​1. Data Controller
 

The data controller for processing your personal data is:
MiDNIGHT
Aachener Str. 47
41065 Mönchengladbacg
Info@iammidnight.com
+49 179 612 5805
Our website is hosted on the Wix.com platform. Wix.com Ltd. is a company based in Israel, which has been recognized by the European Commission as a country with an adequate level of data protection.
 

2. Collection and Processing of Personal Data
We collect personal data in the following cases:

• When you visit our website (automatic data collection, e.g., IP address, browser type, access times);

• When you subscribe to our newsletter;

• When you create a user account or place an order (name, address, email address, payment information);

• When you contact us via the contact form, email, or phone.
   

3. Purposes and Legal Basis for Data Processing

We process your data exclusively in accordance with the General Data Protection Regulation (GDPR):

• To fulfill a contract or carry out pre-contractual measures (Art. 6(1)(b) GDPR);

• To obtain your consent, e.g., for newsletters (Art. 6(1)(a) GDPR);

• To comply with legal obligations (Art. 6(1)(c) GDPR);

• Based on legitimate interests, e.g., to analyze and improve our website (Art. 6(1)(f) GDPR).
   

4. Newsletter

If you subscribe to our newsletter, we use your email address to send you regular updates about offers and news. The subscription process uses a double opt-in method to confirm your email address.

You can unsubscribe from the newsletter at any time using the link in the email or by contacting us. Your data will be deleted after you unsubscribe.

We use Wix’s services to manage and send our newsletters, ensuring GDPR compliance.
 

5. Cookies and Tracking Technologies

Our website uses cookies and tracking technologies, including:

• Google Analytics and Google Ads Pixel: To analyze user behavior and optimize advertisements. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: Google Privacy Policy.

• Facebook Pixel: To analyze usage and optimize advertisements on Facebook. Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. More information: Facebook Privacy Policy.

• TikTok Pixel: To analyze and optimize advertisements on TikTok. Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. More information: TikTok Privacy Policy.

You can disable cookies in your browser settings. However, this may limit the functionality of our website.

​

6. Payment Providers

We offer the following payment methods:

PayPal
When you select PayPal as your payment method, your payment details will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This transmission is necessary for payment processing and is carried out in accordance with Art. 6(1)(b) GDPR. More information on PayPal's privacy policy can be found here: PayPal Privacy Policy.

Apple Pay
When using Apple Pay, Apple processes your payment information. Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA, is responsible for data processing. More information can be found in Apple’s privacy policy: Apple Privacy Policy.
 

7. Sharing Data with Third Parties

We only share your personal data with third parties when it is necessary for fulfilling your order or other legally permitted purposes. This includes:

• Payment Providers: PayPal and Apple Pay;

• Shipping Providers: e.g., DHL, UPS, etc.;

• Analytics and Tracking Providers: Google, Facebook, TikTok.
   

8. Data Transfers to Third Countries

Data may be transferred to countries outside the EU, particularly when using services such as Google, Facebook, TikTok, PayPal, or Apple Pay. These providers ensure data protection in compliance with the GDPR, e.g., through Standard Contractual Clauses.
 

9. Data Retention Period

We store your data only as long as necessary for the respective purpose or as required by law. After the retention period ends, the data will be deleted.
 

10. Your Rights

You have the right to:

• Request information about your stored data (Art. 15 GDPR);

• Rectify inaccurate data (Art. 16 GDPR);

• Request the deletion of your data (“Right to be Forgotten”) (Art. 17 GDPR);

• Restrict the processing of your data (Art. 18 GDPR);

• Receive your data in a portable format (Art. 20 GDPR);

• Object to the processing of your data (Art. 21 GDPR).

Please contact us to exercise these rights.
 

11. Data Security

We have implemented technical and organizational measures to protect your data from loss, misuse, and unauthorized access.
 

12. Changes to the Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available on our website.

Let me know if further adjustments are needed or if additional services should be included!