Privacy Policy
Privacy Policy
1) Information About the Collection of Personal Data and Contact Details of the Controller
1.1
We are delighted that you are visiting our website and thank you for your interest. Below, we provide information about the handling of your personal data when using our website. Personal data includes all data that can be used to personally identify you.
1.2
The controller for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is [Allure Avenue]. The controller is the natural or legal person who determines the purposes and means of processing personal data, either alone or jointly with others.
1.3
For security purposes and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.
2) Data Collection When Visiting Our Website
If you use our website for informational purposes only, without registering or otherwise transmitting information to us, we collect only the data your browser transmits to our server (known as "server log files"). When you visit our website, we collect the following data, which is technically necessary for displaying the website:
- The website visited
- Date and time of access
- Amount of data sent (in bytes)
- Source/referral from which you accessed the site
- Browser used
- Operating system used
- IP address (possibly anonymized)
The data processing is carried out in accordance with Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used for other purposes. However, we reserve the right to review server log files retrospectively if specific indications of unlawful use arise.
3) Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted after your browsing session ends (session cookies), while others remain on your device to allow us or partner companies to recognize your browser during your next visit (persistent cookies).
Cookies may process certain user information, such as browser and location data or IP addresses. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. Some cookies help streamline the ordering process, such as remembering the contents of your shopping cart for a future visit.
Data processing via cookies is carried out under Art. 6 (1)(b) GDPR to fulfill contracts or under Art. 6 (1)(f) GDPR to safeguard our legitimate interest in optimizing website functionality and user experience.
You can configure your browser to notify you about cookie settings and allow you to decide on a case-by-case basis, exclude cookies for specific cases, or disable them entirely. Please note that disabling cookies may limit website functionality.
4) Contacting Us
When contacting us (e.g., via a contact form or email), personal data is collected. The specific data collected is evident from the contact form. This data is stored and used solely for responding to your inquiry or for related administrative purposes.
The legal basis for processing this data is our legitimate interest in responding to your request, as per Art. 6 (1)(f) GDPR. If your inquiry relates to contract execution, additional processing under Art. 6 (1)(b) GDPR may apply. Your data will be deleted once your inquiry is resolved, provided there are no conflicting legal retention obligations.
5) Data Processing for Account Creation and Contract Fulfillment
Personal data is also collected and processed when you provide it to us to create an account or fulfill a contract. The specific data collected is apparent from the input forms. You can delete your account at any time by contacting the controller. Data required for contract fulfillment will be retained as per legal retention obligations and deleted after these periods expire unless further use is required or permitted by law.
6) Use of Data for Direct Marketing
6.1 Email Newsletter
By subscribing to our newsletter, you agree to receive regular updates about our offers. Only your email address is required, and additional information is optional. Newsletters are sent via a double opt-in process, ensuring your explicit consent. You can unsubscribe at any time using the link provided in the newsletter or by contacting us.
6.2 Newsletters to Existing Customers
If you’ve provided your email during a purchase, we may send you promotional emails for similar products. You can opt out of this at any time by notifying us.
7) Data Processing for Order Fulfillment
7.1 Sharing Data with Service Providers
The personal data we collect will be shared with the delivery company tasked with shipping your order, provided this is necessary for delivering the goods. Payment data will also be shared with the financial institution responsible for processing payments, where required. If payment service providers are used, we explicitly inform you below. The legal basis for this data processing is Art. 6 (1)(b) GDPR.
7.2 Use of Payment Service Providers
PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or "Buy Now, Pay Later" (if offered), your payment data will be passed to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for processing. This transfer of data is necessary for payment processing and is carried out under Art. 6 (1)(b) GDPR.
For certain payment methods (e.g., credit card via PayPal, direct debit, or "Buy Now, Pay Later"), PayPal may perform a credit check to assess your financial reliability. This involves transmitting your payment data to credit reference agencies, as permitted under Art. 6 (1)(f) GDPR, based on PayPal’s legitimate interest in determining your ability to pay. You can find more information about PayPal’s privacy policy here: PayPal Privacy Policy.
You may object to this processing of your data by notifying PayPal, but PayPal may still process your data if required for payment processing under contractual obligations.
SOFORT (part of Klarna Group)
If you select "SOFORT" as your payment method, the payment will be processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group. Your payment data, along with information about your order, will be shared with SOFORT under Art. 6 (1)(b) GDPR. For more information, visit the SOFORT privacy policy here: SOFORT Privacy Policy.
8) Contact for Review Requests
If you provide explicit consent during or after placing an order, we may send you a one-time email reminder to review your purchase. This consent is provided under Art. 6 (1)(a) GDPR and can be revoked at any time by contacting us.
9) Use of Social Media Plugins
9.1 Facebook Plugins with Shariff Solution
Our website integrates Facebook plugins (e.g., "Like" and "Share" buttons) using the Shariff solution to protect your data. These plugins are provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. When you visit our site, no direct connection is made to Facebook’s servers unless you actively click the plugin.
Facebook Inc. is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards. For details on how Facebook processes data, visit the Facebook Privacy Policy.
9.2 Instagram Plugins with Shariff Solution
Similarly, Instagram plugins are embedded using Shariff. Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA, ensures compliance with EU data protection laws under the Privacy Shield Framework. For more details, visit the Instagram Privacy Policy.
10) Online Marketing
10.1 Google Ads Remarketing
This website uses Google Ads Remarketing to display ads in Google search results or on third-party websites. Google LLC sets a cookie in your browser that tracks which websites you visit, enabling targeted advertising. Data processing is carried out under Art. 6 (1)(f) GDPR, based on our legitimate interest in optimizing marketing efforts.
You can opt out of this tracking by installing the Google Ads plug-in: Google Ads Preferences.
11) Web Analytics Services
Google Analytics
This website uses Google Analytics, a web analytics service by Google LLC, which tracks how users interact with the site. Data is anonymized, ensuring IP addresses cannot be linked to individuals. The legal basis for using Google Analytics is Art. 6 (1)(f) GDPR, based on our legitimate interest in analyzing user behavior to improve the site.
For more details on disabling Google Analytics, visit: Google Analytics Opt-Out.
12) Retargeting/Remarketing/Referral Advertising
Facebook Custom Audience via Pixel
This website uses the "Facebook Pixel" provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. With your explicit consent, this pixel allows us to track user behavior after they interact with our Facebook ads (e.g., clicking or viewing). This enables us to evaluate the effectiveness of our ads for statistical and market research purposes and to optimize future advertising efforts.
The data collected remains anonymous to us and does not reveal any user identities. However, Facebook may process this data and link it to your Facebook account for its own advertising purposes, as outlined in Facebook's Privacy Policy: Facebook Privacy Policy.
If you wish to opt out of Facebook's use of cookies, you can do so through your browser settings or by visiting Digital Advertising Alliance.
Google AdWords Remarketing
We use Google AdWords Remarketing to promote this website through targeted ads in Google search results or on third-party websites. Google LLC uses cookies to deliver ads based on your previous visits to our website. Data processing is conducted under Art. 6 (1)(f) GDPR, based on our legitimate interest in optimizing our online marketing.
To disable personalized Google Ads, visit: Google Ads Preferences.
13) Rights of the Data Subject
13.1 Your Rights
Under applicable data protection laws, you have the following rights regarding the processing of your personal data:
- Right to Access (Art. 15 GDPR): You can request information about the personal data we process, the purposes of processing, data categories, recipients, retention periods, and more.
- Right to Rectification (Art. 16 GDPR): You can request immediate correction of incorrect or incomplete personal data.
- Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data under certain conditions unless we are legally obligated to retain it.
- Right to Restriction of Processing (Art. 18 GDPR): You can request a restriction of data processing in specific situations, such as when data accuracy is contested.
- Right to Data Portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format for transfer to another controller.
- Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw previously given consent at any time, affecting future data processing.
- Right to Lodge a Complaint (Art. 77 GDPR): You can file a complaint with a supervisory authority if you believe your data has been mishandled.
13.2 Right to Object
If we process your data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time due to reasons arising from your specific situation. If you object, we will cease processing your data unless compelling legitimate grounds outweigh your interests or the processing is required for legal claims.
You also have the right to object to the use of your data for direct marketing purposes. If you exercise this right, we will stop using your data for marketing.
14) Duration of Data Storage
The duration of personal data storage depends on legal retention requirements (e.g., commercial or tax regulations). After these periods expire, the data will be routinely deleted unless it is required for fulfilling or initiating a contract, or if we have a legitimate interest in retaining it.