Free shipping from €50 in GermanyIn stock: 1-2 working days in DE100% natural dog chewsContact us
KAUMASTER
DECart

Privacy policy

Updated 26 September 2026. This English version explains our German privacy policy.

1. Controller

Redas Klerauskas
Am Beckers Busch 2
42799 Leichlingen
Germany
Email: info@kaumaster.de

2. Hosting

Our website and shop are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, Hetzner processes technical server logs. These may include your IP address, time, requested resource, referrer, browser and operating system. The basis is Article 6(1)(f) GDPR: our legitimate interest in a secure and stable website. Technical logs are deleted or anonymised when they are no longer needed for security or troubleshooting, unless a legal obligation requires retention. See Hetzner's privacy policy.

3. Locally hosted fonts

Montserrat is served from our own server. Loading it does not connect your browser to Google Fonts or another external font provider.

4. Contact

If you use our contact form or email us, we process the information you send to handle your enquiry. The form asks for a topic, name, email address and message. Required fields are marked. The form sends this data over an encrypted connection to our Hetzner-hosted platform; it is delivered to our email inbox, not stored permanently in a contact database. To prevent abuse, we temporarily process technical request data, including IP address and a non-reversible check value derived from the email address, to enforce sending limits.

The legal basis is Article 6(1)(b) GDPR when the enquiry concerns a possible or existing contract; otherwise Article 6(1)(f) GDPR, our legitimate interest in responding and preventing spam. We delete the data when it is no longer needed for the enquiry, unless statutory retention duties apply.

5. Email

We use Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Sender, recipient, delivery and message data are processed. We have a data processing agreement with Google. Google may use contractually bound subprocessors. Transfers outside the European Economic Area are subject to the applicable legal requirements, including adequacy decisions or EU standard contractual clauses.

6. Google Analytics and Google Ads

Statistics (Google Analytics), usage analysis (Microsoft Clarity) and ad measurement (Google Ads) are separate, optional choices. All are off by default. “Essential only” rejects them together; “Settings” lets you choose each purpose. Your choice applies to this website and shop on the same domain. Google Analytics 4 and Google Ads, provided by Google Ireland Limited, are loaded only for purposes to which you consent. Without consent, we do not load those Google tags or send measurement data to Google.

Depending on your choice, data may include page views, sessions, referrer, approximate location, device and browser information, and a Google click ID in the landing URL. With statistics consent, we also measure product and basket views, basket changes, checkout steps and confirmed PayPal purchases. We send product IDs and names, pack sizes, quantities, values excluding VAT and shipping, payment method as a category, separate tax and shipping amounts, and an order ID to prevent duplicate purchase reports. Reported order IDs remain in session storage under kaumaster.analytics-purchases.v1 until the tab closes and are removed if you withdraw statistics consent. We do not send form contents, names, addresses, email addresses or payment details. Sign-in, account and admin pages are excluded. Enhanced Conversions, Google Signals and personalised advertising are disabled.

After consent, Google may set cookies such as _ga and _ga_* to distinguish users and sessions, and _gcl_* to associate an ad click. Our Analytics cookies last up to six months; ad-click cookies up to 90 days.

The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You may withdraw it at any time in “Cookie settings” in the footer. This does not affect earlier lawful processing. Your choice, purposes, date and version are stored locally for 180 days under kaumaster.cookie-consent.v6. After expiry or a version change, we ask again. On withdrawal, we delete accessible cookies for the purpose you turned off and reload the page if its script has already run. Your sign-in, basket and wish list remain. An essential kaumaster_consent_denied cookie may block stale consent if browser storage fails, for up to 180 days. Google may process data outside the EEA subject to the applicable legal transfer requirements.

With statistics consent, we also collect our own daily totals on our Hetzner servers in Germany. These cover shop visits, product views, bone offers, basket and checkout. The statistics contain only the date, event, optional product and count, with no IP addresses, names, contact details or visitor IDs. To avoid duplicate counts, the existing shop session remembers the steps counted for the current day. This association ends with the session and is replaced on the next counted day. Without consent, no events are sent to this statistics service. Order, payment and refund records from contract fulfilment are used separately for operational reporting.

7. Registration and account

Customers can register with a name, email address, telephone number, and delivery and billing addresses. After confirming their email, they can sign in and order. For authentication and security we also process session and security data, which may include time, IP address, user ID, failed sign-in attempts and security logs. Passwords are stored as hashes, not readable plaintext. The legal bases are Article 6(1)(b) GDPR for the contract and Article 6(1)(f) GDPR for our legitimate interest in protecting accounts and order data.

8. Orders, invoices and customer service

For an order, we process account, contact, delivery and billing details; items, quantities, prices, discounts, taxes, payment method, shipping, order status and contractual documents. We record which version of the terms was accepted and when. For support, complaints and returns, we process the messages and product, batch, delivery or invoice information needed to handle the matter. The legal basis is Article 6(1)(b) GDPR. We retain commercial and tax records for the statutory period under Article 6(1)(c) GDPR.

9. Shop hosting

The consumer shop and operational platform run at Hetzner Online GmbH in Germany. Hetzner processes necessary server, connection and backup data as a processor. The legal bases are Article 6(1)(b) and (f) GDPR for fulfilling contracts and operating a secure, available service.

10. Shipping and payment

We give the carrier the recipient, address and shipment information needed to deliver an order. Where needed for delivery notifications, this may include an email address or phone number. The basis is Article 6(1)(b) GDPR. For PayPal payments we exchange the order amount, currency, reference and payment status with PayPal. Available payment methods depend on PayPal and customer eligibility. See the shop privacy policy for payment-provider details.

11. Newsletter

If you subscribe, we process your email address, sign-up and confirmation times, and technical evidence of consent. We send the newsletter only after double opt-in confirmation. The basis is Article 6(1)(a) GDPR. You can withdraw consent via an unsubscribe link or your account. We then retain proof only as far as legally permitted.

12. Microsoft Clarity

With separate consent for usage analysis, Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, may process page views, clicks, scrolling, recordings, technical browser and device data, approximate location and pseudonymous identifiers. Clarity is not loaded before consent, even in a cookieless mode. Public website, catalogue, product, basket and checkout activity may be measured. Sensitive contact, address, form and payment content is masked. Account, order documents, sign-in and admin pages are excluded. Clarity does not receive advertising consent.

The basis is Article 6(1)(a) GDPR and section 25(1) TDDDG. Microsoft may use affiliates and bound subprocessors; third-country transfers follow applicable legal requirements. _clck lasts up to one year, _clsk up to one day, and _cltk remains in session storage until the tab closes. After our 180-day consent expires, we remove accessible storage on the next page view unless you renew consent.

Microsoft stores Clarity data in the US. According to its retention information, regular recordings are kept for 30 days, and click data and marked recordings for nine months. See its cookie details and privacy statement. You can withdraw consent in “Cookie settings” in the footer.

13. Your rights

Subject to the applicable legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure and restriction (Articles 17 and 18), data portability (Article 20), and objection (Article 21).

14. Complaints

You may complain to a data protection supervisory authority, particularly in the place of your usual residence, workplace or the alleged infringement.

Anonymous page requests

We also count successful requests for public HTML pages on our website and shop directly on our Hetzner server in Germany. We store only an hour bucket, a fixed area such as guides or product pages, and a broad source category such as Google Search or direct access. The source category is derived from permitted campaign hints or the referring domain. Full destination URLs, query parameters, click identifiers and referrer URLs are not stored in these statistics. Neither are IP addresses, browser details, cookies or visitor identifiers.

This counter sets no analytics cookies and does not access browser storage. It does not identify people, returning visitors or personal browsing profiles. Repeated requests by the same person can count more than once. Private account, sign-in, basket, checkout and admin pages are excluded.

The anonymous count log uses a daily or size-based rotation policy; only the current and previous files are retained. The active report contains daily totals for at most 90 days. We do not link these data to customer accounts, orders or Google Analytics and Clarity data. Optional measurement services still require your separate consent.

Privacy at Kaumaster

Essential

Always active

Sign-in, basket, wish list, security and your privacy choices.

Essential storage details

Provider: Kaumaster. Session and security cookies support the shop features you request. Your choice, date and version are stored in your browser under kaumaster.cookie-consent.v6 for 180 days. If browser storage fails, an essential rejection cookie can prevent an old consent from becoming active again.

Legal bases: section 25(2)(2) TDDDG and Article 6(1)(b) or (f) GDPR, depending on the purpose. Available payment services are integrated at checkout to process your payment; they are not part of the optional analytics choices here.

Kaumaster also counts shop visits, product interest, bone offers, basket and checkout as daily totals on its own servers in Germany. These statistics store no IP address, name or visitor ID. Each step is counted once per shop session and day.

Google Analytics 4 measures visits, product and basket views, basket changes, checkout steps and confirmed purchases. We send product details, sizes, quantities, values, payment method as a category and an order identifier for purchases. We do not send names, addresses or payment details. Sign-in, account and admin pages are excluded.

Google Analytics: provider and data

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage, device and connection data and pseudonymous identifiers are processed. Cookies: _ga and _ga_*, for up to 180 days on our site.

Google Signals and personalised advertising are disabled. Google privacy policy.

Microsoft Clarity shows us clicks, scrolling and session recordings, including basket and checkout pages. Contact and address areas, forms and payment content are masked. Account, order documents, sign-in and admin pages are excluded.

Microsoft Clarity: provider and data

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Interactions, device and connection data and pseudonymous identifiers are processed. _clck links visits; _clsk groups page views in a session.

Storage periods: _clck up to one year, _clsk up to one day, _cltk in session storage until the tab closes. Once our 180-day consent expires, we remove this storage on the next page view unless you renew consent.

Clarity does not receive advertising consent. If you withdraw consent, we delete accessible Clarity cookies and reload the page to stop the script. Cookie details and Microsoft privacy statement.

Google Ads helps us see which ads lead to visits to our information pages. This purpose does not enable personalised advertising or send your order details.

Google Ads: provider and data

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Ad click identifiers, page views, device and connection data are processed. Cookies: _gcl_*, for up to 90 days.

Enhanced Conversions and personalised advertising are disabled. Google ad technologies.

Optional services rely on your consent (section 25(1) TDDDG, Article 6(1)(a) GDPR). Google and Microsoft may also process data in the US. Details about recipients, retention, transfers and your rights are in our privacy policy.

Privacy policyLegal notice