0

Privacy policy

This is an English translation provided for convenience. Only the German version is legally binding: German version.

1. Controller

The controller responsible for data processing on this website and in the online shop is:

M&D exclusive cardesign Vertriebs GmbH
Rubbertskath 13
46539 Dinslaken
Germany
E-mail: [email protected] · Phone: +49 2064 1414-848
Represented by the Managing Directors Markus Ledwig and Dawid Sychala
Commercial register: Amtsgericht (Local Court) Duisburg, HRB 35691

PRIOR DESIGN® is a trademark of PRIOR Design GmbH. The shop is operated by us as general distributor; PRIOR Design GmbH is not the controller for the processing on this website and in the shop. Which data we pass on to PRIOR Design GmbH is set out in section 8.

2. Overview

We process personal data only insofar as this is necessary for operating the website, handling enquiries and orders, and fulfilling legal obligations. The legal bases are in particular Art. 6(1)(b) GDPR (contract and pre-contractual measures), point (c) (legal obligation), point (f) (legitimate interest) and – insofar as we ask for your consent – Art. 6(1)(a) GDPR.

3. Hosting and server log files

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf; the servers are located in Germany. A data processing agreement (Art. 28 GDPR) is in place with ALL-INKL. When the website is accessed, technically necessary data is processed automatically: IP address, date and time, page accessed, referrer, browser and operating system. This serves the delivery and security of the website (Art. 6(1)(f) GDPR). Log files are deleted after 7 days unless they are needed to investigate a security incident.

The connection is encrypted via TLS/SSL.

For the domain and the secure delivery of the website, we use the Cloudflare service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare forwards requests to the website and protects it against attacks; in doing so, technical connection data such as the IP address is processed (Art. 6(1)(f) GDPR – legitimate interest in a secure and fast website). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework.

4. Cookies and local storage

We use technically necessary cookies without consent, e.g. for the cart, the ordering process, logging in to the customer account and to store your cookie choice (cookie “prior_consent”, 12 months) (§ 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), Art. 6(1)(b) and (f) GDPR).

We only set statistics cookies (Google Analytics, see section 5) if you select “Allow statistics” in the cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page. We do not use marketing cookies.

On product pages, in the cart and in the ordering process, we embed scripts from our payment service providers (PayPal and Stripe for WooPayments with credit card, Apple Pay, Google Pay and Klarna) so that the payment methods can be displayed and payments processed securely. In doing so, technical connection data such as IP address, browser and device is transmitted to these providers; to prevent fraud, they set technically necessary cookies (e.g. “__stripe_mid”, “__stripe_sid”) (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR). For providers and data transfers, see section 10.

Fonts are embedded locally on our server; no connection to Google or other font providers is established when a page is accessed.

5. Web analytics with Google Analytics

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics helps us to understand how visitors use our site (e.g. which pages are accessed, how visitors arrive, whether a purchase or an enquiry was completed) so that we can improve our offering.

For this purpose, cookies (e.g. “_ga”, “_ga_…”) are set and information about your use is processed: truncated IP address or approximate location (country, region), device, browser, pages accessed, length of visit, source of the visit and, for orders, order number, order value and items ordered. Google Analytics 4 does not store complete IP addresses. We do not transmit the name or address from your order to Google. We have not activated the functions for advertising and personalised ads (Google Signals, advertising cookies).

The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Google Analytics is not loaded without consent. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer; the analytics cookies will then be deleted.

A data processing agreement is in place with Google. It cannot be ruled out that data is transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework; EU standard contractual clauses apply in addition. The data is deleted automatically after 14 months. Further information: Google privacy policy.

6. Enquiries, contact form and kit enquiries

If you contact us via the contact or enquiry form, by e-mail or by phone, we process your details (name, e-mail, phone if applicable, vehicle, selected parts, message) in order to answer your enquiry and prepare a quote for you (Art. 6(1)(b) GDPR, for general enquiries point (f)). Enquiries are stored in our shop system and forwarded to our team by e-mail.

We delete enquiries once they have been dealt with and no contract is concluded, at the latest after 2 years, unless statutory retention obligations apply.

7. Orders and customer account

To process an order, we process your master and contract data (name, address, e-mail, phone, order contents, payment and shipping method) pursuant to Art. 6(1)(b) GDPR. If you create a customer account, we store this data for future orders until you delete the account.

Due to commercial and tax law requirements, we retain order and invoice data for up to 10 years (Art. 6(1)(c) GDPR in conjunction with § 257 HGB (German Commercial Code), § 147 AO (German Fiscal Code)).

8. Disclosure to PRIOR Design GmbH (manufacturer)

The parts ordered are manufactured by PRIOR Design GmbH, Carl-Friedrich-Gauss-Str. 64, 47475 Kamp-Lintfort, Germany. Insofar as this is necessary for processing your enquiry or order, we pass on your details to PRIOR Design GmbH – for example name, vehicle, vehicle version, selected parts and your questions about fitment. This serves to clarify technical questions and for production (Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR – legitimate interest in a technically correct answer). PRIOR Design GmbH processes the data only for these purposes and deletes it as soon as it is no longer required for them and no statutory retention obligations apply.

9. Shipping

For delivery, we pass on your name, delivery address and – for arranging the delivery date and for delivery notification – your phone number and e-mail address to the commissioned freight forwarding company. We work with Kuehne + Nagel (freight forwarder). The legal basis is Art. 6(1)(b) GDPR. For deliveries to countries outside the EU (e.g. Switzerland, United Kingdom), the data is transmitted to the freight forwarder’s companies there and to the customs authorities insofar as this is necessary for delivery (Art. 49(1)(b) GDPR).

10. Payment service providers

Depending on the payment method selected, we pass on the data required for payment processing (name, address, e-mail, order amount, payment data if applicable) to the respective payment service provider (Art. 6(1)(b) GDPR). The payment service providers process the data partly under their own responsibility and may carry out an identity and credit check.

  • Credit/debit card, Apple Pay, Google Pay, Klarna (WooPayments): WooPayments is provided by Automattic Inc.; payments are processed via Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. For this function, the shop connects to WordPress.com (Automattic). With Klarna, Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, additionally receives your data. With Apple Pay or Google Pay, the privacy notices of Apple or Google respectively apply in addition.
  • Amazon Pay: Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg. If you pay with Amazon Pay, you log in to Amazon; Amazon transmits your name, e-mail and delivery address to us and processes the payment.
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg.
  • Prepayment: The payment is made via your bank and ours; we receive the details from the bank transfer.

A transfer to third countries (e.g. the USA) cannot be ruled out with these providers. It takes place on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses.

11. Withdrawal via the “Withdraw from contract” function

If you withdraw from a contract via our withdrawal function, we process your name, e-mail address, order number and your declaration in order to process the withdrawal and confirm receipt to you (Art. 6(1)(b) and (c) GDPR). The data is retained together with the order data.

12. Order-related e-mails

We send order, payment and shipping confirmations as well as replies to enquiries by e-mail. The e-mail mailboxes of the domain prior-design.de are provided to us by PRIOR Design GmbH. They are hosted by nazwa.pl sp. z o.o., ul. Medweckiego 17, 31-870 Kraków, Poland (servers in the EU); PRIOR Design GmbH has concluded a data processing agreement with nazwa.pl. We only send advertising e-mails with your express consent.

13. Job applications

If you apply to us (e.g. in response to a job advertisement on this website), we process your application documents and contact details as well as any photos or references of your work that you send us, in order to decide on the establishment of an employment relationship (Art. 6(1)(b) GDPR, § 26 BDSG (German Federal Data Protection Act)). The controller is M&D exclusive cardesign Vertriebs GmbH. Please send applications to [email protected]; this mailbox is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, with which a data processing agreement is in place. Your documents are only seen by the persons involved in the selection.

If you are hired, we add the documents to your personnel file. Otherwise, we delete them at the latest six months after the application process has been completed; until then, we retain them in order to be able to defend ourselves against any claims under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz) (Art. 6(1)(f) GDPR). Longer retention, e.g. for later vacancies, only takes place with your consent.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. To do so, please use the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf.

15. Obligation to provide data

For an order or a quote, we require the information marked as mandatory fields. Without this data, we cannot conclude the contract or process your enquiry.

Last updated: October 2026