Privacy policy

Last updated: August 12, 2026

MANOS Energy GmbH Privacy Policy

MANOS Energy GmbH is committed to protecting and respecting your privacy. This Privacy Policy describes how MANOS Energy GmbH (referred to in this policy as "Manos", "our", or "we") collects, uses, shares, and protects your personal information, what choices you have regarding your personal information, and how you can contact us.

Company Details

  • Data Controller: MANOS Energy GmbH

  • Registered Address: Sommerstraße 23, 82008 Unterhaching, Bavaria, Germany

  • Phone: +49 1743150766

  • Email: info@manos.ai

  • DPO Email: isc@manos.ai

Table of Contents

  1. Scope of This Privacy Policy

  2. Personal Information We Collect

  3. Legal Basis for Processing Your Personal Information

  4. Whether Providing Information Is Mandatory

  5. Data Storage and Retention Period

  6. How We Protect Your Data

  7. How We Share Your Data

  8. Cross-Border Data Transfers

  9. Cookies and Similar Technologies

  10. Automated Decision-Making

  11. Your Rights

  12. Amendments

  13. Contact Us

1. Scope of This Privacy Policy

This Privacy Policy (the "Policy") applies to the personal information that Manos collects and processes when you interact with us as a customer, including when you purchase our products or services, visit our website or stores, attend online/offline events, subscribe to marketing emails, or communicate with us.

Shopify Platform Notice:

This website is hosted on the Shopify Inc. e-commerce platform. When you use this website, Shopify collects and processes your personal information (such as IP address, browsing behavior, device information) to provide and improve services.

For more details, please review the Shopify Consumer Privacy Policy.

2. Personal Information We Collect

We adhere to the principle of data minimization, collecting only the minimum personal information necessary. We collect information across the following categories:

  • Account Registration & Login: Email address.

  • Purchase & Transactions: Billing address, shipping address, postal code, city, payment method type, transaction ID, last four digits of credit card, and billing amount.

    (Note: Payment processing is handled by Shopify and its providers. We do not store full credit card numbers).

  • Device & Browsing Info: IP address, browser type (User Agent), operating system, screen resolution, and time zone.

  • Advertising & Marketing: Viewed pages, cart additions, search terms, Facebook Cookie ID, Google Click ID, and TikTok Click ID. With explicit consent, we use your email for promotional updates.

  • Customer Communications: Online chat records, email logs, after-sales records, and support request details.

  • Minors' Information: We do not knowingly collect information from individuals under 16 years of age. If discovered, such data will be deleted immediately. Contact info@manos.ai if you believe a minor has provided us with personal data.

3. Legal Basis for Collecting and Processing Your Personal Information

In accordance with the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:

Legal Basis Applicable Scenarios
Explicit Consent Marketing via email/SMS, non-essential Cookies, personalized advertising.
Contract Performance Processing orders, payments, shipping, returns, exchanges, and account management.
Legal Obligation Compliance with legal, tax, and accounting record-keeping requirements.
Publicly Available Info Processing personal information you have already made public.
Legitimate Interests Service optimization, service security, fraud prevention, and website analytics.
Protection of Vital Interests Protecting the vital interests of you or others.
Public Interest Processing necessary for reasons of public interest.

4. Whether Providing Information Is Mandatory

Providing personal information is voluntary, but necessary for specific features:

  • Account Registration: Requires name and email address.

  • Product Purchase: Requires shipping address and payment details to fulfill orders.

  • Marketing Communications: Requires an email address (declining will not affect your ability to shop).

5. Data Storage and Retention Period

Data Storage Location

To better comply with data protection laws, our data storage facilities are established in Germany.

Data Retention Periods

Data Type Retention Period Legal Basis
Account Info (Name, email, phone) Deleted 30 days after account deletion Contract performance
Order & Transaction Records 10 years after order completion Legal obligation (German Commercial Code HGB §257, Tax Code AO §147)
Marketing Data (Email, phone) Deleted immediately upon withdrawal of consent Consent
Customer Support Records 2 years after communication ends Legitimate interests
Browsing Behavior Data(Cookies) Up to 13 months Consent
Device & Network Logs 6 months Legitimate interests (Security)

6. How We Protect Your Data

MANOS Energy GmbH acts as the Data Controller. Service providers (Shopify, payment processors, logistics) act as Data Processors strictly under our instructions.

Our Security Measures:

  • Transmission Encryption: Encrypted using TLS 1.2 or higher protocols.

  • Storage Encryption: Stored data is encrypted using AES-256.

  • Access Control: Role-Based Access Control (RBAC) restricted to authorized personnel.

  • Security Assessments & Audits: Periodic incident response planning and regular penetration testing.

  • Employee Training & Vendor Management: Regular staff security training and strict confidentiality/data processing agreements with third parties.

7. How We Share Your Data

We may disclose information to third parties under legitimate circumstances:

Recipient Category Specific Examples Sharing Purpose Shared Information
E-Commerce Platform Shopify Inc. Online store hosting & operations Name, email, address, order details, IP address
Payment Processors Shopify Payments / PayPal Transaction processing Payment method type, transaction amount, last 4 digits of card
Logistics Providers DHL / UPS / FedEx Order delivery Name, shipping address, phone, order details
Advertising Platforms Meta (Facebook) / Google Ads / TikTok Targeted ads & measurement Cookie ID, Click ID, browsing behavior
Data Analytics Google Analytics Website usage analysis IP address (anonymized), viewed pages, device info
Email Services Email marketing platforms Dispatching marketing emails Name, email address
Authorities Tax authorities / Law enforcement Legal compliance Information as required by law

8. Cross-Border Data Transfers

Some third-party providers operate outside the European Economic Area (EEA) or the United Kingdom. When transferring data internationally, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission / UK authorities.

  • Adequacy Decisions issued by the European Commission.

  • Binding Corporate Rules (BCRs) for intra-group transfers.

Key International Third Parties:

Third Party Location Data Transferred
Shopify Inc. Canada / United States Order info, account details, IP address, browsing behavior
Meta Platforms United States Cookie ID, Click ID, browsing behavior
Google LLC United States Anonymized IP address, browsing behavior, device info
TikTok United States / Singapore Click ID, browsing behavior

9. Cookies and Similar Technologies

Cookies are small files placed on your device to recall login status and shopping cart contents.

Cookie Type Purpose Consent Required? Retention Period
Essential Core website features (login, cart, security) No Session or up to 13 months
Analytics Usage analysis & optimization Yes Up to 13 months
Advertising Personalized advertising Yes Up to 13 months
Social Media Social sharing features Yes Up to 13 months

  • You can manage preferences via our Cookie banner or browser settings.

  • For more details, see our Cookie Policy.

10. Automated Decision-Making

We do not use automated processing that produces legal effects or significantly affects you without human intervention. We only use automated profiling to display personalized ads and build general customer profiles to tailor relevant product recommendations.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data free of charge.

  • Right to Data Portability: Obtain your data in a structured, machine-readable format.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of data, subject to legal retention obligations.

  • Right to Rectification: Request corrections to inaccurate or incomplete information.

  • Right to Withdraw Consent: Revoke consent at any time without affecting past processing.

  • Right to Restriction: Limit how your data is processed during dispute resolution.

  • Right to Object: Object to processing based on legitimate interests or direct marketing.

  • Right to Opt-Out of Marketing: Unsubscribe at any time via email links or contacting us directly.

  • Right to Lodge a Complaint: File a complaint with your local Data Protection Supervisory Authority.

To exercise your rights, email us at info@manos.ai or isc@manos.ai. Identity verification may be required before processing requests (typically fulfilled within 1 month).

12. Amendments

We reserve the right to modify this Policy. Material changes will be communicated via website banners, pop-ups, or emails prior to taking effect, alongside an updated "Last Updated" date.

13. Contact Us

For questions, requests, or privacy concerns, reach out to our dedicated data protection team:

  • Phone: +49 1743150766

  • General Email: info@manos.ai

  • DPO Email: isc@manos.ai

  • Postal Address:

    MANOS Energy GmbH

    Sommerstraße 23, 82008 Unterhaching,

    Bavaria, Germany