{"id":4354,"date":"2020-10-05T12:44:35","date_gmt":"2020-10-05T12:44:35","guid":{"rendered":"https:\/\/bijoux.vamtam.com\/?page_id=4354"},"modified":"2025-08-05T14:26:35","modified_gmt":"2025-08-05T12:26:35","slug":"data-protection-declaration-according-to-gdpr","status":"publish","type":"page","link":"https:\/\/wp.etuicreations.de\/en\/data-protection-declaration-according-to-gdpr\/","title":{"rendered":"Privacy policy according to GDPR"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy according to GDPR<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This privacy policy informs you about the processing of personal data by the provider of our webshop in accordance with the General Data Protection Regulation (GDPR).<\/p>

Controller within the meaning of the GDPR<\/h2>

The party responsible for data processing is Iordanis Eleftheriadis, address as in the legal notice. If you have any questions about data protection, you can contact us at any time at the above address or by e-mail at info@etuicreations.de.<\/p>

Hosting and platform (WordPress\/FastComet)<\/h2>

Our online store runs on the WordPress website platform and is operated by the hosting provider FastComet, Inc. (1007 North Orange Street, 4th Fl. #255, Wilmington, DE 19801, USA). This means that all data that you provide on this website is stored on FastComet's servers. FastComet acts as a processor for us. In this context, personal data may also be processed on servers in the USA or other third countries. We would like to point out that no level of data protection comparable to that in the EU is guaranteed in the USA. We have concluded corresponding contracts with FastComet (in particular standard contractual clauses in accordance with Art. 46 GDPR) to ensure the protection of your data.<\/p>

When you visit our website, FastComet automatically collects certain access data in so-called server log files (e.g. IP address, date\/time of access, browser type). This processing serves the technical provision and security of the website and is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in secure and functional operation. The log files are usually deleted automatically after a short time.<\/p>

Technically necessary cookies: Our website also sets essential cookies, for example to manage your shopping cart and login status. These cookies are necessary for the operation of the site and are not used for tracking purposes. The use of such necessary cookies is based on our legitimate interest or for contract fulfillment (Art. 6 para. 1 lit. f or lit. b GDPR) and does not require consent. We will inform you about the use of tracking cookies in the next section; these are only used with your consent.<\/p>

Web analysis and tracking technologies<\/h2>

We use web analysis and tracking tools on our website to evaluate user behavior and optimize our offering. These tools use cookies or similar technologies. Specifically, we use the following services:<\/p>

  • Google Analytics - a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics records, for example, click paths, page views, length of visit, approximate location and technical information about your browser and device. We have configured Google Analytics so that your IP address is truncated within the EU before being transmitted to the USA (IP anonymization). Only in exceptional cases is the full IP address transmitted to Google servers in the USA and truncated there. Google uses the information collected on our behalf to evaluate the use of the website and to provide reports. The data may also be transferred to servers in the USA; we would like to point out that the level of data protection in the USA is not comparable to that in the EU. We store the user data collected in Google Analytics for a period of 14 months, after which it is automatically deleted. Google Analytics places cookies with a duration of up to 2 years in your browser in order to recognize you on subsequent visits.<\/li>
  • Meta Pixel (also known as Facebook Pixel) from Meta Platforms Ireland Ltd (4 Grand Canal Square, Dublin 2, Ireland) - and Google Ads Conversion Tracking (Google Ireland Limited). These services are used for marketing and advertising purposes by tracking the behavior of users and enabling evaluations of the effectiveness of our advertisements. For example, the meta pixel can be used to track whether a user has seen an ad on Facebook\/Instagram and then visited our site or carried out an action (e.g. purchase). Google Ads Conversion Tracking helps us to recognize whether a user has reached our site via a Google ad and performs a desired action there. The tracking tools mentioned record your IP address, any interactions on our site and technical data, among other things, and transmit this information to the respective providers. Meta\/Facebook and Google process the data on servers, some of which are also located in the USA. Here too, no adequate level of data protection can be guaranteed in the USA without appropriate guarantees (e.g. EU standard data protection clauses).<\/li><\/ul>

    Important: We only use Google Analytics, Meta Pixel and Google Ads with your express consent (Art. 6 para. 1 lit. a GDPR). When you visit the website for the first time, you will be asked for your consent to these tools via a cookie consent banner. You can revoke or change your consent at any time via the cookie settings on our website. If you do not give your consent, these tools will not be used. You can also deactivate Google Analytics using a browser add-on.<\/p>

    Shipping service provider and forwarding of data<\/h2>

    For the delivery of orders, we work together with external shipping service providers, currently in particular DHL (Deutsche Post AG), UPS (United Parcel Service Deutschland), DPD (DPD Deutschland GmbH) and GLS (General Logistics Systems Germany). We transmit the data required for delivery (name of the recipient, delivery address and - if necessary for coordinating the delivery - e-mail address and telephone number) to these shipping companies. The data is forwarded exclusively for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR) or on the basis of your consent, e.g. if you have expressly agreed in the ordering process that the deliverer will contact you to announce the delivery. The shipping service providers use the transmitted data only for the purpose of delivery and are obliged to comply with the GDPR.<\/p>

    Contact by e-mail<\/h2>

    If you contact us by email, the data you provide (e.g. your email address, name and the content of your message) will be stored and processed by us in order to respond to your request. This is done - if the request is in connection with an order - on the basis of contract fulfillment (Art. 6 para. 1 lit. b GDPR); in all other cases on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in processing the request. Our legitimate interest is to respond to inquiries efficiently and satisfactorily. In the latter case, you have the right to object to processing on the basis of Art. 6 para. 1 lit. f GDPR at any time for reasons arising from your particular situation.<\/p>

    We do not pass on this communication data without your consent and use it exclusively for correspondence with you. We delete or anonymize inquiries no later than 12 months after the end of the communication, unless there is a legal obligation to retain the data.<\/p>

    Newsletter (Brevo)
    We send our newsletter with information on products, offers and news exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). We use the service provider Brevo (formerly Sendinblue), provider: Sendinblue GmbH, K\u00f6penicker Stra\u00dfe 126, 10179 Berlin, Germany.<\/p>

    If you register for the newsletter, your email address and, if applicable, your name will be transmitted to Brevo and stored there on servers in the EU. Brevo acts as a processor in accordance with Art. 28 GDPR; there is an order processing contract with the provider. The newsletter is sent using a data protection-compliant double opt-in procedure: You will receive an email to confirm your registration; the newsletter will only be sent after you click on the confirmation link.<\/p>

    You can unsubscribe from the newsletter at any time using the unsubscribe link in every email or by sending us an informal message. After unsubscribing, your e-mail address will be deleted from the dispatch platform or blocked for dispatch. Further information on data processing by Brevo can be found in Brevo's privacy policy: https:\/\/www.brevo.com\/de\/legal\/privacypolicy\/<\/p>

    Live chat (Tawk.to)
    To improve our customer service, we use a live chat system from the provider Tawk.to, a service of tawk.to Inc, 187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA.<\/p>

    When you use the live chat, your entries (e.g. name, email address, message content) and technical data (IP address, browser, device type) are recorded and transmitted to Tawk.to. This data is stored there in order to be able to answer your queries and track the chat process. Tawk.to acts as a processor; we have concluded an agreement with the provider in accordance with Art. 28 GDPR. Data processing is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in effective customer communication. If you provide information about an order, the processing is also carried out to fulfill the contract (Art. 6 para. 1 lit. b GDPR).<\/p>

    It cannot be ruled out that data will be transferred to third countries (in particular the USA). Tawk.to provides suitable contractual guarantees (standard data protection clauses pursuant to Art. 46 GDPR). Further information can be found in Tawk.to's privacy policy: https:\/\/www.tawk.to\/privacy-policy\/<\/p>

    Use of the chat is voluntary. You can avoid the service at any time without incurring any disadvantages.<\/p>

    Customer accounts and payment processing via the website<\/h2>

    Our webshop now offers you the opportunity to create a personal customer account. When you register, we collect the data you enter (e.g. name, address, e-mail address and a password of your choice). The creation of a customer account is voluntary and serves to process future orders faster and more conveniently and to view your order history. We process the account data to carry out pre-contractual measures and fulfill the contract (Art. 6 para. 1 lit. b GDPR), as the customer account is set up at your request and is used to manage your orders. You can cancel your customer account or request its deletion at any time. In this case, we will delete the data stored in the account, provided that there are no statutory retention obligations to the contrary. Please note that despite the deletion of your account, we must continue to store certain transaction data (e.g. invoices) for a limited period of time due to commercial and tax law requirements (see section Storage period and deletion).<\/p>

    Online payments<\/h3>

    We offer online payment options on our website. Payment transactions are processed via the following external payment service providers (payment providers): Stripe, PayPal, Klarna and Sofort\u00fcberweisung. If you select an online payment method, the data required for payment processing will be transmitted to the respective service provider. This usually includes information such as the amount to be paid, the order number and your contact details (e.g. name, e-mail address, billing and delivery address). The data is transmitted exclusively for the purpose of fulfilling the contract (Art. 6 para. 1 lit. b GDPR), namely to carry out the payment method you have selected. The payment service providers process your data under their own responsibility; their data protection provisions also apply to the payment processing procedures.<\/p>

    In detail, we use the following payment service providers:<\/p>

    • Stripe - Credit card payments are processed via Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe Payments Europe is a subsidiary of Stripe, Inc (HQ: USA). If you select credit card payment, you can enter your payment details directly on our website in a payment form provided by Stripe. This payment data (such as your card number, validity and verification code) is transmitted to Stripe in encrypted form; we do not store full credit card details ourselves. Stripe uses the data for payment processing and, if necessary, for fraud prevention. Stripe may also transmit the data to its parent company in the USA. Stripe is certified under the EU-US Data Privacy Framework, but we have also agreed standard contractual clauses with Stripe to ensure an adequate level of data protection. Further information can be found in Stripe's privacy policy.<\/li>
    • PayPal - When paying via PayPal, you will be redirected to the pages of the payment service PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg To use PayPal, you may need to log in with your PayPal account. We transmit the payment information (e.g. invoice amount and our merchant ID) to PayPal so that PayPal can assign the payment to your purchase. The customer enters payment data such as bank or credit card details directly with PayPal; we do not receive access to such sensitive information. PayPal may collect or check further data as part of the payment processing (e.g. for identity and fraud prevention) and stores your data for as long as is necessary for processing and legal obligations. PayPal may transfer data to PayPal Inc. in the USA; according to its own information, PayPal takes appropriate protective measures. An order processing contract is not required for the use of PayPal, as PayPal processes the payments on its own responsibility towards the customer. The legal basis for the transfer of data to PayPal is Art. 6 para. 1 lit. b GDPR (contract processing).<\/li>
    • Klarna - We offer payment methods from Klarna Bank AB (publ), Sveav\u00e4gen 46, 111 34 Stockholm, Sweden. If you decide to pay with Klarna (e.g. purchase on account, installment purchase or immediate payment via Klarna), we transmit the data required for payment (e.g. name, address, e-mail, purchase price, order number) to Klarna. This is done to execute the contract with you using the selected payment method (Art. 6 para. 1 lit. b GDPR). Klarna checks and evaluates the data in order to carry out a credit and identity check, in particular if you select the option of purchase on account or payment by installments. For this purpose, Klarna may forward data (such as name, address, date of birth, e-mail, telephone number and order data) to credit agencies and receive information from them (e.g. creditworthiness information based on mathematical-statistical procedures). This credit check is carried out in Klarna's interest in limiting its risk in the event of advance performance on the basis of Art. 6 para. 1 lit. f GDPR (Klarna's legitimate interest in avoiding payment defaults). As a merchant, we have no influence on this. You have the right to object to this use of your data by Klarna for reasons arising from your particular situation; to do so, please contact Klarna directly. If you do not wish to transmit the data required for the payment to Klarna or object to a credit check, you cannot use the respective Klarna payment method (however, alternative payment methods are available to you). All details on the processing of your data by Klarna can be found in Klarna's privacy policy: Klarna will handle your information in accordance with applicable data protection laws and in accordance with Klarna's privacy policy.<\/li>
    • Sofort\u00fcberweisung - This payment method is offered by SOFORT GmbH, Theresienh\u00f6he 12, 80339 Munich, Germany (a Klarna Group company). If you use the Sofort payment option (also known as \"Pay Now\"), our webshop connects to the Sofort payment portal as part of the ordering process. You will be asked to log in to Sofort with your online banking access data and authorize the payment. We only receive a confirmation of the successful transaction from Sofort; your confidential bank access data remains secret and is not disclosed to us. To carry out the Sofort bank transfer, we transmit to Sofort the information necessary for the payment, such as the payment amount, purpose (e.g. order number) and your bank details, so that Sofort can assign the transaction to your order. This data is also processed on the basis of Art. 6 para. 1 lit. b GDPR (contract fulfillment). Further information on data processing with Sofort\u00fcberweisung can be found in the Sofort\/Klarna data protection information.<\/li><\/ul>

      Note: All payment service providers mentioned process your personal data under their own responsibility, in particular for the purpose of payment processing, fraud prevention and to fulfill legal obligations (e.g. Money Laundering Act, accounting). Please refer to the respective data protection declarations of the providers to obtain more detailed information about the scope and duration of data processing, your rights there and, if applicable, options to object. Where necessary, we have concluded standard contractual clauses with the aforementioned providers or otherwise ensure that an appropriate level of data protection is guaranteed in the event of any data transfer to third countries.<\/p>

      Our website does not offer a public comment function or product reviews. Therefore, no user-generated content can be left here; accordingly, any data processing that would be associated with the publication of comments is omitted.<\/p>

      Legal basis of the processing<\/h2>

      We process personal data only within the framework of the applicable laws and on the basis of a permissible legal basis in accordance with Art. 6 GDPR. In detail:<\/p>

      • Performance of a contract (Art. 6 para. 1 lit. b GDPR): This is the legal basis if the data processing is required to fulfill a contract or to carry out pre-contractual measures. For example, we process your delivery address to deliver your order or your contact details for communication in the context of contract processing.<\/li>
      • Consent (Art. 6 para. 1 lit. a GDPR): If you give us your voluntary consent, we process your data on the basis of this consent. This is the case, for example, when sending newsletters or when using Google Analytics\/tracking cookies - we only use such tools if you have given your consent. You can revoke your consent at any time with effect for the future (see below Objection and revocation).<\/li>
      • Legal obligation (Art. 6 para. 1 lit. c GDPR): In certain cases, we are legally obliged to process or retain data. For example, due to commercial and tax law requirements, we must retain certain purchase and invoice data for 10 years Such processing takes place exclusively for the fulfillment of legal obligations.<\/li>
      • Legitimate interest (Art. 6 para. 1 lit. f GDPR): Where necessary, we process data to protect our legitimate interests, provided that your overriding interests do not conflict with this. Examples: keeping server log files for website security or answering general inquiries from interested parties. In such cases, we have weighed up your interests and come to the conclusion that the processing is in your and our legitimate interests. Nevertheless, you have the right to object to the processing at any time for reasons arising from your particular situation, insofar as it is based on Art. 6 para. 1 lit. f GDPR (see below).<\/li><\/ul>

        Rights of data subjects<\/h2>

        As a data subject affected by data processing, you have various rights under the GDPR that you can assert against us:<\/p>

        • Right to information (Art. 15 GDPR) - You can request information about what personal data we have stored about you and how we process it.<\/li>
        • Right to rectification (Art. 16 GDPR) - You have the right to obtain without undue delay the rectification of inaccurate personal data or the completion of incomplete personal data.<\/li>
        • Right to erasure (Art. 17 GDPR) - You can request the erasure of your personal data if the legal requirements are met. This is the case, for example, if the data is no longer required for the purposes for which it was collected or if you have withdrawn your consent.<\/li>
        • Right to restriction of processing (Art. 18 GDPR) - You have the right to have the processing of your data restricted under certain conditions (e.g. if you dispute the accuracy of the data, for the duration of the review).<\/li>
        • Right to data portability (Art. 20 GDPR) - You have the right to receive the personal data that you have provided to us in a commonly used, machine-readable format or - where technically feasible - to request that it be transmitted directly to another controller.<\/li>
        • Right to object (Art. 21 GDPR) - You can object at any time to the processing of your data, which we carry out on the basis of legitimate interests (Art. 6 para. 1 lit. f). If you object, we will no longer process your data on this basis unless we can demonstrate compelling legitimate grounds which override your interests or the processing serves the establishment, exercise or defense of legal claims. You can object to the use of your data for direct advertising at any time without giving reasons; in this case, we will no longer use your data for advertising purposes.<\/li>
        • Right to withdraw consent (Art. 7 (3) GDPR) - You have the right to withdraw your consent at any time. The revocation is only effective for the future and does not affect the legality of the processing until the revocation. For example, you can unsubscribe from the newsletter or change the cookie settings to withdraw your consent to tracking cookies.<\/li><\/ul>

          To exercise your rights, you can contact us informally at any time (e.g. by e-mail to info@etuicreations.de). Please specify which right you wish to exercise and, if necessary, provide additional information that will enable us to clearly identify you (such as your customer number or the order in question). We will respond to your request immediately, at the latest within the statutory period of one month.<\/p>

          You also have the right to lodge a complaint with a supervisory authority about the processing of your data (Art. 77 GDPR). You can contact the data protection authority of your usual place of residence, your workplace or our company headquarters. For example, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW) is responsible for our company headquarters.<\/p>

          Storage period and deletion<\/h2>

          We only process and store personal data for as long as is necessary for the respective purpose or as long as we are legally obliged to do so. Specifically, this means<\/p>

          • We retain order data (personal data in connection with purchase contracts) for the duration of the contract processing and beyond within the framework of the statutory retention periods under commercial and tax law. This generally includes a retention period of 6 to 10 years after the end of the calendar year in which the last relevant booking was made. The data is then deleted or anonymized.<\/li>
          • We store newsletter data (e-mail address etc.) until you withdraw your consent and unsubscribe from the newsletter. The data in question will then be promptly deleted from our newsletter system.<\/li>
          • Tracking data from Google Analytics and similar tools are - as described above - stored for a limited period of time (e.g. 14 months for Google Analytics) and then automatically deleted.<\/li>
          • Inquiries (by e-mail or contact form) will be deleted after your request has been dealt with and any follow-up periods (e.g. follow-up) have expired, unless further storage is required for the defense of legal claims or due to legal obligations.<\/li>
          • Server log files are only stored for a short time for security reasons and are usually deleted automatically after a few weeks (unless a security-relevant incident requires longer storage).<\/li><\/ul>

            If we process data on the basis of your consent, we will delete this data after you withdraw your consent (or suspend processing if complete deletion is not possible or not necessary). In all other cases, we delete personal data as soon as the purpose of the processing has been achieved and there are no legal retention obligations to the contrary.<\/p>

            Right of objection and revocation of consent<\/h2>

            At the end of this privacy policy, we would like to point out your rights of objection and revocation:<\/p>

              • Objection to advertising e-mails: We expressly object to the use of contact data published in the context of the imprint obligation for advertising purposes (spam).<\/li>
              • Withdrawal of consent: If we process your personal data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), you can revoke this consent at any time with effect for the future. The revocation can be made informally via the above-mentioned contact channels. In the event of revocation, we will cease the corresponding data processing.<\/li>
              • Objection to data processing based on legitimate interests: If we process your data to protect legitimate interests (Art. 6 para. 1 lit. f GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation (see Art. 21 GDPR). If you do so, we will cease processing unless we can demonstrate compelling legitimate grounds that outweigh your interests or the processing serves the establishment, exercise or defense of legal claims.<\/li><\/ul><\/li><\/ul>

                We recommend that you first contact us directly if you have any questions or wish to exercise your rights. We will treat your request confidentially and will certainly find a satisfactory solution in terms of data protection.<\/p>

                (Status of this data protection declaration: August 2025. We will adapt the declaration accordingly in the event of changes to data processing or the legal situation).<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                Data Privacy Statement in accordance with the GDPR This data privacy statement informs you about the processing of personal data by the provider of our online shop in accordance with the General Data Protection Regulation (GDPR). The data controller within the meaning of the GDPR is Iordanis Eleftheriadis, address as stated in the legal notice. If you have any questions about data protection, you can contact us at any time at the above address or by email at\u2026<\/p>","protected":false},"author":12,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4354","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/pages\/4354","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/comments?post=4354"}],"version-history":[{"count":0,"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/pages\/4354\/revisions"}],"wp:attachment":[{"href":"https:\/\/wp.etuicreations.de\/en\/wp-json\/wp\/v2\/media?parent=4354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}