AREZOU

Legal

Privacy Policy

1. Controller

The party responsible for the processing of data on this website within the meaning of the General Data Protection Regulation (DSGVO) is:

Arezou Studios UG (haftungsbeschränkt)
Schopenhauerstr. 71
80807 München, Deutschland
Represented by the Managing Director Elias Amiri
Email: info@arezouparfum.com

2. Your rights

You have the right at any time to:

  • Access to the data we have stored about you (Art. 15 DSGVO)
  • Rectification of inaccurate data (Art. 16 DSGVO)
  • Erasure of your data (Art. 17 DSGVO)
  • Restriction of processing (Art. 18 DSGVO)
  • Data portability (Art. 20 DSGVO)
  • Objection to the processing (Art. 21 DSGVO)
  • Withdrawal of a consent given, with effect for the future (Art. 7 Abs. 3 DSGVO)

To exercise these rights, an informal message to the email address stated above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority.

3. Waitlist (registration of interest)

When you sign up for our waitlist, we process your email address and – where provided – your preferred fragrance and your language setting. The sole purpose is to inform you about the market launch of the AREZOU First Collection.

The legal basis is your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO, which you actively give upon signing up. You may withdraw this consent at any time, for example by email. Following withdrawal or once the purpose no longer applies, your data will be deleted.

Your details are delivered to us as an internal notification by email and stored in our mailbox; no promotional emails are sent to you. To deliver this notification, we use the transactional email service Resend (Resend, Inc., USA). A data processing agreement pursuant to Art. 28 DSGVO is in place with the provider; standard contractual clauses apply to the transfer to the USA.

At market launch we send you emails about the First Collection from our mailbox at STRATO (STRATO AG, Berlin), with a personal link to the catalogue and the shop. We measure whether the email is opened (tracking pixel) and which links you click, and in the catalogue which pages and fragrances you view, for how long, and with which device, browser and language. The data is linked to your email address; we store the IP address only in shortened form. The legal basis is your consent or our legitimate interest in evaluating our offer (Art. 6(1)(a) and (f) GDPR). We delete this data after six months at the latest. You can object to any evaluation at any time via the unsubscribe link in the email or by writing to info@arezouparfum.com.

4. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the site is accessed, technically necessary data (including IP address, time of access, page accessed, browser type) is processed in server log files. The legal basis is our legitimate interest in secure and stable operation (Art. 6 Abs. 1 lit. f DSGVO).

Data processing may also take place in the USA. Standard contractual clauses pursuant to Art. 46 DSGVO are in place for transfers to the USA; a data processing agreement (Data Processing Addendum) is in place with Vercel.

5. Local storage (cart & wishlist)

Your cart and wishlist are stored exclusively locally in your browser (localStorage) and are not transmitted to us. No analysis and no tracking take place. You can delete this data at any time via your browser settings.

6. No disclosure, no tracking

Your data is not disclosed to third parties beyond the processors named above. We do not use any marketing cookies or any third-party analytics tools.

Online shop: hosting and server log files

The online shop (shop.arezouparfum.com) runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place with Hetzner. When the shop is accessed, technically necessary data (including IP address, time, page requested, browser type) is processed in server log files. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

Online shop: orders and contract performance

When you place an order we process your data (name, address, email address, goods ordered, payment information) to perform the purchase contract (Art. 6(1)(b) GDPR). You can order as a guest; a customer account is not required. Statutory retention obligations (in particular under § 147 AO and § 257 HGB, up to ten years) are based on Art. 6(1)(c) GDPR. After that we delete your data. If you create a customer account we store your details until you have the account deleted.

Online shop: payment service providers

Payments are processed by Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands. Depending on the payment method you choose, your payment data is passed to Mollie and the respective provider (for example PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, or Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden). The legal basis is Art. 6(1)(b) GDPR. We do not receive full card data ourselves.

Online shop: shipping

For delivery we pass your name and delivery address to the carrier DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (Art. 6(1)(b) GDPR). We pass on your email address only if you have consented to shipment notifications.

Online shop: email and contact

We send order, invoice and shipping emails from our mailbox at STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement is in place with STRATO. If you write to us by email or contact form we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once the request is dealt with and no retention obligations apply.

Online shop: cookies

The online shop uses only technically necessary cookies, for example for the basket, the session and your cookie choice. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We do not use cookies for analytics or advertising.

Catalogue email to the waitlist: performance measurement

When we send you the catalogue by email as a waitlist member, we measure whether and how it is used. Each email contains a personal identifier. We store: the time of opening (via an image in the email), links clicked, your visit and behaviour in the catalogue (pages reached, fragrances viewed, time spent, clicks to the shop), plus device type, operating system, browser, language, time zone, screen size, the referring page and a shortened IP address (last block removed). The data is processed solely on our own server in Germany and is not passed on to third parties. The legal basis is our legitimate interest in understanding and improving our communication (Art. 6(1)(f) GDPR). We delete the data six months after sending at the latest. You can object at any time by unsubscribing via the link in the email or by writing to info@arezouparfum.com; we will then no longer use your address for this analysis.

Supervisory authority

The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Only the German version is legally binding. This page is a convenience translation.

As of: July 2026.