Skip to content
Free shipping in Germany from €55.00 Free pickup in store Shipping within 1-3 working days after receipt of payment.
mush room Online shop To the store Cart

Privacy policy

Translation of the German version. Only the German version is legally binding: https://shop.mush-room.net/datenschutz

Last updated: 23 October 2026

Controller

THOMARA Edelpilze & Feinkost, owner Thomas Markus Rave, Bergstraße 64, 69120 Heidelberg, Germany, telephone 06221 8932400, e-mail info@thomara.de.

General

The online shop does not embed any advertising networks, analytics services or content from third-party servers. Fonts and images are served from our own server. No customer account is needed to place an order. We process personal data only to the extent described here.

Hosting and page access

The online shop runs on a server of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, which is operated by us. We have concluded a data processing agreement with netcup pursuant to Art. 28 GDPR.

When you access a page, your browser transmits technically necessary data, including the IP address. The online shop does not keep access logs with IP addresses. To protect against mass login attempts and form submissions, the server keeps the IP address briefly in memory, for one hour at most, and does not store it permanently. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in secure operation.

Cookies

The online shop sets a single cookie for visitors: ‘mr_korb’. It contains a random identifier so that the shopping basket and the details entered at checkout are kept as you click through. It is technically necessary (§ 25 Abs. 2 Nr. 2 TDDDG) and expires after 30 days. A further cookie exists only for our staff in the administration area.

Orders

For an order, we process your name, address, e-mail address, telephone number if you provide it, the goods ordered, the payment method and your comments. The legal basis is Art. 6(1)(b) GDPR (contract). We keep invoices and accounting records for as long as commercial and tax law requires (§ 147 AO, § 257 HGB). After that, we delete the data.

For shipping, we pass your name and delivery address on to the carrier that delivers the parcel. We do not pass on your e-mail address or telephone number.

Payment services

If you pay with PayPal, we redirect you to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you pay by card, Apple Pay, Google Pay or Klarna, we redirect you to Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. For this we transmit the order number, the amount and your e-mail address. Your payment details remain with the respective service only, we do not see them. The privacy notices of PayPal or Stripe also apply. The legal basis is Art. 6(1)(b) GDPR.

For prepayment and cash payment, no data is processed by payment services.

E-mails

We send order confirmations and payment and shipping notifications via the mailbox of our e-mail provider Neue Medien Münnich GmbH (ALL-INKL.COM). We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR.

Newsletter

Anyone who subscribes to the newsletter first receives an e-mail with a confirmation link. Only after confirmation do we send news from the shop and the online shop. For this purpose we store the e-mail address and the time of subscription and of confirmation. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every e-mail.

Withdrawal via the withdrawal function

If you withdraw from a contract via the withdrawal function, we store your name, details of the contract, your e-mail address and the date and time of receipt, and send an acknowledgement of receipt. The legal basis is Art. 6(1)(c) GDPR (§ 356a BGB).

Contact

If you call or write to us, we process your details in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR where it concerns an order, otherwise Art. 6(1)(f) GDPR.

Your rights

  • Access under Art. 15 GDPR
  • Rectification under Art. 16 GDPR
  • Erasure under Art. 17 GDPR
  • Restriction of processing under Art. 18 GDPR
  • Data portability under Art. 20 GDPR
  • Objection to processing under Art. 21 GDPR

An informal message to the address given above is sufficient. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.