AKSEL

Privacy Policy

We are pleased about your interest in AKSEL. The protection of your personal data is important to us. Below we inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of personal data when you visit and use our online shop.

1. Controller

The controller within the meaning of the GDPR is:
Alla & Aksel LTD, 20 Dreadnaught Drive, GL1 5RA Gloucester, United Kingdom (Company No. 15798801)
Represented by the Director Alexei Mazurenco
Email: team@akselaroma.com

Representative in the EU (Art. 27 GDPR):
Vladimir Mazurenco, Lister Kirchweg 57A, 30163 Hannover, Germany

2. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw a given consent (Art. 7 (3) GDPR) with effect for the future

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority is in particular the supervisory authority at the seat of our EU representative: The State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover.

3. Hosting

Our website is hosted by an external service provider (Namecheap Inc. and its hosting infrastructure). The personal data collected in this context (in particular IP address, access data) is stored on the host's servers. The legal basis is our legitimate interest in the secure and efficient provision of our online offering (Art. 6 (1) (f) GDPR). We have concluded or will conclude with the host a data processing agreement (DPA) pursuant to Art. 28 GDPR and — insofar as data is transferred to a third country — appropriate safeguards pursuant to Art. 44 ff. GDPR (standard contractual clauses).

4. Server log files

When you access our website, information transmitted by your browser is automatically collected (server log files): page visited, date and time of access, amount of data transferred, browser type and version, operating system, referrer URL and the (possibly shortened) IP address. This data serves the technical provision, security and stability of the website. The legal basis is Art. 6 (1) (f) GDPR. The log files are stored for a limited period and then deleted.

5. Cookies

Our website currently uses only technically necessary cookies that are required to operate the shop (e.g. cart, session, language setting, security). This processing is permitted without consent under § 25 (2) TDDDG; the legal basis is Art. 6 (1) (f) GDPR or (b) GDPR for contract processing. Should cookies or technologies for statistical or marketing purposes be used in the future, we will obtain your consent via a cookie consent banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

6. Order processing in the online shop

When you place an order in our shop, we process the data required to fulfil the contract (name, address, billing and delivery address, email address, possibly telephone number, order and payment data). The processing is carried out to fulfil the purchase contract (Art. 6 (1) (b) GDPR) and to comply with legal retention obligations (Art. 6 (1) (c) GDPR). For delivery, we pass on the necessary data to the commissioned shipping service provider.

7. Payment processing (Stripe)

For payment processing we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Depending on the chosen payment method (including credit card, Apple Pay, Google Pay, Klarna, SEPA direct debit), the data required for payment (e.g. payment method, name, address, amount, transaction and contact data) is transmitted to Stripe and processed there by Stripe as an independent controller. The legal basis for the transfer is the performance of the purchase contract (Art. 6 (1) (b) GDPR) and our legitimate interest in secure and fraud-free payment processing (Art. 6 (1) (f) GDPR).

Stripe transfers personal data to Stripe, Inc. based in the USA as well as to other group companies and sub-processors. Stripe is certified under the EU-U.S. Data Privacy Framework (DPF); for the United States there is therefore an adequacy decision by the EU Commission. In addition, Stripe bases data transfers to third countries on the standard contractual clauses adopted by the EU Commission (Art. 46 (2) (c) GDPR). Further information can be found in Stripe's privacy policy at stripe.com/privacy and on the DPF at stripe.com/legal/data-privacy-framework.

8. Contact form and email contact

If you contact us via the contact form or by email, we process the data you provide (name, email address, message) to handle your enquiry. The legal basis is your consent (Art. 6 (1) (a) GDPR) or Art. 6 (1) (b)/(f) GDPR in the case of a contractual or business context. The data is deleted once your enquiry has been finally processed and no legal retention obligations prevent this.

9. Newsletter

If you subscribe to our newsletter, we use your email address to send it on the basis of your consent (Art. 6 (1) (a) GDPR) using the double opt-in procedure. You can unsubscribe from the newsletter at any time via the unsubscribe link or by sending us a message.

10. Customer account

You can optionally create a customer account. The data provided is processed to manage your account and orders (Art. 6 (1) (b) GDPR). You can have your customer account deleted at any time.

11. Language setting (TranslatePress)

To provide the multilingual website we use the locally installed software TranslatePress. No personal data is transmitted to third parties in this process; only your language selection may be stored technically (cookie/URL).

12. WhatsApp

On our website you may find a link to WhatsApp. If you contact us via WhatsApp, the privacy policy of WhatsApp/Meta applies. Data may be transferred to third countries in this process. Use is voluntary and at your initiative.

13. Storage and retention period

We store personal data only for as long as is necessary to achieve the respective purpose. Statutory retention periods under § 257 HGB and § 147 AO (generally 6 or 10 years) apply to business and accounting records.

14. Data transfer to third countries

A transfer to countries outside the EU/EEA only takes place insofar as this is necessary for the performance of the contract, legally required or covered by your consent.

The controller of this online shop, Alla & Aksel LTD, is based in the United Kingdom. By decision of 19 December 2025, the EU Commission has determined that the United Kingdom provides an adequate level of data protection (valid until 27 December 2031 at the latest); a transfer of data to the United Kingdom is therefore permitted without additional safeguards (Art. 45 GDPR).

Insofar as service providers we use transfer data to other third countries (in particular the USA), this is done on the basis of an adequacy decision (e.g. the EU-U.S. Data Privacy Framework) and/or appropriate safeguards in the form of the EU standard contractual clauses (Art. 46 (2) (c) GDPR).

15. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.

16. Currency of this privacy policy

This privacy policy is updated as required to reflect changes in the law or in processing operations. The current version published on this page applies in each case.