Last updated: 6 February 2026
This Privacy Policy explains how Maramio GmbH (“Maramio”, “we”, “us”) processes personal data in connection with the website https://maramio.com and the services provided through it (the “Services”).
It also explains your rights under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Important Role Clarification (Controller Vs Processor)
Depending on the context, Maramio acts either as a data controller or as a data processor:
- As a data controller, Maramio processes personal data relating to:
- visitors to the website,
- marketing and sales contacts,
- account holders and Buyers placing orders.
- As a data processor, Maramio processes personal data on behalf of Buyers in connection with corporate gifting services, including recipient data (e.g. names, delivery addresses, personalization details).
Where Maramio acts as a data processor, personal data is processed solely on the documented instructions of the Buyer, in accordance with the Data Processing Addendum (DPA) or contractual arrangement if either is applicable.
2. Definitions
- Visitor – an individual visiting the website
- Buyer – an individual or organisation placing an order
- Recipient – an individual receiving a gift
- Users – collectively Visitors, Buyers, and Recipients
3. Personal Data We Process
3.1 Website Visitors
We process the following data when you visit our website:
- IP address
- browser and device type
- operating system
- referring URLs
- timestamps and usage data
- cookie identifiers
This data is collected through cookies, analytics tools, and server logs.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR), consent where required (cookies).
3.2 Buyers and Account Users (Controller role)
We may process:
- name
- email address
- phone number
- company name
- billing and payment details
- account credentials
- communication records
Purpose:
- account management
- order processing
- billing
- customer support
- legal and accounting obligations
Legal basis: contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), legitimate interest (Art. 6(1)(f)).
3.3 Gift Recipients (Processor role)
On behalf of Buyers, we may process:
- name
- shipping address
- contact details (if provided)
- personalization text or images
- order and delivery data
Maramio does not determine the purposes of this processing.
Legal basis: processing on behalf of the Buyer as Controller.
3.4 Technical and Usage Data
In connection with the Services, we process technical data such as:
- IP addresses
- device and browser type
- system logs
- timestamps and error logs
This data is necessary to operate, secure, and maintain the Services.
4. Cookies And Tracking Technologies
We use essential, functional, analytical, and (where applicable) marketing cookies.
Visitors can manage cookie preferences via browser settings or cookie consent tools.
5. Purposes Of Processing
We process personal data to:
- operate and provide the Services
- manage orders and deliveries
- communicate with Users
- improve and secure our platform
- comply with legal obligations
- prevent fraud and abuse
6. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, including:
- duration of service usage
- operational requirements (e.g. backups)
- statutory retention obligations
- legal claims and dispute resolution
Where Maramio acts as a processor, retention is governed by Buyer instructions and applicable law.
7. Data Sharing And Sub-Processors
We engage third-party service providers and fulfillment partners (sub-processors), including:
- hosting and infrastructure providers
- e-commerce and CRM platforms
- logistics, personalization, and shipping partners
- analytics and communication providers
Sub-processors process personal data only on our instructions and are contractually bound to GDPR-compliant obligations.
Some fulfillment partners may vary dynamically depending on order location and product type.
We use third-party service providers to support the operation, security, and analysis of our website, including providers of hosting, content delivery, analytics, and cookie management services. These providers may process technical and usage data of website visitors on our behalf and solely for the purposes described in this Privacy Policy.
8. International Data Transfers
Where personal data is transferred outside the EU/EEA, such transfers are carried out in accordance with applicable data protection laws, including through:
- EU Standard Contractual Clauses
- adequacy decisions
- other appropriate safeguards
9. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure, in accordance with applicable data protection laws.
10. Your Rights
Under GDPR, you have the right to:
- access your data (Art. 15)
- rectify inaccurate data (Art. 16)
- request deletion (Art. 17)
- restrict processing (Art. 18)
- data portability (Art. 20)
- object to processing (Art. 21)
- lodge a complaint with a supervisory authority
Requests can be sent to hello@maramio.com.
If Maramio acts as a processor, requests may be forwarded to the relevant Buyer.
11. Children
The Services are not intended for individuals under 18.
We do not knowingly process children’s personal data.
12. Links To Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for their privacy practices.
13. Changes To This Privacy Policy
We may update this Privacy Policy from time to time.
Material changes will be published on the website.
14. Contact Details
Maramio GmbH
Kochhannstraße 6
10249 Berlin
Germany