1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Thomas Kreidel-Wolf, Am Renngraben 9b, 65549 Limburg, Deutschland, Tel.: 017640372927, E-Mail: info@mesopu.com. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

​

2) Data collection when visiting our website

2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string ‘https://’ and the lock symbol in your browser line.

​

3) Hosting & content delivery network

3.1 Amazon Web Services

We use the system of the following provider to host our website and display the page content: Amazon Web Services, Inc, 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider's servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties. 

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.2 Wix

We use the system of the following provider to host our website and display the page content: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Data is also transferred to: Wix Inc, 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

All data collected on our website is processed on the provider's servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

When data is transferred to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.3 Google Cloud CDN

We use a content delivery network from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Data may also be transferred to Google LLC, USA

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

​

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called ‘session cookies’), while others remain on your device for longer and enable page settings to be saved (so-called ‘persistent cookies’). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

​

5) Making contact

5.1 Wix Chat

This website uses the live chat system of the following provider: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 para. 1 lit. b GDPR, because it is necessary for the initiation or execution of the contract, or in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in the effective support of our site visitors.
Subject to conflicting statutory retention periods, your data transmitted in this way will be deleted once the matter in question has been conclusively clarified.

In addition, further information may be collected and analysed using cookies for the purpose of creating pseudonymised user profiles; however, this information is not used to identify you personally and is not merged with other data records. If this information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by appropriate browser settings. In this case, however, the functionality of our website may be restricted.
You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future.

Data is also transferred to: Wix Inc, 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

If data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

5.2 WhatsApp Business
You have the option to contact us via the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (e.g., an order you have placed), we will store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Article 6(1)(b) GDPR, to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (such as order number, customer number, address, or email address) to associate your inquiry with a specific transaction.

If you use our WhatsApp contact for general inquiries (e.g., regarding our range of services, availability, or our website), we will store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in efficiently and promptly providing the requested information.

Your data will only be used to respond to your inquiry via WhatsApp. There will be no transfer of data to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers the stored phone numbers to a server of its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device in which only the WhatsApp contact details of users who have also contacted us via WhatsApp are stored in the address book.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts by accepting WhatsApp's terms of use when first using the app on their device, in accordance with Article 6(1)(a) GDPR. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For details regarding the purpose and scope of data collection, as well as the further processing and use of data by WhatsApp and your rights and privacy settings options, please refer to WhatsApp’s privacy policy:
https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

As part of the aforementioned processing activities, data transfers to Meta Platforms Inc. servers in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

5.3 Contacting Us
When contacting us (e.g., via a contact form or email), personal data will be processed exclusively for the purpose of handling and responding to your inquiry, and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract, an additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been conclusively clarified, provided that no statutory retention obligations conflict with this.

​

6) Data Processing When Creating a Customer Account

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed to the necessary extent when you provide it to us while creating a customer account. The data required for account creation can be found in the input fields of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the responsible party at the address mentioned above. After deleting your customer account, your data will be erased, provided that all related contracts have been fully executed, no statutory retention periods prevent deletion, and there is no legitimate interest on our part in continued storage.

​

7) Use of Customer Data for Direct Marketing

7.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for receiving the newsletter is your email address. Providing additional data is voluntary and will be used to personalize the communication.

We use the so-called double opt-in procedure to ensure that you receive newsletters only after explicitly confirming your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you grant us consent to use your personal data in accordance with Article 6(1)(a) GDPR. We store the IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, to track any potential misuse of your email address in the future. The data collected during newsletter registration is used strictly for this purpose.

You can unsubscribe from the newsletter at any time using the unsubscribe link provided in the newsletter or by sending a message to the contact details mentioned above. Upon unsubscribing, your email address will be immediately removed from our mailing list unless you have explicitly consented to further use of your data, or we reserve the right to use it beyond this scope as permitted by law, which we inform you about in this privacy notice.

7.2 Ascend by Wix
Our email newsletters are sent via the following provider:
Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Data is also transferred to:
Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data provided during newsletter registration with this provider in accordance with Article 6(1)(f) GDPR, allowing them to handle the newsletter distribution on our behalf.

With your explicit consent under Article 6(1)(a) GDPR, the provider may conduct a statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails. These tools measure open rates and specific interactions with newsletter content. In this process, device-related information (e.g., time of access, IP address, browser type, and operating system) is collected and analyzed but not merged with other datasets.

You can revoke your consent to newsletter tracking at any time with future effect.

We have signed a data processing agreement with the provider, ensuring that visitor data is protected and not shared with third parties.

When transferring data to the provider’s location, an adequate level of data protection is ensured by a European Commission adequacy decision.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision by the European Commission.

7.3 Cart Reminders via Email
If you abandon your shopping cart before completing your order, you have the option to receive a one-time reminder via email about the contents of your virtual cart.

The only mandatory information required for sending this reminder is your email address. Providing additional data is voluntary and may be used to personalize the communication.

We use the double opt-in procedure to ensure that you receive a notification only after explicitly confirming your consent by clicking a verification link sent to your provided email address.

By activating the confirmation link, you grant us consent to use your personal data in accordance with Article 6(1)(a) GDPR for sending a cart reminder. We store the IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, to track any potential misuse of your email address in the future. The data collected for this email notification service is used strictly for this purpose.

You can unsubscribe from cart reminders at any time by sending a message to the contact details mentioned above. Once you unsubscribe, your email address will be immediately deleted from our cart reminder list, unless you have explicitly consented to further use of your data, or we reserve the right to further use your data as permitted by law, which we inform you about in this privacy notice.

​​

8) Data Processing for Order Processing

8.1 Data Transfer for Contract Execution
To the extent necessary for contract execution, delivery, and payment purposes, the personal data we collect will be transferred to the designated transport company and the designated financial institution in accordance with Article 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or digital products under a relevant contract, we will process the contact details you provided during your order (name, address, email) to inform you about upcoming updates within the legally required timeframe. This is done in accordance with Article 6(1)(c) GDPR through a suitable communication method (e.g., postal mail or email). Your contact details will be used strictly for this purpose and only to the extent necessary for the respective update notification.

To process your order, we also work with the following service providers, who partially or fully support us in fulfilling the contract. The following personal data is transferred to these service providers in accordance with the details provided below.

8.2 Use of Payment Service Providers
Apple Pay
If you choose the payment method "Apple Pay", provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the Apple Pay function of your iOS, watchOS, or macOS device by charging a payment card stored in Apple Pay.

Apple Pay integrates security features in both hardware and software to protect your transactions. To authorize a payment, you must enter a previously set code and verify the transaction using Face ID or Touch ID.

For payment processing, your payment-related details and order information are encrypted and transmitted to Apple. Apple then encrypts the data again with a developer-specific key before forwarding it to the payment service provider of the stored payment card. Only the website where the purchase was made can access this payment data.

Once the payment is completed, Apple sends a device account number and a transaction-specific, dynamic security code to the originating website for confirmation.

If personal data is processed during these transfers, it is done exclusively for payment processing in accordance with Article 6(1)(b) GDPR.

Apple stores anonymized transaction data (approximate purchase amount, date, and time, success of the transaction), ensuring no personal identification is possible. These anonymized data are used to improve Apple Pay and other Apple services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase via Safari on a Mac, a secure encrypted connection is established between the Mac and the authorization device via Apple's servers. Apple does not store or process this data in an identifiable format.

To disable Apple Pay on Mac, go to "Wallet & Apple Pay" in your iPhone settings and deactivate "Allow Payments on Mac".

For more details on Apple Pay’s privacy policy, visit:
Apple Pay Privacy Policy

giropay
This website offers online payment methods provided by:

paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany

If you select a prepaid payment method (e.g., credit card), the payment data you provide during checkout (name, address, bank details, currency, transaction number) and order details are shared with giropay for payment processing in accordance with Article 6(1)(b) GDPR. The data transfer is strictly for payment processing and only to the extent necessary.

Google Pay
If you choose "Google Pay" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed via the Google Pay app on your NFC-enabled Android device (Android 4.4 "KitKat" or later). Payments are charged to a stored payment card or linked payment system (e.g., PayPal).

For transactions over €25, Google Pay requires device verification (e.g., fingerprint, password, facial recognition).

For payment processing, your provided order and payment data are shared with Google. Google then forwards your Google Pay payment details as a one-time transaction number to the merchant’s website. This number does not contain actual payment details but serves as a unique numeric token for verification.

Google only acts as an intermediary for payment transactions. The actual transaction occurs between you and the merchant's website through your stored payment method in Google Pay.

If personal data is processed in these transactions, it is done exclusively for payment processing in accordance with Article 6(1)(b) GDPR.

Google collects transaction-specific data, including date, time, amount, merchant location, merchant description, product details, and associated offers. This is done under Article 6(1)(f) GDPR, based on Google's legitimate interest in maintaining service functionality and fraud prevention.

Google's privacy policy for Google Pay:
Google Pay Privacy Policy

Klarna
This website offers online payment options from:

Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you choose a prepaid payment method (e.g., credit card), your payment details (name, address, bank/card info, currency, transaction number) are shared with Klarna for payment processing in accordance with Article 6(1)(b) GDPR.

If you select a postpaid method (e.g., invoice, installment purchase), Klarna may perform a credit check. You will be required to provide personal details (name, address, date of birth, phone number, email, alternative payment method details).

To assess your creditworthiness, Klarna processes this data under Article 6(1)(f) GDPR, which allows for a credit check based on their legitimate interest in mitigating financial risk.

For Klarna's credit rating agencies, visit:
Klarna Credit Agencies

PayPal
This website offers payment services from:

PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

For prepaid payment methods, PayPal processes your order and payment details under Article 6(1)(b) GDPR.

If you select PayPal's postpaid options, PayPal may perform a credit check, using additional personal information (name, address, phone, birth date, alternative payment methods). This processing is based on Article 6(1)(f) GDPR.

PayPal may use score values (probability calculations based on statistical models). These calculations may include address data as one of the factors.

Wix Payments
This website offers payment services from:

Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

For prepaid payments, Wix Payments processes your payment and order details under Article 6(1)(b) GDPR.

Some data may be transferred to Wix Inc., San Francisco, California, USA. Wix relies on Standard Contractual Clauses (SCCs) to ensure EU data protection compliance.