Privacy Policy

Section 1 - Information on the Collection of Personal Data and Contact Details of the Controller

Thank you for visiting our website. We appreciate your interest and would like to inform you about how we manage your personal data during your website usage. Personal data encompasses all information that can identify you personally.

The data controller responsible for processing personal data on this website, as defined by the General Data Protection Regulation (GDPR), is Chic London. The controller is the natural or legal entity that determines the purposes and means of personal data processing, either alone or in conjunction with others.

For security and protection of personal data and confidential information (such as orders or inquiries), our website utilises SSL or TLS encryption. You can identify an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

Section 2 - Data Collection When Visiting Our Website

If you visit our website solely for informational purposes, meaning you do not register or provide us with any information, we will only collect data that your browser sends to our server (known as "server log files"). Upon accessing our website, we gather the following data, which is technically necessary for displaying the website to you:

- The specific page visited
- Date and time of access
- Volume of data sent in bytes
- Referring source/reference that directed you to our page
- Browser used
- Operating system employed
- IP address used (if applicable, in anonymised form)

This processing complies with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in enhancing the stability and functionality of our website. The data will not be shared or utilised for any other purposes, although we reserve the right to review the server log files should there be concrete evidence of unlawful use.

Section 3 - Cookies

To enhance your experience on our website and enable certain functions, we employ cookies across various pages. Cookies are small text files stored on your device. Some cookies are session cookies, which are deleted after your browser session ends, while others are persistent cookies that remain on your device, allowing us or our partner companies (third-party cookies) to recognize your browser on subsequent visits.

If cookies are set, they collect and process user information such as browser details, location data, and IP address values to varying extents. Persistent cookies are automatically removed after a specified period, which may vary depending on the cookie.

Cookies may also simplify the ordering process by remembering specific settings, such as items in a virtual shopping cart for later visits. If personal data is processed through specific cookies, such processing is conducted in line with Art. 6 para. 1 lit. b GDPR for contract fulfillment or according to Art. 6 para. 1 lit. f GDPR, safeguarding our legitimate interests in optimal website functionality and a user-friendly design.

We may collaborate with advertising partners to enhance the appeal of our website. As a result, third-party cookies may also be stored on your device when you visit our website. If we work with advertising partners, we will inform you separately about the use of those cookies and the scope of the information collected.

You can configure your browser settings to receive notifications about cookie placements and to decide whether to accept them or refuse their use entirely. Each browser has specific instructions for managing cookie settings, which can typically be found in the help menu. Links to settings for popular browsers include:

- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Safari: https://support.apple.com/kb/ph21411?locale=de_DE
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you choose not to accept cookies, certain functionalities of our website may be limited.

Section 4 - Contact Us

Personal data is collected when you reach out to us (e.g., via a contact form or email). The specific data collected through a contact form can be identified on that form. This data is stored and used solely for the purpose of responding to your inquiry or for contacting you, including associated technical administration. The legal basis for data processing in this context is our legitimate interest in responding to your inquiry per Art. 6 para. 1 lit. f GDPR. If your contact pertains to the conclusion of a contract, Art. 6 para. 1 lit. b GDPR will also apply. Your data will be deleted once your inquiry has been fully processed, assuming no legal retention obligations apply.

Section 5 - Data Processing When Opening a Customer Account and for Contract Processing

According to Art. 6 para. 1 lit. b GDPR, personal data will be collected and processed when you provide it for contract fulfillment or when creating a customer account. The specific data collected will be outlined in the relevant input forms. You can delete your customer account at any time by contacting the data controller as mentioned above. We will store and utilize the data you provided for contract fulfillment. After contract completion or customer account deletion, your data will be blocked in accordance with applicable tax and commercial retention periods and deleted thereafter, unless explicit consent for further data use is provided, or a legally permissible further use of the data is retained.

Section 6 - Use of Your Data for Direct Advertising - Subscribe to Our Email Newsletter

By subscribing to our email newsletter, you will receive regular updates about our offers. The only mandatory information for sending the newsletter is your email address; providing additional data is optional and will help us address you personally.

We employ a double opt-in procedure for newsletter subscriptions, meaning you will only receive the newsletter after confirming your consent via a confirmation email. This email will contain a link to finalize your subscription.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. The registration process will also record your IP address and date and time of registration for tracing any future misuse of your email address. The data collected during your newsletter subscription will exclusively be used for promotional purposes. You may unsubscribe at any time via the provided link or by sending a corresponding message to the controller. Upon cancellation, your email address will be removed from the mailing list unless further use is consented to or legally permitted as stated in this policy.

Section 7 - Data Processing for Order Processing

We will share the personal data we collect with the delivery service provider engaged for contract fulfillment when necessary for the delivery of goods. We also transfer payment data to the respective financial institution for payment processing. If payment service providers are utilized, we will provide explicit information regarding this in subsequent paragraphs. The legal basis for data transfer is Art. 6 para. 1 lit. b GDPR.

**Use of Payment Service Providers:**

- **PayPal**: If you opt for PayPal, credit card via PayPal, direct debit via PayPal, or if available, "purchase on account" or "payment by installments," we will send your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, as required for payment processing.

PayPal may conduct a credit check for specific payment methods. For this, your payment data may be shared with credit agencies based on PayPal's legitimate interest in assessing your creditworthiness in accordance with Art. 6 para. 1 lit. f GDPR. PayPal will use results from the credit check when assessing your eligibility for payment options. Further details on data protection can be found in PayPal's privacy policy [here](https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

- **SOFORT**: Selecting the "SOFORT" payment method will initiate payment processing via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. We will share the information you provide during the ordering process along with the details of your order in accordance with Art. 6 para. 1 lit. b GDPR. SOFORT GmbH is part of the Klarna Group. Your data will only be shared to the extent necessary for payment processing. More information about SOFORT's data protection provisions is available [here](https://www.klarna.com/sofort/datenschutz).

Section 8 - Contact for the Evaluation Reminder

**Own Rating Reminder (Not Sent by a Customer Rating System)**

We may use your email address to remind you to evaluate your order, provided you have given express consent during or after your order per Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by contacting the data controller.

Section 9 - Use of Social Media: Social Plugins

Our website includes social plugins from Facebook, operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). These plugins are not fully integrated but utilize an HTML link to enhance data protection. No connection is established to Facebook servers until you click the button, which then opens a new browser window directing you to Facebook for interaction.

Facebook Inc. is part of the US-European Privacy Shield agreement, ensuring compliance with EU data protection standards. More information on data collection and use by Facebook can be found in their privacy policy [here](https://www.facebook.com/policy.php).

Additional information on social plugins from Google+ and Instagram follows similar principles, ensuring privacy protection through direct links instead of integration, with relevant privacy policies accessible as delineated below:

- Google+: [Google Privacy Policy](https://www.google.com/intl/de/policies/privacy/)
- Instagram: [Instagram Privacy Information](https://help.instagram.com/155833707900388/)

Section 10 - Online Marketing

Our website utilizes Google’s DoubleClick online marketing tool designed to enhance ad relevance and measure campaign performance. DoubleClick employs cookies, tracking ad display frequency and recording conversions linked to ad interactions. Google collects this data in alignment with our legitimate interests, governed by Art. 6 para. 1 lit. f GDPR.

To opt out of DoubleClick tracking, cookies can be disabled within browser settings or by following guidance from the Digital Advertising Alliance at [www.aboutads.info](http://www.aboutads.info).

Section 11 - Web Analysis Services

Google Analytics is employed to analyze website usage through cookies, with the information often sent to Google’s servers in the USA for processing, typically in an anonymized format. We utilize the "_anonymizeIp()" feature to enhance privacy through IP address anonymization, ensuring minimal direct personal reference.

You may prevent Google Analytics from collecting your data by configuring your browser not to accept cookies or by utilizing available opt-out tools [here](https://tools.google.com/dlpage/gaoptout?hl=de). You can find further details on Universal Analytics and privacy standards at [this link](https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376).

Section 12 - Retargeting / Re-marketing / Referral Advertising

Our website utilizes Facebook Custom Audiences through the Facebook pixel to assess the effectiveness of Facebook ads. This can only occur with your explicit consent, and the data does not allow us to personally identify you. Deactivation options are available through both browser settings and via Digital Advertising Alliance resources.

We also employ Google AdWords Remarketing with cookies for advanced ad targeting based on user behavior. Participation in this program requires your consent, and you can prevent cookie placement via browser settings or by utilizing the provided links.

Section 13 - Rights of the Person Concerned

As per applicable data protection laws, you possess comprehensive rights regarding your personal data processed by the controller.

Your rights include:

- Right to Information: You may request details about your personal data processed by us and relevant processing activities (Art. 15 GDPR).
- Right to Rectification: You can demand immediate rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR).
- Right to Erasure: You may request deletion of your data under specific conditions (Art. 17 GDPR).
- Right to Restriction of Processing: You can request the limitation of your data processing while verifying its accuracy (Art. 18 GDPR).
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format (Art. 20 GDPR).
- Right to Withdraw Consent: You can revoke any consent previously granted for data processing at any time (Art. 7, para. 3 GDPR).
- Right to Lodge a Complaint: If you consider that our data processing violates GDPR, you have the right to complain to a supervisory authority (Art. 77 GDPR).

**Right of Objection**

Should your personal data be processed based on our legitimate interest, you may object to this processing, especially concerning direct marketing activities, at any time. Upon such an objection, we will cease processing your data.

**Duration of the Storage of Personal Data**

The duration of personal data storage is determined by statutory retention periods (e.g., commercial and tax laws). Once these periods expire, the respective data will be routinely deleted, provided it is no longer necessary for contractual purposes, or we no longer have a justified interest in further storage.

This Privacy Policy may be updated periodically. For the most current version, please refer to our website.