Privacy Policy

 

1) INFORMATION COLLECTION AND CONTROLLER DETAILS

We appreciate your visit to our website. Below we inform you about the handling of your personal data when using our website. Personal data means any information by which you can be personally identified.

The data controller for this website under GDPR is Olivia Praha. The controller is the natural or legal person who alone or jointly determines the purposes and means of processing personal data.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential information. You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only without registering or otherwise providing information, we collect only the data your browser transmits to our server (server logs). When you visit our website, we collect the following technically necessary data:

  • Visited web pages
  • Date and time of access
  • Amount of data transferred in bytes
  • Source/referrer
  • Browser used
  • Operating system used
  • IP address (possibly anonymized)

Data processing occurs in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the stability and functionality of our website. We reserve the right to review server logs if there are specific indications of illegal use.

3) COOKIES

To improve your visit to our website and enable certain functions, we use cookies on various pages. These are small text files stored on your device. Some cookies are deleted after closing your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Cookies partially serve to facilitate the shopping process, for example by remembering the contents of your virtual shopping cart. If personal data is also processed through cookies, this is done on the basis of Art. 6(1)(b) GDPR for contract fulfillment or Art. 6(1)(f) GDPR for Olivia Praha's legitimate interest in efficient and user-friendly website operation.

We may work with advertising partners who help improve our online offering. In such cases, partner company cookies (third-party cookies) will be stored on your device when you visit our website.

You can configure your browser to inform you about cookie use and individually decide on their acceptance or generally exclude cookies. Each browser differs in cookie settings. Check your browser's help menu to learn how to change cookie settings. Links to instructions for common browsers:

Please note that refusing cookies may limit the functionality of our website.

4) CONTACT FORM

When contacting us (e.g., via contact form or email), personal data is collected. Which data is collected from a contact form is evident from the respective form. This data is used exclusively to answer your inquiry and for technical administration. The legal basis for processing this data is our legitimate interest in handling your request according to Art. 6(1)(f) GDPR. If the contact is aimed at concluding a contract, an additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your request, provided there are no legal retention obligations.

5) DATA PROCESSING FOR CUSTOMER ACCOUNTS AND CONTRACT FULFILLMENT

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for contract execution or when creating a customer account. Which data is collected is evident from the respective forms. Customer account deletion is possible at any time by sending a message to the controller address above. After complete settlement of the contract or cancellation of your account, your data will be blocked with regard to tax and commercial legal retention periods and deleted after their expiration, unless you have expressly consented to further use of your data.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for newsletter delivery is your email address. We use a double opt-in procedure, meaning we will only send you the newsletter after you expressly confirm that you wish to receive it. We will send you a confirmation email requesting you to click on a link to confirm future newsletter receipt.

By activating the confirmation link, you give us consent to process your personal data according to Art. 6(1)(a) GDPR. When registering for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP), date, and time of registration to prove potential misuse of the email address.

You can unsubscribe from the newsletter at any time via the link in each newsletter or by sending a message to the above contact. After unsubscribing, your email address will be promptly deleted from our distribution list.

6.2 Newsletter to Existing Customers

If you have provided your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. No special consent is required from you for this.

Processing is based exclusively on our legitimate interest in personalized direct advertising according to Art. 6(1)(f) GDPR. You have the right to object to the use of your email address for this advertising purpose at any time by notifying the data controller. After receiving your objection, use of your email address for advertising purposes will be immediately terminated.

7) DATA PROCESSING FOR ORDER FULFILLMENT

7.1 Data Sharing

Personal data we receive from you will be shared with the shipping company responsible for delivery if necessary. Payment data will be shared with the appropriate banking institution if necessary. The legal basis for data sharing is Art. 6(1)(b) GDPR.

7.2 Payment Service Providers

PayPal: When paying via PayPal, credit card through PayPal, direct debit through PayPal, or "purchase on invoice" or "installment sale" through PayPal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This transfer occurs according to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

SOFORT: If you choose the "SOFORT" payment method, payment will be processed through SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna group (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden). Data transfer serves exclusively for payment execution through SOFORT according to Art. 6(1)(b) GDPR.

8) REVIEW REMINDERS

We use your email address for a one-time reminder about the possibility of leaving a review of your order in our review system, if you have given us express consent during or after placing your order according to Art. 6(1)(a) GDPR. You can revoke your consent at any time.

9) SOCIAL MEDIA PLUGINS

9.1 Facebook Plugins with Shariff Solution

Additional customs and/or import duties are not included in the price and are borne by the customer.

We use social plugins from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To increase data protection when visiting our website, these buttons are not implemented as regular plugins but only as HTML links. This ensures that when opening a page with these buttons, no connection to Facebook servers is established yet. Only after clicking the button does a new browser window open and load the Facebook page.

9.2 Google+ Plugins with Shariff Solution

We use social plugins from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These buttons are implemented as HTML links to increase data protection. Only after clicking does a connection to Google+ servers occur.

9.3 Instagram Plugins with Shariff Solution

We use social plugins from Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. These buttons are implemented as HTML links to ensure higher data protection. Only after clicking does a connection to Instagram servers occur.

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. DoubleClick uses cookies to display relevant ads to users, improve campaign performance reports, and prevent users from seeing the same ad repeatedly. Processing occurs based on our legitimate interest in optimal marketing according to Art. 6(1)(f) GDPR.

10.2 Google AdWords Conversion Tracking

This website uses the online advertising program Google AdWords and its Conversion Tracking function from Google LLC. We use Google AdWords to draw attention to our attractive offers on external websites through advertising. Conversion tracking cookies are set when a user clicks on a Google AdWords ad. These cookies typically expire after 30 days and do not serve to personally identify users.

Processing is based on our legitimate interest in targeted advertising according to Art. 6(1)(f) GDPR.

11) WEB ANALYTICS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to analyze how users use the website. Information generated by the cookie about your use of this website (including shortened IP address) is usually transmitted to and stored on a Google server in the USA.

This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures IP address anonymization through truncation. Your IP address is shortened by Google within EU member states. Processing occurs according to Art. 6(1)(f) GDPR based on our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

You can prevent cookie storage through appropriate browser settings. Additionally, you can prevent Google from collecting data by downloading and installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

12) RETARGETING / REMARKETING

Facebook Custom Audience via Pixel Technology

This website uses Facebook Pixel from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. With express consent, this allows tracking of user behavior after they have seen or clicked on a Facebook ad. This serves to evaluate the effectiveness of Facebook ads for statistical and marketing purposes. Processing occurs only on the basis of express consent according to Art. 6(1)(a) GDPR.

Google AdWords Remarketing

Our website uses Google AdWords remarketing functions to advertise this site in Google search results and on third-party websites. Google places a cookie in your device's browser that automatically enables interest-based advertising display. Processing occurs based on our legitimate interest in optimal promotion according to Art. 6(1)(f) GDPR.

13) DATA SUBJECT RIGHTS

You have extensive rights under applicable data protection laws:

  • Right of access (Art. 15 GDPR): Right to information about personal data we process about you
  • Right to rectification (Art. 16 GDPR): Right to correction of inaccurate personal data
  • Right to erasure (Art. 17 GDPR): Right to deletion of your personal data under certain conditions
  • Right to restriction of processing (Art. 18 GDPR): Right to request restriction under certain conditions
  • Right to notification (Art. 19 GDPR): Right to be informed about recipients of corrections, deletions, or restrictions
  • Right to data portability (Art. 20 GDPR): Right to receive data in structured, machine-readable format
  • Right to withdraw consent (Art. 7(3) GDPR): Right to withdraw consent at any time with future effect
  • Right to lodge a complaint (Art. 77 GDPR): Right to file a complaint with a supervisory authority

RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) RETENTION PERIOD

The retention period for personal data is governed by applicable legal retention periods (e.g., under commercial or tax law). After expiration of these periods, the relevant data is routinely deleted if it is no longer necessary for contract fulfillment or pre-contractual measures and/or if there is no longer a legitimate interest on our part in its continued retention.

CONTACT

For questions about this Privacy Policy, please contact: customersoliviapraha@outlook.com