Privacy Policy

This privacy policy explains which personal data we process when you visit this website or contact us, for what purpose, and what rights you have in that regard.

Controller

The controller responsible for data processing on this website is:

Colourful Giants UG (haftungsbeschränkt)
Immermannstraße 24
50931 Cologne, Germany
Represented by: Simon Graw

Phone: 0049 176 7269 0378
E-mail: info@halawuki.com

Hosting

This website is hosted by an external service provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

The provider processes the data generated when you visit this website on our behalf. The legal basis is Art. 6(1)(f) GDPR – our legitimate interest in providing our website securely, reliably and efficiently. A data processing agreement pursuant to Art. 28 GDPR is in place.

Server log files

When you access this website, information transmitted by your browser is automatically stored in server log files:

browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address.

This data is not merged with other data sources and is used solely for the technical operation and security of the website. The legal basis is Art. 6(1)(f) GDPR.

Contact and pre-order forms

If you write to us using the contact form or the pre-order form, the data you enter – your name, e-mail address, subject and message, or the shirt and size you selected – is processed in order to handle your enquiry.

The forms are processed by a script on our own web space, which forwards your details directly to us by e-mail. No external form service is involved and no transfer to a country outside the European Union takes place. The web space is provided by our host (see the "Hosting" section), with whom a data processing agreement is in place.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual measures, and otherwise Art. 6(1)(f) GDPR. We retain the data until the purpose for storing it no longer applies or you ask us to delete it.

Contact by e-mail or telephone

If you contact us directly by e-mail or telephone, we process the details you provide solely in order to handle your request. The legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR.

Web fonts

This website serves its web fonts locally from our own server. No connection is made to third-party servers – in particular not to Google Fonts – and no data is transmitted to third parties.

Cookies, tracking and analytics

This website does not use cookies. No analytics or tracking services, advertising networks or social media plugins are used. No profiling and no automated decision-making take place.

SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the address bar of your browser changing from "http://" to "https://". When encryption is active, the data you send us cannot be read by third parties.

Retention period

Unless a more specific retention period is stated in this policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a legitimate request for deletion or withdraw your consent, your data will be deleted unless we have a statutory obligation to retain it.

Your rights

You have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing (Art. 15 GDPR). You also have:

the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object to processing (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@halawuki.com is sufficient for any of these requests.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).

Changes to this privacy policy

We update this privacy policy whenever changes to our website or to the services we use make it necessary. The version published here is the one that applies.

Last updated: 12 September 2026