With the following information, we inform you about details in connection with the processing of personal data when using the website at https://www.studioanneloes.de/ and the Studio Anneloes app (together our "services") as well as your rights in this regard.
1. Person responsible
The responsible body for data collection, data processing and data use in connection with the use of our website and the Studio Anneloes app is
Studio Anneloes B.V.
Maroastraat 77
1060 LG Amsterdam
Telephone number: +31-20-3700659
E-Mail: privacy@studioanneloes.de
2. Explanation of terms
Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Cookies are small text files that are stored locally on the visitor's end device (e.g. PC, smartphone, tablet PC) when they visit a website. They can contain various information about the end device used and the usage behaviour and are sent back to the cookie-setting web server when a new connection is made with the aim of recognizing the user and their settings.
GDPR is the abbreviation for REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
3. Automatically collected data when using the website
a) Explanation and purpose of processing
We process the following information automatically every time you access our website:
-the IP address of your computer or other end device (e.g. tablet PC or smartphone) and the request(s) from your browser
-the amount of data transferred, the browser type and version, the screen resolution and the operating system used.
The IP address and the information on the request(s) from your Internet browser are technically necessary for accessing and using the website; without processing this data, the website cannot be accessed and Internet pages cannot be displayed. The processing of the IP address is anonymized or deleted by shortening it after it is no longer technically necessary for accessing/using the website.
We also process the above-mentioned data for the following purposes:
-Ensuring a smooth connection to the website,
-To ensure a comfortable use of our website,
-Evaluation of system security and stability and
-for other administrative purposes.
b) Legal basis:
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest in the processing lies in the technical facilitation of access to the website, the optimized presentation of the content to the user and the future further improvement/optimization of the website. In the case of data processing on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object, without prejudice to other rights. See below ("Rights of data subjects")
4. Use of cookies by our server
Our website uses cookies. Cookies are small text files that are stored on your computer (or internet-enabled device) by websites you visit. They are often used to make websites work and to improve their efficiency, as well as to provide the website operator with information about how the website is used.
We use cookies to distinguish you from other users of our websites so that we can offer you an even better user experience when navigating our websites. For example, cookies allow you to navigate quickly between pages and log in to the areas for which you have registered.
The cookies used by us or our service providers are merely instruments for processing data for specific purposes. You will therefore find more detailed information on the cookies used by us or our service providers as well as the purpose and legal basis of their use in the information on the respective processing operation. Further information on the cookies used can be found in our cookie policy.
Cookie consent with Cookiebot
This website uses the cookie consent technology Cookiebot, which sets a technically necessary cookie to store your cookie consent.
The cookie bot cookie stores the consent you gave when you entered the website until you revoke it or delete it. You can change these settings at any time via the "Privacy policy" page.
The provider of this cookie consent technology is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
We use Cookiebot to comply with our legal obligations. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.
You can prevent cookies from being saved by changing your browser settings accordingly; you can also delete saved cookies via your browser settings.
5. Contact our customer service
a) Explanation and purpose of processing
You can contact us with questions or requests via contact form, live chat, telephone, WhatsApp or email. The personal data you provide (email address and, if applicable, name (optional) and other voluntary information) will be stored and electronically processed by us in order to answer your questions or process your request.
The personal data collected in this context will be stored by us for the traceability of previous communication in the event of subsequent inquiries until revoked
b) Legal basis
The legal basis for the use of the above data is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest in the processing lies in our interest in providing interested parties and customers with a simple means of contacting us and answering their inquiries. In the case of data processing on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object, without prejudice to other rights. See below ("Rights of data subjects")
6. Order processing
a) Explanation and purpose of processing
We use the personal data that you provide to us when placing an order (e.g. name, contact details, address) to fulfill and process the order in order to deliver goods, process payments, carry out returns and communicate with you about the order. To fulfill the contract, we pass on the data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. In order to process payments, we pass on the necessary payment data to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you during the ordering process.
Personal data that we receive as part of an order will be stored by us for the duration of the statutory retention periods.
a) Legal basis
The legal basis for this is the fulfillment of the contract concluded with you (e.g. in the case of orders) or the initiation of a contract, Art. 6 para. 1 lit. b GDPR.
7. Newsletter
a) Explanation and purpose of processing:
You have the option of subscribing to an email newsletter on our website with regular information about our products and services and events organized by us. As part of your order, you give us your consent to store and use your first and last name and your e-mail address to send you a corresponding e-mail newsletter, which is usually sent out twice a week. You can revoke your consent at any time with effect for the future.
We store your data for the above purpose only until we receive a revocation.
b) Legal basis:
The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR.
8. Google Analytics
a) Explanation and purpose of processing:
We use Google Analytics, a web analysis tool from Google LLC, on our websites. The controller for users in the EU is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses "cookies", which are stored on your PC and enable your use of the website to be analyzed. The information generated by the cookie includes browser type/version, operating system used, screen resolution, referrer URL (the previously visited page), anonymized IP address of the accessing computer, time of the server request, duration of the visit to individual pages, downloaded files, videos viewed, advertising banners clicked on, orders placed, click paths, etc. You can find more information about the cookies used by Google here: https://policies.google.com/technologies/ads?hl=de.
This information may be transferred to a Google server in the USA and stored there. The European Commission adopted an adequacy decision for the USA on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework.
We use Google Analytics with an IP anonymization tool on our websites, with which your IP address recorded by Google Analytics is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus transmitted anonymously.
Google uses the information collected on our behalf on the basis of an agreement we have concluded with Google to statistically evaluate the use of the website for us in aggregated form, to compile reports on website activity and the behavior of users on our website and to provide us with other analysis services related to the website and its use. These reports help us to design our website and its content in line with requirements and to optimize it on an ongoing basis. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The maximum retention period selected by us for data linked to cookies or user IDs and advertising IDs is 14 months. After this retention period has expired, the data is automatically deleted.
b) Prevent the storage of cookies:
The storage of cookies can be prevented by changing the browser settings accordingly; you can also delete stored cookies via your browser. This may mean that certain functions of the website you are visiting cannot be used at all or cannot be used comfortably. You can also change your consent at any time via the "Privacy Policy" page.
You can also deactivate the Google Analytics function using a browser add-on, which you can download at https://tools.google.com/dlpage/gaoptout. To do this, you must install this browser add-on on all the devices you use. This will prevent analysis information from being sent to Google.
c) Further information on Google Analytics:
Comprehensive information from Google on data processing in connection with Google Analytics can be found here.
d) Legal basis:
The legal basis for our processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You give your consent via our cookie banner. You can revoke your consent at any time with effect for the future.
9. Billy Grace
e) Explanation and purpose of processing:
We use Billy Grace on our websites, a web analysis tool from Fox Technology B.V., Professor tulpstraat 18, 1018 HA Amsterdam, Netherlands. Billy Grace uses "cookies", which are stored on your PC and enable your use of the website to be analyzed. The information processed includes hashed IP addresses, browser type and version, operating system, referral source (e.g. the website or page that referred the user to our website), pages visited on the website, date and time of the visit, clicks on links and buttons, interactions with forms on the website (e.g. search queries or form submissions) and other similar anonymous data that may be used for analysis and marketing purposes. You can find more information on data processing here: https://www.billygrace.com/terms-conditions/.
Fox Technology uses the information collected on our behalf on the basis of an agreement we have concluded with Fox Technology to statistically evaluate the use of the website for us in aggregated form, to compile reports on website activity and the behavior of users on our website and to provide us with other analysis services related to the website and its use. These reports help us to design our website and its content in line with requirements and to optimize it on an ongoing basis.
f) Prevent the storage of cookies:
The storage of cookies can be prevented by changing the browser settings accordingly; you can also delete stored cookies via your browser. This may mean that certain functions of the website you are visiting cannot be used at all or cannot be used comfortably. You can also change your consent at any time via the "Privacy Policy" page.
g) Further information about Billy Grace:
Comprehensive information from Google on data processing in connection with Billy Grace can be found here.
h) Legal basis:
The legal basis for our processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You give your consent via our cookie banner. You can revoke your consent at any time with effect for the future.
10. Customer account
a) Explanation and purpose of processing:
You have the option of creating a customer account on our website and becoming a member of Club Studio Anneloes.
We store the following data in your personal account: Your name, delivery and billing address(es), telephone number, e-mail address and your purchases. We also store the interests you have indicated in your account, such as your history, chat history and personalization preferences.
The customer account makes it easier for you to shop with us in the future and gives you a personalized shopping experience. You will also receive benefits through the Club Studio Anneloes points program. You can find more information about this on the Club Studio Anneloes information page on this website.
You can delete your customer account and the data stored in it at any time. To do so, simply send us an e-mail to privacy@studioanneloes.de or use the technical options provided for this purpose in the customer area.
We store this data for as long as you are an active customer with us. If you have not logged in for seven years and therefore have not placed an order, we will delete all your data.
b) Legal basis:
The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR.
11. Payment provider
a) Explanation and purpose of processing
We also use third-party payment services on our website. If you make a purchase from us using such a service, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the third-party providers apply to these transactions.
b) Legal basis
The legal basis for this is Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR. The integration is necessary for the processing of contracts and serves our interest in offering the simplest and most secure means of payment possible. Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR is the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment services / payment service providers on this website:
Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). If you select Klarna as your payment method, Klarna will collect various personal data from you. Klarna uses cookies to optimize the payment process.
Details on Klarna's general use of data can be found here: https://www.klarna.com/de/datenschutz/.
Details on the use of cookies by Klarna can be found at the following link: https://www.klarna.com/de/cookies/.
Apple Pay
The provider is Apple Inc, Infinite Loop, Cupertino, CA 95014, USA (hereinafter referred to as "Apple"). If you select Apple Pay as your payment method, Apple will collect various personal data from you. Apple Pay uses cookies to optimize the payment process.
You can read details about data usage by Apple Pay here: https://www.apple.com/de/legal/privacy/data/de/apple-pay/.
12. Other data transmission
We only pass on your personal data to third parties or other recipients if this is necessary for the provision of services, if you have given your consent, if there is a legal obligation or if the transfer of data is permitted on another legal basis. Where necessary, we have concluded agreements with the recipients of your data on order processing in accordance with Art. 28 GDPR. In addition to the recipients already named in the respective processing context, we may transfer personal data to the following service providers:
· BigCommerce Software Ireland Limited, Block A, George's Quay Plaza George's Quay Dublin 2, D02 E440Ireland (Hosting)
· Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin, Germany (Hosting)
13. Rights of data subjects
a) You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data to the extent permitted by law (Art. 15 GDPR in conjunction with Section 34 BDSG). This does not apply if
· the data is only stored because it may not be deleted due to legal or statutory retention requirements or
· serve exclusively the purposes of data backup or data protection control
and the provision of information would require a disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures.
b) You also have the right to request the rectification of inaccurate personal data concerning you and, if necessary - taking into account the purposes of the processing - the completion of incomplete personal data, including by means of a supplementary declaration (Article 16 GDPR). In the cases referred to in Article 17(1)(a) to (f) GDPR, you also have the right to erasure of personal data, unless an exception pursuant to Article 17(3) GDPR applies, as well as the right to restriction of processing in the cases referred to in Article 18(1) GDPR. In the cases of Article 20 (1) GDPR, you also have the right to data portability.
c) You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.
d) Right to object to processing on the basis of legitimate interest
Insofar as the processing of data is based on Art. 6 para. 1 lit. f GDPR ("legitimate interest"), you have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. Exercising your right to object may result in you only being able to use our website as a whole or individual services or functions to a limited extent or not at all.
To exercise your rights as a data subject, you can contact us by email at privacy@studioanneloes.de .
