P R I V A C Y P O L I C Y
We take the protection of your personal data very seriously. Below, we describe which data we collect, process and use when you visit our website or place an order in our online shop.
1. Controller and contact for data protection enquiries
The controller pursuant to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) is Sibel Huhn Interiors e.K., Olivaer Platz 7, 10707 Berlin/Germany.
You can address your concerns regarding data protection with regard to our website/online shop and our services directly to us at any time, e.g. by e-mail to email@example.com or to our postal address.
2. Your rights
You have the following rights regarding personal data concerning you:
– Right to access (Art. 15 GDPR),
– Right to rectification (Art. 16 GDPR),
– Right to erasure (Art. 17 GDPR; “Right to be forgotten”),
– Right to limitation of processing (Art. 18 GDPR),
– Right to object to the processing (Art. 21 GDPR),
– Right to data transferability (Art. 20 GDPR).
You also have the right to complain about our processing of your personal data to a data protection supervisory authority in the Member State where you are located, at your place of work or at the location of the alleged infringement if you believe that the processing of your personal data is unlawful.
If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. The legality of processing your data until revocation remains unaffected by this.
You can contact us at any time via the contact channels listed in Section 1 above and/or the contact routes listed in our legal notice for the assertion of your rights or for other data protection concerns.
3. Supplementary note about your right of objection
Please not that if your personal data is processed on the basis of legitimate interest pursuant to Art. 6 para.1 sentence 1 lit. f) GDPR and/or your personal data is processed for the purposes of direct marketing, you have the right to object to the processing of your personal data at any time.
4. Processing of your personal data when using our website/online shop
a. Registration for our online shop
You can optionally register in our online shop and create a user account. Your data for future orders will be stored in your user account and you do not have to re-enter your data when placing new orders. Please note that a registration is not necessary for an order in our online shop, we also offer you a so-called guest order.
For the registration the following data is necessary: First name, surname, e-mail address and a password chosen by you. This data will be used to create a user account for our online shop. The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfillment of a contract). You can delete your user account once it has been created at any time.
b. Order in our online shop / telephone order
In order to place an order in our online shop or by telephone, your first and last name, your e-mail address, your postal address, your date of birth and your bank details (depending on the chosen method of payment) are required. If you order from us as a business/company, you will also be asked to provide your company name and VAT identification number.
We process your data in order to be able to fulfill your order pursuant to the contract concluded with you, to confirm your order by e-mail and to be able to process complaints and/or your enquiries to our customer service. Your telephone number will only be used to process queries regarding your order and to notify you of delivery, not for other purposes. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfillment of a contract).
c. Product recommendations by e-mail for own similar goods and offers
If you place an order in our online shop, we will also inform you by e-mail about other products from our online shop that are similar to your order. We inform you about this when you place your order in our online shop. Legal basis for the aforementioned processing is § 7 para. 3 of the German Act Against Unfair Competition (advertising for own similar goods to existing customers). You can object to the receipt of these e-mails at any time free of charge (e.g. by clicking on the unsubscribe link provided in every e-mail). You can also send us a message at any time to the contact details listed in our imprint.
d. Newsletter subscription
With your consent, you can subscribe to our newsletter on our website. As a newsletter subscriber, you will receive e-mail news on trends, offers, new brands/products and promotions as well as exclusive vouchers on a regular basis. All you need to do to subscribe to the newsletter is enter your e-mail address.
We use the so-called double opt-in procedure to register you for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. After your confirmation we save your e-mail address for the purpose of sending you the newsletter. The legal basis for the aforementioned processing for the purpose of sending the newsletter is Art. 6 para. 1 sentence 1 lit. a) GDPR (processing based on the consent of the data subject).
In addition, we store the IP addresses you use and the dates of registration and confirmation. We do this to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).
You can revoke your consent to receive the newsletter at any time, e.g. by clicking on the unsubscribe link in each newsletter or by contacting us via the contact channels listed in section 1.
Please note that the revocation of your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.
When you contact us by e-mail, post or telephone, e.g. if you have questions about your order, the data you provide (e.g. your e-mail address and your name as well as the content of your enquiry) will be stored by us in order to process and answer your questions or concerns.
We delete the data arising in this connection after storage is no longer necessary (usually after your request has been completely dealt with), or we restrict processing if there are legal storage obligations (e.g. if your enquiry refers to a previous order in our online shop). Depending on the content of your request, the legal basis for the aforementioned processing is Art. 6 para. 1 S. 1 lit. f DS-GVO (processing is necessary to safeguard the legitimate interests of the controller) or Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfillment of a contract).
f. Obligation to provide personal data
If you would like to register for our online shop, place an order in our online shop or subscribe to our e-mail newsletter, you must provide the personal data required for the respective service.
If you do not provide us with this data, it will not be possible for us to create a user account for you or to carry out an order you have requested or to send you our e-mail newsletter you have subscribed to.
g. Non-existence of automated decision making including profiling
Please note that when using our website and placing orders in our online shop you will not be subject to a decision based exclusively on automated processing - including profiling - which will have legal effect on you or may similarly significantly affect you.
5. Data transfer to third parties/ recipients, use of service providers
Your personal data will only be passed on or transmitted by us to third parties if this is necessary to fulfill the contract with you, if there is a legitimate interest on our part, if you have given your consent to this and/or if we are obliged to do so by law or by official or court orders. In the cases and for the purposes described below, your personal data will be transferred to third parties by us.
If you have placed an order with us, your first and last name as well as your address will be transmitted to our shipping provider for the purpose of sending you the goods you have ordered. Legal basis for the transmission is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfillment of a contract).
In order to be able to offer you a selection of different payment methods in our online shop, we use external payment service providers. Depending on which payment method you select in the booking process, we pass on the data collected for the processing of payments, such as bank details or credit card data, to the credit institution commissioned with the payment or to the payment service provider commissioned by us. As far as the integrated payment service providers partly collect the data themselves (e.g. PayPal), the respective payment service provider/payment provider is responsible for the data collected within the scope of the payment and the data protection regulations of the respective payment service provider apply additionally. The legal basis for the transfer is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfillment of a contract).
In order to ensure that you can accept the goods you’ve ordered on the expected delivery date and to avoid a return shipment of the goods due to non-acceptance, we also send your e-mail address to the shipping providers so that they can inform you of the expected delivery date by e-mail. The shipping providers use the e-mail exclusively for this purpose. The legal basis for the transmission is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard legitimate interests).
In addition, we use service providers who provide services for us in connection with web hosting and we also use cloud or web-based third-party software solutions that enable us to manage and host personal data in the cloud with external service providers in order to relieve our own servers and work effectively with new software solutions. In particular, we use Shopify's shop software (Shopify Inc., 150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada) for our online shop.
We have concluded data processing agreements with the respective service providers, which ensure that the respective service providers do not process the data for their own purposes, but only within the scope of our instructions and on our behalf. The legal basis for the use of the service providers is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the responsible party) and Art. 28 GDPR (data processing on behalf of the controller).
Some of the service providers employed by us who process personal data for us on our behalf and within the framework of our instructions as so-called data processors pursuant to Art. 28 GDPR are based outside the EU/EEA. Before transferring data to processors outside the EU/EEA, we ensure that the data processor has an adequate level of data protection. For data processors in countries such as Canada and Israel, this results from an adequacy decision of the EU Commission (so-called safe third countries), for data processors in the USA from a self-certification of the data processor in accordance with the EU-US Privacy Shield and for other data processors by concluding the EU standard contractual clauses before the respective data processor commences with the processing of data.
6. Storage duration and deletion of data
Of course we comply with our obligations to delete personal data (e.g. pursuant to Art. 17 GDPR) and therefore only store data for as long as is necessary for the provision of the desired service or the respective purpose.
Please note, however, that deletion of data will be replaced by a blocking or restriction of processing, insofar as this would conflict with statutory storage obligations which we must fulfill. For example, in accordance with the statutory provisions in § 257 HGB (German Commercial Code), we must store contract-related communications with you in connection with orders in our online shop for a period of up to ten years.
7. Log files/ information provided by your browser
Each time you use the Internet, your Internet browser automatically transmits certain information, which we store in so-called log files. These are the following data that are required to display our website to you and to guarantee stability and security: IP address (Internet protocol address), date and time of the request, content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request came, browser, operating system and its interface, language and version of the browser software. It is not possible for us to draw conclusions about the identity of a person on the basis of this data. The data is stored by us for a short period of time for technical security reasons, e.g. to prevent attacks on our web server. The legal basis for the aforementioned processing is Art. 6 para. 1 S. 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the person controller).
a. What are cookies?
When you use our website, cookies are stored on your computer or device (e.g. smartphone, tablet). Cookies are small text files that store information on the use of our website (e.g. web pages visited, number of visits, visiting times, length of stay on individual pages, browser used, operating system used, etc.) on your computer or device if you allow this via the settings of your browser. Cookies cannot execute programs or transmit viruses to your computer.
b. Which cookies are set when you visit our website?
-Session Cookies: Session cookies are only stored on your computer or device during your visit to our website and are automatically deleted after you leave our website. Session cookies are used, among other things, for the purpose of recognizing the user during the visit, e.g. to save your shopping cart. Session cookies also serve to maintain security when visiting our website.
-Permanent Cookies: Permanent cookies remain stored on your computer or device until their preset "lifetime" expires or you delete them from your browser yourself. Permanent cookies are used primarily for the purpose of web analysis (see Google Analytics below, item 9) or to ensure that you remain logged in even when you return to our site if you have created a user account and use the "remember me" function.
c. Which cookies do we use for which purposes?
The cookies we use do not store any personal data about you, but depending on the cookie used, purely pseudonymous or anonymous usage data that cannot be assigned to your person.
Cookies on our website are used for the following purposes:
aa) Necessary cookies
-For the user-friendly navigation and use of our website / online shop, in particular by storing user preferences (such as search or language settings) and user inputs (such as the content of the shopping cart. These cookies are necessary in order to be able to provide you with our services.
-For the identification and authentication of our users (e.g. in the context of offers on our website requiring registration). These cookies are also necessary for the provision of our services.
bb) Analysis Cookies
-For statistical evaluation and analysis of the usage behavior (e.g. visited (sub-)pages, length of stay etc.) of our users (so-called web analysis). We have a legitimate interest in analyzing the use of our website / online shop in order to continuously improve our website for the benefit of users (legal basis is Art. 6 para. 1 sentence 1 f GDPR).
-To measure and evaluate the effectiveness and success of our own advertising measures integrated on our website (e.g. pop-ups/banners with discount campaigns for our online shop, etc.). We have a legitimate interest in measuring the effectiveness and success of our own advertising measures within our own offering in order to be able to design our advertising and marketing measures more effectively (legal basis is Art. 6 para. 1 sentence 1 f GDPR).
d. Deletion of cookies / browser settings
If you do not want websites to place cookies on your computer or device, you can set your web browser to notify you before a cookie is placed.
You can also set your web browser so that all cookies or only cookies from third parties are rejected.
You can also delete cookies that have already been set at any time via your browser settings.
9. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are shortened for further processing and that it is not possible to identify you personally.
We have a legitimate interest in analyzing the use of our website by our website visitors. By means of the statistics obtained, we can constantly improve our online shop and website and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to safeguard the legitimate interests of the person responsible). Google has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Opt-out: You can prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.