Privacy Policy

PRIVACY POLICY

  1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Evelyn & Rose Toronto. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (for example orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser's address bar.

  1. DATA COLLECTION WHEN VISITING OUR WEBSITE

When using our website for informational purposes only, meaning if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary to display the website to you:

  • Visited website

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referral from which you arrived at the page

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

  1. COOKIES

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device.

Some cookies we use are deleted after you close your browser (session cookies). Other cookies remain stored on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

When cookies are set, they collect and process certain user information such as browser and location data and IP addresses.

Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process by storing settings (for example remembering the contents of a shopping cart for a later visit to the website).

To the extent that personal data is processed through cookies used by us, processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in optimal website functionality and a customer-friendly design of the website visit.

We may work together with advertising partners who help us make our internet offering more interesting to you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies).

If we cooperate with such advertising partners, you will be separately informed about the use of these cookies and the scope of the information collected.

Please note that you can configure your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally.

Each browser manages cookie settings differently. This is described in the browser's help menu.

If cookies are rejected, the functionality of our website may be limited.

  1. CONTACTING US

When you contact us (for example via contact form or email), personal data is collected. Which data is collected can be seen from the respective contact form.

This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR.

If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

Your data will be deleted after your inquiry has been fully processed, provided there are no statutory retention obligations preventing this.

  1. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

In accordance with Article 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for the execution of a contract or when opening a customer account.

The data collected can be seen from the respective input forms.

Your customer account can be deleted at any time by sending a message to the controller named above.

We store and use your data for contract processing.

After complete fulfillment of the contract or deletion of your customer account, your data will be blocked in compliance with tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data.

  1. USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to our email newsletter

When you subscribe to our newsletter, we regularly send you information about our offers.

The only mandatory information required for sending the newsletter is your email address.

For sending the newsletter, we use the so-called double opt-in procedure.

This means that we will only send you a newsletter after you have expressly confirmed that you consent to receiving newsletters.

You will then receive a confirmation email asking you to confirm your subscription by clicking a corresponding link.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Article 6(1)(a) GDPR.

You may unsubscribe at any time via the unsubscribe link in the newsletter or by contacting the controller.

6.2 Newsletter for Existing Customers

If you provide your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar products or services from our range.

We do not need separate consent for this.

Processing is carried out on the basis of our legitimate interest in personalized direct marketing in accordance with Article 6(1)(f) GDPR.

You may object to this use of your email address at any time.

  1. DATA PROCESSING FOR ORDER HANDLING

7.1

Personal data collected by us is transferred to the shipping company commissioned with delivery to the extent necessary for the delivery of the goods.

Your payment data is transferred to the responsible financial institution for payment processing.

7.2 Use of Payment Service Providers

PayPal

When paying via PayPal, your payment data is transmitted to:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

The transfer takes place solely for payment processing in accordance with Article 6(1)(b) GDPR.

SOFORT

If you choose “SOFORT”, your payment data will be transferred to:

SOFORT GmbH
Theresienhöhe 12
80339 Munich
Germany

SOFORT is part of the Klarna Group.

  1. CONTACT FOR REVIEW REMINDERS

We use your email address for a one-time reminder to leave a review of your order, provided you have expressly consented in accordance with Article 6(1)(a) GDPR.

  1. USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins

Our website uses social plugins from Facebook.

9.2 Google+ Plugins

Our website uses social plugins from Google+.

9.3 Instagram Plugins

Our website uses social plugins from Instagram.

These plugins are integrated exclusively via HTML links so that a connection is only established when you actively click the respective button.

  1. ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google.

10.2 Google Ads Conversion Tracking

This website uses Google Ads and Google Conversion Tracking to measure the success of advertising campaigns.

  1. WEB ANALYTICS SERVICES

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies that enable analysis of your use of the website.

IP addresses are anonymized using the “_anonymizeIp()” function.

You can prevent the collection of data by Google Analytics by installing a browser plugin provided by Google.

  1. RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING

Facebook Pixel

This website uses the Facebook Pixel from Facebook Inc. to analyze user behavior after interaction with advertisements.

Google Ads Remarketing

Our website uses Google Ads Remarketing to display advertisements based on previous visits to our website.

  1. RIGHTS OF DATA SUBJECTS

Under the GDPR, you have the following rights among others:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restriction of processing

  • Right to data portability

  • Right to withdraw consent

  • Right to lodge a complaint with a supervisory authority

  • Right to object to the processing of personal data

  1. RETENTION PERIOD OF PERSONAL DATA

The retention period of personal data is determined by statutory retention periods (for example tax and commercial retention obligations).

After these periods have expired, the data is routinely deleted unless it is still required for the fulfillment or initiation of a contract or there is a legitimate interest in retaining the data for a longer period.