Skip to main content



1 Controller

Controller according to the General Data Protection Regulation (GDPR) and other national data privacy laws of member states, as well as other data privacy regulations is:

Petite Ayami GmbH

Osterbrooksweg 35-45, Schenefeld, 22869


2 General Information on Data Privacy

Categorically, we collect and use our users‘ personal data only as far as it is necessary to operate a functional website as well as provide our contents and services. The collection and use of personal data are carried out periodically only after obtaining the user’s consent. There is an exception to this in such cases where obtaining consent ahead of time is not possible for practical reasons and the processing of data is permitted per legal provisions.

Where we obtain the data subject’s consent for processing operations for personal data, Article 6(1) lit. a EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data. When processing personal data as part of fulfilling a contract of which the data subject is a contracting party, Article 6(1) lit. b GDPR serves as legal basis. This also applies to processing operations essential to the implementation of precontractual measures. Where the processing of personal data is necessary for compliance with a legal obligation which our business is subject to, Article 6(1) lit. c GDPR serves as legal basis.

If the processing is necessary to the preservation of a legitimate interest held by our business or a third party and the data subject’s interests, constitutional rights and fundamental freedoms do not outweigh this, Article 6(1) lit. f GDPR serves as legal basis for the processing.

The data subject’s personal data will be deleted or made unavailable as soon as they are no longer necessary for fulfilling the purpose of their collection. The recording of data can also occur when it is provided for by European or national legislature in Union law regulations, laws, or other provisions (e.g. in accordance with German Tax Code in certain cases for up to 10 years) which the data subject is subject to. Data blocking or deletion will also occur if a storage period required by the mentioned standards expires unless there is a necessity for the continued storage of the data for the conclusion or the fulfilment of a contract.

3 Operating the Website

With every visit to our website, our system will automatically collect data and information from the visiting computer’s operating system.

The following data will be collected:

  • Information about the type and version number of the used browser
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address

Article 6(1) lit. f GDPR serves as legal basis for the temporary storage of data. Temporarily storing the IP address is necessary to ensure the website is delivered to the user’s computer. Therefore, the user’s IP address needs to be stored for the duration of the session. The data is deleted as soon as it no longer needed to achieve the purpose of its storage. In the case of the data recorded for the delivery of the website, this will occur when the respective session has ended.

4 Cookies

Our website uses cookies. Cookies are text files that are saved in the internet browser or by the internet browser in the user’s operating system. When a user visits a website, the cookie can be saved in the user’s operating system. This cookie contains a distinctive character sequence which enables an exact identification of the browser on re-visiting the website.

We use session cookies to make our website more user-friendly. Some elements of our website require for the visiting browser to also be identifiable after changing pages (e.g. for saving a user’s language settings).

Article 6(1) lit. f GDPR serves as legal basis for the processing of personal data by using cookies. The purpose of using technically necessary cookies is to simplify the use of websites for the user. Some functions of our website cannot be operated without the use of cookies. For those, it is necessary for the browser to also be identifiable after changing pages. User data recorded by technically necessary cookies is not used to set up user profiles.

Cookies are stored on the user’s computer and transmitted from there to our website. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing your internet browser’s settings. Previously saved cookies can be deleted at any time. This can also be automated. If cookies are deactivated for our website, not all functions may be fully operational.

5 WordPress Stats

This website uses, a web analytics software provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA, using Quantcast’s Inc. tracking technology, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA and comScore Inc., 11950 Democracy Drive, Suite 600 Reston, VA 20190, USA.. uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address anonymized prior to its storage) will be stored on the server in the USA. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The legal basis is Art. 6 (1) lit. f GDPR.

You can opt-out from being tracked by Quantcast with effect for the future by setting an opt-out cookie  in your Browser:

You can opt-out from being tracked by comScore with effect for the future by setting an opt-out cookie  in your Browser:

If you delete your browser’s cookies, you’ll have to set these opt-out cookies again.

6 Social Media appearances

We maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services.

We would like to point out that you use these pages and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information we offer on our website

When you visit our various online presences, the respective provider of the website records your IP address and other information that is available on your PC in the form of cookies. The data collected about you in this context will be processed by the respective provider and possibly transferred to countries outside the European Union. What information the providers of the services receive and how this is used is described in general in their respective data usage guidelines. There you will also find information about contact options and setting options for advertisements.

As the provider of the information service, we also collect and process data from your use of our service for the purpose of advertising and communication, to answer your questions and to advertise various products, services and events, and for the purposes of applicant management. The legal basis is Art. 6 (1) lit. f and b GDPR.

Also in the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. If you still need help, you can of course contact us.

You can also find us at: 

7 Service Contact Forms and Email Communications

You can fill out a contact form on our website. We use such contact forms in order to simplify communications. If a user chooses this option, the following data is transmitted to us and stored:

  • Name (required field)
  • Email address (required field)
  • All information you enter into the “message” field


  • The user’s IP address

Alternatively, you can contact us at the provided email address. In that case the user’s personal data transmitted via the email will be stored. In this context, no data will be disclosed to third parties. The data will be exclusively used for processing the conversation.

Article 6 (1) lit. f GDPR serves as legal basis for the processing of data which has been transmitted as part of an email. If the email communications aim for the signing of a contract, Article 6 (1) lit. b GDPR serves as additional legal basis for the processing.

The processing of personal data from the input screen is solely used to facilitate communications. In the case of email communications, this also includes the necessary legitimate interest in the processing of data. Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary for fulfilling the purpose of their collection.

8 Communications and Customer Service (Newsletter)

When visiting us on-site or as part of our various events you have the opportunity to sign up for our email newsletter, text message information services or phone services.

In order to do this, you will receive a consent form which you can fill out in person or online.

Email Newsletters

In order to dispatch the newsletter you signed up for, we use a newsletter dispatch tool by our providers MailPoet Sending Service and Mailchimp. We use the so-called double opt-in process for newsletter signups. I.e. after you sign up we will send you an email to the email address you stated where we ask you for a confirmation that you wish to receive the newsletter. For the purpose of signing up for the newsletter, you will be redirected to an external website. Our newsletter subscribers’ email addresses as well as the login data necessary for recording/ verification of newsletter signup are stored exclusively on servers located in the European Union/ European Economic Area. This data is only processed on our account to dispatch newsletters and to store login data within the tool; it will not be used for other purposes and especially not for e.g. dispatch our own email messages to you via our provider. Art. 28 GDPR (processing by a processor) is the legal basis for the use of the provider.

Article 6 (1) lit. f GDPR acts as legal basis for the analysis of newsletter use (Processing necessary preserve legitimate interests). If you do not wish for analysis of the newsletter, we recommend you unsubscribe from the from the newsletter by clicking the “unsubscribe” button included in every newsletter.

Please note with the revocation of your consent that all our communication channels have a transitional period and a processing period because we work with external service providers and need a certain lead time.

9 Online store and transport service providers

On our website we also offer the possibility to purchase our products in an online store. Here we process your personal data on the basis of Art. 6 Para. 1 lit. b GDPR.

All other information is optional and is only used for better customer communication or other commercial law obligations.

Cookies are also used when using our online store; you can find more information on this under the “Cookies” section.

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions (e.g. due to the tax code in certain cases for 10 years) to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data in order to conclude or fulfil a contract.

Transmission of data to transport service providers

For the purpose of delivering ordered goods, we work together with logistics service providers / transport companies and / or shipping partners: The following data can be transmitted to them for the purpose of delivering the ordered goods or to announce them: first name, last name, postal address, e-mail address , Telephone number (e.g. for forwarding announcements). The legal basis for processing is Art. 6 (1) lit. b GDPR.

10 Payment process

The website offers different payment methods, Paypal or credit card payment. In order to guarantee the security of your data during the transfer to the selected payment service provider, we work with an encryption method via HTTPS. The legal basis is Article 6 Paragraph 1 lit. b GDPR, as the processing of the data is necessary for the implementation of the contract between you and us.


On our website you have the opportunity to purchase Petite Ayami products. If a user makes use of this option, the following data will be transmitted to us and stored:

  • Salutaton
  • First Name Last Name
  • Street / no., Postal code and city, country
  • E-mail adress
  • The IP address of the user
  • The date and time of the message

The data will only be used for sales and forwarded to the Paypal payment service to process the payment process. Your data will be sent to PayPal (Europe) S.à r.l. & Cie, S.C.A. , with registered office at 22-24 Boulevard Royal, L-2449 Luxembourg, transmitted and processed. This includes in particular the data linked to your user account. You can find more information on PayPal’s data protection in the PayPal data protection declaration:

The legal basis for the processing of the data transmitted in the course of the purchase is Art. 6 Para. 1 lit. b GDPR. The processing of the personal data from the input mask serves us only to process your purchase. The other personal data processed during the sending process serve to prevent misuse of the form and to ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention periods (commercial code or tax code) to prevent this. 

11 Rights of Data Subjects

If your personal data is being processed, you are the data subject in accordance with the GDPR and you have the following rights against the controller:

  • You are entitled to information from the controller whether any personal data concerning you is being processed by us.
  • You have a right to rectification, completion, restriction, and erasure of your personal data against the controller.
  • You have a right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format (right to data portability).
  • You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based Article 6(1) GDPR lit. e or f.
  • You have the right to withdraw your consent at any time with regards to Article 7(3) GDPR.
  • Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement if you consider the processing of personal data relating to you infringes the GDPR.

If you want to assert any of your rights, you can contact us at or via the contact persons stated in the legal notice.

12 Data Protection for Children

We prohibit the use of the Website by anyone under the age of 18 without the consent of a parent or a legal guardian, who must also be at least 18 years of age. The collection of personal data from children under the age of 13 does not take place, at least not with our knowledge.

Shopping cart0
There are no products in the cart!
Continue shopping