1. Controller

The controller responsible for processing personal data on this website is:

Valon Bamboo
Owner: Erol Bekan
Bolongarostrasse 143B
65929 Frankfurt am Main
Germany

Email: bekan-frankfurt@gmx.de
Phone: 069 30036992

2. Visiting the website

When you visit the website, the hosting system may process technical data transmitted by your browser, including your IP address, date and time of the request, browser type and version, operating system and referrer URL.

The purpose is to provide, maintain and protect the website. The legal basis is our legitimate interest in operating a secure and functional online shop, Article 6(1)(f) GDPR. Server log data is deleted or anonymised when it is no longer required, unless longer storage is necessary to investigate a security incident or to comply with a legal obligation.

3. Customer accounts and orders

When you create a customer account or place an order, we process the data required for the account, contract, payment, delivery, customer service and statutory accounting duties. This may include your name, billing and delivery address, email address, telephone number if provided, order details and payment status.

The legal bases are Article 6(1)(b) GDPR for contract performance and Article 6(1)(c) GDPR for statutory retention and accounting obligations. We retain records only for as long as necessary for these purposes and for the applicable statutory retention periods.

4. Payment services

Depending on the payment method selected at checkout, the data required to process the payment is transmitted to the payment provider shown at checkout. The shop currently provides PayPal, card payment through the configured payment provider, bank transfer in advance and cash payment on collection. Payment providers process data under their own responsibility and privacy policies.

For PayPal, please see the PayPal Privacy Statement.

5. Delivery and service providers

For delivery, we transmit the data required for fulfilment, such as your name, delivery address and contact details, to the carrier or collection service selected for the order. The shop currently uses DHL and offers collection where available. The legal basis is Article 6(1)(b) GDPR.

6. Contact

If you contact us by email, telephone or through the contact form, we process the information you provide to answer and handle your enquiry. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contract measures, otherwise Article 6(1)(f) GDPR. We delete the enquiry when it is no longer required, unless a legal retention duty applies.

7. Newsletter

If you subscribe to our newsletter, we process your email address and the date, time, IP address and language associated with the subscription. We use this information to send Valon Bamboo news about bamboo furniture, sound bowls, natural living and new handcrafted products.

The legal basis is your consent under Article 6(1)(a) GDPR. New subscriptions require confirmation by email. You may withdraw your consent at any time using the unsubscribe link in a newsletter or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Cookies and optional services

We use technically necessary cookies for functions such as session handling, security, language selection and the shopping cart. The legal basis is Article 6(1)(f) GDPR or, where required, Article 6(1)(b) GDPR.

The website contains modules for cookie consent, Google Analytics and Facebook-related functions. Optional services are used only when activated in the shop configuration and, where legally required, after the required consent has been given. Details of the cookies and optional services available to you are shown in the cookie notice. You may withdraw consent for optional services through the available cookie settings or by contacting us.

9. Recipients and transfers

Recipients may include our hosting provider, payment providers, delivery providers, IT service providers and authorities where we are legally required to provide information. We only provide the data required for the relevant purpose.

If a provider processes data outside the European Economic Area, processing is based on a legally recognised transfer mechanism, such as an adequacy decision or appropriate safeguards. The applicable provider information is available in the provider's privacy policy.

10. Your rights

You have the right to request access, rectification, erasure, restriction of processing and data portability, subject to the statutory requirements. You may object to processing based on legitimate interests. You may withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our registered office is the Hessian Commissioner for Data Protection and Freedom of Information.

11. Automated decisions

We do not use exclusively automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

12. Changes

We may update this Privacy Policy where necessary to reflect legal, technical or organisational changes.

Last updated: 15 August 2026