Privacy Policy

PRIVACY POLICY

DATA PROTECTION STATEMENT

1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. In this privacy policy, we explain how your personal data is handled when you use our website. Personal data refers to any information that can personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Dear Amélie. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this site uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser address bar.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website for informational purposes only, i.e., without registering or otherwise transmitting information to us, we only collect the data your browser transmits to our server (server log files). When you access our website, we collect the following technically necessary data to display the website:

  • Website visited

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Source/referring page

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. This data will not be passed on or used for other purposes. However, we reserve the right to review server log files retrospectively if there is concrete evidence of unlawful use.

3. COOKIES

To make the visit to our website attractive and enable certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted after you close your browser (session cookies); others remain on your device and allow us or our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies).

Cookies may collect and process certain user information, such as browser data and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies help simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). Where cookies process personal data, it is either pursuant to Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in a functional, user-friendly experience).

We may work with advertising partners to make our online offering more appealing. For this purpose, third-party cookies may be stored on your device when you visit our website. If we work with such partners, you will be informed individually and separately.

You can configure your browser to notify you about cookie placement and decide individually whether to accept them or exclude cookies for specific cases or entirely. Each browser differs in cookie settings. You can find help for cookie settings via the links below:

Please note that if cookies are disabled, website functionality may be limited.

4. CONTACTING US

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected is indicated in the respective contact form. This data is used solely to respond to your inquiry and for the technical administration associated with it. The legal basis for processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR also applies. Your data will be deleted after your inquiry has been fully processed, unless statutory retention obligations apply.

5. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

Pursuant to Art. 6(1)(b) GDPR, we continue to collect and process personal data if you provide it to us for contract performance or when opening a customer account. The data collected is shown in the respective input forms. Deleting your account is possible at any time and can be done by contacting the controller. We store and use the data provided to fulfill the contract. After the contract is fully executed or your account is deleted, your data will be blocked with respect to tax and commercial retention periods and deleted once these periods expire, unless you have explicitly consented to further use or we are legally permitted to retain it.

6. USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Email newsletter subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. Only your email address is required. Any other information is voluntary and used to personalize content. We use the double opt-in procedure, meaning you will only receive newsletters if you confirm your subscription via a confirmation email.

By clicking the confirmation link, you consent to the use of your data in accordance with Art. 6(1)(a) GDPR. We log your IP address and subscription time to prevent misuse. Data collected during registration is used exclusively for newsletter distribution. You can unsubscribe at any time using the link in the newsletter or by contacting us. Your email address will then be deleted unless further use is legally permitted.

6.2 Email marketing to existing customers

If you provided your email address when purchasing goods or services, we may send you emails with similar offers. This is based on our legitimate interest in personalized marketing under Art. 6(1)(f) GDPR. If you initially objected to this use, we will not send marketing emails. You may object to future use of your email address for marketing at any time by contacting us. You will only incur transmission costs according to basic rates. Once your objection is received, we will stop sending promotional emails.

7. DATA PROCESSING FOR ORDER HANDLING

7.1 We share personal data with the shipping company as needed for delivery. Your payment details are shared with the payment service provider as necessary to process payments. The legal basis is Art. 6(1)(b) GDPR.

7.2 Use of payment service providers

PayPal

When paying via PayPal (including credit card, direct debit, invoice or installment payments via PayPal), we transfer your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This is done in accordance with Art. 6(1)(b) GDPR and only as far as necessary for payment processing.

PayPal may conduct credit checks for certain methods (e.g., invoice or installment). For this, your data may be shared with credit agencies under Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in assessing creditworthiness. For details, see PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

You may object to this processing by contacting PayPal, though PayPal may still be entitled to process your data if required for contractual payment processing.

SOFORT

If you choose SOFORT as your payment method, the transaction is processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. We transmit your order-related data under Art. 6(1)(b) GDPR to facilitate payment. SOFORT GmbH is part of Klarna Group. For details, see: https://www.klarna.com/sofort/datenschutz

8. REVIEW REMINDERS

If you have expressly consented, we use your email address once to remind you to review your order under Art. 6(1)(a) GDPR. You may revoke this consent at any time by contacting us.

9. USE OF SOCIAL MEDIA PLUGINS

9.1 Facebook plugins (Shariff solution)

Our website uses social plugins from Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA). These are implemented as HTML links to prevent automatic data sharing. Only when clicked will a Facebook window open for login and interaction.

Facebook Inc. is certified under the EU-US Privacy Shield. For details: https://www.facebook.com/policy.php

9.2 Google+ plugins (Shariff solution)

We use plugins from Google+ (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), implemented as HTML links. Clicking the button opens a new browser window for Google+ login.

Google LLC is certified under the EU-US Privacy Shield. More info: https://www.google.com/intl/en/policies/privacy/

9.3 Instagram plugins (Shariff solution)

We use plugins from Instagram (Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA), also implemented via HTML links. Clicking the icon opens a browser window to Instagram.

Instagram LLC is certified under the EU-US Privacy Shield. Details: https://help.instagram.com/155833707900388/ 

10. ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads, improve campaign performance reports, and avoid repeatedly showing the same ads to users. Based on cookie identification, Google tracks which ads are shown in which browser, avoiding duplicate ads. Data is processed based on our legitimate interest in optimal website marketing, pursuant to Art. 6(1)(f) GDPR.

DoubleClick can also track conversions via cookie IDs when a user sees a DoubleClick ad and later completes a purchase via the same browser. According to Google, DoubleClick cookies do not contain personal data.

By using these marketing tools, your browser connects directly to Google's servers. We have no control over the extent of data collected. If you are logged into a Google account, your visit may be associated with it. Even if not logged in, Google may store your IP address.

You can opt out of conversion tracking cookies at: https://www.google.de/settings/ads or visit www.aboutads.info for details.

Google LLC is certified under the EU-U.S. Privacy Shield, ensuring compliance with EU data protection standards.

More info: https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking

This website uses Google AdWords and Google AdWords Conversion Tracking, services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you click on a Google ad, a conversion cookie is set. These cookies usually expire after 30 days and do not contain personal data. If you visit specific pages on our website and the cookie has not expired, we can recognize that you clicked on an ad and were redirected to our page. Each AdWords customer receives a unique cookie.

Data collected via conversion cookies is used to generate conversion statistics. If you prefer not to participate, you can disable cookies via your browser settings.

Google LLC is certified under the EU-U.S. Privacy Shield.

More info: https://www.google.de/policies/privacy/ Opt-out plugin: https://www.google.com/settings/ads/plugin?hl=en

11. WEB ANALYTICS SERVICES

Google Universal Analytics

This website uses Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies to analyze your use of the site. The information generated (including the shortened IP address) is transmitted to and stored by Google on servers in the U.S.

This website uses Google Analytics with the extension "_anonymizeIp()", ensuring IP addresses are processed in a shortened form and eliminating direct personal identification. In rare cases, the full IP address may be transferred to a U.S. server and shortened there.

Google processes this data on our behalf to evaluate your use of the website, compile reports, and provide related services. The IP address transmitted is not merged with other Google data.

You can prevent cookie storage by adjusting your browser settings. However, this may limit some website functions. You can also prevent data collection via cookies and data processing by Google by installing the browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, use the following link to place an opt-out cookie that disables future data collection by Google Analytics (this applies only to this browser and domain): Deactivate Google Analytics

Google LLC is certified under the EU-U.S. Privacy Shield.

Google Analytics also enables cross-device visitor analysis using a user ID. Upon first visit, a unique anonymized ID is assigned. You can opt out by deactivating Google Analytics on all devices you use.

More info: https://support.google.com/analytics/answer/2838718?hl=en

12. RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING

Facebook Custom Audiences via Pixel

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If consent is given, this allows tracking of user behavior after clicking on a Facebook ad. This helps evaluate ad effectiveness and optimize future ads.

Data collected is anonymous to us, but stored and processed by Facebook, enabling association with user profiles and use for Facebook's own advertising purposes under Facebook’s Data Policy: https://www.facebook.com/about/privacy/

This may allow Facebook and its partners to display ads on and off Facebook. A cookie may also be stored for this purpose. Processing is based on explicit consent per Art. 6(1)(a) GDPR.

Only users over 13 may provide consent. If you are under 13, parental consent is required.

Facebook Inc. is certified under the EU-U.S. Privacy Shield.

To disable cookies, adjust your browser settings or delete stored cookies. However, disabling all cookies may restrict website functionality. Alternatively, disable third-party cookies via: https://www.aboutads.info/choices/

Google AdWords Remarketing

This site uses Google AdWords Remarketing to advertise within Google search results and on third-party sites. Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

A cookie is set to enable interest-based ads based on prior website visits. Processing is based on our legitimate interest in effective marketing per Art. 6(1)(f) GDPR.

Additional processing only occurs if you’ve consented to Google linking your web and app history to your Google account and using account data for ad personalization. If logged into Google, your data may be combined with Google Analytics to build target audiences.

Opt-out plugin: https://www.google.com/settings/ads/onweb/

Alternatively, manage cookie preferences via www.aboutads.info or adjust your browser settings to manage cookies.

Google LLC is certified under the EU-U.S. Privacy Shield.

More info on Google Ads policies: https://www.google.com/policies/technologies/ads/

13. DATA SUBJECT RIGHTS

13.1 Under applicable data protection law, you have the following rights:

  • Right of access (Art. 15 GDPR): Information about processed personal data, purposes, categories, recipients, storage periods, rights, data origin, and existence of automated decision-making.

  • Right to rectification (Art. 16 GDPR): Correction of inaccurate or incomplete data.

  • Right to erasure (Art. 17 GDPR): Deletion of data under legal grounds, unless processing is required for freedom of expression, legal obligation, public interest, or legal claims.

  • Right to restriction (Art. 18 GDPR): Restrict processing when accuracy is contested, processing is unlawful, data is needed for legal claims, or objection is pending.

  • Right to notification (Art. 19 GDPR): Notification to all recipients of data rectification, erasure, or restriction unless impossible or disproportionate.

  • Right to data portability (Art. 20 GDPR): Receive or transfer your data in a machine-readable format.

  • Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time with future effect.

  • Right to lodge a complaint (Art. 77 GDPR): File a complaint with a supervisory authority if data processing violates GDPR.

13.2 Right to Object

If your data is processed based on legitimate interest under Art. 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds or legal claims.

If your data is processed for direct marketing, you may object at any time. Upon objection, we will cease processing for such purposes.

14. DATA RETENTION PERIOD

Data retention is based on statutory obligations (e.g., tax/commercial). After expiry, data is routinely deleted unless necessary for contract fulfillment or there is a legitimate interest in continued storage.