Privacy Policy

This notice explains how we process personal data when you visit moku-an.com or order from us, in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

Researching Plus GmbH
Am Bonneshof 15, 40474 Düsseldorf, Germany
Contact via our contact form

2. Hosting and shop system

Our shop runs on Shopify (Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland). Shopify processes personal data on our behalf under a data processing agreement, including data transferred to Shopify Inc. in Canada (an adequacy decision by the EU Commission exists for Canada). When you visit our site, Shopify processes technical access data (IP address, browser, timestamps) to deliver the site securely (Art. 6 (1) f GDPR). Details can be found in the Shopify Privacy Policy.

3. Orders

To fulfil your order we process your name, address, email, order details and payment status (Art. 6 (1) b GDPR). We share data with our payment providers and our shipping carrier only as required to process payment and delivery. We retain order data for the statutory commercial and tax retention periods (6/10 years).

4. Payment

Payments are processed by the provider you choose at checkout, either Shopify Payments (Shopify International Ltd.) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). Your payment data is processed directly by the provider; we do not store full card details.

5. Email and newsletter

If you sign up for our newsletter, we use your email address to send it (Art. 6 (1) a GDPR, double opt-in). You can unsubscribe at any time via the link in every email. Transactional emails (order and shipping confirmations) are sent based on Art. 6 (1) b GDPR.

6. Cookies and consent

We use cookies that are strictly necessary to run the shop (e.g. cart, login, region). Optional cookies (e.g. marketing) are only set with your consent via the cookie banner, which you can change at any time. The legal bases are Art. 6 (1) f GDPR (necessary), Art. 6 (1) a GDPR (consent) and § 25 TDDDG.

7. Fonts and embedded content

Fonts are self-hosted; no requests are sent to Google Fonts or other third-party font services when you load our pages.

8. Contact and wholesale forms

If you contact us via a form or email, we process the data you provide to answer your inquiry (Art. 6 (1) b/f GDPR) and delete it once the matter is resolved, unless retention periods apply.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, for us the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

10. Updates

We may update this notice as our shop evolves; the current version is always available on this page.

Last updated 14 August 2026