Notes on data protection

We are pleased that you are visiting our website and thank you for your interest in our company and our products. At this point we would like to inform you about which data we collect, use and process and how we handle your personal data.

Data Collection and Data Use

Personal data is information that can be used to identify a person as such. This includes, for example, your name, your address, your e-mail address or your telephone number.

(1) Collection of personal data when using the website

If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser operating system and its interface, language and Browser software version. The legal basis for storing the data is Art. 6 (1) (f) GDPR.

(2) Collection of personal data upon registration

We offer you the option of registering on our website by providing personal data.
Depending on the type of contract concluded, we store the following data:

Surname, first name, address, billing address, e-mail address, telephone number

As part of the registration process, you will be asked whether you have read the data protection declaration and agree to its validity, which you confirm by clicking on the field and ticking the appropriate box. By doing so, you agree that your personal data will be used for the following purposes:

Processing of orders, sending of direct advertising, e.g. by e-mail, package insert or post, sending of offers and vouchers, sending of evaluation requests, sending of our newsletter

If you give your consent, the legal basis for processing the data is Article 6 Paragraph 1 lit. b GDPR.

Name and contact details of the person responsible

(3) The person responsible for the administration of personal data is

Cottonbabe Interior GmbH
Riegelgartenstr. 13
76703 Kraichtal

Managing Director: Jens Liebhauser
Phone: +49 160 989603

Purposes of processing personal data

(5) We only store your data for the following purposes:
To process orders (including payment processing and, if necessary, credit check), to send advertising by us and for customer service.

Your personal data will only be transmitted to third parties if the transmission is necessary within the framework of contract processing or for billing or collection purposes (e.g. shipping company or payment service provider) or if you have expressly consented.

The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Article 6 (1) (b) GDPR and for the transfer in the context of legally prescribed cases Article 6 (1) (c) GDPR.

Duration of data storage

We store your data for as long as the respective purpose requires, taking into account your legitimate interests. If there is a tax retention period for certain data that is processed for the processing of purchase contracts, the data will be stored for 6 or 10 years. During this period, the processing of the data is restricted after 2 years, ie the data will only be used to comply with legal obligations. The retention obligation begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

Disclosure of personal data to third parties
In accordance with legal regulations, we may pass on your personal data to the following categories of companies/persons:

tax audit, other authorities

External service providers and professional advisors such as lawyers, auditors, accountants, credit rating agencies, debt collection service providers,
Postal/shipping service providers, freight forwarders e.g. UPS, DHL, Deutsche Post
Payment providers such as PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg; Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, (Amazon Pay) Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg; (Apple Pay) Apple Distribution International, Hollyhill Industrial Estate, Hollyhill Cork, Ireland; Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5; Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Ecommerce platform Shopify

We use Shopify, a service provided by Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5, to operate our online shop. This service provides an e-commerce platform through which we offer our goods for sale. The data transmitted as part of your order is stored on a Shopify server in the USA. Shopify has submitted to the EU-US Privacy Shield, For more information on privacy, please see Shopify's privacy policy at

The legal basis for the transmission of data to third parties for the purpose of contract processing or for billing purposes is Article 6 (1) (b) GDPR and for the transfer in the context of legally prescribed cases Article 6 (1) (c) GDPR.

Your rights

To exercise your rights you can use the contact form ( or you can contact the data protection officer or the person responsible or you can contact us at email: Tel: + 49 160 98096803

You have the following rights:

7.1 Withdrawal of Consent
You can revoke your consent to the processing of personal data at any time with effect for the future.
You can use the above contact options for this.

7.2 Other Rights
You also have the following rights with regard to your personal data:

Right to information, right to rectification, right to erasure or restriction of processing, right to object to processing, right to data portability,

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
The responsible data protection supervisory authority for Baden-Württemberg is:
The state commissioner for data protection and freedom of information in Baden-Württemberg
PO Box 10 29 32, 70025 Stuttgart
Koenigstrasse 10a, 70173 Stuttgart
Phone: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15

contact form

If you send us inquiries via the contact form, we will only use your data to process your request. This data is not used for advertising purposes or passed on to third parties.

The legal basis for the processing of data transmitted via the contact form or in the course of sending an email is Article 6 Paragraph 1 Letter f of the GDPR. If contact is also aimed at concluding a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

The data you enter in the contact form will be stored by us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies.


We use cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that your web browser accepts when you visit our website and stores them on your computer. Some of the cookies are deleted immediately after closing the browser. Other cookies remain permanently on your computer and enable us to recognize you or your computer the next time you visit our website.
This site uses the following types of cookies, the scope and functionality of which are explained below:

a) Transient cookies, these are automatically deleted when you close your browser. These include in particular the session cookies. These store a so-called session ID, with which the various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

b) Persistent cookies, these are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
You can influence the use of cookies by changing the settings in your browser. Most browsers have an option that can be used to restrict or prevent the storage of cookies. Each browser is individual in the way it manages cookie settings. This is described in the respective help menu of your browser.

These can be found for the respective browsers under the following links:

Internet Explorer: : Safari:

Please note, however, that disabling cookies may mean that only limited functions of the website are available to you.
The legal basis for the use of cookies is Art. 6 Para. 1 lit. f GDPR.

analysis tools

Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plug-in available under the following link. Download and install in:

This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are further processed in abbreviated form, which means that they cannot be linked to individuals. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield,

Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Service: .html, overview of data protection:, as well as the data protection declaration: .

10.2 Use of Hotjar

Our website uses Hotjar analysis software from Hotjar Ltd. 3 Lyons Range- 20 Bisazza Street- Sliema SLM 1640, Malta (, which enables us to analyze your use of the website. Hotjar uses cookies and a tracking code, through which the collected data is transmitted to the Hotjar server. This data essentially consists of device-related information such as the IP address, the screen size of your device, the device type and browser information such as type and version, your geographic location and your language setting. Your e-mail address with your first and last name will also be transmitted if you have given us this information. User interaction, such as moving the mouse, websites visited and the date and time of use are also regularly transmitted to Hotjar. Your IP address is automatically anonymized by Hotjar and only stored in this form. In addition, the users of the website are assigned a "unique user identifier (UUID) through which Hotjar can record recurring users of our website - without linking them to your personal data.

You can use the link to prevent Hotjar from collecting and using your data.

10.3 Use of Tidio

Our website uses Tidiochat, a service provided by Tidio Ltd. 220C Blythe Road, W14 0HH, London, United Kingdom ( Anonymized data is processed via this service for the purpose of web analysis and to operate a live chat. Cookies can be used for this purpose, which enable your browser to be recognized. Cookies are small text files that are stored on your hard drive in the browser you are using and through which certain information flows to the place that sets the cookie. Data collected with the Tidiochat service will not be used to identify you without your consent. The data is also not merged with personal data about the bearer of the pseudonym used. You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.

For more information, see Tidio's privacy policy: .

Right to object

You can object to the collection and storage of data for the purpose of usage analysis at any time with effect for the future by informing us of your objection: e.g. by e-mail:

The legal basis for the use of analysis tools is Article 6 Paragraph 1 Clause 1 Letter f GDPR.

11. Social Media Links
We link to the social media platforms Facebook, Instagram and YouTube on our website by using the respective symbols. These are hyperlinks through which no transmission of your data takes place. If you click on the link, you will be forwarded directly to our respective social media presence. Your data will only be transmitted to the respective social media service if you are logged into your respective user account. In this case, the respective social media platform may obtain information about the content you have viewed from us.

Responsible for the social media services linked by us are exclusively:

for Facebook and its website, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;

for Instagram and its website, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;

for YouTube and its website, YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;

For more information about the purpose and scope of the data collection and about the further processing and use of your data by the respective social media service, please refer to the data protection guidelines of the respective platform.

12. Facebook Connect

We use the "Facebook Connect" service from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook") on our website. We offer you the option of registering on our website with Facebook Connect if you have a Facebook profile and give us your express consent to exchange data with Facebook. In this case, no additional registration is required. To register, you will be redirected to the Facebook page, where you can register with your usage data. As a result, your browser establishes a direct connection to the Facebook servers, whereby your Facebook profile and our service are linked. Through this link, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. Depending on your data protection settings on Facebook, we automatically receive the following information from Facebook Inc. through the link (name, e-mail address, date of birth, address, Facebook name, user ID, age, gender and, if applicable, profile picture , the friends list and the likes). From this data, we only use your name, your e-mail address, your date of birth and your address to create a user account if you have released it on Facebook. This information is required for the conclusion of the contract in order to be able to identify you.

For more information on Facebook Connect and privacy settings, please see the privacy policy and terms of use of Facebook Inc.

If you do not want Facebook to link the data obtained via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also exclude the Facebook Connect plugin with add-ons for your browser.

The consent given to exchange data via Facebook Connect can be revoked at any time for the future by sending an email to:

13.Google Tag Manager

We use the Google Tag Manager service from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94.043 USA on our website. Google Tag Manager allows marketers to manage website tags from one interface. A tag is a marking or marking of a database. However, the Tag Manager itself, which uses the tags, works without cookies and does not record any personal data. The tags set up via the Google Tag Manager only ensure the collection of data that is passed on to the target system. Because the data is only passed on, the system does not collect or save the determined data itself. The Tag Manager thus only triggers other tags, which in turn may collect data. Corresponding explanations for these respective third-party providers can be found in this data protection declaration. However, the Google Tag Manager does not use this data. If you have set or otherwise deactivated cookies, this will be taken into account for all tracking tags used with the Google Tag Manager, so the tool will not change your cookie settings.

Google may ask your permission to share some product data (e.g. your account information) with other Google products to enable certain features, e.g. B. to make it easier to add new conversion tracking tags for AdWords. In addition, Google's developers periodically review product usage information to further improve the product. However, Google will not pass on any data of this type to other Google products without your consent.

For more information, see the Google Acceptable Use Policy and Google Privacy Notice for this product.

14. Newsletters

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. Providing further, separately marked data is voluntary and is used to be able to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Article 6 Paragraph 1 Clause 1 Letter a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail to ( or by sending a message to the contact details given in the imprint.
We use the Klaviyo service from Klaviyo Inc, Boston, USA, to send our newsletter. Your data stored when registering for the newsletter (e-mail address, name if applicable, IP address, date and time of your registration) will be transferred to a Klaviyo Inc. server in the USA and stored there in compliance with the "US Privacy Shield". For more information on privacy at Klaviyo, visit: .

(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletter, which links you click on in them and deduce your personal interests from this.
Right to object

You can object to this tracking at any time by clicking on the separate link provided in every e-mail or by informing us via another contact route, e.g. by e-mail: The information is stored as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed to you in full and you may not be able to use all functions. If you display the images manually, the tracking mentioned above will take place.

14. Use of Social Media Plugins
We use so-called social plugins (“plugins”) from Instagram on our website, which are operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to Instagram. The plug-in in the form of images is captioned “Follow us on Instagram”. We give you the opportunity to communicate directly with Instagram via the button. Instagram only receives the information that you have accessed our website if you click on the marked field and thereby activate it. In addition, the data mentioned under § 1 of this declaration will be transmitted. By activating the plug-in, your personal data is transmitted to Instagram and stored there (in the USA for US providers).
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the data collected by Instagram.

If you interact with the plugin, in particular by clicking on the plugin image, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is sent directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately assign your visit to our website to your Instagram account. The information is also published on your Instagram account and displayed to your contacts there. We recommend that you log out regularly after using a social network, but especially before activating the button, as this way you can avoid being assigned to your profile on Instagram.

Instagram stores the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Instagram to exercise this right.

For more information on the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's data protection information:
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely block the Instagram plugins from loading with add-ons for your browser, e.g. B. with the script blocker "NoScript" (
The legal basis for the use of the plug-ins is Article 6 Paragraph 1 Clause 1 Letter f GDPR.

15. Remarketing/ Retargeting

(1) We use “Custom Audiences” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our websites for retargeting or remarketing purposes. This service uses so-called tracking or remarketing pixels. These are pixel image files that enable log file analysis. By using the pixel, the service provider can see when and how many users called up the pixel, or whether and when an email was opened or a website was visited.

(2) With the help of this service, users of the website can be shown interest-based advertisements (“Facebook ads”) when visiting the social network Facebook or other websites that also use the process. In doing so, we are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. When you visit our website, a direct connection to the Facebook servers is established via the pixel. This enables Facebook to identify you using the browser ID, since this can be linked to your user account. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and are therefore informing you according to our state of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have visited the corresponding website of ours accessed our website or clicked on one of our advertisements. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifiers.

(3) The “Facebook Custom Audiences” function can be deactivated for logged-in users at

(4) The legal basis for the processing of your data is Art. 6 (1) sentence 1 lit. f GDPR. Further information on data processing by Facebook can be found at
Right to object
If you do not wish to be shown advertising generated by the respective targeting service, you can object to the use of retargeting technology on our websites by sending us a message to

16. Klarna

In order to enable you to pay via Klarna, your personal data (contact and delivery data) can be transmitted to Klarna. This is necessary so that Klarna can check your eligibility to use the payment method. Personal data transmitted to Klarna will be processed in accordance with Klarna's privacy policy .

17. Data Security

We have taken a variety of security measures to protect your personal information. Our servers and databases are protected by physical and technical measures, among other things.

When collecting and transmitting data via our website, we use standardized SSL encryption technology. Personal data is transmitted as part of the ordering process via SSL encryption, recognizable by the lock symbol in the browser and the addition "https://" in the address bar.

With encrypted communication, your payment data that you transmit to us cannot be read by third parties. When communicating by email, 100% data security cannot be guaranteed.

19. Changes to this Privacy Policy

We can change this data protection declaration at any time. Any changes to this Privacy Policy will be posted on this website and will automatically take effect 30 days after posting. We will inform you by e-mail about significant changes to this data protection declaration.