Privacy policy

  1. COLLECTION AND PROCESSING OF PERSONAL DATA

We only collect and process the personal data you provide when ordering goods, opening a customer account or for any other purpose (e.g. name, address, e-mail address, telephone number, payment data). if and to the extent that you have consented to their processing or another legal basis of Art. 6 General Data Protection Regulation (GDPR) exists.        


Furthermore, for technical reasons, the IP address of the user is recorded on our website.


We process and use the personal data collected by us to provide the services you require (Art. 6 Para. 1 lit. b) GDPR), to process your inquiries (Art. 6 Para. 1 lit. b) GDPR), on the basis of Your express consent to checking your creditworthiness, if you want us to make an advance payment, e.g. when purchasing on account (Art. 6 Para. 1 lit. a) DSGVO), for invoicing (Art. 6 Para. 1 lit b) GDPR) to ensure compliance with laws and regulations, in particular the obligation to retain data pursuant to Section 257 HGB (Art. 6 Para. 1 lit. c) GDPR) and to enforce (legal) claims (Art. 6 Para. 1 lit f) GDPR).     


Subject to your separate consent, we will also use the personal data stored by us to inform you about our products and other services in our newsletter. We will only send you our newsletter by e-mail if you have expressly given your consent to this in the double opt-in procedure. You can unsubscribe from our newsletter at any time by clicking on the link at the end of our newsletter.



  1. DISCLOSURE OF PERSONAL DATA

For the purposes stated under Section 1, we reserve the right to also pass on your personal data to service providers commissioned by us within the European Union and other contracting states of the Agreement on the European Economic Area. They are obliged to treat your personal data confidentially and to use it only in compliance with the applicable data protection regulations to provide the desired services.           


We work with service providers in the following categories:

 

  • E-commerce agency for the further development of our website
  • Web hoster regarding the operation of our website and our web shop
  • Fulfillment service provider regarding shipping
  • Hotline service provider regarding customer
  • of goods
  • Payment service provider regarding clearing, factoring and payment processing
  • Banks regarding payment processing
  • Tax consultants regarding the Financial accounting
  • IT service providers regarding the technical support of our IT systems
  • marketing agencies and newsletter senders regarding customer communication
  • Online analysis service providers regarding IP location determination and tracking

If you are not the recipient of the services, you are obliged to obtain the recipient’s consent to the processing of their personal data Collect data before you send it to us.


Apart from this, we will only disclose the personal data stored by us to third parties if we have been expressly authorized to do so by you (Art. 6 Para. 1 lit. a) DSGVO) or if we are legally obliged to do so (Art. 6 Para. 1 lit. c) GDPR) or such disclosure is necessary to enforce or protect our rights (Art. 6 Para. 1 lit. f) GDPR).



  1. DURATION OF STORING YOUR PERSONAL DATA

The duration of storage of the collected personal data depends on the purpose for which we process the data. Basically, the storage takes place as long as it is necessary to achieve the purpose of processing or as long as we are obliged to store it due to legal provisions.

In order to fulfill our storage obligations in accordance with § 257 HGB, we store your personal data collected as part of an order for goods for 10 years, calculated from the last invoice or credit note issued to you. If you have not settled all of our due payment claims within the 10-year period, we will continue to store your personal data until all of our outstanding payment claims have been settled. Data collected as part of other inquiries will be stored by us for 6 years - calculated from our answer (§ 257 Para. 4 HGB).          


If you have ordered our newsletter, we will store your personal data until you unsubscribe from our newsletter or object to the further processing of your personal data for sending the newsletter.



  1. YOUR RIGHTS

You can find out about the personal data we have stored about you, request that your personal data be supplemented and inaccurate personal data corrected at any time by sending an e-mail to manaolanaboutique@gmail.com. We will process your inquiries promptly.        


Of course, you can also send an email to manaolanaboutique@gmail.com in accordance with Art. 17 GDPR to request the deletion or in accordance with Art. 18 GDPR the restriction of the processing of the personal data we have stored about you. We will then immediately delete the personal data we have stored about you or restrict its processing. In any case, the deletion or restriction of processing will only take place after all existing contracts and other legal relationships with you have been fully processed. Deletion can only take place when we are no longer legally obliged to store it. Please note that after the deletion or restriction of processing, we can no longer access the data you previously provided and may not be able to process pending inquiries. Insofar as we are legally obliged to store personal data, we will block it and no longer use it for communication.     


If we process your personal data, you are entitled to request a copy of this data in writing or electronically. We will send you the first copy with your personal data free of charge or forward it to the third party named by you.


If you have consented to the processing of your personal data and we have still saved it, we will make it available to you or a third party named by you at your request.          


If you are of the opinion that the processing of your personal data violates the GDPR, you also have the right to lodge a complaint with any supervisory authority in accordance with Art. 77 GDPR. 


If the data processing is based on your consent (in particular to check your creditworthiness and, if necessary, to send you our newsletter), you can revoke your consent at any time.       


According to Article 21 of the GDPR, you have the right to object to the processing of your personal data to safeguard our legitimate interests or that of a third party in accordance with Article 6(1)(f) GDPR. If you object, we will stop data processing on the basis of Article 6 (1) (f) GDPR, unless we can demonstrate overriding, compelling legitimate grounds for processing, in particular if you have not yet settled all of our outstanding payment claims, or the processing serves to assert, exercise or defend legal claims.


If you have any questions about privacy, please feel free to email us at manaolanaboutique@gmail.com. We will be happy to answer your questions free of charge. Instead of sending an email, you can of course also contact the responsible office in accordance with Section 18 by post or fax.



  1. KLARNA

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact data and order data, to Klarna. In this way, Klarna can assess whether you can use the payment options offered via Klarna and adapt the payment options to your needs. General information about Klarna can be found here. Your personal information will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations



  1. INTEGRATION OF THE TRUSTED SHOPS TRUSTBADGE

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of quality and the collected reviews as well as to offer Trusted Shops products to buyers after an order.  


This serves to safeguard our overriding legitimate interests in optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.    


When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site.


Other personal data will only be transmitted to Trusted Shops if you have given your consent, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.



  1. USE OF COOKIES

We use cookies on various pages to make visiting our website attractive, to personalize advertising and to enable the use of certain functions, provided that you have given your consent or other permissions exist. Cookies are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive after the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent cookies). These cookies are used to greet you with your user name and make it unnecessary for you to re-enter your password or fill out forms with your data for subsequent orders. Our partner companies are not permitted - subject to other agreements with you and different information in this data protection declaration - to collect, process or use personal data via our website using cookies. You can set your browser so that you are informed about the setting of cookies and individually exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

When you visit our website, you have the option of opting in to the use of all the cookies we have set up or selecting which cookies you want to allow under the cookie settings. You can adjust these settings at any time.  



  1. FUNCTIONS AND DATA COLLECTION OF FACEBOOK

Components of the company Facebook are integrated on our website. Facebook is a social network.

A social network is a social meeting place operated on the Internet, an online community that usually enables users to communicate with one another and to interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it allows the Internet community to provide personal or company-related information. Among other things, Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.

Facebook's operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a person concerned lives outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Facebook component causes a representation of the corresponding Facebook component to be downloaded from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook is informed which specific subpage of our website is visited by the person concerned.

If the person concerned is logged on to Facebook at the same time, Facebook recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned to the respective Facebook account of the person concerned by Facebook. If the person concerned clicks on one of the Facebook buttons integrated on our website, for example the "Like" button, or if the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data .

Facebook always receives information via the Facebook component that the person concerned has visited our website if the person concerned is logged in to Facebook at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook in this way, they can prevent the transmission by logging out of their Facebook account before accessing our website.

The data policy published by Facebook, which can be https://de-de.facebook.com/about/privacy/ , provides information about the collection, processing and use of personal data by Facebook. It is also explained there which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the person concerned to suppress data transmission to Facebook.



  1. FUNCTIONS AND DATA COLLECTION OF INSTAGRAM

We have integrated components of the Instagram service on our website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also retransmit such data on other social networks.

The operator of the Instagram services is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which an Instagram component (Insta button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Instagram component causes a representation of the corresponding component to be downloaded from Instagram. As part of this technical process, Instagram is informed which specific subpage of our website is visited by the person concerned.

If the person concerned is logged in to Instagram at the same time, Instagram recognizes which specific subpage the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the person concerned. If the person concerned clicks on one of the Instagram buttons integrated on our website, the data and information thus transmitted are assigned to the personal Instagram user account of the person concerned and stored and processed by Instagram.

Instagram always receives information via the Instagram component that the person concerned has visited our website if the person concerned is logged in to Instagram at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before accessing our website.

Further information and Instagram's applicable data protection regulations can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.



  1. FUNCTIONS AND DATA COLLECTION OF PINTEREST

We have integrated components of Pinterest Inc. on our website. Pinterest is a so-called social network. A social network is a social meeting place operated on the Internet, an online community that usually enables users to communicate with one another and to interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it allows the Internet community to provide personal or company-related information. Pinterest enables users of the social network, among other things, to publish collections of images and individual images as well as descriptions on virtual pin boards (so-called pinning), which in turn can be shared (so-called repinning) or commented on by other users.

Pinterest's operating company is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Pinterest component causes a representation of the corresponding Pinterest component to be downloaded from Pinterest. More information about Pinterest is available at https://pinterest.com/. As part of this technical process, Pinterest is informed which specific subpage of our website is visited by the person concerned.

If the person concerned is logged in to Pinterest at the same time, Pinterest recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the person concerned clicks on a Pinterest button integrated on our website, Pinterest assigns this information to the personal Pinterest user account of the person concerned and saves this personal data.

Pinterest always receives information via the Pinterest component that the person concerned has visited our website if the person concerned is logged in to Pinterest at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on the Pinterest component or not. If the data subject does not want this information to be transmitted to Pinterest, they can prevent the transmission by logging out of their Pinterest account before accessing our website.

The privacy policy published by Pinterest, which is available at https://about.pinterest.com/privacy-policy, provides information about the collection, processing and use of personal data by Pinterest.


  1. GOOGLE ANALYTICS

We use the integrated Google Analytics component (with anonymization function) on our website. Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data about the behavior of visitors to websites. A web analysis service collects, among other things, data about the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. With this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Google Analytics component to transmit data to Google for online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements.

The cookie is used to store personal information, such as access time, the location from which access was made and the frequency of visits to our website by the person concerned. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is evaluated by Google as a contradiction. If the information technology system of the data subject is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person who is attributable to their sphere of influence, there is the possibility of reinstalling or reactivating the browser add-on.

Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.



  1. GOOGLE ADWORDS REMARKETING

The person responsible for processing has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google's search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define certain keywords that will be used to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword-related search result. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operator of the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

The purpose of Google AdWords is to promote our website by displaying interest-based advertising on the websites of third-party companies and in the search engine results of the Google search engine and displaying third-party advertising on our website.

If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie enables both us and Google to understand whether a person who came to our website via an AdWords ad generated revenue, i.e. completed or canceled a purchase.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. In turn, we use these visit statistics to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future . Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the person concerned.

The conversion cookie is used to store personal information, such as the website visited by the person concerned. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the person concerned must call up the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there.

Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/.



  1. GOOGLE MAPS


We use Google Maps on our website to show our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.


If you call up the Google Maps component integrated into our website, Google will store a cookie on your device via your Internet browser. Your user settings and data are processed in order to display our location and create a route description. We cannot rule out that Google uses servers in the USA.


The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.

Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be sent.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. You can find details on this under “Cookies” above.

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms and the Google Maps.

In addition, Google offers

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information at



  1. DATA SECURITY During


the ordering process, your personal data will be encrypted using SSL over the Internet. We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Access to your customer account is only possible after entering your personal password.      


You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.



  1. CHANGES TO THIS DATA PRIVACY STATEMENT


Due to constant further developments in the field of electronic data processing, we reserve the right to amend this data protection declaration if necessary. We will inform you about changes to this data protection declaration in text form to a contact address provided by you.



  1. MINIMUM AGE


We only offer our services and products to users who are at least 16 years old.



  1. CONTACT PERSON FOR DATA PROTECTION


If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data or revocation of consent, please contact our internal data protection officer Franziska Kraus by email at manaolana@gmail .com or at our postal address with the addition "the data protection officer".



  1. RESPONSIBLE ENTITY The


responsible entity within the meaning of the General Data Protection Regulation is


MANA'OLANA® Healing Stone Jewelry

Franziska Kraus

c/o MANA'OLANA® Healing Stone Jewelry

Wiesenweg 8

08340 Schwarzenberg

Germany


Tel: +49 (0)176-846 941 62

E-Mail: manaolanaboutique@ gmail.com

Web: www.manaolana.shoP