Privacy Policy

This privacy policy explains which personal data we process when you visit mossobjects.com and the Dune 3D configurator at configurator.mossobjects.com, when you send us an enquiry, subscribe to our newsletter or contact us, why we do this, and which rights you have. It applies to visitors from all countries. A separate section for California residents is included at the end.

​

1. Controller

MOSS Objects by Daniel Becker Studio
Daniel Becker
Pappelallee 7/8
10437 Berlin
Germany

​

Telephone: +49 (0) 30 48 49 29 99
Email: info@mossobjects.com

​

For all questions about data protection and for exercising your rights, please write to info@mossobjects.com or to the postal address above.

​

2. Overview

• When you visit the website, technical data is processed to deliver the pages securely (hosting, security, error monitoring).

• On mossobjects.com we count visits with Statcounter without cookies.

• On mossobjects.com, Google Analytics 4, Wix Analytics, the Meta Pixel and the Pinterest Tag only run after you have given your consent in the cookie banner.

• The 3D configurator uses Statcounter and a cookieless mode of Google Analytics without a cookie banner (section 7).

• If you send an enquiry or subscribe to the newsletter, we process the data you enter to answer you and to send the newsletter.

• We do not use automated decision-making or profiling that has legal or similarly significant effects on you.

​

3. Hosting and delivery of the website

Our website runs on the website platform of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel ("Wix"). When you open a page, your browser sends technical data to Wix: IP address, date and time of the request, requested page, referrer URL, browser type and version, operating system and device information. Wix uses this data to deliver the website, to keep it stable and secure (including protection against bots and attacks via the network of Cloudflare, Inc., USA) and to monitor technical errors and loading performance. Wix also sets technically necessary cookies (see section 12).

​

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and fast website. Where information is stored on or read from your device for this purpose, this is strictly necessary to provide the service you requested (§ 25(2) no. 2 TDDDG).

​

Wix processes this data on our behalf under a data processing agreement. According to Wix, data is stored in data centres in the USA and Ireland. Israel has an adequacy decision of the European Commission; for transfers to the USA and other third countries Wix relies on the EU Standard Contractual Clauses.

​

4. Cookie consent (Usercentrics)

We use the consent management platform Usercentrics for Wix, provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, to ask for and store your consent. Processed data: your consent decisions, a consent ID, date and time, browser and device information and your IP address (for technical delivery). Your decisions are stored in your browser (local storage "ucData", "ucString" and the Wix cookie "consent-policy") so that the banner does not appear on every page. Usercentrics stores the consent records in the EU.

​

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to be able to prove consent) and Art. 6(1)(f) GDPR (our interest in managing consents in a structured way). Storing your decision on your device is strictly necessary (§ 25(2) no. 2 TDDDG).

​

Changing your settings: You can change or withdraw your consent at any time with effect for the future by clicking the round fingerprint button at the bottom left of every page. This reopens the privacy settings.

​

5. Visitor statistics without cookies (Statcounter)

To understand how many people visit our website and which pages are used, we use Statcounter, a web analytics service of Statcounter Limited, Ireland. Statcounter loads on every page without asking for consent. We have configured it so that it does not set cookies on mossobjects.com: client-side storage is disabled in the tracking code, and the Statcounter cookie opt-out is activated in our account. Statcounter processes your IP address, the pages you view, date and time, referrer URL, screen resolution, browser, operating system and an approximate location derived from the IP address. We only use the results for statistics and do not use them to identify you. On mossobjects.com, the script only keeps temporary session data in your browser's session storage, which is deleted when you close the tab; it does not store anything permanently on your device.

​

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is measuring the reach and use of our website so that we can improve it and evaluate our marketing.

​

Right to object: You can object to this processing at any time for reasons arising from your particular situation by writing to info@mossobjects.com (see section 14). You can also prevent Statcounter from loading by blocking JavaScript from statcounter.com in your browser or with a content blocker.

​

6. Analytics and marketing with your consent

The following services are only loaded after you click "Accept All" or select the relevant category in the privacy settings. Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future (fingerprint button at the bottom left of the page). Withdrawal does not affect the lawfulness of processing before the withdrawal.

​

Google Analytics 4. Provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, USA. We use Google Analytics to understand how visitors use our website, for example which pages are viewed, how long visits last and whether an enquiry was sent or the configurator was opened. Processed data: pages viewed, interactions and events, referrer, device and browser information, approximate location, online identifiers stored in cookies ("_ga", "_ga_KD82YL8WE6"). Google processes this data as our processor. Google LLC is certified under the EU-U.S. Data Privacy Framework.

​

Wix Analytics. Wix records page views and visitor statistics for our website dashboard. Processed data: pages viewed, referrer, device and browser information, approximate location and an online identifier.

​

Meta Pixel. Provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, together with Meta Platforms, Inc., USA. The Meta Pixel helps us measure the effect of our advertising on Facebook and Instagram and show our ads to people who have visited our website. Processed data: pages viewed, events such as page views, browser and device information, IP address, the cookie "_fbp" and, if you are logged in to Facebook or Instagram, information that Meta can link to your account. For the collection and transmission of data to Meta we and Meta Platforms Ireland Limited are joint controllers under Art. 26 GDPR; Meta's responsibility for the further processing is described in Meta's privacy policy. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework.

​

Pinterest Tag. Provided by Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, together with Pinterest, Inc., USA. The Pinterest Tag helps us measure the effect of our Pinterest advertising (for example visits to product pages, opening the configurator, spec sheet downloads and enquiries) and show our ads to people who have visited our website. Processed data: pages viewed and events, browser and device information, IP address and cookies or local storage entries such as "_pin_unauth", "_pin_unauth_ls" and "_pinterest_ct_ua". We have not activated the "Enhanced Match" function, so no email addresses are sent to Pinterest. Pinterest, Inc. participates in the EU-U.S. Data Privacy Framework.

​

7. Dune 3D configurator (configurator.mossobjects.com)

The configurator is a separate web application for planning Dune pendant lights in 3D. It is hosted by Cloudflare, Inc., USA (Cloudflare Pages). When you open it, your IP address and the technical request data listed in section 3 are processed by Cloudflare to deliver the application. The 3D graphics library is loaded from unpkg.com, a public content delivery network for open-source software, which also receives your IP address and request data. The configurator does not have its own cookie banner.

​

To count how often the configurator and which models are opened, the configurator also uses:

​

• Statcounter (see section 5). On the configurator, Statcounter currently stores the cookie "sc_is_visitor_unique" and the local storage entry "sc_medium_source" to recognise returning visitors.

• Google Analytics 4 in a mode without cookies (Google Consent Mode with analytics and advertising storage set to "denied"). Google receives the page, the selected model, the referring page and technical data of the request, but no cookie is stored.

​

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is providing the configurator and knowing how it is used. You can object at any time (see section 14). Cloudflare, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework.

​

8. Enquiries through our forms

On /contact and /professionals you can send us an enquiry. Required fields: first name, last name, email address and country. Optional fields: your role, the type of request, company, company website, product or collection, project name and location, timeline, whether a retailer is involved and which, finish samples you are interested in, your message and whether you want to receive our newsletter. Together with the enquiry we store the page from which it was sent, the referring page and campaign parameters contained in the link (for example "utm_source"). Other forms on our website (such as our request form for a pendant light and the "Contact us" form) work in the same way with fewer fields.

​

Purpose: to answer your enquiry, prepare quotes, send documentation or samples and, where applicable, carry out the resulting project.

​

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or steps prior to a contract; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries addressed to us. Optional information is provided voluntarily.

​

Processing: Your enquiry is stored in the database of our Wix website and as a contact in Wix, and we receive a notification by email. We then transfer the enquiry into our customer relationship management system Pipedrive (Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia), where we document our correspondence and projects. For this transfer and for preparing replies we use the AI assistant Claude by Anthropic, PBC, USA, as our processor (see section 11).

​

9. Newsletter

We send a newsletter about new pieces and projects. You can subscribe through the newsletter form or by ticking the newsletter box in an enquiry form. For sending we use Wix Email Marketing (Wix, see section 3). We process your email address, your name if provided, the date of subscription and, for statistical purposes, whether newsletters are delivered, opened or links are clicked.

​

Legal basis: your consent, Art. 6(1)(a) GDPR. We also send the newsletter to business contacts with whom we correspond about our products or projects. In this case the legal basis is Art. 6(1)(f) GDPR, our legitimate interest in informing our business contacts about our products.

​

You can unsubscribe at any time with the link at the end of every newsletter or by writing to info@mossobjects.com. After you unsubscribe, we keep your email address on a blocklist so that we do not contact you again by mistake.

​

10. Contact by email or telephone

If you contact us by email or telephone, we process your contact details and the content of your message to answer you. Emails to info@mossobjects.com are also stored in our CRM system Pipedrive (see section 8). Legal basis: Art. 6(1)(b) GDPR where your message relates to a contract or steps prior to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering messages).

​

11. Recipients and international data transfers

We only pass on personal data where this is necessary for the purposes described above. Recipients:

​

• Wix.com Ltd., Israel: hosting, forms, contacts, newsletter, statistics (processor).

• Cloudflare, Inc., USA: security and delivery of the website through Wix, hosting of the configurator (processor).

• Usercentrics GmbH, Germany: consent management (processor).

• Statcounter Limited, Ireland: visitor statistics.

• unpkg.com, a public content delivery network: loading the 3D graphics library of the configurator (receives IP address and request data).

• Google Ireland Limited and Google LLC: Google Analytics 4 (only with consent on mossobjects.com, cookieless on the configurator).

• Meta Platforms Ireland Limited and Meta Platforms, Inc.: Meta Pixel (only with consent).

• Pinterest Europe Limited and Pinterest, Inc.: Pinterest Tag (only with consent).

• Pipedrive OÜ, Estonia: CRM system for enquiries and correspondence (processor).

• Anthropic, PBC, USA: AI assistant (Claude) that supports us with administrative tasks such as transferring enquiries into our CRM and preparing replies (processor).

• Public authorities, tax advisors and other parties only where we are legally obliged to do so.

​

Some of these recipients are located in or transfer data to countries outside the European Economic Area, in particular the USA. For the USA, the European Commission has adopted an adequacy decision for companies certified under the EU-U.S. Data Privacy Framework (Google LLC, Meta Platforms, Inc., Pinterest, Inc. and Cloudflare, Inc.). Wix relies on the adequacy decision for Israel and on the EU Standard Contractual Clauses. Anthropic's data processing addendum includes the EU Standard Contractual Clauses. You can ask us for a copy of the safeguards used at info@mossobjects.com.

​

12. Cookies and similar technologies

Technically necessary (no consent needed):

​

• "svSession" (Wix, up to 400 days), "hs", "XSRF-TOKEN", "server-session-bind" (Wix, session): session management, security and load balancing.

• "__cf_bm" (Cloudflare via Wix, 30 minutes): bot protection.

• "consent-policy" (Wix, 1 year) and local storage "ucData", "ucString" (Usercentrics): storing your consent decision.

• Local and session storage entries of Wix (for example "fedops.logger.sessionId", "mpaSessionId", "is_eu"), of Usercentrics ("ucTaglogger"), of our website code ("mossWixTok", a temporary access key for loading product data, deleted when you close the tab) and of Statcounter ("statcounter_config", deleted when you close the tab).

​

Only with your consent:

​

• "_ga", "_ga_KD82YL8WE6" (Google Analytics, up to 400 days).

• "bSession" (Wix Analytics, 30 minutes).

• "_fbp" (Meta Pixel, 90 days) and local storage "lastExternalReferrer", "lastExternalReferrerTime".

• "_pin_unauth" (Pinterest, 1 year), "_pinterest_ct_ua" (set on ct.pinterest.com, 1 year), "tst" (set on pinterest.com, 2 days) and local storage "_pin_unauth_ls".

​

On configurator.mossobjects.com: "sc_is_visitor_unique" (Statcounter, up to 400 days) and local storage "sc_medium_source" (Statcounter), see section 7.

​

You can delete cookies in your browser settings at any time.

​

13. How long we keep your data

• Technical server and security data: by Wix and Cloudflare for the period required for operation and security.

• Consent records: as long as needed to prove the consent.

• Enquiries and correspondence: as long as needed to handle your enquiry and the resulting business relationship. Where commercial or tax law requires us to keep business letters and records (in particular § 147 German Fiscal Code and § 257 German Commercial Code), we keep them for six, eight or ten years and restrict their use to this purpose.

• Newsletter: until you unsubscribe; then only the email address on the blocklist (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in respecting your objection).

• Statistics and marketing data: according to the retention periods of the providers; for Google Analytics according to the data retention setting in our Google Analytics account.

​

14. Your rights

Under the GDPR you have the right to:

​

• access the personal data we hold about you (Art. 15),

• have inaccurate data corrected (Art. 16),

• have your data erased (Art. 17),

• restrict processing (Art. 18),

• receive your data in a portable format (Art. 20),

• withdraw any consent you have given at any time with effect for the future (Art. 7(3)),

• lodge a complaint with a supervisory authority (Art. 77).

​

Right to object (Art. 21 GDPR): Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time for reasons arising from your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. If we process your data for direct marketing, including the newsletter, you can object at any time without giving reasons; we will then no longer use your data for this purpose. To object, an email to info@mossobjects.com is sufficient.

​

The supervisory authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany. You can also contact the supervisory authority in the EU member state where you live or work.

​

15. Is providing data required?

You can visit our website without providing any personal data yourself. The technical data in section 3 is necessary to display the website. To answer an enquiry we need the fields marked as required; without them we cannot process the enquiry. Providing data is not required by law or by contract.

​

16. Automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

​

17. Links to social networks

Our website contains simple links to our profiles on Instagram, Pinterest and LinkedIn. No data is transferred to these networks until you click a link. After that, the privacy policy of the respective network applies.

​

18. Information for California residents (CalOPPA)

This section is provided under the California Online Privacy Protection Act.

​

• Categories of personal information we collect: identifiers and contact details (name, email address, company, company website, country), the content of your enquiry and project details, newsletter preferences, and technical and usage information (IP address, browser and device information, pages viewed, referrer, online identifiers in cookies) as described in sections 3 to 9.

• Third parties with whom we share it: the service providers and partners listed in section 11 (website hosting and security, consent management, analytics, advertising measurement, CRM, newsletter and AI assistance providers) and authorities where required by law.

• Reviewing and changing your information: you can ask us at info@mossobjects.com to see, correct or delete the personal information we hold about you. You can unsubscribe from the newsletter with the link in every newsletter.

• Do Not Track: our website does not respond to Do Not Track signals or the Global Privacy Control signal from your browser. Analytics and advertising technologies on mossobjects.com only run after you have given consent in our cookie banner, and you can decline or withdraw this consent at any time. Statcounter and the services on the configurator described in section 7 run independently of such signals.

• Third-party tracking: with your consent, Google, Meta and Pinterest may collect information about your online activities over time and across different websites when you use our website.

• Changes: we inform you of material changes by updating this page and the effective date at the top.

​

19. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal requirements change. The current version is always available on this page.