Data Protection Declaration

We attach maximum importance to protecting your data and safeguarding your privacy. Below we explain which personal data we process when you use mmt3tuning.com, why we do so and which rights you have.
 

Controller

Eng. Enis Meral, MMT3Tuning
Ludwigstraße 21, 74532 Ilshofen, Germany
Phone: +49 174 9226196
E-mail: info@mmt3tuning.com

We have not appointed a data protection officer, as the legal requirements for this are not met.
 

Hosting and server log files

Our website and online shop run on the Wix platform of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Each time you visit, Wix automatically processes technically necessary data: IP address, date and time, page requested, browser and operating system, and the page you came from. This is required to deliver the website securely and stably (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Wix (Art. 28 GDPR). The European Commission has issued an adequacy decision for Israel (Art. 45 GDPR); where Wix uses service providers in the USA, the transfer is based on the EU-U.S. Data Privacy Framework or on standard contractual clauses.
 

Contact form, return form and e-mail

When you contact us via the contact form, the return form or by e-mail, we process the data you provide (e.g. name, e-mail address, order number, your message) only to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once your request has been dealt with, unless statutory retention periods apply.
 

Customer account, orders and contract processing

We process the personal data you enter when ordering or creating a customer account (name, addresses, e-mail address, phone number if given, order details) to conclude and fulfil the contract (Art. 6(1)(b) GDPR). A customer account is voluntary; you can delete it at any time. After the contract has been fully processed, the data is stored for the retention periods required by tax and commercial law (Art. 6(1)(c) GDPR, § 147 AO, § 257 HGB) and then deleted.
 

Payment

If you pay by PayPal, we pass the payment data required for this to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg (Art. 6(1)(b) GDPR). PayPal may carry out a credit check; details are in PayPal's privacy statement: paypal.com/de/legalhub/privacy-full. If you pay by bank transfer, your payment data is processed by our bank.
 

Shipping

To deliver your order, we pass your name and delivery address to the shipping company we commission for the respective delivery (Art. 6(1)(b) GDPR): DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn; DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg; GLS General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Straße 1–7, 36286 Neuenstein; or Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg. We only pass on your e-mail address or phone number so that the carrier can announce the delivery if you have consented to this (Art. 6(1)(a) GDPR); you can withdraw this consent at any time. For deliveries outside the EU, customs authorities receive the data required for customs clearance.
 

Käufersiegel rating system

After your order, we would like to ask you to rate your purchase. For this purpose we use the Käufersiegel rating system of Händlerbund Management AG, Torgauer Straße 233 B, 04347 Leipzig, as our processor. Your e-mail address is used only for this purpose, is not passed on to other third parties and is deleted 3 months after the delivery recorded for the rating. The legal basis is Art. 6(1)(f) GDPR; you can object at any time.
 

Newsletter

If you subscribe to our newsletter, we use your e-mail address to send you information about our products. The legal basis is your consent (Art. 6(1)(a) GDPR), which you confirm via a link in a confirmation e-mail (double opt-in). Your subscription is stored in our Wix contact list; the newsletter is sent via Brevo of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, as our processor. Brevo records whether a newsletter was opened and which links were clicked, so that we can improve our newsletters. You can unsubscribe at any time via the link in every newsletter or by e-mail to us.
 

Using your e-mail address for direct advertising

Provided you have not objected, we use the e-mail address we received when you bought from us to send you advertising for our own goods that are similar to those you have already purchased (§ 7(3) UWG, Art. 6(1)(f) GDPR). You can object to this at any time, for example via the link in the advertising e-mail or by a message to info@mmt3tuning.com, without incurring any costs other than the transmission costs at basic rates.
 

Forwarding personal data

We only pass on your data to third parties if this is necessary to perform the contract, if you have consented, or if we are legally obliged to do so. Service providers who process data on our behalf are bound by data processing agreements under Art. 28 GDPR. The scope of the data transfer is restricted to a minimum.
 

Cookies and consent banner

Our website uses cookies and similar technologies. Cookies that are strictly necessary to operate the shop (e.g. shopping cart, login, security, saving your consent choice) are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and tracking tools – for statistics, marketing and third-party services – are only used if you have given your consent in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the cookie settings of our banner; withdrawal does not affect the lawfulness of processing before it.
 

Google Analytics

With your consent, this website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to analyse how you use the website, e.g. pages visited, time spent and the device used. IP addresses are not stored in Google Analytics 4. The information may be transferred to Google LLC servers in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). We have concluded a data processing agreement with Google. The data is deleted after 14 months. More information: policies.google.com/privacy
 

Microsoft Clarity

With your consent, we use Microsoft Clarity of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how visitors use the website (clicks, scrolling, mouse movements) in pseudonymised form so that we can improve usability; entries in form fields are masked. Data may be transferred to Microsoft Corporation in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information: privacy.microsoft.com/privacystatement
 

Meta Pixel (Facebook and Instagram)

With your consent, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The pixel records your visit and actions on our website (e.g. viewed products, purchases) so that we can measure the success of our ads on Facebook and Instagram and show ads to interested users. If you are logged into Facebook or Instagram, Meta can link this information to your account. For the collection and transfer of the data we are jointly responsible with Meta (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information: facebook.com/privacy/policy
 

Links to our social media profiles

Our website contains simple links to our profiles on Facebook, Instagram and YouTube. No data is transferred to these networks when you open our website; only when you click a link does the respective network process your data in accordance with its own privacy policy.
 

HubSpot

With your consent, we use services of HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, for website analysis, for recording form entries on our website and for advertising pixels. HubSpot uses cookies to recognise returning visitors and to record their interaction with our website. Data is processed in HubSpot's EU data centre; transfers to HubSpot, Inc. in the USA are based on the EU-U.S. Data Privacy Framework. More information: legal.hubspot.com/privacy-policy
 

Twism loyalty programme

We offer a loyalty programme in which you collect "Coins" on purchases and redeem them at checkout. It is operated by Twism, Inc., USA (twism.com/privacy). If you take part, Twism processes your name, e-mail address, order and reward data to credit and redeem your Coins (Art. 6(1)(b) GDPR). Participation is voluntary. Twism may process data in the USA; there is no adequacy decision covering Twism, so the transfer is based on your explicit consent when you join the programme (Art. 49(1)(a) GDPR), which you can withdraw at any time by leaving the programme.
 

Product bundles (PurpleBear)

To show product bundles in our shop we use the Wix app "Bundles" of PurpleBear, Canada (purplebear.co/privacy-policy). It processes technical data (IP address, browser) and the products in your shopping cart to display and calculate bundle offers (Art. 6(1)(f) GDPR). The European Commission has issued an adequacy decision for Canada (Art. 45 GDPR).
 

Storage period

Unless a specific storage period is stated above, we keep personal data only as long as necessary for the purpose for which it was collected. Data relevant under tax and commercial law is retained for the statutory periods (generally 6 to 10 years, § 147 AO, § 257 HGB) and then deleted.
 

Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@mmt3tuning.com is sufficient.

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). You can object to the use of your data for direct advertising at any time without giving reasons (Art. 21(2) GDPR).
 

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.
 

Obligation to provide data, automated decision-making

You are not obliged to provide us with personal data. Without the data required for an order, however, we cannot conclude or fulfil the contract. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
 

Last update: October 2026