Datenschutzerklärung

1. Introduction

This Privacy Policy explains how beautydressy.shop collects, uses, shares, stores and otherwise processes personal information when individuals visit our website, communicate with us, create or use customer functionality, place an order or otherwise interact with our ecommerce services.

For privacy-related questions or requests:

Email: info@beautydressy.shop

Where beautydressy.shop determines the purposes and means of processing personal data, beautydressy.shop acts as the relevant data controller for that processing.

2. Applicable Privacy Framework

Where the General Data Protection Regulation applies, personal data will be processed according to applicable GDPR principles and legal bases.

European Commission guidance states that individuals must be informed about matters including the identity of the organization processing data, purposes of processing, categories of data, legal basis and applicable retention information.

3. Personal Data We May Collect

Depending on how you interact with beautydressy.shop, we may process information such as:

Identity and Contact Information

This may include:

• Name;
• Email address;
• Telephone number where provided;
• Billing information;
• Shipping information; and
• Other information you voluntarily provide.

Order and Transaction Information

This may include:

• Products purchased;
• Order number;
• Order value;
• Currency;
• Discounts;
• Refund information;
• Return information;
• Shipping status; and
• Customer-service history.

Payment-Related Information

Payment transactions may be handled by Shopify-supported or other authorized payment processors.

Payment providers may process card or payment-account information in accordance with their own security and privacy requirements.

We generally receive transaction confirmation and related payment information necessary to administer the order rather than complete reusable payment-card credentials.

Device and Technical Information

When you use the website, technical information may be generated automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Referring pages;
• Pages viewed;
• Time and date of activity;
• Session information; and
• Similar technical information.

Customer Communications

When you contact us, we may process:

• Your contact details;
• Your message;
• Order references;
• Attachments you voluntarily submit; and
• Our correspondence with you.

4. Why We Process Personal Data

We may process personal data for purposes including:

• Providing our ecommerce website;
• Processing orders;
• Accepting and confirming payments;
• Arranging fulfilment;
• Delivering products;
• Communicating order status;
• Processing cancellations;
• Managing withdrawals;
• Handling returns and refunds;
• Responding to customer enquiries;
• Providing customer support;
• Detecting or preventing fraud;
• Protecting accounts and transactions;
• Maintaining website security;
• Complying with accounting and tax obligations;
• Establishing, exercising or defending legal claims;
• Improving website functionality;
• Conducting analytics where legally permitted;
• Managing advertising and marketing where permitted;
• Recording consent choices; and
• Complying with applicable legal obligations.

5. Legal Bases Under the GDPR

Where GDPR applies, processing may rely on one or more of the following legal bases.

Performance of a Contract

We may process data where necessary to:

• Process an order;
• Take payment;
• Arrange delivery;
• Communicate concerning an order;
• Process a return; or
• Otherwise perform obligations under a purchase contract.

Legal Obligation

We may process and retain information where necessary to comply with applicable laws, including accounting, tax, consumer-protection and regulatory requirements.

Legitimate Interests

Where permitted, we may process information for legitimate business interests such as:

• Preventing fraud;
• Protecting network and website security;
• Defending legal claims;
• Improving business operations; and
• Understanding how our services operate.

We will consider applicable data-protection rights and interests before relying on legitimate interests.

Consent

Where applicable law requires consent, we may rely on consent for purposes such as:

• Certain marketing communications;
• Non-essential cookies;
• Advertising technologies; or
• Other processing for which consent is legally required.

Consent may be withdrawn prospectively at any time.

6. Shopify

beautydressy.shop may use Shopify to provide the ecommerce infrastructure through which our store operates.

Shopify may process information on behalf of merchants and may also process certain information for purposes determined by Shopify in accordance with Shopify's applicable documentation and privacy terms.

Shopify emphasizes that merchants remain responsible for configuring their stores to comply with applicable privacy obligations in the markets in which they operate.

7. Service Providers

We may disclose information to providers that help us operate our business, including providers of:

• Ecommerce infrastructure;
• Hosting;
• Payments;
• Fraud prevention;
• Fulfilment;
• Shipping;
• Delivery tracking;
• Customer communications;
• Analytics;
• Advertising;
• IT support;
• Website security; and
• Professional services.

Such disclosure is limited to purposes reasonably connected with the services being provided and applicable legal requirements.

8. Cookies and Similar Technologies

beautydressy.shop may use cookies, pixels, local storage and similar technologies.

These technologies may support functions such as:

• Maintaining a shopping cart;
• Remembering user preferences;
• Maintaining secure sessions;
• Processing checkout;
• Preventing fraud;
• Measuring website performance;
• Conducting analytics; and
• Supporting advertising where permitted.

German §25 TDDDG generally requires consent for storing information on, or accessing information from, a user's terminal equipment unless the technology is strictly necessary for transmission of a communication or for a digital service expressly requested by the user.

Accordingly, where legally required, non-essential technologies will be subject to the applicable consent mechanism.

Users may be able to manage relevant preferences through the cookie or privacy controls provided on the website.

9. Marketing Communications

Where legally permitted, we may send marketing communications to individuals who have provided the required consent or where another lawful basis applies.

Marketing communications will provide an appropriate method of unsubscribing where required.

Withdrawal of marketing consent does not affect the processing of information required for an existing purchase or other lawful purpose.

10. Fraud Prevention and Security

We may process information to identify suspicious transactions, protect our customers, prevent unauthorized activity and maintain the integrity of beautydressy.shop.

Automated tools may be used as part of fraud-detection processes.

Where GDPR imposes special requirements concerning solely automated decisions producing legal or similarly significant effects, we will apply the safeguards required by applicable law.

11. International Data Transfers

Because Shopify, payment processors, logistics providers and other technology providers may operate internationally, personal data may in some circumstances be processed outside Germany or the European Economic Area.

Where GDPR restrictions on international transfers apply, appropriate transfer mechanisms will be used where required, which may include:

• European Commission adequacy decisions;
• Standard contractual clauses;
• Other legally recognized safeguards; or
• Applicable statutory derogations.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and as required by applicable law.

Retention periods may depend on:

• Whether an account remains active;
• Whether a purchase contract remains relevant;
• Accounting obligations;
• Tax obligations;
• Consumer claims;
• Fraud-prevention requirements;
• Dispute-resolution requirements;
• Legal limitation periods; and
• Other legitimate or statutory requirements.

When information is no longer reasonably required, it may be deleted, anonymized or otherwise handled according to applicable requirements.

13. Data Security

We use reasonable administrative, technical and organizational safeguards designed to protect personal information against:

• Unauthorized access;
• Unauthorized disclosure;
• Accidental loss;
• Destruction;
• Misuse; and
• Unlawful alteration.

However, no transmission over the internet and no electronic storage method can be guaranteed to be completely secure.

14. Your GDPR Rights

Subject to the conditions and exceptions in applicable law, individuals may have rights including:

• Right to information about processing;
• Right of access to personal data;
• Right to rectification of inaccurate information;
• Right to erasure in applicable circumstances;
• Right to restriction of processing;
• Right to data portability;
• Right to object to certain processing;
• Right to object to direct marketing; and
• Rights relating to certain automated decision-making.

The European Commission identifies these as core GDPR rights.

15. Exercising Your Rights

Privacy requests may be sent to:

info@beautydressy.shop

We may need to verify your identity before completing a request where verification is reasonably necessary to protect personal data.

A request may be refused or restricted only where permitted by applicable law.

16. Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not make processing carried out before withdrawal unlawful.

17. Right to Lodge a Complaint

Individuals covered by GDPR have the right to lodge a complaint with an appropriate data-protection supervisory authority if they believe their personal data has been processed unlawfully.

You may also contact us first at info@beautydressy.shop so that we can attempt to address your concern.

18. Children's Privacy

beautydressy.shop is intended for individuals legally capable of entering into online purchasing arrangements or for transactions conducted with appropriate authorization.

We do not intentionally seek to collect personal data from children in circumstances prohibited by applicable law.

19. Third-Party Websites

Our website may contain links to external services or websites.

We do not control the privacy practices of independent third parties.

Customers should review the privacy information provided by those services before providing personal data directly to them.

20. Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary to reflect:

• Changes in our practices;
• New ecommerce functionality;
• New service providers;
• Legal developments;
• Regulatory requirements; or
• Security and operational changes.

The latest version will be displayed on beautydressy.shop with an updated revision date.

21. Contact

Questions about this Privacy Policy or requests concerning personal data may be directed to:

beautydressy.shop
Email: info@beautydressy.shop