target audiences. User data (including IP address, device data) is transmitted to Pinterest. Transfer to the USA is possible.

Legal basis: Art. 6(1)(a) GDPR (consent).

Pinterest Privacy Policy: https://policy.pinterest.com/de/privacy-policy

7. Newsletter (Klaviyo)

If you subscribe to our newsletter, we process your e-mail address and — if provided — your name to send you the newsletter.

We use Klaviyo for newsletter delivery:
Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA.

Klaviyo processes data in the USA. The EU Commission's standard contractual clauses and the EU-US Data Privacy Framework apply.

Legal basis: Art. 6(1)(a) GDPR (consent). Subscription is carried out via a double opt-in procedure. You may unsubscribe at any time via the unsubscribe link in any newsletter e-mail or by writing to info@ikrinka.de.

Klaviyo also allows us to analyse whether and when newsletters were opened and which links were clicked. This analysis is carried out only with your consent.

Klaviyo Privacy Policy: https://www.klaviyo.com/legal/privacy-notice

8. Customer Reviews (Judge.me)

We use Judge.me to display customer reviews on our website.
Judge.me Inc., 340 S Lemon Ave #9009, Walnut, CA 91789, USA.

When loading review widgets, data (including IP address) may be transmitted to Judge.me. Transfer to the USA is possible.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in displaying verified reviews).

Judge.me Privacy Policy: https://judge.me/privacy

9. Process Automation (n8n)

We use the open-source software n8n to automate internal business processes — in particular, order processing and the sending of order confirmations and shipping notifications.

n8n is operated exclusively on our own server located in Germany. No transfer of your data to third parties or to third countries takes place in connection with this processing.

The following personal data may be processed as part of the automation:

Name and delivery address
E-mail address
Order data (order number, items ordered, order value)

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in efficient order processing).

Further information about n8n: https://n8n.io/legal/privacy

10. Social Media Presence

We maintain pages on the following social networks:

Instagram (Meta Platforms Ireland Limited)
Facebook (Meta Platforms Ireland Limited)
YouTube (Google Ireland Limited)
TikTok (TikTok Technology Limited)

When you visit our social media pages, the respective platforms collect data about your behaviour. We bear joint responsibility for this processing together with the platform operators. We have no influence over the specific data processing carried out by the platforms.

Legal basis: Art. 6(1)(f) GDPR. We recommend reading the privacy policies of the respective platforms.

11. Data Protection for Job Applicants

In the context of a recruitment process, we process only the data you have submitted (e.g. application, CV, photo) to assess your suitability for the advertised position.

Legal basis: Art. 6(1)(b) GDPR in conjunction with §26 BDSG.

In the event of rejection, your data will be deleted no later than six months after the rejection. If your application is successful, your data will be transferred to your personnel file.

Applicant data is not transferred to third countries. No automated decision-making is used.

12. Retention Periods

We store personal data only for as long as necessary for the respective purpose or as required by law:

Statutory retention obligations under commercial and tax law (§§ 238, 257 HGB; §§ 140, 147 AO): up to 10 years
Contract data: until expiry of statutory limitation periods (generally 3 years, up to 30 years pursuant to §§ 195 ff. BGB)
Newsletter data: until withdrawal of consent
Applicant data: 6 months after rejection

13. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right of Access (Art. 15 GDPR)

You have the right to obtain information about the personal data we process about you.

Right to Rectification (Art. 16 GDPR)

You may request the correction of inaccurate or the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You may request the deletion of your data, provided no statutory retention obligations apply.

Right to Restriction of Processing (Art. 18 GDPR)

Under certain conditions, you may request that processing of your data be restricted.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your data in a structured, commonly used and machine-readable format.

Right to Object (Art. 21 GDPR)

You may object at any time to the processing of your data on the basis of Art. 6(1)(f) GDPR (legitimate interest). In the case of direct marketing, you have an unconditional right to object.

Withdrawal of Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you may withdraw it at any time with effect for the future.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with the competent supervisory authority:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(The Hessian Commissioner for Data Protection and Freedom of Information)
Postfach 3163, 65021 Wiesbaden, Germany
https://datenschutz.hessen.de

To exercise your rights, please contact us at: info@ikrinka.de or through our Data Protection Officer (see Section 2).

14. Data Transfers to Third Countries

Some of the services we use (in particular Google, Meta, TikTok, Pinterest, Klaviyo, Stripe) transfer data to the USA or other third countries outside the EU. Where no adequacy decision by the EU Commission exists, we base such transfers on the EU Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, on the EU-US Data Privacy Framework.

15. Automated Decision-Making

No fully automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

16. Updates to This Privacy Policy

This Privacy Policy is current as of May 2026. We reserve the right to update it as necessary to reflect changes in legal requirements or new services. The current version is always available on our website.