Last Updated: October 6, 2026
1. Introduction
triangle GmbH (“we”, “us”, or “our”) is a trusted provider of thoughtfully selected, high-quality kitchen gadgets across Germany, operating the e-commerce website accessible at www.trianglegmbh.com. This Privacy Policy is designed to inform you (“you”, “your”, or “the data subject”) about how we collect, use, store, process, and protect your personal data when you browse, interact, make purchases, or use any features of our website, in full compliance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.
We are committed to upholding the core data processing principles set out under the GDPR, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. All personal data processing activities we conduct are strictly aligned with these principles to ensure your privacy rights are fully protected at every step of your interaction with our platform. This policy applies to all visitors, registered users, customers, and any other individuals whose personal data we process in connection with our kitchen gadget e-commerce operations, regardless of whether you are based within the European Economic Area (EEA) or access our services from other jurisdictions covered by the extraterritorial scope of the GDPR.
2. Data Controller Information
For the purposes of the GDPR, the data controller responsible for your personal data is:
triangle GmbH
Friedenstraße 98, 42699 Solingen, Germany
Contact Email: [email protected]
Contact Telephone: +49 212 2640160
If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, you may reach out to our dedicated data protection team at the contact details listed above at any time. We will respond to all legitimate inquiries within the timeframe required by applicable data protection regulations.
3. Categories of Personal Data We Collect
We only collect personal data that is relevant, limited, and necessary to deliver our e-commerce services and fulfill the explicit purposes outlined in this policy. We do not collect excessive information that is not directly tied to your interactions with our platform, in full alignment with the data minimization principle of the GDPR. The categories of personal data we may collect include:
- Identity and Contact Data: This includes your full name, billing and delivery address, email address, contact telephone number, and any other identifying information you provide when you create an account, place an order, or submit a support request on our website.
- Transaction Data: This covers details related to your purchases on www.trianglegmbh.com, including the specific kitchen gadgets you order (such as our range of peelers, cutting boards, silicone brushes, food tongs and other kitchen tools), order value, payment information, payment status, delivery preferences, and related transaction records. We do not store full credit card or sensitive payment credentials on our internal systems; all payment processing is handled through certified, PCI DSS compliant third-party payment service providers.
- Account Data: If you register for a user account on our website, we collect your username, password (stored in encrypted, hashed format), order history, saved delivery addresses, product wishlist entries, and your communication preferences for marketing updates.
- Technical and Usage Data: When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, device type and operating system, website referral sources, pages you visit on our platform, time spent on pages, click-through patterns, and other data related to your browsing behavior. We only process this data in anonymized or pseudonymized formats where possible to minimize privacy risks.
- Cookie and Preference Data: We collect information through standard cookie technologies about your interaction with our website’s cookie consent banner, your preferred language settings, saved product filters, and other custom preferences you set during your visit.
- Communication Data: If you contact us via email, telephone, our website’s contact form, or other support channels, we collect the content of your messages, your contact details, and any additional information you voluntarily provide to us, such as feedback on our kitchen products, return requests, or questions about shipping for orders over €300 that qualify for free home delivery.
4. Legal Bases for Processing Your Personal Data
All of our personal data processing activities are supported by one or more lawful bases explicitly recognized under the GDPR, as outlined below:
- Performance of a Contract: Most of our processing activities are necessary to fulfill our contractual obligations to you when you place an order on our website. This includes processing your identity, contact, and transaction data to process your kitchen gadget order, arrange delivery, process payments, and provide post-purchase customer support as outlined in our Terms of Service.
- Your Explicit Consent: For processing activities that are not tied to contractual performance or our legitimate interests, we rely on your freely given, specific, informed, and unambiguous consent. This includes sending you optional marketing newsletters about new arrivals, best-selling kitchen tools, and hot deal offers, as well as the deployment of non-essential analytical cookies on our website. You retain the full right to withdraw your consent at any time, at no extra cost to you.
- Compliance with Legal Obligations: We process your personal data when it is necessary for us to comply with our legal responsibilities as a German-based business, including tax reporting obligations, commercial accounting requirements, and mandatory disclosures to competent public authorities under applicable German and European laws.
- Legitimate Interests: Where permitted by law, we process your personal data to pursue our legitimate business interests, provided that these interests do not override your fundamental privacy rights and freedoms. These legitimate interests include: optimizing our website’s functionality and user experience, preventing fraudulent transactions and payment security risks, conducting internal business analytics to improve our product range of practical kitchen gadgets, and sending you service-related notifications that are necessary for your use of our platform.
5. Purposes for Which We Use Your Personal Data
We only process your personal data for the specific, explicit, and legitimate purposes disclosed at the time of collection, and we do not process the data in any manner that is incompatible with these original purposes. The core processing purposes are:
- To process, fulfill, and deliver your orders for our kitchen products, including managing payment processing, coordinating shipping, and arranging the free home delivery benefit for orders over €300 as advertised on our website.
- To create, maintain, and manage your user account on www.trianglegmbh.com, allowing you to track order status, view past purchase history, save favorite products, and access checkout more efficiently for future shopping sessions.
- To provide you with responsive customer support, respond to your inquiries, process refund and return requests in line with our published Refund and Returns Policy, and resolve any disputes that may arise in connection with our services.
- To send you important administrative and service-related notifications, such as updates to our Privacy Policy, Terms of Service, Shipping Policy, or alerts about changes to product availability for the kitchen tools you have added to your wishlist.
- With your explicit consent, to send you personalized marketing communications about our new arrivals, top kitchen picks, best-selling kitchen gadgets, and limited-time hot deal offers. You may opt out of these marketing messages at any time by clicking the unsubscribe link included in all marketing emails, or by contacting us directly at [email protected].
- To maintain, optimize, and improve the performance, security, and usability of our e-commerce website, ensuring that all users can seamlessly browse our full range of kitchen tools, from vegetable peelers, silicone brushes, to small cutting boards and food tongs, without technical disruptions.
- To detect, prevent, and investigate fraudulent transactions, unauthorized access to user accounts, and other illegal or malicious activities that could pose a risk to the security of our business, our customers, or our payment processing systems.
- To comply with our statutory obligations under German commercial, tax, and data protection laws, including retaining transaction records for the legally required retention period for accounting purposes.
6. Recipients of Your Personal Data
We will never sell, rent, or lease your personal data to unrelated third parties for their own marketing purposes without your explicit, separate consent. We may share your personal data only with carefully selected third parties that act as data processors on our behalf, or as legally permitted, for the limited purposes outlined below:
- Trusted Service Providers: We share necessary personal data with vetted third-party service providers that assist us in operating our e-commerce business, including payment processors, shipping and logistics partners that deliver your kitchen gadgets to your address, cloud hosting providers that host our website on secure servers, email delivery service providers, and IT security vendors that help us protect our platforms from cyber threats. All of these processors are bound by legally binding data processing agreements that require them to uphold the same level of data protection standards mandated by the GDPR, and they may only process your personal data in strict accordance with our documented instructions.
- Legal Authorities and Regulators: We may disclose your personal data if we are required to do so by binding legal request, court order, or mandatory regulatory requirement issued by a competent public authority, in line with applicable German and European laws.
- Business Successors: In the event of a merger, acquisition, or full or partial sale of our business assets, your personal data may be transferred to the acquiring business entity, which will remain bound by the terms of this Privacy Policy, unless it is required to implement changes by applicable law, in which case we will notify you in advance of any such changes.
We do not transfer your personal data to any countries outside of the European Economic Area (EEA) without ensuring that appropriate, legally required safeguards are in place to protect the privacy and security of your data, in full compliance with the GDPR’s rules on international data transfers. If any cross-border transfer of personal data becomes necessary in the future, we will ensure the transfer is covered by a valid adequacy decision from the European Commission, or by approved standard contractual clauses that guarantee sufficient data protection rights for data subjects.
7. Data Retention Periods
We will not store your personal data for any longer than is strictly necessary to fulfill the specific purposes for which the data was originally collected, in full compliance with the storage limitation principle of the GDPR. Our standard retention timelines are:
- For transaction-related personal data tied to a completed order, we retain the data for the full duration of our contractual relationship with you, plus the additional retention period required under German commercial and tax laws, which can extend up to 10 years after the relevant transaction is finalized for mandatory accounting and auditing purposes.
- If you maintain a registered user account on our website, we will retain all your account-related personal data for as long as your account remains active. You may request to delete your account at any time, and we will securely erase all your associated personal data within 30 days of your request, subject only to conflicting legal retention obligations that we are required to observe.
- Personal data processed for direct marketing purposes is retained until you exercise your right to opt out of such marketing communications, after which point we will permanently remove your contact details from our marketing distribution lists.
- Technical usage data and anonymized website browsing logs are retained for a maximum period of 12 months, after which they are permanently deleted or fully anonymized so that they can no longer be linked back to an identifiable individual data subject.
Once the original purpose for processing your personal data expires, and no valid legal basis remains for us to continue storing the data, we will securely delete, erase, or anonymize the relevant personal data in line with our internal data security procedures.
8. Your Rights as a Data Subject
Under the GDPR, you hold a comprehensive set of enforceable rights over the personal data that we hold about you. At any time, you may exercise any of the following rights by submitting a request to us via the contact details listed in Section 2 of this policy:
- Right of Access: You have the right to request a clear, free copy of all personal data that we hold about you, along with detailed information about how we process that data, the categories of recipients we have shared it with, and the planned retention period for the data.
- Right to Rectification: If you discover that any of the personal data we hold about you is inaccurate, incomplete, or out of date (such as an outdated delivery address or incorrect contact telephone number), you have the right to request that we correct and update that data immediately.
- Right to Erasure (“Right to be Forgotten”): Under specific circumstances defined by the GDPR, you may request that we permanently erase your personal data from our systems, for example when the data is no longer necessary for the original purposes for which it was collected, or you have withdrawn your consent for the processing and no other lawful legal basis remains for us to continue processing the data.
- Right to Restriction of Processing: You have the right to request that we temporarily suspend the processing of your personal data in scenarios such as when you contest the accuracy of the data, when the processing is unlawful but you do not wish us to delete the data entirely, or when we no longer need the data for our original processing purposes but you require it for the establishment, exercise, or defense of legal claims.
- Right to Data Portability: Where processing is based on your consent or on a contractual obligation, you have the right to receive all the personal data you have provided to us in a structured, commonly used, machine-readable format, or to request that we transmit this data directly to another data controller specified by you, where this is technically feasible.
- Right to Object: You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including profiling activities that we conduct for direct marketing purposes. If you exercise your right to object to direct marketing, we will immediately cease all marketing processing of your personal data.
- Right to Withdraw Consent: For any processing activity that you previously provided explicit consent for, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of any processing activities that we carried out in good faith prior to the date your consent was withdrawn.
We will not charge any administrative fee for responding to legitimate, reasonable data subject rights requests. However, if a request is clearly manifestly unfounded, excessive, or repetitive in nature, we reserve the right to charge a reasonable administrative fee based on the actual operational costs of fulfilling the request, or to decline to act on the request entirely, in line with Article 12(5) of the GDPR. We will respond to all valid data subject requests within one month of receipt, and we will only extend this response period by a maximum of two additional months if the request is complex or we are handling a high volume of simultaneous requests, in which case we will notify you of the extension within the initial one-month window. You also retain the full right to lodge a formal complaint regarding our data processing activities with your local competent data protection authority at any time, if you believe that we have not upheld your data privacy rights in accordance with applicable law.
9. Cookies and Website Tracking
Our website www.trianglegmbh.com uses cookies and similar standard tracking technologies to enhance your browsing experience, analyze website traffic patterns, and deliver personalized features to users. A full, detailed description of the different categories of cookies we use, their specific functions, and their retention periods is available in our separate Cookie Notice, which can be accessed via the footer of our website.
When you first visit our website, you will be presented with a clear, fully compliant cookie consent banner that allows you to customize your cookie preferences, selecting which categories of non-essential cookies you wish to enable, and which you wish to disable. You are never forced to accept non-essential cookies as a condition of accessing our core e-commerce features, and you may update or modify your cookie consent preferences at any time by accessing the cookie settings tool available on our website at any point during your visit.
We strictly prohibit any third-party tracking technologies that we do not explicitly disclose in our Cookie Notice, and we ensure that all our analytics and tracking tools are configured to minimize the amount of personal data they process, with full respect for your privacy rights under the GDPR.
10. Data Security Measures
We take the security of your personal data extremely seriously, and we have implemented a comprehensive set of state-of-the-art technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure, in line with the integrity and confidentiality principle of the GDPR. These security measures include end-to-end TLS encryption for all data transmitted between your browser and our website servers, encrypted storage for all sensitive personal data, role-based access controls that restrict internal employee access to personal data only to the extent necessary for their job functions, regular security audits, staff data protection training programs for all personnel that process personal data, and established incident response protocols for managing any potential personal data breach in line with our regulatory obligations.
In the highly unlikely event that we experience a personal data breach that poses a high risk to your rights and freedoms as a data subject, we will notify the relevant competent supervisory authority of the breach within 72 hours of becoming aware of it, as required by the GDPR, and we will notify you directly without undue delay if the breach creates a specific high risk to your individual rights.
11. Processing of Children’s Personal Data
Our e-commerce website and kitchen gadget products are intended for use and purchase by adult consumers aged 18 years and older. We do not knowingly collect personal data from children under the age of 16, and we have no intention of processing the personal data of underage visitors to our platform. If you are a parent or legal guardian and you become aware that your child has provided us with their personal data without your appropriate consent, please contact us immediately using the contact details provided in this Privacy Policy. We will take immediate steps to securely erase all such personal data from our internal systems as quickly as possible.
12. Updates to This Privacy Policy
We may occasionally update and revise this Privacy Policy from time to time to reflect changes in our business operations, new legal and regulatory requirements, or updates to the guidance published by the European Data Protection Board (EDPB). Whenever we make material changes to this policy, we will update the “Last Updated” date at the top of this page, and we will publish the revised version on the Privacy Policy page accessible via the footer of www.trianglegmbh.com. For significant changes that materially impact your data privacy rights, we will take additional steps to notify you via a prominent announcement on our website homepage, or via email notification to the registered email address associated with your user account, before the revised policy comes into effect. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.
13. Contact Information
If you have any questions, comments, concerns, or formal requests related to this Privacy Policy or our personal data processing practices, you may contact us at any time using the following details:
triangle GmbH
Attn: Data Protection Team
Friedenstraße 98, 42699 Solingen, Germany
Email: [email protected]
Telephone: +49 212 2640160