Privacy policy
Sisters & Co - Notting Hill.
Email: info@sisters.co.co.uk
Data processing and advertising services are managed by Logos Ecom LLC.
PRIVACY POLICY
Website Privacy Policy Template
A ready-to-use privacy policy for your online shop. Replace Sisters & Co - Notting Hill throughout the document with your company's actual name before publishing it on your website.
Data Collection Cookies Payment Analytics User Rights
Important: Replace Sisters & Co - Notting Hill throughout the document with your company's actual name before publishing it. This template is for informational purposes only and may need to be adapted to your specific legal requirements.
1 INFORMATION ON THE COLLECTION OF PERSONAL DATA & CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when using our website. Personal data is any data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sisters & Co - Notting Hill. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.
2 DATA COLLECTION WHEN VISITING OUR WEBSITE
When our website is used for informational purposes only — i.e. if you do not register or otherwise provide us with information — we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary in order to display the website to you:
The website visited Date and time of access Amount of data transferred in bytes Source/referrer through which you arrived at the page Browser used, operating system used IP address used (where applicable: in anonymised form)
This processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used for any other purpose. However, we reserve the right to subsequently check the server log files should there be concrete indications of unlawful use.
3 COOKIES
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. once you close your browser (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognise your browser the next time you visit (persistent cookies).
When cookies are set, certain user information, such as browser and location data as well as IP address values, is collected and processed to an individual extent. Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie.
In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Where personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies).
Note: You can set your browser so that you are informed when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally. Each browser differs in the way it manages cookie settings. Please note that the functionality of our website may be limited if cookies are not accepted.
Cookie settings in the browser
Internet Explorer: support.microsoft.com/help/17442 Firefox: support.mozilla.org/kb/cookies-erlauben-und-ablehnen Chrome: support.google.com/chrome/answer/95647 Safari: support.apple.com/kb/ph21411 Opera: help.opera.com/en/latest/web-preferences/#cookies
4 CONTACT
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your query or for contacting you and the associated technical administration.
The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully dealt with, unless this conflicts with statutory retention obligations.
5 DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT & CONTRACT PROCESSING
In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms.
Your customer account can be deleted at any time by sending a message to the controller's address given above. We store and use the data you provide for the purpose of processing the contract. Once the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to commercial and tax law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data.
6 USE OF YOUR DATA FOR DIRECT MARKETING
6.1 — Signing up for the email newsletter
If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory detail for sending the newsletter is your email address. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you a newsletter by email once you have expressly confirmed that you agree to receive newsletters.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you sign up for the newsletter, we store the IP address entered by your internet service provider (ISP) as well as the date and time of registration. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list.
6.2 — Email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services from our range. No separate consent from you is required for this. Data processing is carried out exclusively on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. You have the right to object at any time, with effect for the future, to the use of your email address for advertising purposes.
7 DATA PROCESSING FOR ORDER FULFILMENT
7.1 As part of contract processing, the personal data we collect is passed on to the transport company commissioned with delivery, insofar as this is necessary for the delivery of the goods. As part of payment processing, we pass on your payment data to the commissioned credit institution, insofar as this is necessary for payment processing. The legal basis for the disclosure of data is Art. 6(1)(b) GDPR.
7.2 — Payment service providers
PayPal: When paying by PayPal, credit card via PayPal, direct debit via PayPal or — where offered — "purchase on account" or "instalment payment" via PayPal, we pass your payment data on to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This transfer is carried out in accordance with Art. 6(1)(b) GDPR and only insofar as this is necessary for payment processing. PayPal reserves the right to carry out a credit check. You can object to this processing at any time by sending a message to PayPal.
SOFORT: If the "SOFORT" payment method is selected, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group. Your data is transmitted exclusively for the purpose of payment processing and only insofar as this is necessary for that purpose.
8 REVIEW REMINDER
We use your email address to send a one-time reminder to leave a review of your order for the review system we use, provided you have given us your express consent during or after your order in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time by sending a message to the controller responsible for data processing.
9 USE OF SOCIAL MEDIA: SOCIAL PLUGINS
9.1 — Facebook plugins (Shariff solution)
Our website uses so-called social plugins from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To protect your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link. This ensures that no connection is made to Facebook's servers when a page of our website containing such buttons is accessed. Only by clicking on the button does a new browser window open and load the Facebook page, where you can interact with the plugins.
9.2 — Google+ plugins (Shariff solution)
Our website uses social plugins from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For data protection purposes, the same Shariff HTML link solution is used, so that there is no direct connection to Google's servers until you actively click the button.
9.3 — Instagram plugin (Shariff solution)
Our website uses social plugins from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. The same Shariff HTML link solution applies, so that no connection is made to Instagram's servers until you actively click the button.
10 ONLINE MARKETING
10.1 — DoubleClick by Google
This website uses the online marketing tool DoubleClick by Google (Google LLC). DoubleClick uses cookies to present users with relevant advertisements, to improve campaign performance reports, or to prevent a user from seeing the same advertisement multiple times. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1)(f) GDPR. According to Google, DoubleClick cookies do not contain any personal information.
10.2 — Google Ads conversion tracking
This website uses the online advertising programme Google Ads and its conversion tracking. We use Google Ads to draw attention to our attractive offers on external websites. The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. These cookies generally expire after 30 days and are not used for personal identification. Processing is carried out on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR.
11 WEB ANALYTICS SERVICES
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies that enable an analysis of your use of the website. This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymisation of the IP address by shortening it and excludes any direct personal reference.
Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a User ID. On your first visit to the page, a unique, permanent and anonymised ID is assigned, which is set across devices. The User ID does not contain any personal data and does not transmit any such data to Google. You can object to the collection and storage via the User ID at any time with effect for the future.
12 RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
Facebook Custom Audience (Pixel)
This website uses the "Facebook pixel" provided by Facebook Inc. With express consent, user behaviour can be tracked after a Facebook advertisement has been seen or clicked. This procedure is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected is anonymous to us. However, it is stored and processed by Facebook. Processing only takes place with express consent in accordance with Art. 6(1)(a) GDPR. Consent to the use of the Facebook pixel may only be given by users aged 13 and over.
Google Ads Remarketing
Our website uses the remarketing functions of Google Ads. Google sets a cookie in the browser of your device, which automatically enables interest-based advertising based on a pseudonymous cookie ID, based on the pages you have visited. Processing is carried out on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR. Further data processing only takes place if you have agreed that your internet and app browsing history may be linked by Google to your Google account.
13 RIGHTS OF THE DATA SUBJECT
13.1 Applicable data protection law grants you comprehensive data subject rights (rights to information and influence) vis-à-vis the controller with regard to the processing of your personal data:
Right to access (Art. 15 GDPR): The right to information about your processed personal data, purposes of processing, categories, recipients, planned storage duration and more. Right to rectification (Art. 16 GDPR): The right to have inaccurate data corrected without delay and/or incomplete data held by us completed. Right to erasure (Art. 17 GDPR): The right to request the deletion of your personal data, provided the requirements of Art. 17(1) GDPR are met. Right to restriction of processing (Art. 18 GDPR): The right to request the restriction of the processing of your personal data. Right to notification (Art. 19 GDPR): The right to be informed of all recipients to whom personal data has been disclosed. Right to data portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used and machine-readable format. Right to withdraw consent (Art. 7(3) GDPR): The right to withdraw consent at any time with effect for the future. Right to lodge a complaint (Art. 77 GDPR): The right to lodge a complaint with a supervisory authority.
13.2 — Right to object
Right to object: Insofar as we process your personal data on the basis of our overriding legitimate interest as part of a balancing of interests, you have the right to object at any time, with effect for the future, to this processing for reasons arising from your particular situation. If you exercise your right to object, we will no longer process the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
Direct marketing: If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose. If you exercise your right to object, we will no longer process the data concerned for direct marketing purposes.
14 DURATION OF STORAGE OF PERSONAL DATA
The duration of storage of personal data is based on the respective statutory retention period (e.g. commercial and tax law retention periods). Once the period has expired, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.