Privacy policy

1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all information that can be used to identify you personally.

1.2 The responsible entity for data processing on this website under the General Data Protection Regulation (GDPR) is Rosa Delphine Lucia Georgs, Atelier KARe, Fischmarkt 2A, 22767 Hamburg, Germany, Tel.: 01623241754, E-mail: 4telier.kare@gmail.com. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection During Your Visit to Our Website
If you visit our website purely for informational purposes, meaning you do not register or provide us with any other information, we only collect the data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

  • The website you visited
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source/referral from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if necessary, in anonymized form)

The processing takes place in accordance with Art. 6 (1) lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

3) Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision by the European Commission.

4) Cookies
In order to make the visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow saving page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If personal data is processed by individual cookies we use, the processing is done in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, under Art. 6 (1) lit. a GDPR in case of granted consent, or under Art. 6 (1) lit. f GDPR for the safeguarding of our legitimate interests in ensuring the best functionality of the website as well as providing a customer-friendly and effective design of the website visit.

You can configure your browser to inform you when cookies are being set and to decide individually on their acceptance or to exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us
In the context of contacting us (e.g., via contact form or email), personal data will be processed – exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in answering your inquiry according to Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it is clear that the matter has been conclusively resolved, and unless there are legal retention obligations.

6) Data Processing During the Creation of a Customer Account
According to Art. 6 (1) lit. b GDPR, personal data is further collected and processed when you provide it to us during the creation of a customer account. The data required for account creation can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the aforementioned address of the data controller. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully settled, there are no legal retention periods, and we do not have a legitimate interest in retaining it further.

7) Use of Customer Data for Direct Marketing
7.1 Newsletter Registration
If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory field for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for the newsletter dispatch, ensuring that you will only receive the newsletter after explicitly confirming your consent via a verification link sent to the provided email address.

By activating the confirmation link, you grant us your consent to process your personal data in accordance with Art. 6 (1) lit. a GDPR. We also store the IP address registered by your internet service provider (ISP) as well as the date and time of your registration to trace potential misuse of your email address. The data we collect during the newsletter registration is used solely for this purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have explicitly consented to further use of your data or we have a right to further use that is legally permissible and that we inform you about in this statement.

7.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by email. According to § 7 (3) of the German Unfair Competition Act (UWG), we do not need separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing according to Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails.

You have the right to object to the use of your email address for this marketing purpose at any time, with future effect, by notifying the data controller mentioned at the beginning. In this case, only the basic transmission costs will apply. Once we receive your objection, we will immediately stop using your email address for marketing purposes.

7.3 Product Availability Notification by Email
For temporarily unavailable items, you can register to receive email notifications about their availability. In this case, we will send you a one-time email notification when the item you selected becomes available again. The only required field for sending this notification is your email address. Providing additional data is voluntary and will be used to address you personally. We use the double opt-in procedure for the email notification service to ensure you only receive the notification after explicitly confirming your consent by clicking the verification link sent to your provided email address.

By activating the confirmation link, you grant us your consent to process your personal data according to Art. 6 (1) lit. a GDPR. We also store the IP address registered by your ISP as well as the date and time of your registration to trace potential misuse of your email address. The data we collect during the registration for the product availability notification is strictly used for this purpose.

You can unsubscribe from the availability notifications at any time by sending a message to the data controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our notification list unless you have explicitly consented to further use of your data or we have a right to further use that is legally permissible and that we inform you about in this statement.

8) Data Processing for Order Processing
8.1 As far as necessary for contract execution for delivery and payment purposes, the personal data we collect will be transmitted to the commissioned transport company and the bank institution under Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or digital products based on an appropriate contract, we process the contact details you provided during the order (name, address, email address) in order to inform you within the legally required time about upcoming updates by suitable communication means (e.g., postal mail or email). Your contact details will only be processed for this purpose, and only to the extent necessary.

We also work with the following service providers to assist us in the execution of concluded contracts. Certain personal data will be transmitted to these service providers according to the information provided below.

8.2 Transfer of Personal Data to Shipping Service Providers

  • DHL
    As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
    We will transmit your email address and/or phone number according to Art. 6 (1)

We provide your email address and/or phone number to the provider in accordance with Art. 6 (1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, we will provide only the recipient's name and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The data transfer will only occur to the extent necessary for the delivery of the goods. In this case, it will not be possible to coordinate the delivery date with the provider or receive a delivery notification in advance.

You may withdraw your consent at any time with future effect by contacting the responsible party mentioned above or the provider directly.

  • DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany.

We provide your email address and/or phone number to the provider in accordance with Art. 6 (1) lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, we will provide only the recipient's name and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The data transfer will only occur to the extent necessary for the delivery of the goods. In this case, it will not be possible to coordinate the delivery date with the provider or receive a delivery notification in advance.

You may withdraw your consent at any time with future effect by contacting the responsible party mentioned above or the provider directly.

8.3 Use of Payment Service Providers

  • PayPal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method from the provider where you make an advance payment, your payment data (including name, address, bank and card details, currency, and transaction number) as well as information about the contents of your order will be transmitted to them in accordance with Art. 6 (1) lit. b GDPR. The transmission of your data is solely for the purpose of processing the payment with the provider and only to the extent necessary.

If you choose a payment method where we make an advance payment, you will also be required to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly details for an alternative payment method).

In order to protect our legitimate interest in assessing your creditworthiness, this data will be forwarded to the provider for a credit check according to Art. 6 (1) lit. f GDPR. The provider checks, based on the personal data you provided, as well as additional data (such as shopping cart, invoice amount, order history, and payment experiences), whether the selected payment method can be granted considering payment and/or default risks.

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but is not limited to, address data.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may still be entitled to process your personal data if necessary for contract-related payment processing.

9) Tools and Miscellaneous

Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when the page is accessed, in the form of an interactive user interface where consents for specific cookies and/or cookie-based applications can be given by checking boxes. The tool ensures that consent is given before loading any cookies that require consent. Only when consent is granted will such cookies be placed on the user's device.

The tool sets technically necessary cookies to store your cookie preferences. In general, no personal user data is processed.

If, in specific cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, therefore, a legally compliant design of our website.

Another legal basis for processing is also Art. 6 (1) lit. c GDPR. As the data controller, we are legally obligated to make the use of technically unnecessary cookies conditional on user consent.

If necessary, we have concluded a data processing agreement with the provider to ensure the protection of our visitors' data and to prevent unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

10) Rights of the Data Subject

10.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (information and intervention rights), with the conditions for the exercise of these rights referring to the legal basis mentioned:

  • Right of access in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to erasure in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to notification in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to withdraw consent given in accordance with Art. 7 (3) GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.

10.2 Right to Object

If we process your personal data on the basis of a legitimate interest, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the affected data. However, further processing may be possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You may exercise this right as described above.

If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.

11) Duration of Storage of Personal Data

The duration of storage of personal data depends on the respective legal basis, the processing purpose, and—if applicable—the statutory retention periods (e.g., commercial and tax law retention periods).

In the case of processing personal data based on explicit consent in accordance with Art. 6 (1) lit. a GDPR, the data will be stored until you withdraw your consent.

If there are legal retention periods for data processed in the context of business or business-like obligations under Art. 6 (1) lit. b GDPR, this data will be routinely deleted once the retention periods expire, provided that it is no longer necessary for contract fulfillment or contract initiation and/or we have no legitimate interest in further retention.

If personal data is processed based on Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes under Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 (2) GDPR.

Unless stated otherwise in other sections of this notice regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.