Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the processing of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is Store Name. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (for example, orders or inquiries to the controller), this site uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When using our website purely for informational purposes, meaning if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (known as “server log files”). When you access our website, we collect the following data, which is technically necessary to display the site:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (possibly anonymised)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

3) Cookies

We use cookies on various pages to make visiting our website attractive and enable certain functions. These are small text files stored on your device. Some cookies we use are deleted after the end of the browser session (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies).

When cookies are set, they collect and process specific user information such as browser and location data and IP address values. Persistent cookies are automatically deleted after a set period, which may vary depending on the cookie.

Some cookies simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is also processed by cookies we implement, processing is carried out either in accordance with Art. 6(1)(b) GDPR for contract performance or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interest in the best possible website functionality and a user-friendly design.

We may work with advertising partners who help make our Internet offering more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with such partners, you will be informed individually about their use and the scope of the information collected.

You can configure your browser to inform you when cookies are set and decide individually whether to accept them, to exclude cookies for certain cases or in general. The method for managing cookie settings varies per browser. If you do not accept cookies, the functionality of our website may be limited.

4) Contact

When contacting us (for example via contact form or by email), personal data is collected. The data collected in the case of a contact form is visible from the respective form. These data are stored and used solely for the purpose of responding to your request or for contacting you and the related technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

Your data will be deleted after final processing of your request, provided it is clear that the matter in question has been resolved and provided there are no statutory retention obligations.

5) Processing Data When Opening a Customer Account and for Contract Execution

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to info@lilyandcloe.com.

We store and use the data you provide for contract execution. After full execution of the contract or deletion of your customer account, your data will be blocked in compliance with tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or such use is legally permitted.

6) Use of Your Data for Direct Advertising

6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and used to address you personally. We use the double opt-in procedure for sending newsletters. This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm your subscription.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address and the date and time of registration to be able to trace possible misuse of your email address.

You can unsubscribe at any time via the link provided in the newsletter or by sending a message to info@lilyandcloe.com. Upon unsubscribing, your email address will be removed from our mailing list immediately unless you have expressly consented to further use of your data.

6.2 Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you offers for similar goods or services by email. You can object to this use at any time by notifying info@lilyandcloe.com.

7) Processing Data for Order Handling

7.1 Personal data collected by us will be passed on to the transport company commissioned to deliver the goods, as far as necessary for delivery. Your payment data will be passed on to the authorised credit institution as far as necessary for payment processing.

7.2 Use of Payment Service Providers (PSPs):

PayPal – Payment data is transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg, for payment processing in accordance with Art. 6(1)(b) GDPR.
SOFORT – Payments are processed by SOFORT GmbH, part of Klarna Group, and data is transmitted for payment purposes.

8) Review Reminder

We use your email address for a one-time review reminder for your order, provided you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw this consent at any time by contacting info@lilyandcloe.com.

9) Use of Social Media Plugins

Implemented with Shariff solution for Facebook, Google+, and Instagram to protect your data. No direct connection to the social media servers occurs unless you click the respective button.

10) Online Marketing

10.1 DoubleClick by Google – Uses cookies for targeted ads and campaign performance measurement.
10.2 Google AdWords Conversion Tracking – Uses cookies to measure ad performance.

11) Web Analysis Services

Google Analytics (with anonymised IP) is used for statistical analysis, optimisation, and marketing purposes.

12) Retargeting/Remarketing

Includes Facebook Pixel and Google AdWords Remarketing for targeted advertising.

13) Rights of the Data Subject

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), notification (Art. 19 GDPR), data portability (Art. 20 GDPR), withdraw consent (Art. 7(3) GDPR), and lodge a complaint (Art. 77 GDPR).

You also have the right to object (Art. 21 GDPR) at any time to processing for reasons arising from your particular situation or for direct marketing purposes.

14) Duration of Storage of Personal Data

The retention period is based on statutory retention requirements. After expiration, the data will be deleted unless required for contract performance or legitimate interests.