Privacy Notice

Privacy Policy

The controller responsible for data processing is:
Linda Ilona Eberhard
Thüringerstraße 2
64297 Darmstadt
Germany
madebyiloua@gmail.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically saves a so called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, volume of data transferred and the requesting provider (access data) and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble free operation of the site and improving our offer. This serves to protect our legitimate interests in a correct representation of our offer, which predominate in the context of a weighing of interests in accordance with Art. 6 Sect. 1 S. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation, please use the contact option described in this policy.

2. Data Processing for Contract Fulfillment, Contacting and Opening a Customer Account

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (for example, via contact form or email). Mandatory fields are marked as such, as we absolutely require the data for contract fulfillment or to process your contact. Without this information, you cannot send the order or the contact request. The data collected can be seen from the respective input forms. We use the data provided by you for contract fulfillment and processing your inquiries in accordance with Art. 6 Sect. 1 S. 1 lit. b GDPR.

If you have given your consent in accordance with Art. 6 Sect. 1 S. 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening a customer account. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired in accordance with Art. 6 Sect. 1 S. 1 lit. c GDPR. This does not apply if you have expressly consented to further use of your data or if we reserve the right to further data use that is permitted by law. Your customer account can be deleted at any time via a message to the contact option mentioned above or via a function provided for this purpose in the customer account.

3. Data Processing for Shipping Purposes

For the fulfillment of the contract in accordance with Art. 6 Sect. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have given us your express consent in accordance with Art. 6 Sect. 1 S. 1 lit. a GDPR, we will pass on your email address to the selected shipping service provider so that they can contact you before delivery for the purpose of notifying you of the delivery. Consent can be revoked at any time by sending a message to us or directly to the shipping service provider.

4. Data Processing for Payment Transactions

When processing payments, we work with technical service providers, credit institutions and payment service providers. Depending on the selected payment method, we pass on the data necessary for the transaction to our partners (Art. 6 Sect. 1 S. 1 lit. b GDPR). In some cases, payment service providers collect data themselves on their own website. In this respect, the privacy policy of the respective payment service provider applies. For fraud prevention and optimization of payment processes, we use service providers based on our legitimate interests in accordance with Art. 6 Sect. 1 S. 1 lit. f GDPR.

5. Advertising via Email

If you subscribe to our newsletter, we use the necessary data to send it to you based on your consent in accordance with Art. 6 Sect. 1 S. 1 lit. a GDPR. You can unsubscribe at any time via a link in the newsletter or by sending a message to us. After unsubscribing, we will delete your email address from the recipient list.

6. Cookies and Other Technologies

To make visiting our website attractive, we use technologies including cookies. This serves to protect our legitimate interests in an optimized presentation in accordance with Art. 6 Sect. 1 S. 1 lit. f GDPR. Necessary cookies are set automatically. We only use other technologies with your consent in accordance with Art. 6 Sect. 1 S. 1 lit. a GDPR. You can revoke your consent at any time in the cookie settings or directly here:

Zustimmung widerrufen

7. Online Presence on Instagram

Our online presence is an offer from Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Information about your use is usually transmitted to a server of Meta Platforms, Inc. in the USA. There is an adequacy decision by the European Commission for the USA (EU U.S. Data Privacy Framework). Meta Platforms, Inc. is certified under this framework. Data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

8. Contact Options and Your Rights

As a data subject, you have the following rights:

  • According to Art. 15 GDPR, the right to information about your data processed by us.
  • According to Art. 16 GDPR, the right to rectification of incorrect data.
  • According to Art. 17 GDPR, the right to deletion of your data, provided there are no legal exceptions.
  • According to Art. 18 GDPR, the right to restriction of processing.
  • According to Art. 20 GDPR, the right to data portability.
  • According to Art. 77 GDPR, the right to complain to a supervisory authority.

If you have any questions, please contact us directly using the contact details in the legal notice.

Right to Object

Insofar as we process personal data to protect our legitimate interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time. For other purposes, you only have a right to object for reasons arising from your particular situation. After you have exercised your right to object, we will no longer process your data unless we can prove compelling legitimate reasons or the processing serves legal claims.