Privacy Policy
DATA PROTECTION DECLARATION
1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1
We are pleased that you are visiting our website and thank you for your interest.
In the following, we inform you about the handling of your personal data when you use our website.
Personal data are all data with which you can be personally identified.
1.2
The controller in charge of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Barossa Boutique.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3
For security reasons and to protect the transmission of personal data and other confidential content (for example orders or enquiries) this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the character string “https\://” and the lock symbol in your browser line.
2. DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only, that is, you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (server log files).
When you visit our website, we collect the following data, which are technically necessary to display the website to you:
• the page visited
• date and time of access
• amount of data sent (bytes)
• source or reference from which you reached the page
• browser used
• operating system used
• IP address (where applicable in anonymised form)
Processing is carried out under Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of the website. The data are not passed on or used otherwise, but we reserve the right to check the server log files retrospectively if concrete indications of unlawful use exist.
3. COOKIES
To make your visit to our website attractive and to enable certain functions, we use cookies on various pages. Cookies are small text files stored on your end device.
Session cookies are deleted after you close your browser.
Persistent cookies remain on your device and enable us or our partners (third‑party cookies) to recognise your browser on your next visit. Persistent cookies are automatically deleted after a specified period that may vary by cookie.
Cookies can simplify the ordering process, for example by remembering the contents of a virtual shopping cart for a later visit. Where cookies process personal data, this is done either under Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (our legitimate interest in optimal functionality and a customer‑friendly site).
We may also cooperate with advertising partners who help make our website more interesting for you; in this case, cookies from partner companies may be stored on your device. You will be informed separately below if such cookies are used.
Browser settings: You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, accept cookies in certain cases, or generally exclude them. If you do not accept cookies, the functionality of our website may be restricted.
4. CONTACTING US
When you contact us, for example via contact form or e‑mail, personal data are collected. Which data are collected can be seen from the contact form. These data are used exclusively to answer your request and for the associated technical administration.
The legal basis for processing is our legitimate interest in responding to your request (Article 6(1)(f) GDPR). If your contact aims at concluding a contract, the additional legal basis is Article 6(1)(b) GDPR. Your data will be deleted after final processing of your enquiry, provided no statutory retention obligations exist.
5. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING
Under Article 6(1)(b) GDPR, personal data are collected and processed if you provide them to us to execute a contract or open a customer account. Which data are collected is evident from the input forms.
You may delete your customer account at any time by contacting the controller named above. After complete contract processing or deletion of your account, your data are blocked for the duration of statutory tax and commercial retention periods and deleted thereafter, unless you have expressly consented to further use or we are legally permitted to continue using them.
6. USE OF YOUR DATA FOR DIRECT ADVERTISING
6.1 Subscription to our e‑mail newsletter
If you subscribe to our newsletter, we send you regular information about our offers. Mandatory data are limited to your e‑mail address; other fields are voluntary and serve personal salutation. We use the double‑opt‑in procedure: after subscribing you will receive a confirmation e‑mail in which you must confirm your subscription.
By activating the confirmation link, you consent to the use of your personal data under Article 6(1)(a) GDPR. We store your IP address and registration time to prevent misuse. You can unsubscribe at any time via the link in each newsletter or by contacting the controller; your e‑mail address will then be deleted from the mailing list unless another legal basis permits further use.
6.2 Newsletter to existing customers
If you have provided your e‑mail address when purchasing goods or services, we may send you offers for similar goods or services by e‑mail on the basis of our legitimate interest in personalised direct advertising (Article 6(1)(f) GDPR). You can object at any time by contacting the controller; you will incur only the basic transmission costs.
7. DATA PROCESSING FOR ORDER PROCESSING
7.1 Shipping and payment
We forward personal data to the transport company commissioned with delivery, insofar as this is necessary to deliver the goods. Your payment data are forwarded to the credit institution responsible for payment processing. Legal basis: Article 6(1)(b) GDPR.
7.2 Payment service providers
PayPal
When paying via PayPal (including credit card, direct debit, purchase on account or instalments), your payment data are transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22‑24 Boulevard Royal, L‑2449 Luxembourg, solely as necessary for payment processing (Article 6(1)(b) GDPR). PayPal may perform a credit check based on its legitimate interest in determining solvency (Article 6(1)(f) GDPR). Further details can be found in PayPal’s privacy policy. You may object at any time, but PayPal may still be entitled to process data if necessary for contractual payment processing.
SOFORT
If you select “SOFORT”, payment is processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (part of Klarna Group). We transmit the information provided during ordering along with order details to SOFORT under Article 6(1)(b) GDPR. Further information is available on the SOFORT website.
8. RATING REMINDER
We may use your e‑mail address once to remind you to review your order, provided you have expressly consented (Article 6(1)(a) GDPR). You can revoke consent at any time.
9. USE OF SOCIAL MEDIA: SOCIAL PLUGINS
To protect your data, our social‑media buttons are implemented as HTML links via the Shariff solution. Thus, no data are transmitted to social networks unless you click a button.
9.1 Facebook
Provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Inc. is certified under the EU‑US Privacy Shield.
9.2 Google+
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU‑US Privacy Shield.
9.3 Instagram
Provider: Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. Instagram LLC is certified under the EU‑US Privacy Shield.
10. ONLINE MARKETING
10.1 DoubleClick by Google
This site uses DoubleClick by Google (Google LLC, USA). Cookies are used to display relevant ads, improve campaign performance and prevent repeat ads. Processing is based on our legitimate interest in optimal marketing (Article 6(1)(f) GDPR). You can disable personalised ads via your Google settings. Google LLC is certified under the EU‑US Privacy Shield.
10.2 Google AdWords Conversion Tracking
We use Google AdWords to place ads; conversion tracking helps us measure success. The conversion cookie expires after 30 days. If you do not wish to participate, disable the cookie via your browser or install the Google plug‑in. Processing is based on our legitimate interest in targeted advertising (Article 6(1)(f) GDPR). Google LLC is certified under the EU‑US Privacy Shield.
11. WEB ANALYSIS SERVICES
Google (Universal) Analytics
This website uses Google Analytics with the extension \_anonymizeIp(), so IP addresses are processed only in shortened form. Processing is based on our legitimate interest in statistical analysis for optimisation and marketing (Article 6(1)(f) GDPR). You can prevent cookie storage via browser settings or download the opt‑out plug‑in. Google LLC is certified under the EU‑US Privacy Shield. This site also uses Google Analytics User‑ID for cross‑device analysis. You can revoke collection and storage at any time.
12. RETARGETING, REMARKETING, REFERRAL ADVERTISING
Facebook Custom Audience (Pixel)
With your explicit consent (Article 6(1)(a) GDPR), the Facebook pixel tracks user behaviour after viewing or clicking a Facebook ad to measure effectiveness. Data are anonymous for us but may be linked by Facebook to your account. Consent may only be given by users aged 13 or older. Facebook Inc. is certified under the EU‑US Privacy Shield. You can disable cookies via your browser or the Digital Advertising Alliance page.
Google AdWords Remarketing
Google sets a cookie that enables interest‑based advertising based on pages you visit. Processing is based on our legitimate interest in optimal marketing (Article 6(1)(f) GDPR). You can permanently deactivate ad cookies via the Google plug‑in or the Digital Advertising Alliance page. Google LLC is certified under the EU‑US Privacy Shield.
13. RIGHTS OF THE DATA SUBJECT
13.1 Your rights under the GDPR include the right of access, rectification, erasure, restriction of processing, notification, data portability, withdrawal of consent and the right to lodge a complaint with a supervisory authority.
13.2 Right to object
If we process your personal data on the basis of our legitimate interests, you have the right to object at any time on grounds relating to your particular situation with future effect.
If you object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If your personal data are processed for direct marketing, you may object at any time; in that case we will no longer process your data for this purpose.
14. DURATION OF STORAGE OF PERSONAL DATA
The storage period is determined by statutory retention periods, for example commercial and tax law. After these periods expire, the corresponding data are routinely deleted unless they are still required for contract fulfilment or initiation, or we have a legitimate interest in further storage.
15. CONTACT DETAILS
YOUCOMM LIMITED
Registration No.: 78082856
Flat B01, 2/F, Kin Tak Fung Ind Building
174 Wai Yip Street, Kwun Tong
Hong Kong
E‑mail: help@barossa-boutique.com