Privacy Policy
Data Protection
This privacy policy applies to the website www.christinisabelle.com
Responsible :
Christine Isabelle
c/o Grosch Postflex #2679, Emsdettener Str. 10
48268 Greven
Germany
info@christinisabelle.com
1. Processing of personal data
We process your personal data on the website, among other things, as follows (further data processing on the website can be found in the following sections of this data protection declaration):
Log files when visiting the website:
When using our website, our hosting provider logs so-called "log file" data each time the server is accessed, such as the name of the website accessed, the page previously visited (" referrer " URL), product and version information of the browser used and of the operating system, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6 Paragraph 1 f) GDPR. Our legitimate interest in storing the log file data lies in ensuring system security, including clarifying misuse. The IP addresses are deleted after a maximum of 7 days, unless they are needed longer due to a security-related incident, e.g. for clarification or for evidence purposes.
Contact requests:
For contact requests, we process your personal data such as name, address, e-mail address, telephone number, etc., which we need to answer your request.
The legal basis for the processing of your personal data in the context of contact inquiries is Art. 6 Para. 1 b) General Data Protection Regulation.
In the context of contact requests, we store your personal data for as long as is necessary to process your request, plus a reasonable retention period for queries.
The provision of this personal data is not required by law or contract or required for the conclusion of a contract. However, if you do not provide us with this data, we will not be able to respond to your contact request or - in the case of limited contact information - not on all requested communication channels.
Registration/ Orders:
When you register or place an order, we process your personal data such as name, address, e-mail address, telephone number, date of birth, user name you have chosen, payment data or similar, which we use to fulfill the contractual relationship with you or to carry out pre-contractual measures, that are made at your request.
We store your personal data collected during registration or orders for as long as it is necessary for the fulfillment of the contractual relationship (possibly including the provision of the customer account) and/or for the implementation of pre-contractual measures at your request and/or with regard to for warranty, guarantee or comparable obligations and/or with regard to statutory retention periods.
The legal basis for the processing of your personal data collected during registration or orders is Art. 6 Para. 1 b) and Art. 6 Para. 1 c) General Data Protection Regulation.
The provision of this personal data is not required by law or contract. However, it is necessary for the conclusion of the contract, i.e. the implementation of the registration or order, insofar as the relevant information is mandatory (instead of only voluntary) in our registration/order process.
Newsletter:
If you register for our newsletter, we process the data collected, such as your e-mail address, salutation, etc. for the purpose of sending the newsletter.
Insofar as data processing for the purposes described above takes place with your consent, the legal basis is Article 6 Paragraph 1 a) GDPR (consent). Otherwise, data processing is based on Article 6 Paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
We store the personal data that we need to send the newsletter for as long as we need it for this purpose or until you revoke your consent to receive the newsletter. Any legitimate continued storage for other purposes (e.g. customer communication) remains unaffected.
2. Use of cookies
In this section we inform you about the use of cookies on our website.
a) Description and functionality
Cookies are small text files that are stored on the user's computer and enable an analysis of the use of the website by the user.
b) Own cookies
We use cookies to make the use of the website easier and more convenient for the visitor or to enable certain functions in the first place.
The legal basis for the processing of your personal data by us in connection with the use of cookies is Art. 6 Para. 1 f) General Data Protection Regulation (“legitimate interest”). The legitimate interest results from the above purposes.
When using cookies, we store your personal data for as long as is necessary to make using our website easier and more convenient.
c) Third Party Cookies
Third-party cookies may also be used on the website to collect or receive information from our website and elsewhere on the internet and then use that information to provide, for example, web tracking services, rating services or targeted ads.
As part of the use of cookies, your personal data will be stored for as long as is necessary to achieve the purposes described above.
Insofar as data processing for the purposes described above takes place with your consent, the legal basis is Article 6 Paragraph 1 a) GDPR (consent). Otherwise, data processing is based on Article 6 Paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
d) Revocation / objection / settings
You have the option at any time to revoke your consent to the setting of cookies or to object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that cookies are only accepted if you agree to this.
As for advertising cookies, you can block and/or manage many of them through the following services:
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp _
However, if you refuse cookies, you may not be able to use certain website features, services, applications or tools.
3. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website.
Google may transfer your data to servers worldwide. Google bases data transfers to the USA on the EU-US data protection framework. Google bases data transfers to countries without an adequate level of data protection on the EU standard contractual clauses. You can find details in the following section of Google's privacy policy: https://policies.google.com/privacy/frameworks
Google’s privacy policy can be found at: https://policies.google.com/privacy .
The data processed as part of the use of Google Analytics are automatically deleted after a maximum of 14 month.
If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
4. Google Ads conversion tracking
On our website we use Google Adwords Conversion Tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Ads Conversion Tracking, an analytics service provided by Google Inc., uses cookies stored on your device to analyse the use of the website you accessed by clicking on a Google ad. For this purpose, a so-called conversion tracking tag or code snippet is integrated into our website or app. As soon as a user clicks on this ad, a temporary cookie is stored on their device. If the user then performs a customer activity that is of interest to us (e.g. purchases, registrations, filling out a contact form), Google and we as website operators can recognise this. Google Adwords Conversion Tracking is used to analyse which keywords, ads, ad groups and campaigns are most successful for us. This enables us to make informed decisions regarding our online advertising and optimise campaigns in line with our business goals. Google Ads Conversion Tracking helps us analyse, optimise and operate our online advertising economically.
If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
You can find more information about how Google Conversion Tracking works and Google’s privacy policy here:
https://support.google.com/adwords/answer/1722022?hl=en
Google may transfer your data to servers worldwide. Google bases data transfers to the USA on the EU-US data protection framework. Google bases data transfers to countries without an adequate level of data protection on the EU standard contractual clauses. You can find details in the following section of Google's privacy policy: https://policies.google.com/privacy/frameworks
Revocation/ Objection/ Settings:
5. Google Adwords Remarketing
We use the Google Adwords remarketing service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website . The data collected may be transferred to the provider’s servers in the USA. Google bases this data transfer on the EU standard contractual clauses .
Google Adwords Remarketing enables us to present targeted ads in the form of advertising banners or text ads to users who have visited our website when they perform search queries or visit/use other websites or apps. Google Adwords Remarketing therefore serves our legitimate interest in the analysis, optimization and economic operation of our online advertising.
If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
When Google Adwords Remarketing is used, a remarketing tag is inserted on individual pages of our website. This tag is used to set a cookie on the devices of our website users (alternatively, a similar technology can be used). This cookie can then store, for example, which websites the user visits, which offers they click on, or which browser and operating system they use. In addition, the user's IP address is recorded, which is shortened within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases is it transferred in full to a Google server in the USA and shortened there. If the user on whose device the cookie was set then carries out search queries or visits another website, for example, they can be targeted with appropriate advertisements based on the information stored in the cookie.
You can object to your data being recorded by Google Adwords Remarketing at any time. See letter d. in the “Cookies” section of this privacy policy.
You can also deactivate the use of cookies by Google at the following link by downloading and installing the plug-in provided there:
https://support.google.com/ads/answer/7395996
You can also disable the use of cookies by third parties via the following Network Advertising Initiative deactivation page:
http://www.networkadvertising.org/managing/opt_out.asp
Further information about Google Adwords Remarketing and Google's privacy policy can be found here: https://policies.google.com/technologies/ads?hl=de
6. Facebook Pixel / Facebook Custom Audience
Facebook Custom Audience is used on individual pages of our website. This service is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter " Facebook "). The data collected is transmitted to the provider's servers in the USA. Facebook bases this data transfer on the EU standard contractual clauses .
Facebook Custom Audience enables target group-oriented advertising on Facebook. The Facebook Pixel also makes it possible to assign which visits to our website result from clicks on our Facebook ads. Facebook Custom Audience and Facebook Pixel therefore serve the purposes of analysis, optimization and the economic operation of our online advertising.
When using Facebook Custom Audience via the customer list , our customer list is sent to Facebook and converted into fixed character strings using a so-called hash process. Facebook can use this data to compare which of our customers are also members of Facebook and then display Facebook advertising to these customers or a portion of these customers selected according to certain characteristics (e.g. age or interests) or to a comparable target group.
When using Facebook Custom Audience using the pixel process, an invisible Facebook pixel is integrated into our website, which transmits the Facebook user ID of the user (logged in to Facebook) and data on the use of our website to Facebook. This enables Facebook to track the online behavior of users of our website. Facebook can show users registered there targeted advertisements (for example, for a product that was not purchased after the order process was canceled).
As part of a so-called “ extended comparison ”, data (e.g. name, first name, email address, date of birth, etc. of users registered with us) is also transmitted to Facebook, which enables Facebook to determine whether visitors to our website who are not logged in to Facebook are Facebook members (in order to include such Facebook members in the above-mentioned target group advertising if necessary).
If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
Revocation/ Objection/ Settings:
- Facebook Pixel: [Opt-out button/link]
- Facebook Custom Audience via the customer list: e.g. by email to the email address mentioned at the beginning of this privacy policy
- You can also use your Facebook account to control which types of ads you see on Facebook.
You can find more detailed information in Facebook’s privacy policy:
https://de-de.facebook.com/policy.php
7. Social Media Features
Our website uses social network functions, e.g. buttons for sharing content from our website on a social network or embedded social network content.
In particular, IP address, information on browser and operating system, the referring website, the time of visit or the use of our website may be transmitted to the third-party providers concerned.
This data can be collected on our website via plugins, pixel tags (invisible graphics) or cookies.
The data may be used by the third-party providers concerned for statistical or marketing purposes.
If the data processing is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests may lie in the provision of the content or functions to the user.
Our website includes functions of the following social networks:
you can find Facebook's privacy policy at: https://de-de.facebook.com/privacy/policy
you can find Facebook's privacy policy at: https://de-de.facebook.com/privacy/policy
8. Presence on Facebook
We have a presence on the social network Facebook.
Your personal data will be processed by us and, above all, by Facebook. Below we describe which of your data we process on our Facebook page and what our relationship is with Facebook.
When you use our Facebook page, we process the following personal data:
We maintain our presence on Facebook to present our goods and/or services and to communicate with customers and interested parties.
The legal basis for our processing of the relevant communication content with you is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR ("legitimate interests"), whereby our legitimate interests lie in the purposes set out above. For orders via our presence on social networks, the legal basis is also Article 6 Paragraph 1 Letter b) GDPR ("performance of contract").
When you use our Facebook page, we process technical information about your visit to our Facebook page, such as the IP address of your device, the time of your visit and the website from which you visit us. We process this data for technical administration and to provide the Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our Facebook page.
The legal basis for the processing of your data is Art. 6 (1) (f) GDPR. Our interest lies in constantly improving our Facebook page and providing you with information that is interesting and relevant to you.
We also collect statistical usage data. This includes, for example, information about page views, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing of content, reactions or comments on posts, reports of posts, clicks on links on other pages that lead to the fan page, mouse movements over names or profile pictures to get a preview of content, clicks on buttons on a fan page and the device (computer or mobile device) with which you are logged in.
We only receive such ("usage data") in aggregated, i.e. summarized, form via the Facebook tool "Page Insights" ( https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data ) (" Insights data "). We cannot assign Insights data to you personally.
We process this data for technical administration and to provide our Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our fan page. The legal basis for the processing of this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the Facebook page.
We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data with the joint purpose of getting to know the usage behavior of visitors to our fan page. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes the decisions about the processing of usage data in connection with page insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum . It contains further details and explanations on joint responsibility with Facebook in the context of Insights.
When you use our Facebook page, we process
The legal basis for processing is Art. 6 (1) (f) GDPR (balancing of interests). We process your data in order to provide you and the other users of our Facebook page with interesting information and to regularly inform you about our offering.
We have no access to other personal data that is processed when you use Facebook. Facebook's privacy policy ( https://de-de.facebook.com/policy.php ) applies to the processing of your personal data by Facebook.
Please note in particular the following:
Meta may transfer your data to servers worldwide. Meta bases data transfers to the USA and other third countries on adequacy decisions and otherwise on the EU standard contractual clauses. You can find details in the following section of Facebook's privacy policy: https://de-de.facebook.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard ;
Facebook 's privacy policy can be found at: https://de-de.facebook.com/privacy/policy You can find Facebook’s privacy policy at: https://de-de.facebook.com/privacy/policy
When you visit Facebook - regardless of our Facebook page - Facebook places cookies and similar trackers on your device. If you are also logged in to Facebook as a user, Facebook is able to track that you have visited our Facebook page and how you have used it. This also applies to all other Facebook fan pages.
Facebook describes in general terms in its data policy which cookies Facebook uses and which information Facebook receives via the cookie, how this information is used, how long it is stored by Facebook and with which third-party partners it is shared. There you will also find information about how to contact Facebook and the settings options for advertisements. The data policy is available at the following link: https://de-de.facebook.com/policy.php .
You can delete Facebook cookies here, for example: http://www.youronlinechoices.com/de/praferenzmanagement/ .
9. Presence on Instagram
We have a presence on Instagram.
The Instagram service is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter “Facebook”).
responsible
We are the controller within the meaning of Art. 4 Para. 7 of the General Data Protection Regulation (GDPR) if we exclusively process the personal data you send to us via Instagram ourselves.
To the extent that the personal data you transmit to us via Instagram is also or exclusively processed by Instagram, Facebook Ireland Ltd. , 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin Ireland, is also responsible for data processing within the meaning of the GDPR.
contact form provided by Facebook .
As the person responsible for the Instagram page, we have entered into agreements with Facebook which, among other things, regulate the conditions for using the Instagram page. The Instagram terms of use apply. and the other terms, conditions, and policies listed at the end therein .
Use of cookies by Facebook
When you visit our Instagram page, Facebook, as the controller, collects personal data from the respective users, including through the use of cookies.
You can find out which cookies Facebook uses and what information Facebook receives via the cookie, how these are used, how long they are stored by Facebook and with which third-party partners they are shared in Instagram's privacy policy .
There you will also find information about how to contact Facebook and the settings options for advertisements. You can also configure your browser settings according to your wishes and, for example, refuse to accept cookies. However, we would like to point out that in this case not all Instagram functions may be available to you.
You can delete Facebook cookies here: http://www.youronlinechoices.com/de/praferenzmanagement/ .
Likes, posts and messages
If you visit our Instagram page as a registered Instagram user, we process the following data:
If you contact us via our Instagram page or by email, the data you may provide with the message (email address, name) will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer required.
The legal basis for processing is Art. 6 (1) (b) and (f) GDPR (balancing of interests, at the request of the data subject). We process your data in order to provide you and other users of our site with interesting information and to regularly inform you about our offerings.
However, we do not have full access to the data collected by Facebook or your profile data and can only see the public information on your profile. You decide what this is in your Instagram settings. For example, you have the option of actively hiding "likes" on your profile or no longer following our Instagram page. Then your profile will no longer appear in the list of fans on our Instagram page.
However, we have no influence on the collection of your data and the further processing by Instagram. Likewise, it is not clear to us where, for what period of time and to what extent the respective data is stored by Facebook. This also applies to existing deletion obligations of Facebook, which evaluations and connections or links Facebook makes with the data and to whom the data is passed on. You can find out which additional personal data Facebook processes when you use our Instagram page in Instagram's privacy policy .
Statistical usage data
In order to better achieve the goals of our Instagram page, demographic and geographical analyses are also created using the information collected by Facebook and made available to us by Facebook. We can use this information to place targeted, interest-based advertisements without directly knowing the identity of the visitor. If visitors use Instagram on multiple devices, the data can also be collected and evaluated across devices if the visitors are registered and logged into their own profile. The following information is provided to us by Facebook about the use of our Instagram page:
These visitor statistics are sent to us by Facebook via the Instagram tool (“ Insights ”) exclusively in an anonymized form. However, we cannot assign Insights data to you personally. We also have no access to the underlying data.
We process this data exclusively for technical administration and to provide our Instagram page and, as the operator of the page, to obtain statistical information about its use. The legal basis for the processing of this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the page.
for the processing of Insights data. This means that Facebook and we process this data with the joint purpose of getting to know the usage behavior of visitors to our Instagram pages. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes the decisions about the processing of usage data in connection with page insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum . It contains further details and explanations on joint responsibility with Facebook in the context of Insights.
The contract essentially states that requests for information and the assertion of data subject rights with regard to the Insights data must be made directly to Facebook as the controller.
Instagram users can also influence the extent to which their user behavior may be recorded when visiting our Instagram page under the advertising preference settings . Further options are available in the Instagram settings or the form for the right of objection .
Data transfer to the USA and other third countries
Meta may transfer your data to servers worldwide. Meta bases data transfers to the USA and other third countries on adequacy decisions and otherwise on the EU standard contractual clauses. You can find details in the following section of Facebook's privacy policy: https://de-de.facebook.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard ;
Facebook 's privacy policy can be found at: https://de-de.facebook.com/privacy/policy
10. Data subject rights
In accordance with Article 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access of the data subject").
In accordance with Article 16 of the General Data Protection Regulation, you have the right to request the correction and deletion of incorrect personal data concerning you ("right to correction").
According to Art. 17 General Data Protection Regulation, you can request the deletion of personal data concerning you if one of the reasons listed there applies ("right to be forgotten").
In accordance with Article 18 of the General Data Protection Regulation, you also have the right to demand the restriction of the processing of your personal data if one of the conditions listed there applies ("Right to restriction of processing").
In accordance with Article 20 of the General Data Protection Regulation, you have the right to be provided with personal data relating to you and to have this data transmitted to another person in charge ("right to data portability").
Withdrawal of consent: See section "Right of withdrawal" in this data protection declaration.
Right to object: See the “Right to Object” section of this Privacy Policy.
You have the right to complain to the competent supervisory authority.
11. Right of withdrawal
You can revoke any consent you may have given to the processing of your personal data at any time, e.g. by sending an e-mail to our e-mail address given above . This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
12. Right to object
Insofar as our data processing is based on Article 6 Paragraph 1 f) GDPR ("legitimate interests"), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.
13. Disclosure of your data
Unless already stated elsewhere in this data protection declaration, we pass on your personal data to the following additional recipients or categories of recipients
- Shipping service provider
- Payment service provider
- Marketing service provider
Unless already stated elsewhere in this data protection declaration, we intend to transfer your personal data to the following third country or international organization.
- We operate our online shop with the software and on the servers of Shopify ; According to its data protection declaration, Shopify processes the data worldwide, including in Canada and the USA ; Shopify 's data protection declaration , which also contains detailed information on the transfer of data abroad, can be accessed here: https://www.shopify.de/legal/datenschutz
- Special functionalities related to personal data integrated via Shopify:
- InstaGenie: Instagram Feed App | Shopify App Store by Zegsu
- ONE Upsell , SMS, Email , Pop~Up (marketing tool), https://apps.shopify.com/one?locale=de&st_source=autocomplete
- Wizard Labs: Invoice Wizard | Shopify App Store, by Wizard Labs (program for creating invoices),
- Omnisend Email Marketing & SMS (marketing tool), https://apps.shopify.com/omnisend?locale=de&st_source=autocomplete
- Booster: Page Speed Optimizer from Booster Apps (Marketing & Conversion ), https://apps.shopify.com/page-speed-optimizer?locale=de&st_source=autocomplete
- Communication via chat via Whatsapp ; WhatsApp is a service of Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; the content of the communication is only disclosed to the recipient (end-to-end encryption); for the processing of personal data by Whatsapp , see their privacy policy at https://www.whatsapp.com/legal/privacy-policy-eea ; Whatsapp also processes data in third countries, including the USA; Whatsapp bases this transmission on the EU standard contractual clauses, so-called Whatsapp data protection declaration .
