Privacy Notice

We are glad that you are interested in our online shop. Protecting your privacy is very important to us. In the following we will inform you in detail about your rights and about how we handle your data.

 

1. DATA PROTECTION AT A GLANCE

GENERAL NOTICES

The following notices give you a simple overview of what happens with your personal data when you visit our website. Personal data is all data that can personally identify you. You can find detailed information on the topic of data protection in our privacy policy below this text.

DATA COLLECTION ON OUR WEBSITE

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. The website operator’s contact information can be found in the legal notice of this website. How do we collect your data? Some of your data is collected by you sharing it with us. For example, this can be data that you enter into a contact form. Our IT systems also automatically collect other data when you visit our website. This is mainly technical data (e.g. internet browser, operating system or the time of accessing the page). This data is automatically collected as soon as you access our website. What do we use your data for? Some of your data is collected to ensure that we provide our website to you without errors. Other data can be used to analyse your user behaviour. What rights do you have regarding your data? You have the right to receive free information at any time about the source, recipient and purpose of your stored personal data. You also have the right to request that this data be rectified, blocked or erased. You can contact us at any time about this or about other questions on the topic of data protection at the address indicated in our legal notice. Moreover, you have the right to lodge a complaint with the competent supervisory authority.

ANALYSIS TOOLS AND TOOLS FROM THIRD PARTY PROVIDERS

When you visit our website, your surfing behaviour can be statistically analysed. This happens primarily with cookies and with what are called analysis programs. Your surfing behaviour is normally analysed anonymously. Your surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information regarding this in the following privacy policy. You can object to this analysis. In this privacy policy we will inform you about your options to object.

 

2. GENERAL NOTICES AND REQUIRED INFORMATION

PRIVACY

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and according to statutory data protection provisions as well as this privacy policy. When you use this website, various personal data is collected. Personal data is data that can personally identify you. This privacy policy explains which data we collect and what we use it for. It also explains how it is collected and the purpose for which it is collected. We would like to point out that data transfer on the internet (e.g. when communicating by email) may have security vulnerabilities. Absolute protection of data from access by third parties is not possible.

NOTICE ABOUT THE RESPONSIBLE AUTHORITY

The responsible authority for data processing on this website is:
EMMIE GRAY GmbH
Hansaallee 321
40549 Düsseldorf
Managing Director: Sarah Zergaw, Paolo Oliva
E-mail: info@emmiegray.de
The responsible authority is the natural person or legal entity that has sole or joint decision-making powers about the purposes and means of processing personal data (e.g. names, email addresses etc.).

WITHDRAWAL OF YOUR CONSENT FOR DATA PROCESSING

Many data processing operations are only possible with your express consent. At any time, you may withdraw your consent that you have given. A formless notification by an email to us is sufficient to do so. The lawfulness of data processing carried out up until the withdrawal remains unaffected by the withdrawal.

SSL OR TLS ENCRYPTION

This website uses SSL or TLS encryption for security reasons and to protect the transfer of confidential contents such as orders or inquiries that you send to us as the website operator. You can recognise encrypted connections when the address line of your browser switches from “http://” to “https://”, and you can also recognise encrypted connections by the lock symbol in your browser line. When your SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

ENCRYPTED PAYMENT TRANSACTIONS ON THIS WEBSITE

If an obligation exists to transmit your payment data to us after concluding a contract for payment, this data will be necessary for payment processing. Payment transactions via common means of payment (Visa/MasterCard, direct debit) are only made via an encrypted SSL or TLS connection.
During encrypted communication, your payment data that you transmit to us cannot be read by third parties.

INFORMATION, BLOCKING, ERASURE

Under applicable statutory provisions you have the right at any time

- to free information about your stored personal data, its source and recipients and the purpose of data processing

- to rectification, blocking or erasure of this data if no statutory duty of retention excludes this

- to have the data you provided to us transferred to yourself or to third parties at any time

- to object at any time to the use of your data for advertising purposes or to withdraw your consent.

You can contact us at any time about this or about other questions on the topic of personal data at the address indicated in our legal notice.

 

3. DATA COLLECTION ON OUR WEBSITE

COOKIES

Our website sometimes uses what are known as cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies help make our offer more user-friendly, effective and secure. Cookies are small text files that are saved on your computer and stored by your browser. Most of the cookies that we use are known as session cookies. They are automatically deleted after the end of your visit. Other cookies stay stored on your device until you delete them. These cookies enable us to recognise your browser when you visit again. You can set your browser in such a way that you are informed about cookies being placed and only allow cookies in individual cases or activate the acceptance of cookies in certain situations or generally exclude them as well as automatically delete cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required for conducting electronic communications processes or for providing certain functions that you desire (e.g. our shopping cart function) are stored on the basis of Art. 6 Par. 1 letter f GDPR. The website operator has a legitimate interest in storing cookies for providing its service in a technically error-free and optimised manner. If other cookies (e.g. cookies to analyse your surfing behaviour) are stored, they will be separately addressed in this privacy policy. Every browser differs in the way that cookie settings are managed. The help menu of every browser describes how you can change your cookie settings. You can find cookie settings for your browser at the following links:

Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.20/de/cookies.html

SERVER LOG FILES

The provider of the website automatically collects and stores information in what are called server log files that your browser automatically transmits to us. These are the:
Name of the accessed website
File
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
Truncated IP address
Requested provider
This data is not combined with other data sources. The basis for the data processing is Art. 6 Par. 1 letter f GDPR, which permits data processing to fulfil a contract or precontractual actions.

HOSTING SERVICE BY A THIRD PARTY PROVIDER

A third party provider performs services for us regarding hosting and presenting our website on our behalf and as part of processing. All data that is collected during use of this website or by forms in the online shop intended for collecting data as described below are processed on the third party provider’s servers. Processing on other servers only takes place in the scope that is explained here.
This service provider is based within a country of the European Union or of the European Economic Area.

CONTACT FORM

When you send us inquiries via our contact form, we store your information from the inquiry form including the contact data that you entered there for the purpose of processing the inquiry and in case you have follow-up questions. We do not disclose this data without your consent.
Data that is entered into the contact form is only processed on the basis of your consent (Art. 6 Par. 1 letter a GDPR). You can withdraw this consent at any time. A formless notification by an email to us is sufficient to do so. The lawfulness of data processing operations carried out up until the withdrawal remains unaffected by the withdrawal.
Data that you enter in our contact form remains with us until you request us to erase it, object to your consent for storage or the purpose of storing the data no longer applies (e.g. after finishing processing your inquiry). Mandatory statutory provisions – especially retention periods – remain unaffected.

DATA PROCESSING (CUSTOMER AND CONTRACT DATA)

We collect, process and use personal data only if it is required for providing reasons, content arrangement or change of the legal circumstances (master data). This takes place based on Art. 6 Par. 1 letter f GDPR, which permits data processing to fulfil a contract or precontractual actions. We only collect, process and use personal data about the usage of our website (usage data) if it is required to enable users to use our service or to bill for our service. Collected customer data is erased after the conclusion of the order or after the end of the business relationship. Statutory retention periods remain unaffected.

DATA TRANSMISSION AT CONTRACT CONCLUSION FOR ONLINE SHOPS, RETAILERS AND DISPATCH OF GOODS

We only transmit personal data to third parties if it is necessary to process contracts such as sending data for payment processing to the financial institution commissioned with payment processing and the delivery service (including the email address that you provided so that you can follow the status of your delivery). No further data transmission is made or only if you have given your express consent to such a transmission. Your data is not disclosed to third parties such as for advertising purposes without express consent. The basis for the data processing is Art. 6 Par. 1 letter b GDPR, which permits data processing to fulfil a contract or precontractual actions.

 

4. SOCIAL MEDIA

FACEBOOK PLUG-INS (LIKE & SHARE BUTTON)

Plug-ins are integrated into our website from the social network provider, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise Facebook plug-ins by the Facebook logo or the “like button” on our website. You can find an overview of Facebook plug-ins here:
https://developers.facebook.com/docs/plugins/
When you visit our website, a direct connection is made between your browser and the Facebook server via the plug-in. This causes Facebook to receive the information that you visited our website with your IP address. When you click on the Facebook “like button” while you are logged into your Facebook account, you can link the contents of our website to your Facebook profile. By doing so, Facebook can classify your visit to our website to your user account. We would like to point out that we as the provider of this website do not receive any knowledge of the content of the transmitted data or its use by Facebook.
You can find more information on this in Facebook’s privacy policy at:
https://de-de.facebook.com/policy.php./
If you do not want Facebook to classify your visit to our website with your Facebook user account, please log out of your Facebook user account.

INSTAGRAM PLUGIN

Functions of the Instagram service are integrated into our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. When you are logged into your Instagram account, you can link the contents of our website with your Instagram profile by clicking on the Instagram button. By doing so, Instagram can classify your visit to our website to your user account. We would like to point out that we as the website provider do not receive any knowledge of the content of the transmitted data or its use by Instagram. You can find more information on this in Instagram’s privacy policy at: https://instagram.com/about/legal/privacy/

PINTEREST PLUGIN

We use social plug-ins from the social network Pinterest on our website. Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).
When you access a website that contains these plug-ins, your browser makes a direct connection to Pinterest’s servers. The plug-in transmits protocol data to Pinterest’s server in the USA. This protocol data may contain your IP address, the address of websites that you visited that also contain Pinterest functions, the type and settings of your browser, the date and time of the inquiry, the way you use Pinterest and cookies. In Pinterest’s privacy notice, you can find more information about the purpose, scope and further processing and use of your data by Pinterest as well as your associated rights and options to protect your privacy: https://about.pinterest.com/de/privacy-policy.

 

5. ANALYSIS TOOLS AND ADVERTISING

This website uses functions from the website analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses what are called cookies. They are text files that are stored on your computer and make it possible to analyse your use of our website. The information that the cookie creates about your use of this website is normally transferred to a Google server in the USA and stored there. Google Analytics cookies are stored on the basis of Art. 6 Par. 1 letter f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise its web presence and its advertising. IP anonymisation We activated the IP anonymisation function on this website. As a result, Google truncates your IP address before transmission to the USA within member states of the European Union or in other states party to the Agreement on the European Economic Area. Your full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. Google will use this information to analyse your use of our website, to compile reports about website activities and to perform other services for the website operator associated with website use and internet use. Google will not combine other data with IP addresses transmitted from your browser as part of Google Analytics. Browser plug-ins You can prevent cookies from being stored by making an appropriate setting on your browser software. However, we would like to point out to you that in that case you may not be able to completely use all the functions of this website. You can also prevent Google from collecting data created by cookies and related to your use of the website (incl. your IP address), and you can prevent Google from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to collection of data
You can prevent Google Analytics from collecting your data by clicking on the following link. This places an opt-out cookie that prevents your data from being collected when you visit this website in the future: Deactivate Google Analytics. You can find more information in Google’s privacy policy about how Google Analytics handles user data: https://support.google.com/analytics/answer/6004245? hl=de. Contract Data Processing
We concluded a contract with Google for contract data processing and completely implement the strict directives of the German data protection authorities when using Google Analytics.
Demographic features for Google Analytics
This website uses the “demographic features” function from Google Analytics. This allows reports to be created that contain statements on age, gender and interests of website visitors. This data comes from Google’s targeted advertising as well as visitor data from third party providers. This data cannot be classified to any certain person. You can deactivate this function at any time via the display settings on your Google account or generally prohibit Google Analytics from collecting your data as set forth in the “objection to data collection” item.

GOOGLE ANALYTICS REMARKETING

Our websites use Google Analytics Remarketing functions in connection with Google Adwords and Google DoubleClick cross-device functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables one to link an advertising target group, which has been set up with Google Analytics Remarketing, with Google Adwords and Google DoubleClick cross-device functions. In this way, targeted, personalised advertisements, which were tailored to you based on your earlier usage and surfing on one device (e.g. a mobile phone), can also be shown to you on another of your devices (e.g. a tablet or PC). If you have given an appropriate consent, Google links your web and app browsing history with your Google account for this purpose. In this way, the same personalised advertisements can be switched to each device which you log onto using your Google account. To support this function, Google Analytics produces authenticated ID’s for users, which are temporarily linked with our Google Analytics data, in order to define and establish target groups for cross-device marketing. You can object to cross-device remarketing and targeting by deactivating personalised advertising in your Google account. You can follow this link to do this: https://www.google.com/settings/ads/onweb/.
Summarising of the data collected in your Google account about you is performed on the basis of your consent, which you can give or withdraw (Art.6 Par.1 letter a GDPR). Collection of data which is not combined in your Google account (e.g. because you have no Google account or you have withdrawn your consent) is performed on the basis of Art.6 Par.1 letter f GDPR. There is a legitimate interest because the website operator has an interest in anonymised analysis of visitors to the website for purposes of advertising. You can find more information on this in Google’s privacy policy at: https://policies.google.com/privacy?hl=en-GB.

GOOGLE ADWORDS AND GOOGLE CONVERSION TRACKING

This website uses Google AdWords. AdWords is an online advertising programme belonging to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use so-called conversion tracking in connection with Google AdWords. If you click on an advertisement placed by Google, a cookie is set for conversion tracking. Cookies are small text files that are stored on the user’s internet browser. These cookies cease to work after 30 days and do not enable personal identification of the user. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the advertisement and has been redirected to this page. Each Google AdWords customer receives a different cookie. These cookies cannot be traced over AdWords customers’ websites. Conversion statistics are produced, using the information collected with the use of conversion cookies, for AdWords customers who have chosen conversion tracking. These customers learn the total number of users who have clicked on their advertisements and have been forwarded to a page that has been equipped with a conversion tracking tag. However, they do not receive information which would enable them to identify users personally. If you do not wish to participate in this tracking, you can object to this use by easily deactivating the Google conversion tracking cookie in the user settings on your internet browser. Then you will not be included in the conversion tracking statistics. Conversion cookies are stored on the basis of Art. 6 Par. 1 letter f GDPR. The website operator has a legitimate interest in analysing user behaviour to optimise its web presence and its advertising. You can learn more about Google AdWords and Google Conversion Tracking in Google’s data privacy policy: https://policies.google.com/privacy?hl=en-GB.
You can set your browser in such a way that you are informed about cookies being placed and only allow cookies in individual cases or activate the acceptance of cookies in certain situations or generally exclude them as well as automatically delete cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.

FACEBOOK PIXEL

In order to measure conversion, our website uses the visitor action pixel provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This enables a website operator to trace the behaviour of a website visitor, after they have clicked on a Facebook advertisement and have been redirected to the operator’s website. In this way, we can assess the effectiveness of Facebook advertisements for statistical and market research purposes and can optimise future marketing measures. The data which we collect, as operator of the website, is anonymous: we cannot use it to draw any conclusions about users’ identities. However, Facebook may save and process the data, and may link it with the relevant user profile. Facebook may use this data for its own advertising purposes, in accordance with its data privacy policy. This enables Facebook to place advertisements on Facebook pages or elsewhere. As a website operator, we cannot influence this use of the data. Facebook’s data privacy notices provide further advice on how you can protect your privacy: https://www.facebook.com/about/privacy/. You can also turn off the custom audiences remarketing function in your advertisement settings at https://www.facebook.com/ads/preferences/? entry_product=ad_settings. To do this, you must be registered with Facebook. If you do not have a Facebook account, you can turn off Facebook’s use-based advertising on the European Interactive Digital Advertising Alliance’s website: http://www.youronlinechoices.com/uk/your-ad-choices.

 

6. NEWSLETTER

If you would like to receive the newsletter offered on this website, we require your email address as well as information which will enable us to check that you own the email address and agree to receive the newsletter. We will only collect additional information from you on a voluntary basis. We will only use this information in order to send you the requested information, and will not pass it on to any third parties. Data that is entered into the newsletter application form will only be processed on the basis of your consent (Art. 6 Par. 1 letter a GDPR). You can at any time withdraw your consent to our retention of your data and your email address, and our use of them for sending you the newsletters, e.g. through the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations carried out up until the withdrawal of consent remains unaffected by the withdrawal. Data which you provide in order to receive the newsletter will be retained to distribute the newsletter to you, and will be deleted after you cancel your subscription. Data which we have retained for any other purposes will remain unaffected.

 

7. ADVERTISING VIA EMAIL IN ACCORDANCE WITH § 7 para. 3 UWG [the law against unfair competition]

As permitted by § 7 para. 3 UWG, we are entitled to use an email address, which you have provided when obtaining a fee-based product or service from us, in order to market similar products or services of ours directly to you. You can revoke this use of your email address at any time, if you no longer want to receive advertisements about similar products or services, without incurring any costs other than transmission costs in accordance with the basic tariffs. You can also unsubsribe from product recommendations by clicking on the unsubscribe link in any mailing, or you can send an email to newsletter@emmiegray.de.

 

8. CRITEO

Our website uses Criteo S.A. cookies to help us understand the interests and needs of visitors better. A cookie is a small text file, containing a random but clear identification number, which we (or a business partner such as a website analyst) save on your computer via your web browser. These cookies, and the identification numbers saved in them, will not be combined with your name, address or other personally identifiable information, unless you have expressly agreed that we may specially send you information which is tailored to your interests.

We use these cookies to recognise your browser, so that we can understand your movements on our website, and can assess and measure the success of various marketing measures. We use this information to improve our website, in particular to tailor our information and offers to users’ individual interests and needs.

 

9. PAYMENT PROVIDERS

PAYPAL

On our website, we offer payment via PayPal, amongst others. The provider of this service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). If you choose to pay via PayPal, the payment data which you provide will be transferred to PayPal. This takes place based on Art. 6 Par. 1 letter a GDPR (consent) and Art. 6 Par. 1 letter b GDPR (processing to fulfil a contract). You can revoke your consent to this data processing at any time. Such revocation will not affect the validity of any prior data processing operations.

RECAPTCHA

We use the ReCAPTCHA service provided by Google Inc (Google) to protect your orders over the internet. The query helps us to distinguish whether a data input has been performed by a person or abusively by means of automated, mechanical processing. The query involves sending Google the IP address and any further information which it requires for the ReCAPTCHA service. For this purpose, your input will be passed to Google and then further worked on by them. However, Google truncates your IP address before transmission within member states of the European Union or in other states party to the Agreement on the European Economic Area. Your full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases. Google will use this information on our behalf to analyse your use of our website. IP addresses from your browser, which are transferred to Google for ReCAPTCHA, will not be combined with other data held by Google. Google’s relevant data protection regulations will apply to this data. For more information about Google’s data privacy policy, see: https://policies.google.com/privacy?hl=en-GB.