Privacy Policy
DATA PROTECTION
INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of personal data when using our website. Personal data refers to all data by which you can be personally identified.
1.2 The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Grace & Lily’s Boutique, which is responsible for processing. The controller for personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries). You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser address bar.
DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only, without registering or otherwise providing personal data, we collect only the data that your browser transmits to our server (server log files). When you visit our website, we collect the following technically necessary data to display the website correctly: the website visited, date and time of access, amount of data transferred (in bytes), source/reference from which you accessed the page, browser used, operating system used, and IP address used (possibly anonymised).
Processing is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used in any other way. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.
COOKIES
To make visiting our website attractive and to enable certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted when you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies to recognise your browser on subsequent visits (persistent cookies). These cookies are automatically deleted after a defined period, which may vary depending on the cookie type.
Some cookies are used to save settings and simplify the ordering process (for example, storing the contents of a shopping cart). If cookies process personal data, this is done in accordance with Article 6(1)(b) GDPR for contract fulfilment, or Article 6(1)(f) GDPR based on our legitimate interest in providing optimal website functionality and a user-friendly experience.
We may work with advertising partners to make our website more relevant to you. In such cases, third-party cookies may be stored on your device. You will be informed separately about the use and scope of such cookies where applicable.
You can configure your browser to notify you about cookie usage and decide individually whether to accept cookies or block them entirely. Please note that disabling cookies may limit the functionality of our website.
CONTACT US
When you contact us (for example via email or a contact form), personal data is collected. This data is used solely to process your enquiry and for related administrative purposes. The legal basis is Article 6(1)(f) GDPR. If the enquiry relates to a contract, Article 6(1)(b) GDPR also applies. Your data will be deleted once your enquiry has been fully resolved, unless legal retention obligations apply.
Contact email: info@gracelilysboutique.com.
DATA PROCESSING FOR CUSTOMER ACCOUNTS AND CONTRACT EXECUTION
In accordance with Article 6(1)(b) GDPR, personal data is processed when you provide it for contract execution or account creation. You may request deletion of your customer account at any time via info@gracelilysboutique.com. Data required for tax or accounting purposes will be retained in accordance with statutory retention periods.
USE OF DATA FOR DIRECT ADVERTISING
6.1 Newsletter subscription: When subscribing to our newsletter, only your email address is required. Additional data is optional. We use the double opt-in procedure. You may unsubscribe at any time via the link in the newsletter or by contacting info@gracelilysboutique.com.
6.2 Advertising to existing customers: If you provided your email address during a purchase, we may send offers for similar products based on our legitimate interest (Article 6(1)(f) GDPR). You may object at any time.
DATA PROCESSING FOR ORDER FULFILMENT
Personal data is shared with shipping and payment providers solely for order fulfilment in accordance with Article 6(1)(b) GDPR.
Payment providers used include PayPal and SOFORT (Klarna). Data processing is limited to what is necessary for payment handling. Further details can be found in the respective providers’ privacy policies.
REVIEW REMINDERS
With your explicit consent, we may send a one-time review reminder email in accordance with Article 6(1)(a) GDPR. Consent can be withdrawn at any time.
SOCIAL MEDIA PLUGINS (SHARIFF SOLUTION)
Our website integrates Facebook, Instagram, and Google plugins via the Shariff solution. No data is transmitted until you actively click the relevant button. Further details are available in the respective privacy policies of each provider.
ONLINE MARKETING & ANALYTICS
We use Google services such as DoubleClick, Google Ads Conversion Tracking, and Google Analytics based on legitimate interest under Article 6(1)(f) GDPR. IP anonymisation is enabled. You may opt out via browser settings or Google tools.
YOUR RIGHTS
You have the right to access, correct, restrict, or delete your personal data at any time, as well as to request a copy.
Requests can be sent to info@gracelilysboutique.com.
DATA RETENTION
Personal data is stored only as long as necessary for legal, contractual, or statutory purposes and deleted thereafter.
CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Policy at any time. The current version is always available on our website.
Contact for data protection enquiries:
info@gracelilysboutique.com