Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 Thank you for visiting our website. Below, we provide information about how your personal data is processed when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The data controller for this website is Online Store. The data controller is the individual or legal entity who, alone or jointly with others, determines the purposes and means of processing personal data (as defined by the European Union General Data Protection Regulation — GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or enquiries). You can recognise an encrypted connection by the address bar in your browser beginning with “https://” and by the padlock icon.

2) Data Collection When Visiting Our Website

When you use our website solely for informational purposes (without registering or providing us with any information), we only collect the data that your browser transmits to our server (known as “server log files”). This information is necessary to display the website and ensure its stability. The following data may be collected:

• Page visited
• Date and time of access
• Amount of data transferred (in bytes)
• Website or page from which you accessed our site (referrer)
• Browser used
• Operating system used
• IP address used (which may be anonymised)

The processing of this data is based on our legitimate interest in improving the stability and functionality of our website, in accordance with Article 6(1)(f) of the GDPR. The data will not be transferred or used for any other purpose unless there are specific indications of unlawful activity, in which case the log files may be reviewed retrospectively.

3) Cookies

To make our website more appealing and to enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted when you end your session (session cookies), while others remain stored to recognise your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser information, location or IP address.

Persistent cookies are automatically deleted after a defined period, which varies depending on the cookie. Some cookies make the ordering process easier (for example, by remembering products in your shopping cart). Where cookies process personal data, such processing is based on Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) of the GDPR (legitimate interest in ensuring optimal website functionality and an effective user experience).

We may work with advertising partners who also place cookies on your device when you visit our website (third-party cookies). Where this applies, we will inform you in this Privacy Policy about their use and scope.

You can configure your browser to notify you when cookies are being installed and decide individually whether to accept them. The method for changing these settings varies depending on the browser, so please refer to your browser’s help menu. Here are some useful links:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera

If you reject cookies, certain website functions may not be available.

4) Contact

When you contact us (for example, via a contact form or email), we collect your personal data. The information collected is specified in the relevant form. We use this data exclusively to respond to your enquiry and manage any related technical matters. The legal basis for this processing is our legitimate interest in responding to your enquiry (Article 6(1)(f) of the GDPR). Where your contact is related to entering into a contract, the legal basis will also be Article 6(1)(b) of the GDPR.

Once the matter has been resolved and there are no legal obligations requiring us to retain the data, your personal data will be deleted.

5) Creating Customer Accounts and Processing Contracts

When you provide us with personal data in order to enter into a contract or create a customer account, we process this information in accordance with Article 6(1)(b) of the GDPR. The information required is specified in the relevant forms.

You may request the deletion of your customer account at any time by contacting the data controller at the address provided above. Once the contract has been completed or the account has been deleted, the data will be restricted from further use for tax and commercial record-keeping purposes and will be deleted once the applicable retention periods have expired, unless you have consented to further use of the data or such use is permitted by law.

6) Use of Data for Direct Marketing

6.1 Subscribing to our Newsletter

If you subscribe to our newsletter, we will regularly send you offers and updates. We only require your email address; providing additional information is optional and may be used to personalise our communications.

We use a “double opt-in” process. This means that you will receive a confirmation email, and we will only start sending you the newsletter after you click the confirmation link.

By activating the link, you consent to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR. We record your IP address and the date and time of registration to prevent misuse.

You may unsubscribe at any time by using the unsubscribe link included in the newsletter or by contacting us at help.emmaandcharlotte@gmail.com. Once you unsubscribe, your email address will be removed from our mailing list, unless you have consented to another use of your data or such use is permitted by law.

6.2 Sending Newsletters to Existing Customers

If you provided us with your email address when making a purchase, we may use it to send you offers for similar products without requiring additional consent. This is based on our legitimate interest in personalised direct marketing, in accordance with Article 6(1)(f) of the GDPR.

You may object to this use of your email address at any time by contacting us.