_
DATA PROTECTION DECLARATION
1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 WE ARE PLEASED THAT YOU ARE VISITING OUR WEBSITE AND THANK YOU FOR YOUR INTEREST. THIS PRIVACY POLICY INFORMS YOU ABOUT HOW YOUR PERSONAL DATA IS HANDLED WHEN USING OUR WEBSITE. PERSONAL DATA REFERS TO ANY INFORMATION THAT CAN BE USED TO IDENTIFY YOU PERSONALLY.
1.2 THE CONTROLLER FOR DATA PROCESSING ON THIS WEBSITE WITHIN THE MEANING OF THE GENERAL DATA PROTECTION REGULATION (GDPR) IS:
GALERIE SECRÈTE C/O MARIUS NIKLAS STURM
WESSLINGERSTRASSE 16A, 82234 HOCHSTADT, GERMANY
PHONE: +49 1522 3990004
EMAIL: INFO@GALERIESECRETE.COM
1.3 THIS WEBSITE USES SSL OR TLS ENCRYPTION FOR SECURITY PURPOSES AND TO PROTECT THE TRANSMISSION OF CONFIDENTIAL CONTENT, SUCH AS ORDERS OR CONTACT INQUIRIES.
2. DATA COLLECTION WHEN VISITING OUR WEBSITE
WHEN USING OUR WEBSITE PURELY FOR INFORMATION PURPOSES, WE ONLY COLLECT DATA THAT YOUR BROWSER TRANSMITS TO OUR SERVER [SERVER LOG FILES], SUCH AS:
-
PAGES VISITED
-
DATE AND TIME OF ACCESS
-
AMOUNT OF DATA SENT
-
REFERRING URL
-
BROWSER AND OS USED
-
YOUR IP ADDRESS [POSSIBLY ANONYMIZED]
PROCESSING IS BASED ON OUR LEGITIMATE INTEREST [ART. 6 [1] F GDPR] IN MAINTAINING WEBSITE FUNCTIONALITY. THIS DATA IS NOT MERGED WITH OTHER DATA OR USED TO IDENTIFY YOU PERSONALLY.
3. COOKIES
OUR SITE USES COOKIES TO ENHANCE YOUR EXPERIENCE AND ENABLE CERTAIN FUNCTIONS. THESE INCLUDE:
-
SESSION COOKIES [DELETED AFTER YOU CLOSE YOUR BROWSER]
-
PERSISTENT COOKIES [STORED LONGER TO RECOGNIZE YOU]
COOKIES MAY STORE INFORMATION SUCH AS IP ADDRESSES, BROWSER DATA, LOCATION, AND PREFERENCES. PROCESSING IS BASED ON ART. 6 [1] B OR F GDPR. THIRD-PARTY COOKIES MAY ALSO BE USED BY OUR ADVERTISING PARTNERS.
YOU MAY DISABLE COOKIES IN YOUR BROWSER SETTINGS. LINKS FOR MAJOR BROWSERS:
-
INTERNET EXPLORER: HTTPS://BIT.LY/2R06YCU
-
FIREFOX: HTTPS://MZL.LA/3BATNLL
-
CHROME: HTTPS://BIT.LY/3TUAMLQ
-
SAFARI: HTTPS://APPLE.CO/3NU9TCG
-
OPERA: HTTPS://BIT.LY/3UW0CR1
DISABLING COOKIES MAY LIMIT FUNCTIONALITY.
4. CONTACTING US
4.1 IF YOU CONTACT US [VIA FORM OR EMAIL], WE PROCESS YOUR DATA TO RESPOND TO YOUR INQUIRY [ART. 6 [1] B OR F GDPR].
4.2 IF YOU CONTACT US VIA WHATSAPP BUSINESS, WE PROCESS YOUR NAME, NUMBER, AND ANY ADDITIONAL INFO YOU PROVIDE. WHATSAPP MAY ACCESS CONTACTS AND TRANSFER DATA TO FACEBOOK INC., USA. SEE WHATSAPP’S PRIVACY POLICY:
HTTPS://WWW.WHATSAPP.COM/LEGAL/?EEA=1#PRIVACY-POLICY
5. CUSTOMER ACCOUNTS & CONTRACT PROCESSING
WHEN YOU CREATE AN ACCOUNT OR MAKE A PURCHASE, WE PROCESS YOUR PERSONAL DATA FOR CONTRACT FULFILLMENT [ART. 6 [1] B GDPR].
YOU MAY DELETE YOUR ACCOUNT AT ANY TIME. DATA WILL BE STORED IN ACCORDANCE WITH LEGAL RETENTION PERIODS.
6. DIRECT ADVERTISING
6.1 IF YOU SUBSCRIBE TO OUR NEWSLETTER, WE PROCESS YOUR EMAIL TO SEND PROMOTIONS [ART. 6 [1] A GDPR].
YOU MAY UNSUBSCRIBE ANYTIME VIA LINK OR EMAIL.
6.2 IF YOU PROVIDED YOUR EMAIL WHILE PURCHASING, WE MAY SEND PROMOTIONS FOR SIMILAR PRODUCTS [BASED ON OUR LEGITIMATE INTEREST, ART. 6 [1] F GDPR]. YOU MAY OBJECT AT ANY TIME.
7. ORDER PROCESSING
7.1 WE SHARE NECESSARY DATA WITH TRANSPORT AND PAYMENT SERVICE PROVIDERS [ART. 6 [1] B GDPR].
7.2 SHIPPING PROVIDERS:
-
DHL / DEUTSCHE POST: NAME, ADDRESS, AND IF YOU CONSENT, EMAIL FOR DELIVERY NOTIFICATIONS.
7.3 PAYMENT PROVIDERS:
-
PAYPAL: SEE PAYPAL'S PRIVACY POLICY: HTTPS://WWW.PAYPAL.COM/UK/WEBAPPS/MPP/UA/PRIVACY-FULL
-
SHOPIFY PAYMENTS / STRIPE: DATA TRANSFERRED TO STRIPE PAYMENTS EUROPE LTD. SEE: HTTPS://STRIPE.COM/EN-DE/PRIVACY
8. TOOLS USED
GOOGLE RECAPTCHA IS USED TO PREVENT ABUSE BY BOTS [ART. 6 [1] F GDPR]. SEE GOOGLE’S PRIVACY POLICY: HTTPS://POLICIES.GOOGLE.COM/PRIVACY?HL=EN-GB
9. YOUR RIGHTS UNDER GDPR
YOU HAVE THE FOLLOWING RIGHTS REGARDING YOUR PERSONAL DATA:
-
ACCESS [ART. 15]
-
RECTIFICATION [ART. 16]
-
ERASURE / "RIGHT TO BE FORGOTTEN" [ART. 17]
-
RESTRICTION [ART. 18]
-
DATA PORTABILITY [ART. 20]
-
WITHDRAW CONSENT [ART. 7 [3]]
-
OBJECT TO PROCESSING [ART. 21]
-
LODGE A COMPLAINT WITH A DATA PROTECTION AUTHORITY [ART. 77]
10. DATA RETENTION PERIOD
DATA IS STORED ONLY AS LONG AS NECESSARY:
-
CONTRACTUAL DATA: UNTIL CONTRACT IS FULFILLED + LEGAL STORAGE PERIOD
-
CONSENT-BASED DATA: UNTIL YOU WITHDRAW CONSENT
-
MARKETING DATA: UNTIL YOU OBJECT
UNLESS OTHERWISE STATED, DATA WILL BE DELETED WHEN IT IS NO LONGER REQUIRED.