Privacy Policy

Privacy Policy

1. Introduction and Controller Details

Welcome to our website. We appreciate your interest in Evelyn's Collection. The following policy outlines how we handle your personal data when you interact with our website. Personal data includes any information that can be used to personally identify you.

The data controller responsible for processing personal data on this website, in accordance with the General Data Protection Regulation (GDPR), is Evelyn's Collection. The controller determines the purposes and means of processing your personal data.

For security purposes and to protect the transmission of sensitive information (such as inquiries or orders), this website utilizes SSL/TLS encryption. You can verify an encrypted connection by looking for "https://" and the padlock icon in your browser's address bar.

Please note that we do not engage in automated decision-making or profiling that produces legal effects or significantly affects you, as outlined in Article 22 of the GDPR.

2. Data Collection During Website Visits

If you use our website strictly for informational purposes—meaning you do not register an account or explicitly provide us with information—we only collect the technical data your browser automatically transmits to our server (known as "server log files"). This data is necessary to correctly display the website and includes:

  • The specific page visited on our site

  • Date and time of access

  • Amount of data sent (in bytes)

  • The referring website (source/referrer)

  • Browser type and version

  • Operating system used

  • IP address (anonymized where applicable)

This data is processed in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in maintaining the stability, security, and functionality of our website. We do not share or use this data for other purposes, though we reserve the right to review log files if there are concrete indications of illegal activity.

3. Cookies

To enhance your browsing experience and enable certain functionalities, we use cookies across our website. Cookies are small text files stored on your device.

  • Session Cookies: These are automatically deleted once you close your browser.

  • Persistent Cookies: These remain on your device and allow us or our third-party partners to recognize your browser on your next visit. They are automatically deleted after a predetermined duration.

Cookies process specific user information, such as IP addresses, location data, and browser details. They simplify processes like keeping items in a virtual shopping cart. If personal data is processed via our cookies, it is done either to fulfill a contract (Art. 6(1)(b) GDPR) or to safeguard our legitimate interest in providing an optimized, user-friendly website (Art. 6(1)(f) GDPR).

We also partner with advertising networks to improve our marketing. Consequently, third-party cookies may be stored on your device. You will be explicitly informed about the use of these partner cookies and the data they collect in the sections below.

You can configure your browser to notify you when cookies are placed, allowing you to accept them on a case-by-case basis or reject them entirely. Please consult your browser's help menu (e.g., Chrome, Safari, Firefox, Edge) to manage your cookie preferences. Upon your first visit, a cookie banner will request your consent for non-essential cookies, which you can adjust at any time. Note that declining cookies may limit the functionality of our website.

4. Contacting Us

When you contact us (e.g., via email or our contact form), we collect the personal data provided in your message. This data is used solely to respond to your inquiry and manage the associated technical administration.

The legal basis for this is our legitimate interest in addressing your request (Art. 6(1)(f) GDPR). If your inquiry relates to concluding a contract, Art. 6(1)(b) GDPR also applies. Once your request is fully resolved, your data will be deleted, provided there are no legal retention obligations requiring us to keep it.

5. Customer Accounts and Contract Processing

When you open a customer account or provide data to execute a contract, we collect and process your personal data under Art. 6(1)(b) GDPR. The specific data collected is detailed on the respective input forms.

You may request the deletion of your customer account at any time by contacting us. We retain the data provided for contract execution. Once the contract is fulfilled or the account is deleted, your data will be restricted and subsequently deleted after mandatory tax and commercial retention periods expire, unless you have consented to further use or we are legally permitted to retain it for other specified purposes.

6. Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will send you regular updates about our offers. Only your email address is required; any additional information is optional and used for personalization.

We use a double opt-in process, meaning you must explicitly confirm your subscription via a link sent to your email. By confirming, you consent to us using your data (Art. 6(1)(a) GDPR). We also store your IP address and the time of registration to prevent misuse. You can unsubscribe at any time via the link in the newsletter or by contacting us.

6.2 Marketing to Existing Customers

If you provide your email address while purchasing goods, we reserve the right to send you promotional emails regarding similar products or services. This is based on our legitimate interest in personalized direct marketing (Art. 6(1)(f) GDPR). You may opt out of these emails at any time by contacting us, at no cost other than basic transmission rates.

7. Order Processing & Payment Providers

To fulfill your order, we share your personal data with our partnered shipping companies (Art. 6(1)(b) GDPR). Your payment details are forwarded to authorized financial institutions and payment providers as necessary to process your transaction.

  • PayPal: If you select PayPal (including credit card, direct debit, or installment payments via PayPal), your data is securely transferred to PayPal (Europe) S.a.r.l. et Cie, S.C.A. PayPal may conduct a credit check using mathematical-statistical processes to assess your payment capability. You can review their privacy policy at PayPal.com and object to this processing by contacting them directly.

  • SOFORT (Klarna): If you choose "SOFORT", your payment is processed by SOFORT GmbH (part of the Klarna Group). Your order details are transmitted securely to facilitate the transaction. Please refer to SOFORT’s privacy policy for more details.

8. Review Reminders

With your explicit consent (Art. 6(1)(a) GDPR) granted during or after checkout, we will use your email address to send a one-time reminder to leave a review of your order. You can withdraw this consent at any time by emailing us.

9. Social Media Plugins (Shariff Solution)

To protect your privacy, our website uses social media plugins (Facebook, Google+, Instagram) integrated via an HTML link (the "Shariff Solution") rather than full plugins. This ensures that no data is automatically transferred to these networks simply by loading our page. A connection is only established when you actively click the button, opening a new window to the respective platform.

10. Online Marketing

10.1 DoubleClick by Google

We use DoubleClick by Google to display relevant ads, track campaign performance, and prevent repetitive ads. Google uses a cookie ID to track which ads are shown in your browser. This is based on our legitimate interest in optimizing our marketing (Art. 6(1)(f) GDPR). You can disable conversion tracking cookies via your browser settings or visit the Digital Advertising Alliance for more control.

10.2 Google AdWords Conversion Tracking

We utilize Google AdWords to promote our products externally. If you click on a Google Ad, a conversion tracking cookie is placed on your device (valid for 30 days, no personal identification). This helps us generate conversion statistics. You can opt out by adjusting your browser settings or installing the Google Ad Preferences plugin.

11. Web Analytics (Google Universal Analytics)

We use Google Analytics to analyze website usage. Google uses cookies to evaluate how you interact with the site. We have enabled IP anonymization (_anonymizeIp()), meaning your IP address is truncated within the EU/EEA before transmission to Google's US servers. This processing is based on our legitimate interest in statistical analysis and site optimization (Art. 6(1)(f) GDPR).

We also utilize the User-ID feature for cross-device analysis, tracking interactions across different sessions anonymously. You can opt out of Google Analytics entirely by installing the Google Analytics Opt-out Browser Add-on.

12. Retargeting and Remarketing

Facebook Custom Audience (Pixel): With your explicit consent (Art. 6(1)(a) GDPR), we use the Facebook Pixel to track user behavior after interacting with a Facebook ad. This optimizes our advertising efforts. While the data is anonymous to us, Facebook may link it to your profile for their own marketing.

Google AdWords Remarketing: We use this feature to display interest-based ads on Google and third-party sites based on your browsing history. This is based on our legitimate interest (Art. 6(1)(f) GDPR). You can disable this via Google's Ad Settings.

13. Your Rights as a Data Subject

Under the GDPR, you possess comprehensive rights regarding your personal data:

  • Right of Access (Art. 15): Request details about the data we process, purposes, recipients, and storage duration.

  • Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete data.

  • Right to Erasure (Art. 17): Request deletion of your data, provided legal exceptions do not apply.

  • Right to Restriction (Art. 18): Request that we limit the processing of your data under specific conditions.

  • Right to Notification (Art. 19): Be informed about the recipients to whom your data has been disclosed following a rectification or erasure request.

  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format or have it transferred to another controller.

  • Right to Withdraw Consent (Art. 7(3)): Revoke any previously granted consent at any time, effective for the future.

  • Right to Lodge a Complaint (Art. 77): File a complaint with a relevant data protection supervisory authority if you believe your rights have been violated.

Right to Object:

You may object at any time to the processing of your personal data based on our legitimate interests due to reasons arising from your specific situation. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your rights. You may unconditionally object to processing for direct marketing purposes at any time.

14. Data Retention Period

We store personal data only as long as necessary to fulfill legal retention requirements (e.g., commercial and tax regulations). Once these periods expire, the data is routinely deleted, unless it is still required for contract fulfillment or we have an overriding legitimate interest in retaining it.

15. Contact Information

If you have any questions regarding our privacy practices, this Privacy Policy, or if you wish to exercise your data rights, please contact us at:

Email: info@evelyns-collection.com