Protecting your data matters to us – especially on a site for families. That’s why we don’t use cookies, tracking or advertising tools. Here we explain which data is still processed, why, and what rights you have.
1. Controller
Mignuti Media, owner Eduard Ditler
Pfarrer-Menges-Straße 5, 56112 Lahnstein, Germany
Phone: +49 15560 926046 · Email: media@mignuti.com
2. The short version
- No cookies, no tracking, no analytics tools, no ads.
- Fonts and images are served from our own server – no data is sent to Google or other third parties.
- Your cart, wishlist and game progress are stored only in your browser.
- We only process personal data if you write to us or place an order.
3. Hosting via Cloudflare and server log files
Our website is operated via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; for customers in the EU: Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany). Cloudflare delivers the website through its global network, protects it against attacks and, where applicable, stores download files (Cloudflare R2).
When you visit our website, Cloudflare automatically processes technical data sent by your browser: IP address, date and time of access, page visited, referrer URL, browser type and operating system. This data is technically necessary to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, fast service).
We do not keep access logs containing personal data ourselves. Our server functions (e.g. for orders) only log technical events without names or email addresses. Cloudflare stores connection data only briefly to provide and secure the service and deletes or anonymizes it according to its own policies.
Cloudflare processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; EU Standard Contractual Clauses apply in addition. More information: cloudflare.com/privacypolicy.
4. Storage in your browser (Local Storage)
To make the shop and the games work, we store some settings only locally in your browser (“Local Storage”):
- the contents of your cart and wishlist,
- your setting for pausing animations,
- game progress, high scores and your coloring gallery in our games.
This data is not transmitted to us or to third parties. Storing it is strictly necessary for the functions you explicitly request (Section 25(2) no. 2 TDDDG; Art. 6(1)(b) and (f) GDPR). You can delete it at any time by clearing this website’s data in your browser.
5. Contact by email or phone
If you contact us, we process the information you provide (e.g. name, email address, phone number, message) to answer your request. The legal basis is Art. 6(1)(b) GDPR where a contract or order is concerned, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your request has been dealt with, unless statutory retention obligations apply.
6. Orders in our shop
To process an order we use the data required for it: name, email address, billing address, ordered items, price, time of order, the language you chose and your consent to the early start of performance (waiver of the right of withdrawal) with its timestamp. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligations).
Personalized items: For caricatures or personalized songs you send us photos or information – often about children. We use them only to complete your order, never pass them on, and don’t use them for advertising or as sample images unless you have explicitly allowed us to. We delete photos and templates no later than three months after the order has been completed.
We keep order and invoice data for the statutory retention periods (usually 8 to 10 years under German commercial and tax law, Section 147 AO, Section 257 HGB).
7. Payment via Stripe
Payments are handled by the payment provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). When you check out, you are redirected to a Stripe payment page. Stripe processes your payment and contact data there (e.g. name, email, billing address, payment method) under its own responsibility to process the payment and prevent fraud. We never receive your full card or account details.
The legal basis is Art. 6(1)(b) GDPR. Stripe may transfer data to the USA; Stripe, Inc. is certified under the EU-US Data Privacy Framework, and EU Standard Contractual Clauses apply in addition. More information: stripe.com/privacy.
8. Email delivery via Resend
We send order confirmations and other service emails via Resend (Resend, Inc., San Francisco, USA). Your email address, name and the content of the email are processed for this. Resend acts as our processor under a data processing agreement (Art. 28 GDPR). As Resend may process data in the USA, the transfer is based on EU Standard Contractual Clauses (Art. 46 GDPR). The legal basis for sending is Art. 6(1)(b) GDPR. More information: resend.com/legal/privacy-policy.
We do not send newsletters or promotional emails without your explicit consent.
9. Links to YouTube, Instagram, TikTok and Pinterest
Our website contains links to our channels on YouTube, Instagram, TikTok and Pinterest. These are plain links – no content or scripts of these services are embedded in our pages. Data is only transferred when you click a link and visit the respective provider’s site, where its privacy policy applies.
10. Children
With songs, stories and games, Mignuti Kids is aimed at children and their families. Our games and content work without registration and without collecting personal data. Orders may only be placed by adults or legal guardians. We do not knowingly collect personal data directly from children.
11. Recipients of your data
Your data is only received by the service providers named above (Cloudflare, Stripe, Resend) and – where required by law – authorities, tax advisers or courts. We never sell your data.
12. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). Just write to media@mignuti.com.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation.
Right to lodge a complaint: You can complain to a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, datenschutz.rlp.de.
13. Security
Our website is delivered exclusively via encrypted HTTPS (TLS).
14. Changes to this privacy policy
We update this privacy policy when our services or the law change. The version published here always applies.
This English version is provided for convenience. Only the German version is legally binding.