Data Protection
Privacy Policy
Last updated: July 2026
This Privacy Policy explains how Mintmelon GmbH, operating under the brand AZURLAMOUR ("AZURLAMOUR", "we", "us", or "our"), collects, processes and protects your personal data when you visit our website, create a customer account, purchase our products, contact us or otherwise interact with our services.
We process your personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the applicable national data protection laws.
Please read this Privacy Policy carefully before using our website.
1. Controller
The controller responsible for the processing of personal data within the meaning of Article 4 No. 7 GDPR is:
Mintmelon GmbH
Otto-Ernst-Straße 21A
22605 Hamburg
Germany
E-mail: hey@azurlamour.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at any time using the contact details above.
2. Scope of this Privacy Policy
This Privacy Policy applies to all processing of personal data carried out through our online store available at:
It applies in particular when you:
- visit our website;
- create or use a customer account;
- purchase products;
- subscribe to our newsletter;
- contact us via our contact form or by e-mail;
- interact with our website through cookies or similar technologies;
- use any other services we provide.
This Privacy Policy does not apply to websites operated by third parties that may be linked from our website. We have no influence over the content or privacy practices of such third-party websites.
3. Legal Basis for Processing
Where we process personal data, we do so only where a valid legal basis under the GDPR exists.
Depending on the specific processing activity, this may include:
- Article 6(1)(a) GDPR – where you have given your consent (for example, for marketing cookies, Google Analytics, Google Ads or newsletter subscriptions);
- Article 6(1)(b) GDPR – where processing is necessary for the performance of a contract or to take steps prior to entering into a contract (for example processing orders or managing your customer account);
- Article 6(1)(c) GDPR – where processing is necessary to comply with a legal obligation (for example commercial or tax retention obligations);
- Article 6(1)(f) GDPR – where processing is necessary for our legitimate interests, provided that your interests or fundamental rights do not override those interests (for example website security, fraud prevention, responding to enquiries and defending legal claims).
Whenever consent is required under applicable law, we will only process your personal data after obtaining your prior consent. You may withdraw your consent at any time with effect for the future.
4. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services or our data processing activities.
The latest version will always be published on this website together with the corresponding revision date.
Where required by law, we will inform users of material changes in an appropriate manner.
5. Collection of Personal Data When Visiting Our Website
When you visit our website, we automatically collect certain technical information required to display the website securely and efficiently.
The following information may be processed automatically:
- IP address
- Date and time of access
- Browser type and browser version
- Operating system
- Referrer URL
- Pages visited
- Time spent on individual pages
- Device information
- Language settings
This information is processed to ensure the stability, functionality and security of our website, to prevent misuse and to detect security incidents.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest consists of providing a secure and technically functional website.
6. Cookies and Similar Technologies
Our website uses cookies and similar technologies (such as pixels or tags) to provide essential website functions, analyse the use of our website and, where you have given your consent, display personalised advertising.
Cookies are small text files stored on your device by your browser.
We distinguish between the following categories of cookies:
Strictly Necessary Cookies
These cookies are technically necessary for the operation of our online store and cannot be disabled.
They are used, for example, to:
- remember your shopping cart;
- enable secure login to your customer account;
- process orders;
- provide essential website functionality.
The legal basis for these cookies is Article 6(1)(f) GDPR.
Analytics Cookies
Subject to your prior consent, we use analytics technologies to better understand how visitors use our website.
This allows us to improve our website, optimise user experience and evaluate the effectiveness of our online presence.
Analytics cookies are only activated after you have provided your consent through our cookie consent banner.
The legal basis for this processing is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
Marketing Cookies
Subject to your prior consent, we use marketing cookies and similar technologies to display personalised advertisements and measure the effectiveness of our advertising campaigns.
These cookies may collect information regarding your browsing behaviour across different websites.
Marketing cookies are only activated after you have provided your explicit consent.
The legal basis for this processing is Article 6(1)(a) GDPR.
You may withdraw your consent at any time.
7. Google Analytics
Provided you have given your consent, we use Google Analytics, a web analytics service provided by Google LLC and, where applicable, Google Ireland Limited.
Google Analytics uses cookies to analyse how visitors use our website.
The information collected may include:
- IP address (processed with IP anonymisation where available);
- browser information;
- device information;
- operating system;
- pages visited;
- duration of visit;
- interactions with our website;
- approximate geographic location;
- referral source.
The collected information helps us understand how visitors use our website and enables us to improve our products and services.
Google may process personal data on servers located in the United States.
Where personal data is transferred outside the European Economic Area (EEA), such transfers are carried out in accordance with Chapter V GDPR, in particular on the basis of the European Commission's adequacy decisions or the EU Standard Contractual Clauses, where applicable.
Further information can be found in Google's Privacy Policy.
The legal basis for processing is your consent pursuant to Article 6(1)(a) GDPR.
8. Google Ads and Conversion Tracking
Subject to your prior consent, we use Google Ads and Google Ads Conversion Tracking provided by Google.
These services allow us to:
- measure the effectiveness of advertising campaigns;
- determine whether visitors reached our website through advertisements;
- optimise future advertising campaigns;
- display personalised advertisements.
Google may collect information including:
- browser information;
- IP address;
- pages visited;
- conversions;
- interactions with advertisements;
- device identifiers.
Google may process this information on servers located outside the European Union, including the United States.
International data transfers are protected through recognised transfer mechanisms pursuant to Chapter V GDPR, including the EU-U.S. Data Privacy Framework where applicable or the European Commission's Standard Contractual Clauses.
Processing takes place exclusively on the basis of your prior consent pursuant to Article 6(1)(a) GDPR.
Consent can be withdrawn at any time with effect for the future via the cookie settings available on our website.
9. Customer Account
You may create a customer account in our online store to facilitate future purchases.
When you register for a customer account, we process the following personal data:
- First and last name
- Billing and shipping address
- Email address
- Telephone number (where provided)
- Password (stored in encrypted form)
- Order history
- Account preferences
The processing of this data is necessary to create and administer your customer account and to provide the requested services.
The legal basis is Article 6(1)(b) GDPR.
Your customer account remains active until you delete it or request its deletion. We may retain certain information beyond deletion where required to comply with statutory legal obligations or to establish, exercise or defend legal claims.
10. Orders and Contract Fulfilment
When you place an order through our online store, we process the personal data necessary to conclude and perform the purchase contract.
This may include:
- Name
- Billing address
- Shipping address
- Email address
- Telephone number
- Ordered products
- Order value
- Payment status
- Shipping information
- Customer communication regarding the order
The processing of this data is necessary to fulfil the purchase contract, process payments, deliver products and handle returns or warranty claims.
The legal basis is Article 6(1)(b) GDPR.
Where we are required by law to retain order-related information for accounting or tax purposes, processing is additionally based on Article 6(1)(c) GDPR.
11. Payment Processing
Payments are processed through the payment methods selected by the customer during checkout.
Depending on the selected payment method, personal data may be transmitted to the following payment service providers:
- Shopify Payments
- PayPal
- Klarna
- Apple Pay
- Visa
- Mastercard
The information transferred may include:
- Name
- Billing address
- Email address
- Payment amount
- Order number
- Payment information required for transaction processing
We do not receive or store complete payment card details.
Payment service providers process personal data under their own responsibility in accordance with their respective privacy policies.
The legal basis for this processing is Article 6(1)(b) GDPR.
Where payment providers transfer personal data outside the European Economic Area, such transfers take place in accordance with Chapter V GDPR using recognised transfer mechanisms, including adequacy decisions or the European Commission's Standard Contractual Clauses where applicable.
12. Shipping and Delivery
To fulfil your order, we transmit the information necessary for delivery to our shipping service provider:
DHL
The following information may be transferred:
- Recipient's name
- Shipping address
- Email address (where required for shipment notifications)
- Telephone number (where provided and required)
- Order reference
The transfer of this information is necessary to deliver the ordered goods and to provide shipment tracking where applicable.
The legal basis is Article 6(1)(b) GDPR.
No personal data is transferred to logistics providers for advertising purposes.
13. Shopify Platform
Our online store is hosted by Shopify Inc.
Shopify provides the e-commerce platform through which we offer our products and process customer orders.
In providing these services, Shopify processes personal data on our behalf, including:
- Customer account information
- Order information
- Billing and shipping details
- Technical usage information
- IP addresses
- Device information
Shopify may process personal data in Canada, the United States and other countries in which Shopify or its subprocessors operate.
Where personal data is transferred outside the European Economic Area, such transfers are carried out in accordance with Chapter V GDPR.
Where applicable, transfers are based on:
- an adequacy decision adopted by the European Commission;
- the EU Standard Contractual Clauses;
- or another legally recognised transfer mechanism under the GDPR.
Further information regarding Shopify's data processing practices can be found in Shopify's Privacy Policy.
The legal basis for the use of Shopify is Article 6(1)(b) GDPR for contract performance and Article 6(1)(f) GDPR for ensuring the secure and reliable operation of our online store.
14. Contacting Us
If you contact us via our contact form or by e-mail, we process the personal data you voluntarily provide in order to respond to your enquiry.
Depending on your request, this may include:
- Name
- E-mail address
- Telephone number (if provided)
- Order number (if applicable)
- Contents of your message
- Any additional information you choose to provide
The processing of your personal data is carried out solely for the purpose of responding to your enquiry, communicating with you and, where necessary, initiating or performing a contractual relationship.
The legal basis for processing is:
- Article 6(1)(b) GDPR, where your enquiry relates to a contract or pre-contractual measures; or
- Article 6(1)(f) GDPR, where our legitimate interest is to respond efficiently to general enquiries.
Unless statutory retention obligations apply, enquiries are generally deleted once they have been fully processed and no further communication is expected.
15. Newsletter
You may subscribe to our newsletter to receive information about new products, promotions and other updates from AZURLAMOUR.
Subscription to our newsletter is carried out using the double opt-in procedure. After registering, you will receive a confirmation e-mail containing a confirmation link. Your subscription becomes active only after this confirmation has been completed.
When subscribing to the newsletter, we process:
- E-mail address
- Date and time of registration
- Date and time of confirmation
- IP address used during registration and confirmation
- Technical log data required to document your consent
We use Shopify Email to send newsletters.
Your personal data is processed solely for sending the newsletter and documenting your consent.
The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by clicking the unsubscribe link included in every newsletter or by contacting us directly.
Your data will be deleted immediately after you unsubscribe from the newsletter unless statutory retention obligations require otherwise.
16. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.
Unless a longer retention period is required by law, the following retention periods generally apply:
Data CategoryRetention PeriodCustomer accountUntil deletion by the customer or deletion request, unless statutory obligations require longer retentionOrders and invoices10 years in accordance with commercial and tax lawBusiness correspondenceUp to 6 years where legally requiredContact enquiriesUntil the enquiry has been fully resolved unless legal obligations require longer retentionNewsletter dataUntil withdrawal of consent (unsubscribe)Cookie consent recordsFor as long as required to demonstrate compliance with applicable legal obligationsAnalytics and marketing dataAccording to the respective cookie retention periods or until consent is withdrawn
Where personal data is no longer required and no statutory retention obligation applies, it will be securely deleted or anonymised.
17. International Data Transfers
Some of the service providers we use, including Shopify and certain payment service providers, may process personal data outside the European Economic Area (EEA), including in Canada and the United States.
Whenever personal data is transferred to countries outside the EEA, we ensure that an adequate level of data protection is maintained.
Depending on the destination country, transfers are based on one or more of the following safeguards:
- an adequacy decision adopted by the European Commission pursuant to Article 45 GDPR;
- the European Commission's Standard Contractual Clauses pursuant to Article 46 GDPR;
- participation in an approved data transfer mechanism recognised under applicable data protection law;
- any other safeguard permitted under Chapter V GDPR.
Where required by law, further information regarding the applicable safeguards may be requested by contacting us using the details provided in this Privacy Policy.
18. Your Rights under the GDPR
If the General Data Protection Regulation (GDPR) applies to the processing of your personal data, you are entitled to the following rights.
Right of Access (Article 15 GDPR)
You have the right to obtain confirmation as to whether we process your personal data and, where this is the case, to receive access to that data together with information regarding the processing.
Right to Rectification (Article 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you and to have incomplete personal data completed without undue delay.
Right to Erasure (Article 17 GDPR)
You have the right to request the deletion of your personal data where one of the legal grounds set out in Article 17 GDPR applies.
This right does not apply where processing remains necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Right to Restriction of Processing (Article 18 GDPR)
Under certain circumstances, you have the right to request that we restrict the processing of your personal data.
Right to Data Portability (Article 20 GDPR)
Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and, where technically feasible, to have those data transmitted directly to another controller.
Right to Object (Article 21 GDPR)
Where we process your personal data on the basis of Article 6(1)(f) GDPR (legitimate interests), you have the right to object at any time, on grounds relating to your particular situation, to such processing.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing without giving reasons.
Once you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.
Right to Withdraw Consent
Where the processing of your personal data is based on your consent, you may withdraw that consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Exercising Your Rights
To exercise any of the rights described above, please contact us at:
Mintmelon GmbH
Otto-Ernst-Straße 21A
22605 Hamburg
Germany
E-mail: hey@azurlamour.com
We will respond to your request within the time limits required by the GDPR.
19. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority.
As our company is located in Hamburg, the competent supervisory authority is:
Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
Telephone: +49 (0)40 42854-4040
E-mail: mailbox@datenschutz.hamburg.de
You may also lodge a complaint with the supervisory authority responsible for your habitual residence, place of work or the place of the alleged infringement.
20. Data Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures are continuously reviewed and adapted to reflect technological developments and current security standards.
Although we take appropriate precautions to protect personal data, no transmission of information over the internet or electronic storage system can be guaranteed to be completely secure.
21. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary to reflect changes in legal requirements, regulatory guidance, technical developments or our data processing activities.
The latest version of this Privacy Policy will always be published on our website together with the corresponding revision date.
Where legally required, we will notify users of material changes in an appropriate manner.
22. Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Mintmelon GmbH
Otto-Ernst-Straße 21A
22605 Hamburg
Germany
E-mail: hey@azurlamour.com