Privacy Policy

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Elyse. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”).

When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) COOKIES

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device.

Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit).

If personal data is also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the execution of the contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies).

If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected within the following paragraphs.

Please note that you can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) CONTACT

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form.

This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR.

If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

Your data will be deleted after final processing of your inquiry, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

In accordance with Art. 6(1)(b) GDPR, personal data is further collected and processed if you provide it to us for the execution of a contract or when opening a customer account.

Which data is collected can be seen from the respective input forms.

Deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the controller.

We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further data use permitted by law, about which we inform you below.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of any additional data is voluntary and is used to address you personally.

For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking on a corresponding link that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time.

The data collected by us when registering for the newsletter will be used exclusively for advertising purposes by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning.

After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this declaration.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email.

For this purpose, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6(1)(f) GDPR.

If you have initially objected to the use of your email address for this purpose, we will not send emails.

You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates.

After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1

The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods.

We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing.

If payment service providers are used, we will explicitly inform you of this below.

The legal basis for the transfer of data is Art. 6(1)(b) GDPR.

7.2 Use of payment service providers

– PayPal

In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg, as part of payment processing.

The transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal.

For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in determining your creditworthiness.

The result of the credit check with regard to the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method.

The credit report may contain probability values (so-called score values). Where score values are included in the result, they are based on scientifically recognized mathematical-statistical procedures. Address data is included in the calculation of the score values, among other things.

Further information can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

– SOFORT

If you select the payment method “SOFORT”, payment processing is carried out via the payment service provider SOFORT GmbH, Germany.

We pass on the information provided by you during the ordering process together with the information about your order to SOFORT in accordance with Art. 6(1)(b) GDPR.

SOFORT GmbH is part of the Klarna Group.

The transfer of your data takes place exclusively for the purpose of payment processing and only to the extent necessary.

Further information:
https://www.klarna.com/sofort/datenschutz

8) CONTACTING FOR REVIEW REMINDER

We use your email address to send a one-time reminder to submit a review of your order for the rating system used by us, provided that you have given us your express consent during or after your order in accordance with Art. 6(1)(a) GDPR.

You can revoke your consent at any time by sending a message to the controller.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook plugins with Shariff solution

Social plugins of the Facebook social network are used on our website.

To increase the protection of your data, these buttons are not fully integrated plugins but only embedded as HTML links.

This ensures that when you access a page of our website containing such buttons, no connection to Facebook servers is established.

Only when you click the button will a new browser window open and call up the Facebook page.

9.2 Google+ plugins with Shariff solution

The same applies to Google+ plugins operated by Google LLC.

No connection is established before clicking.

9.3 Instagram plugin with Shariff solution

The same applies to Instagram plugins.

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google.

DoubleClick uses cookies to display relevant ads, improve campaign performance reports and prevent duplicate ads.

Processing is based on Art. 6(1)(f) GDPR.

10.2 Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking.

A cookie is set when a user clicks on an ad.

Cookies expire after 30 days and are not used for personal identification.

11) WEB ANALYSIS SERVICES

Google (Universal) Analytics

This website uses Google Analytics.

IP anonymization is enabled.

Data may be transferred to the USA.

You can disable tracking via plugin.

12) RETARGETING / REMARKETING

Facebook Pixel

Tracks user behavior after viewing ads.

Processing only with consent.

Google AdWords Remarketing

Allows interest-based advertising.

13) RIGHTS OF THE DATA SUBJECT

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction (Art. 18 GDPR)
  • Right to information (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent
  • Right to lodge a complaint

13.2 RIGHT TO OBJECT

If we process your data based on legitimate interest, you have the right to object at any time.

14) STORAGE PERIOD OF PERSONAL DATA

Personal data is stored in accordance with legal retention periods.

After expiry, the data will be deleted unless further processing is required.