Privacy Policy
Last updated: August 2026
Goodolia respects your privacy and takes the protection of your personal data seriously.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, place an order, contact us, or use our services.
The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
1. Data Controller
The controller responsible for processing personal data on this website is:
Mahdi Mirzaie – Goodolia
Werner-Seelenbinder-Straße 13
14770 Brandenburg an der Havel
Germany
Email: info@goodolia.com
WhatsApp: +49 176 83477159
2. Personal Data We Process
Depending on how you use our website, we may process the following categories of personal data:
Name
Billing address
Shipping address
Email address
Telephone number, if provided
Order and purchase information
Payment-related information
Customer account information
Communications with customer support
Information submitted through contact forms
IP address and technical device information
Browser and website usage information
Cookie and consent information
We process personal data only where there is a legal basis for doing so.
3. Online Store and WooCommerce
Goodolia uses WooCommerce to operate our online store.
When you place an order, create a customer account, use the shopping cart, or proceed through checkout, information necessary to provide these functions and process your purchase may be processed.
This may include your name, billing and shipping addresses, email address, telephone number, products ordered, order value, payment method, and other information necessary to process your order.
The legal basis for processing data necessary to perform a purchase contract or take steps before entering into a contract is Art. 6(1)(b) GDPR.
Where processing is necessary to comply with legal obligations, the legal basis is Art. 6(1)(c) GDPR.
4. Payment Processing
We offer different payment methods through third-party payment providers.
Depending on the payment method you select, the information necessary to process your payment may be transmitted to the relevant payment provider.
PayPal
If you choose PayPal or a payment method processed through PayPal, information necessary to process your payment will be transmitted to PayPal.
PayPal processes personal data in accordance with its own privacy policy.
Goodolia does not directly receive or store your complete PayPal login credentials.
The legal basis for payment processing required to complete your purchase is Art. 6(1)(b) GDPR.
Stripe
We also use Stripe for the processing of eligible credit and debit card payments and other payment methods where available.
When you choose a payment method processed by Stripe, information necessary to process the transaction may be transmitted to Stripe.
Goodolia does not directly store complete payment card information processed securely by Stripe.
The legal basis for payment processing required to complete your purchase is Art. 6(1)(b) GDPR.
5. Shipping and Order Fulfilment
Goodolia customer orders are shipped from Germany.
To fulfil and deliver your order, we may provide the shipping company responsible for your delivery with the information necessary to complete the shipment.
This may include:
Name
Shipping address
Shipment and order information
Contact details where necessary for delivery
The legal basis for this processing is Art. 6(1)(b) GDPR.
Customer orders are not sent to overseas suppliers for direct fulfilment.
Returns are also handled within Germany.
6. Shipment Tracking
We use shipment tracking functionality to manage deliveries and provide customers with information about the status of their orders.
For this purpose, shipment information such as your order number, tracking number, carrier, and delivery status may be processed.
Where necessary, shipment information may also be exchanged with the relevant shipping provider.
The legal basis for processing necessary to fulfil your order is Art. 6(1)(b) GDPR.
7. Contact Forms
Our website uses contact forms to allow customers and visitors to contact Goodolia.
If you submit a contact form, we process the information you provide, which may include your:
Name
Email address
Telephone number, if provided
Order number, where applicable
Message and other information voluntarily submitted
We use this information to respond to your inquiry.
Where your inquiry relates to an existing or potential contract, processing is based on Art. 6(1)(b) GDPR.
For other inquiries, processing may be based on our legitimate interest in responding to customer and website inquiries pursuant to Art. 6(1)(f) GDPR.
8. Email Communication
We use technical email services to send and receive emails relating to orders, customer accounts, customer support, payment notifications, shipping updates, and other necessary communications.
When an email is sent, technical information required for email transmission may be processed by the email service providers involved.
The legal basis depends on the purpose of the communication and may include Art. 6(1)(b), Art. 6(1)(c), or Art. 6(1)(f) GDPR.
9. WhatsApp Communication
If you voluntarily contact Goodolia via WhatsApp, the information you provide through WhatsApp will be processed for the purpose of responding to your inquiry.
This may include your telephone number, profile information made available through WhatsApp, messages, and any information you voluntarily provide.
Please note that WhatsApp is operated by a third-party provider and processes personal data in accordance with its own privacy terms.
You are not required to use WhatsApp and may contact us by email instead.
10. Google Analytics
We use Google Analytics to understand how visitors use our website and to improve Goodolia, our website, and the shopping experience.
Depending on your consent and configuration, Google Analytics may process information about your interaction with our website, including:
Pages visited
Approximate location
Device and browser information
Website interactions
Visit duration
Referral information
Technical and usage information
Google Analytics is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR where consent is legally required.
Analytics-related cookies and similar technologies are not activated unless the required consent has been provided.
You may withdraw or change your consent at any time through the cookie settings available on our website.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
11. Cookies and Consent Management
Our website uses cookies and similar technologies.
Essential Cookies
Certain cookies and technologies are necessary to provide essential website and online store functions, including:
Shopping cart functionality
Checkout
Security
Payment-related functionality
Cookie consent preferences
Customer account functions
Where legally permitted, these technologies may be used without consent because they are necessary to provide the website or a service explicitly requested by the user.
Optional Cookies
Optional technologies, including analytics technologies such as Google Analytics, are used only after the required consent has been provided.
Goodolia uses a consent management system to allow visitors to accept, reject, or manage optional cookies and technologies.
You can change or withdraw your consent at any time through the cookie settings on our website.
12. Cloudflare Turnstile
We use Cloudflare Turnstile on certain parts of our website to protect forms and website functions against spam, automated requests, and abusive activity.
Turnstile may process technical information about your browser, device, and interaction with the website in order to determine whether a request originates from a legitimate user rather than an automated system.
Cloudflare processes information in accordance with its applicable privacy terms.
The use of this security functionality is intended to protect our website, forms, customers, and technical infrastructure.
Where applicable, processing is based on our legitimate interest in protecting our website against spam, fraud, and automated abuse pursuant to Art. 6(1)(f) GDPR.
13. Customer Account and Email Verification
Where customer accounts or email verification functions are used, we may process your email address and relevant technical information to verify your account, prevent misuse, and protect customer accounts.
Where this processing is necessary to provide an account requested by you, the legal basis may be Art. 6(1)(b) GDPR.
Where processing is required for security and fraud prevention, it may also be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.
14. Hosting and Technical Services
Our website is hosted and operated using external technical service providers.
In connection with website hosting and operation, technical data may be processed, including:
IP addresses
Server log information
Browser information
Date and time of access
Requested pages or resources
Technical error and security information
This processing is necessary for the secure, reliable, and efficient operation of our website.
Where applicable, processing is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.
15. Sharing of Personal Data
Goodolia does not sell your personal data.
We share personal data only where necessary for legitimate business purposes, performance of a contract, compliance with legal obligations, or where you have provided the required consent.
Recipients may include:
Payment providers such as PayPal and Stripe
Shipping and delivery companies
Hosting and technical service providers
E-commerce service providers
Email service providers
Security and anti-spam providers
Analytics providers where consent has been given
Tax, accounting, legal, or regulatory authorities where legally required
Only the information necessary for the relevant purpose is shared.
16. International Data Transfers
Some service providers used by Goodolia operate internationally.
As a result, personal data may in certain circumstances be processed outside Germany or the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, such transfers are carried out in accordance with applicable GDPR requirements and using an appropriate legal transfer mechanism where required.
Depending on the provider and destination, this may include an adequacy decision by the European Commission or appropriate contractual safeguards.
17. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
Order, invoice, transaction, tax, and accounting information may be retained for the applicable statutory retention periods.
Customer communications and other personal information are deleted when they are no longer required and no legal obligation or legitimate reason for continued storage exists.
18. Your Rights Under the GDPR
If the applicable legal requirements are met, you have the right to:
1. Access your personal data
2. Correct inaccurate or incomplete personal data
3. Request deletion of your personal data
4. Request restriction of processing
5. Object to certain processing
6. Receive your data in a portable format where applicable
7. Withdraw your consent at any time where processing is based on consent
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact:
Email: info@goodolia.com
19. Right to Object
Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation, subject to the requirements of applicable law.
20. Withdrawal of Consent
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
For cookies and analytics technologies, you can change your preferences through the cookie settings available on our website.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
21. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You may in particular contact the supervisory authority responsible for the place of your habitual residence, place of work, or the place of the alleged infringement.
22. Data Security
We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
Our security measures are reviewed and adjusted where appropriate in light of technical developments and the nature of the data processed.
23. Changes to This Privacy Policy
We may update this Privacy Policy where necessary, for example when our services, website technologies, payment methods, service providers, or legal requirements change.
The current version will always be made available on this website.
Last updated: August 2026
Contact
For questions about this Privacy Policy or the processing of your personal data, please contact:
Mahdi Mirzaie – Goodolia
Werner-Seelenbinder-Straße 13
14770 Brandenburg an der Havel
Germany
Email: info@goodolia.com
WhatsApp: +49 176 83477159