We are glad that you are interested in our online shop. Protecting your privacy is very important to us. In the following we will inform you in detail about your rights and about how we handle your data.
1. DATA PROTECTION AT A GLANCE
DATA COLLECTION ON OUR WEBSITE
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. The website operator’s contact information can be found in the legal notice of this website. How do we collect your data? Some of your data is collected by you sharing it with us. For example, this can be data that you enter into a contact form. Our IT systems also automatically collect other data when you visit our website. This is mainly technical data (e.g. internet browser, operating system or the time of accessing the page). This data is automatically collected as soon as you access our website. What do we use your data for? Some of your data is collected to ensure that we provide our website to you without errors. Other data can be used to analyse your user behaviour. What rights do you have regarding your data? You have the right to receive free information at any time about the source, recipient and purpose of your stored personal data. You also have the right to request that this data be rectified, blocked or erased. You can contact us at any time about this or about other questions on the topic of data protection at the address indicated in our legal notice. Moreover, you have the right to lodge a complaint with the competent supervisory authority.
ANALYSIS TOOLS AND TOOLS FROM THIRD PARTY PROVIDERS
2. GENERAL NOTICES AND REQUIRED INFORMATION
NOTICE ABOUT THE RESPONSIBLE AUTHORITY
The responsible authority for data processing on this website is:
EMMIE GRAY GmbH
Managing Director: Sarah Zergaw, Paolo Oliva
The responsible authority is the natural person or legal entity that has sole or joint decision-making powers about the purposes and means of processing personal data (e.g. names, email addresses etc.).
WITHDRAWAL OF YOUR CONSENT FOR DATA PROCESSING
Many data processing operations are only possible with your express consent. At any time, you may withdraw your consent that you have given. A formless notification by an email to us is sufficient to do so. The lawfulness of data processing carried out up until the withdrawal remains unaffected by the withdrawal.
SSL OR TLS ENCRYPTION
This website uses SSL or TLS encryption for security reasons and to protect the transfer of confidential contents such as orders or inquiries that you send to us as the website operator. You can recognise encrypted connections when the address line of your browser switches from “http://” to “https://”, and you can also recognise encrypted connections by the lock symbol in your browser line. When your SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
ENCRYPTED PAYMENT TRANSACTIONS ON THIS WEBSITE
If an obligation exists to transmit your payment data to us after concluding a contract for payment, this data will be necessary for payment processing. Payment transactions via common means of payment (Visa/MasterCard, direct debit) are only made via an encrypted SSL or TLS connection.
During encrypted communication, your payment data that you transmit to us cannot be read by third parties.
INFORMATION, BLOCKING, ERASURE
Under applicable statutory provisions you have the right at any time
- to free information about your stored personal data, its source and recipients and the purpose of data processing
- to rectification, blocking or erasure of this data if no statutory duty of retention excludes this
- to have the data you provided to us transferred to yourself or to third parties at any time
- to object at any time to the use of your data for advertising purposes or to withdraw your consent.
You can contact us at any time about this or about other questions on the topic of personal data at the address indicated in our legal notice.
3. DATA COLLECTION ON OUR WEBSITE
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html
SERVER LOG FILES
The provider of the website automatically collects and stores information in what are called server log files that your browser automatically transmits to us. These are the:
Name of the accessed website
Browser type and browser version
Operating system used
Host name of the accessing computer
Time of the server request
Truncated IP address
This data is not combined with other data sources. The basis for the data processing is Art. 6 Par. 1 letter f GDPR, which permits data processing to fulfil a contract or precontractual actions.
HOSTING SERVICE BY A THIRD PARTY PROVIDER
A third party provider performs services for us regarding hosting and presenting our website on our behalf and as part of processing. All data that is collected during use of this website or by forms in the online shop intended for collecting data as described below are processed on the third party provider’s servers. Processing on other servers only takes place in the scope that is explained here.
This service provider is based within a country of the European Union or of the European Economic Area.
When you send us inquiries via our contact form, we store your information from the inquiry form including the contact data that you entered there for the purpose of processing the inquiry and in case you have follow-up questions. We do not disclose this data without your consent.
Data that is entered into the contact form is only processed on the basis of your consent (Art. 6 Par. 1 letter a GDPR). You can withdraw this consent at any time. A formless notification by an email to us is sufficient to do so. The lawfulness of data processing operations carried out up until the withdrawal remains unaffected by the withdrawal.
Data that you enter in our contact form remains with us until you request us to erase it, object to your consent for storage or the purpose of storing the data no longer applies (e.g. after finishing processing your inquiry). Mandatory statutory provisions – especially retention periods – remain unaffected.
DATA PROCESSING (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only if it is required for providing reasons, content arrangement or change of the legal circumstances (master data). This takes place based on Art. 6 Par. 1 letter f GDPR, which permits data processing to fulfil a contract or precontractual actions. We only collect, process and use personal data about the usage of our website (usage data) if it is required to enable users to use our service or to bill for our service. Collected customer data is erased after the conclusion of the order or after the end of the business relationship. Statutory retention periods remain unaffected.
DATA TRANSMISSION AT CONTRACT CONCLUSION FOR ONLINE SHOPS, RETAILERS AND DISPATCH OF GOODS
We only transmit personal data to third parties if it is necessary to process contracts such as sending data for payment processing to the financial institution commissioned with payment processing and the delivery service (including the email address that you provided so that you can follow the status of your delivery). No further data transmission is made or only if you have given your express consent to such a transmission. Your data is not disclosed to third parties such as for advertising purposes without express consent. The basis for the data processing is Art. 6 Par. 1 letter b GDPR, which permits data processing to fulfil a contract or precontractual actions.
4. SOCIAL MEDIA
FACEBOOK PLUG-INS (LIKE & SHARE BUTTON)
Plug-ins are integrated into our website from the social network provider, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise Facebook plug-ins by the Facebook logo or the “like button” on our website. You can find an overview of Facebook plug-ins here:
When you visit our website, a direct connection is made between your browser and the Facebook server via the plug-in. This causes Facebook to receive the information that you visited our website with your IP address. When you click on the Facebook “like button” while you are logged into your Facebook account, you can link the contents of our website to your Facebook profile. By doing so, Facebook can classify your visit to our website to your user account. We would like to point out that we as the provider of this website do not receive any knowledge of the content of the transmitted data or its use by Facebook.
If you do not want Facebook to classify your visit to our website with your Facebook user account, please log out of your Facebook user account.
We use social plug-ins from the social network Pinterest on our website. Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).
When you access a website that contains these plug-ins, your browser makes a direct connection to Pinterest’s servers. The plug-in transmits protocol data to Pinterest’s server in the USA. This protocol data may contain your IP address, the address of websites that you visited that also contain Pinterest functions, the type and settings of your browser, the date and time of the inquiry, the way you use Pinterest and cookies. In Pinterest’s privacy notice, you can find more information about the purpose, scope and further processing and use of your data by Pinterest as well as your associated rights and options to protect your privacy: https://about.pinterest.com/de/privacy-policy.
5. ANALYSIS TOOLS AND ADVERTISING
This website uses functions from the website analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses what are called cookies. They are text files that are stored on your computer and make it possible to analyse your use of our website. The information that the cookie creates about your use of this website is normally transferred to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 Par. 1 letter f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise its web presence and its advertising. IP anonymisation We activated the IP anonymisation function on this website. As a result, Google truncates your IP address before transmission to the USA within member states of the European Union or in other states party to the Agreement on the European Economic Area. Your full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. Google will use this information to analyse your use of our website, to compile reports about website activities and to perform other services for the website operator associated with website use and internet use. Google will not combine other data with IP addresses transmitted from your browser as part of Google Analytics. Browser plug-ins You can prevent cookies from being stored by making an appropriate setting on your browser software. However, we would like to point out to you that in that case you may not be able to completely use all the functions of this website. You can also prevent Google from collecting data created by cookies and related to your use of the website (incl. your IP address), and you can prevent Google from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to collection of data
We concluded a contract with Google for contract data processing and completely implement the strict directives of the German data protection authorities when using Google Analytics.
Demographic features for Google Analytics
This website uses the “demographic features” function from Google Analytics. This allows reports to be created that contain statements on age, gender and interests of website visitors. This data comes from Google’s targeted advertising as well as visitor data from third party providers. This data cannot be classified to any certain person. You can deactivate this function at any time via the display settings on your Google account or generally prohibit Google Analytics from collecting your data as set forth in the “objection to data collection” item.
GOOGLE ANALYTICS REMARKETING
Our websites use Google Analytics Remarketing functions in connection with Google Adwords and Google DoubleClick cross-device functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables one to link an advertising target group, which has been set up with Google Analytics Remarketing, with Google Adwords and Google DoubleClick cross-device functions. In this way, targeted, personalised advertisements, which were tailored to you based on your earlier usage and surfing on one device (e.g. a mobile phone), can also be shown to you on another of your devices (e.g. a tablet or PC). If you have given an appropriate consent, Google links your web and app browsing history with your Google account for this purpose. In this way, the same personalised advertisements can be switched to each device which you log onto using your Google account. To support this function, Google Analytics produces authenticated ID’s for users, which are temporarily linked with our Google Analytics data, in order to define and establish target groups for cross-device marketing. You can object to cross-device remarketing and targeting by deactivating personalised advertising in your Google account. You can follow this link to do this: https://www.google.com/settings/ads/onweb/.
GOOGLE ADWORDS AND GOOGLE CONVERSION TRACKING
You can set your browser in such a way that you are informed about cookies being placed and only allow cookies in individual cases or activate the acceptance of cookies in certain situations or generally exclude them as well as automatically delete cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.
If you would like to receive the newsletter offered on this website, we require your email address as well as information which will enable us to check that you own the email address and agree to receive the newsletter. We will only collect additional information from you on a voluntary basis. We will only use this information in order to send you the requested information, and will not pass it on to any third parties. Data that is entered into the newsletter application form will only be processed on the basis of your consent (Art. 6 Par. 1 letter a GDPR). You can at any time withdraw your consent to our retention of your data and your email address, and our use of them for sending you the newsletters, e.g. through the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations carried out up until the withdrawal of consent remains unaffected by the withdrawal. Data which you provide in order to receive the newsletter will be retained to distribute the newsletter to you, and will be deleted after you cancel your subscription. Data which we have retained for any other purposes will remain unaffected.
7. ADVERTISING VIA EMAIL IN ACCORDANCE WITH § 7 para. 3 UWG [the law against unfair competition]
As permitted by § 7 para. 3 UWG, we are entitled to use an email address, which you have provided when obtaining a fee-based product or service from us, in order to market similar products or services of ours directly to you. You can revoke this use of your email address at any time, if you no longer want to receive advertisements about similar products or services, without incurring any costs other than transmission costs in accordance with the basic tariffs. You can also unsubsribe from product recommendations by clicking on the unsubscribe link in any mailing, or you can send an email to firstname.lastname@example.org.
Our website uses Criteo S.A. cookies to help us understand the interests and needs of visitors better. A cookie is a small text file, containing a random but clear identification number, which we (or a business partner such as a website analyst) save on your computer via your web browser. These cookies, and the identification numbers saved in them, will not be combined with your name, address or other personally identifiable information, unless you have expressly agreed that we may specially send you information which is tailored to your interests.
We use these cookies to recognise your browser, so that we can understand your movements on our website, and can assess and measure the success of various marketing measures. We use this information to improve our website, in particular to tailor our information and offers to users’ individual interests and needs.
9. PAYMENT PROVIDERS
On our website, we offer payment via PayPal, amongst others. The provider of this service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). If you choose to pay via PayPal, the payment data which you provide will be transferred to PayPal. This takes place based on Art. 6 Par. 1 letter a GDPR (consent) and Art. 6 Par. 1 letter b GDPR (processing to fulfil a contract). You can revoke your consent to this data processing at any time. Such revocation will not affect the validity of any prior data processing operations.