Privacy policy

Translator

 

–––––––––––––––––––––––––––
Data Protection Declaration
–––––––––––––––––––––––––––


1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.
1.2 The controller responsible for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is Carré Design Studios, Nicola Steuck, Hauptstraße 44, 40789 Monheim am Rhein, Germany, Tel.: 01746313889, Email: info@nicolafatale.store. The controller is the natural or legal person who determines the purposes and means of processing personal data, either alone or jointly with others.
1.3 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser's address bar.

2) Data Collection When Visiting Our Website
If you use our website for informational purposes only (i.e., without registering or providing us with information), we only collect the data that your browser transmits to our server (known as "server log files"). When you visit our website, we collect the following data, which is technically necessary to display the website:

  • The page you visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (if applicable, in anonymized form)
    The processing is carried out in accordance with Art. 6 (1) point f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to review the server log files if there is evidence of illegal use.

3) Hosting
We use the Shopify system provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") to host and display our online store. All data collected on our website is processed on Shopify's servers. Data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event of data transfer to Canada, the European Commission has determined an adequate level of data protection.
For more information on Shopify's privacy practices, please visit: https://www.shopify.com/legal/privacy.
Further processing on servers other than Shopify's will only occur as described below.

4) Cookies
To make your visit to our website more appealing and to enable certain functions, we use cookies on various pages. These are small text files stored on your device. Some cookies are deleted after you close your browser (session cookies), while others remain on your device and allow us or our partner companies to recognize your browser on your next visit (persistent cookies). Cookies collect and process specific user information, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie. You can check the storage duration in your browser's cookie settings.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart). If personal data is processed through cookies, the processing is carried out in accordance with Art. 6 (1) point b GDPR for contract execution or Art. 6 (1) point f GDPR to safeguard our legitimate interests in the optimal functionality of the website and a user-friendly design.
We also work with advertising partners to make our website more interesting for you. When you visit our website, cookies from partner companies may be stored on your device (third-party cookies). You will be informed separately about the use of such cookies and the scope of the information collected in the relevant sections below.
You can configure your browser to notify you about the use of cookies and decide individually whether to accept them or exclude cookies in certain cases or generally. Each browser manages cookie settings differently, and you can find instructions in the help menu of your browser. Links to the settings for common browsers are provided below:

5) Contacting Us
When you contact us (e.g., via contact form or email), we collect personal data. The data collected in the case of a contact form is visible in the respective form. This data is stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing is Art. 6 (1) point f GDPR, based on our legitimate interest in responding to your request. If your contact aims to conclude a contract, the additional legal basis is Art. 6 (1) point b GDPR. Your data will be deleted after your inquiry has been fully processed, provided there are no legal retention obligations.

6) Data Processing for Customer Accounts and Contract Execution
In accordance with Art. 6 (1) point b GDPR, personal data will be collected and processed if you provide it to us for contract execution or when opening a customer account. The data collected can be seen in the respective input forms. You can delete your customer account at any time by sending a message to the controller's address provided above. We store and use the data provided by you for contract processing. After complete contract execution or deletion of your customer account, your data will be blocked and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to further use, which is permitted by law.

7) Use of Customer Data for Direct Marketing
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and allows us to address you personally. We use the double opt-in procedure for sending newsletters. This means that we will only send you a newsletter if you have explicitly confirmed your consent. We will then send you a confirmation email asking you to confirm your subscription by clicking on a link.
By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When registering for the newsletter, we store your IP address and the date and time of registration to prevent misuse of your email address. The data collected during registration will be used exclusively for sending the newsletter. You can unsubscribe at any time via the link provided in the newsletter or by contacting the controller. After unsubscribing, your email address will be deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to further use, which is permitted by law.

8) Data Processing for Order Handling
8.1 If necessary for contract execution, we will share your personal data with the transport company and the payment service provider in accordance with Art. 6 (1) point b GDPR.
8.2 We work with external shipping partners to fulfill our contractual obligations. Your name and delivery address will be shared with the shipping partner selected by us for the purpose of delivering goods, in accordance with Art. 6 (1) point b GDPR.
8.3 If goods are delivered by DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will share your email address with DHL in accordance with Art. 6 (1) point a GDPR, provided you have given your consent during the ordering process. This allows DHL to coordinate the delivery date or notify you of the shipment status. Otherwise, only the recipient's name and delivery address will be shared with DHL for delivery purposes.
8.4 If goods are delivered by FedEx (FedEx Express Germany GmbH, Langer Kornweg 34k, 65451 Kelsterbach), we will share your email address with FedEx in accordance with Art. 6 (1) point a GDPR, provided you have given your consent during the ordering process. This allows FedEx to coordinate the delivery date or notify you of the shipment status. Otherwise, only the recipient's name and delivery address will be shared with FedEx for delivery purposes.

9) Use of Payment Service Providers

10) Use of Videos
We use YouTube videos embedded on our website, provided by Google Ireland Limited. When you play a video, YouTube cookies are set to collect information about user behavior. For more information, visit: https://www.google.com/policies/privacy/.

11) Rights of the Data Subject
You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7 (3) GDPR)

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

12) Duration of Storage of Personal Data
Personal data is stored for as long as necessary to fulfill the purposes for which it was collected or as required by law. After the retention period expires, the data will be deleted unless further processing is necessary for legal reasons.