LAMA Leather Goods
Daniela Roa Lagos (Einzelunternehmen)
Reichenberger Str. 115a, 10999 Berlin, Germany
Email: hola@lamaleathergoods.com

1. Introduction

We are pleased that you are visiting our website. In this Privacy Policy we explain how we collect, use and protect your personal data when you interact with our website and services. Personal data means any information that can be used to identify you directly or indirectly.

We process all personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. You can use our website without providing personal data, but certain services (such as placing an order or signing up for our newsletter) require us to process your data.

2. Data Controller

The controller responsible for data processing on this website is:

Daniela Roa Lagos
LAMA Leather Goods
Reichenberger Str. 115a
10999 Berlin, Germany
Email: hola@lamaleathergoods.com

Our website is secured via SSL/TLS encryption. You can recognise this by the padlock symbol and “https://” in your browser address bar.

3. Data We Collect and Why

3.1 When You Visit Our Website

When you access our website, your browser automatically transmits certain technical data to our server, which is temporarily stored in a log file:

• IP address of the requesting device
• Date and time of access
• Name and URL of the page accessed
• Referring website (referrer URL)
• Browser type, operating system, and internet service provider

This data is processed solely to ensure a stable and secure website connection and for internal administrative purposes. We do not use it to draw conclusions about your identity. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

3.2 When You Contact Us

If you contact us via our contact form or by email, we collect your email address and any other information you choose to provide. This data is used solely to respond to your enquiry and is deleted once the matter is resolved. The legal basis is Art. 6(1)(f) GDPR.

3.3 When You Place an Order

To process your order, we collect the following data:

• Name and salutation
• Delivery and billing address
• Email address
• Telephone number (optional)
• Payment information (processed via your chosen payment provider)

This data is used to:

• Identify you as our customer and process your order
• Communicate with you about your order
• Issue invoices and handle payments
• Process any warranty or liability claims

The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Order data is retained for the duration required by statutory commercial and tax retention obligations (generally 6–10 years under HGB and AO), after which it is deleted.

3.4 When You Book a Workshop

If you book a workshop directly through our website, we collect the same personal data as for a product order (see Section 3.3). This data is used to confirm your booking, communicate workshop details, manage attendance, and process payment. The legal basis is Art. 6(1)(b) GDPR.

Workshop bookings made via third-party platforms (such as The Makery or Konfetti) are subject to those platforms’ own privacy policies.

3.5 Newsletter

You can subscribe to our email newsletter to receive updates on new products and offers. We use a double opt-in process: after you submit your email address, you will receive a confirmation email with a link you must click to activate your subscription. Only after clicking that link will you be added to our newsletter list.

The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR. We also store your IP address and the date and time of registration as evidence of consent.

We use Omnisend to manage and send our newsletter. Your email address (and optionally your name) is shared with Omnisend, Inc. for this purpose. We have a Data Processing Agreement in place with Omnisend. You can review their privacy policy at: https://www.omnisend.com/privacy/

You can unsubscribe at any time via the unsubscribe link in any newsletter email, or by contacting us at hola@lamaleathergoods.com. Upon unsubscribing, your email address will be removed from our mailing list.

4. Sharing Your Data

We do not sell your personal data. We share it only where necessary and in the following circumstances:

4.1 Shipping Partners

To fulfil your order, we share your name and delivery address with our shipping partners (e.g. DHL, DPD, GLS, Hermes, UPS). Where you have consented during checkout, we may also share your email address or telephone number with the shipping provider to allow them to coordinate delivery details with you. The legal basis is Art. 6(1)(b) GDPR for address data, and Art. 6(1)(a) for contact details shared with your consent.

4.2 Payment Providers

WooPayments (Stripe): Online payments on our website are processed through WooPayments, which is powered by Stripe Technology Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. When you complete a purchase, your payment data (such as card details) is transmitted directly to Stripe and is never stored on our servers. Stripe processes your data in accordance with applicable data protection law, including the GDPR. Further information is available in Stripe’s privacy policy: https://stripe.com/en-de/privacy

4.3 Other Disclosures

We may also share personal data where required by law, or where necessary to assert, exercise, or defend legal claims (Art. 6(1)(c) and (f) GDPR).

5. Instagram Plugin

Our website includes a link to our Instagram profile (operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). We use a simple link rather than an embedded plugin, meaning no data is automatically transmitted to Instagram when you visit our website. Data is only shared with Instagram if you actively click the link and visit our profile. At that point, Instagram’s own privacy policy applies: https://privacycenter.instagram.com/policy

6. Cookies

Our website uses cookies — small text files stored on your device by your browser. We use:

• Session cookies: temporary cookies that are deleted when you close your browser, used to maintain your shopping cart and session.
• Functional cookies: stored for a defined period to remember your preferences and settings on return visits.

The legal basis for necessary cookies is Art. 6(1)(f) GDPR (legitimate interest in operating a functional website). You can configure your browser to block or delete cookies, but doing so may affect some website functionality.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

7.1  Right of access (Art. 15 GDPR):

You may request confirmation of whether we process personal data about you, and if so, a copy of that data and information about how it is used.

7.2  Right to rectification (Art. 16 GDPR):

You may request the correction of inaccurate or incomplete data.

7.3  Right to erasure (Art. 17 GDPR):

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations.

7.4  Right to restriction of processing (Art. 18 GDPR):

You may request that we restrict how we use your data in certain circumstances.

7.5  Right to data portability (Art. 20 GDPR):

You may request a copy of the data you have provided to us in a structured, commonly used, machine-readable format.

7.6  Right to withdraw consent (Art. 7(3) GDPR):

Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7.7  Right to object (Art. 21 GDPR):

Where we process your data on the basis of legitimate interests, you may object at any time. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.8  Right to lodge a complaint (Art. 77 GDPR):

You have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your habitual residence, place of work, or the location of the alleged infringement. The supervisory authority in Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (https://www.datenschutz-berlin.de).

To exercise any of these rights, please contact us at hola@lamaleathergoods.com.

8. Data Security

We use SSL/TLS encryption for all data transmitted via our website. We also implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access. These measures are reviewed and updated regularly in line with technological developments.

9. Links to Third-Party Websites

Our website may contain links to external websites. We have no control over the content or data practices of those sites and accept no responsibility for them. Please review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our website. We encourage you to review it periodically.

Last updated: April 2026