Legal
Privacy policy
1. Data controller
Guimi UG (haftungsbeschränkt)
Matterhornstraße 53, 14129 Berlin, Germany
Email: hello@byguimi.com
2. Overview
We take the protection of your personal data seriously. This privacy policy explains what data we collect when you use our website, how we use it, and your rights under the EU General Data Protection Regulation (GDPR).
3. Data we collect
Server log files
When you visit our website, our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes your IP address, browser type and version, operating system, referrer URL, pages visited, and the date and time of access. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of our website).
Waitlist sign-up
When you reserve an invitation on our website, the data you provide (first name and email address) will be stored for the purpose of notifying you when our first edition drop opens and managing your spot on the waitlist. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) and, where applicable, Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by contacting us at the email address above; doing so will remove you from the waitlist.
Analytics
We may use analytics tools to understand how visitors interact with our website. Where such tools process personal data, this is done on the basis of Art. 6(1)(f) GDPR (legitimate interest in improving our website) or with your consent under Art. 6(1)(a) GDPR.
4. How we use your data
We use collected data to:
- Provide and maintain the website
- Manage waitlist sign-ups and notify subscribers of product availability
- Respond to inquiries and requests
- Improve and optimize our services
- Comply with legal obligations
5. Data sharing
We do not sell your personal data. We may share data with third-party service providers who assist us in operating our website and conducting business (e.g., hosting providers, database providers, email delivery services, analytics tools), but only to the extent necessary and under appropriate data processing agreements pursuant to Art. 28 GDPR. Transfers to countries outside the EU/EEA are only made with adequate safeguards in place (e.g., EU Standard Contractual Clauses).
6. Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Waitlist entries are kept until the first edition has been fulfilled or until you request removal, whichever comes first. Inquiry correspondence is deleted after the matter has been fully processed, unless longer retention is required by law.
7. Your rights
Under GDPR, you have the right to:
- Access personal data we hold about you (Art. 15 GDPR)
- Request rectification of inaccurate data (Art. 16 GDPR)
- Request deletion of data (Art. 17 GDPR)
- Request restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on legitimate interest (Art. 21 GDPR)
- Withdraw consent at any time where processing relies on consent (Art. 7(3) GDPR)
To exercise any of these rights, please contact us at hello@byguimi.com.
8. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
9. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page. We encourage you to review this page periodically.
Last updated: April 2026