Datenschutz / Privacy

Data controller

Womera GmbH
Traminerweg 16
89075 Ulm, Germany
Managing directors: Mahsa Barzegar, Ryan Barzegar

Website delivery

This website is served through Lovable. Visiting it transmits technical connection information, including your IP address, to the hosting and delivery services involved so pages, photos and videos can be displayed. Fonts are loaded from this website, without connecting to Google Fonts.

Technical delivery serves our legitimate interest in operating a functioning website (GDPR Article 6(1)(f)). The specific provider list, retention periods and any international-transfer information must be completed and reviewed against the hosting agreements before this notice is published.

Cookies and browser storage

We use no analytics or advertising trackers. Your privacy choice is saved as womera-privacy-choice-v1 in local browser storage for up to 180 days. This is necessary to respect your choice (TDDDG Section 25(2)).

Only with your permission do we save womera-luck-offer-v3 in session storage (dismissed offer) and womera-discount-tab-dismissed in local storage (hidden discount tab). The session preference ends with the browser session. The tab preference lasts until withdrawal, consent expiry or clearing browser data. The legal basis is TDDDG Section 25(1) and, where personal data is involved, GDPR Article 6(1)(a).

You may withdraw consent at any time for future processing. This does not affect the lawfulness of earlier processing.

Back navigation

Session storage tsr-scroll-restoration-v1_3 remembers page positions for back navigation. It contains no advertising identifier and ends with the browser session; it supports requested navigation (TDDDG Section 25(2)).

Skin Club: test email signup

If you use the test signup, we process your name, email address and optional phone number to send the requested confirmation and then a non-redeemable test code. No real Amazon discount or skincare PDF is currently available. You are not signing up for a newsletter, and your phone is not used for calls or SMS. The legal basis is your consent (GDPR Article 6(1)(a)).

Signup data is stored in our independently owned Supabase project. Resend sends the emails, with Lovable providing the technical connection. We record consent wording and version, language, signup, confirmation and send timestamps. Confirmation links are valid for 48 hours; only a hash of the token is stored. Opening a link alone does not confirm signup. Email open and click tracking are disabled.

For withdrawal, access or deletion, email hello@womera.de. This does not affect the lawfulness of earlier processing. Specific retention periods, processor agreements and any international transfers for these providers must be completed and reviewed before public launch. This test setup is not a cleared public campaign.

Purchases and contact through Amazon

Purchases take place exclusively on Amazon.de, not on this website. Opening an Amazon link takes you to Amazon, where Amazon’s privacy notice applies. Order and guarantee enquiries are handled through Amazon messaging, for contract administration (GDPR Article 6(1)(b)) and applicable legal retention duties (Article 6(1)(c)).

Your rights

Subject to the legal conditions, you have rights of access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. You can write to the address above and complain to a data protection authority, including the Baden-Württemberg data protection authority.