Privacy Policy

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The data controller responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) is elsaanddore.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries sent to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

2) COLLECTION OF DATA WHEN VISITING OUR WEBSITE

When you visit our website solely for informational purposes, i.e. without registering or otherwise providing us with information, we only collect data that your browser transmits to our server (so-called “server log files”). This data is technically necessary to display the website and includes:

  • The page you visited
  • Date and time of access
  • Amount of data transferred in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (where applicable: anonymized)

This data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of the website. The data will not be passed on or used for any other purpose. However, we reserve the right to subsequently review server log files if there are specific indications of unlawful use.

3) COOKIES

To make our website more attractive and to enable the use of certain functions, we use cookies. Cookies are small text files stored on your device. Some cookies are deleted after the browser session ends (session cookies), while others remain on your device and allow us or our partners to recognize your browser the next time you visit our website (persistent cookies).

When cookies are active, they collect and process certain information, such as browser data, location data, or IP addresses. Persistent cookies are automatically deleted after a specified period depending on the individual cookie.

Some cookies make the ordering process easier, for example by remembering the contents of your shopping cart. If personal data is processed in connection with cookies, this is done on the basis of Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (legitimate interest — optimal and user-friendly operation of the website).

We may also work with advertising partners who use their own cookies to make the website more attractive. Details regarding such cookies can be found in the relevant sections below.

You can manage cookie settings in your browser. However, disabling cookies may limit the functionality of the website.

4) CONTACTING US

When you contact us (e.g. through a contact form or by email), personal data is collected. The scope of the data collected depends on the relevant form. This data is stored and used solely for the purpose of responding to your inquiry and providing technical support. The legal basis for processing is Article 6(1)(f) GDPR. If the contact relates to entering into a contract, Article 6(1)(b) GDPR also applies. Once your inquiry has been fully processed, the data will be deleted unless statutory data retention obligations apply.

5) PROCESSING OF DATA FOR ACCOUNT CREATION AND PERFORMANCE OF A CONTRACT

Personal data is collected and processed in accordance with Article 6(1)(b) GDPR when you provide it to us for the purpose of fulfilling an order or creating a customer account. The exact scope of the data collected can be found in the relevant forms. You may delete your account by contacting us. The data will then be blocked in accordance with applicable retention periods and subsequently deleted.

6) USE OF DATA FOR DIRECT MARKETING PURPOSES

6.1 Newsletter Subscription

When you subscribe to our newsletter, we will regularly send you information about our offers. Only your email address is required. The newsletter uses a double opt-in system — messages will only be sent after you confirm your subscription through a verification link. The legal basis is Article 6(1)(a) GDPR.

Your IP address and the date/time of registration are stored to prevent misuse. You may unsubscribe from the newsletter at any time, after which your email address will be deleted.

6.2 Newsletter for Existing Customers

If you provided your email address when making a purchase, we may send you offers for similar products in accordance with Article 6(1)(f) GDPR. You may opt out at any time.

7) PROCESSING OF DATA FOR ORDER FULFILLMENT

7.1 Disclosure of Data to Shipping Providers

Personal data is shared with shipping companies and payment service providers where necessary to fulfill your order (Article 6(1)(b) GDPR).

7.2 Payment Services

– PayPal: data is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A.
– SOFORT: data is transferred to SOFORT GmbH (Klarna Group)

8) REVIEW REMINDERS

If you have given your consent in accordance with Article 6(1)(a) GDPR, we may send you a reminder to leave a review. You may withdraw your consent at any time.

9) SOCIAL MEDIA PLUGINS

9.1 Facebook Plugins (Shariff)
Interaction only takes place after clicking on the plugin. Facebook Privacy Policy:
https://www.facebook.com/policy.php

9.2 Instagram Plugins
Data is only transferred after clicking on the plugin. Privacy Policy:
https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 Google DoubleClick
Used to display personalized advertisements. Privacy Policy:
https://www.google.com/policies/privacy/

10.2 Google Ads — Conversion Tracking
Allows us to analyze the effectiveness of advertising campaigns. This can be disabled in your browser settings.

11) WEB ANALYTICS

Google Analytics
Used to analyze user behavior on the basis of Article 6(1)(f) GDPR. You can opt out using the following plugin:
https://tools.google.com/dlpage/gaoptout?hl=en

12) RETARGETING / REMARKETING

Facebook Pixel
A tracking tool used to optimize advertising campaigns. Processing takes place only with your consent in accordance with Article 6(1)(a) GDPR.

13) RIGHTS OF DATA SUBJECTS

You have the right to:

  • Access your data (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Withdrawal of consent (Article 7(3) GDPR)
  • Lodge a complaint with a supervisory authority (Article 77 GDPR)

13.2 Right to Object
You may object to the processing of your personal data where such processing is based on legitimate interests — including processing for direct marketing purposes.

14) DATA RETENTION

Personal data is retained only for the period required by law or for as long as necessary to fulfill the purposes for which it was collected.