The protection of your personal data is of utmost importance to me. I process your data exclusively based on the legal regulations (GDPR, TKG 2003). In this privacy policy, I inform you about the most important aspects of data processing on my website.

Contacting Me

If you contact me via the form on the website or by email, the data you provide will be stored for six months for processing your request and for follow-up questions. I will not share this data without your consent.

Data processing is carried out based on the legal provisions of § 96 (3) TKG and Article 6 (1) (a) (consent) and/or (legitimate interest) of the GDPR.

To process your order, I require certain information from you, including your name, email address, postal address, payment details, and information about the product you are ordering. You also have the option to provide additional personal information (e.g., for a custom-made bag) when you contact me directly.

My legitimate interest under the GDPR is to improve my services and web presence.

Why I Need Your Information and How I Use It

I rely on several legal bases to collect, use, and share your data, including:

• As necessary to provide my services, such as processing your order, resolving disputes, or providing customer support;
• When you have given your explicit consent (which you can revoke at any time), for example, by subscribing to my newsletter;
• If necessary to comply with a legal obligation or a court order, or in connection with legal claims, such as the need to retain purchase information for tax law purposes; and
• As required for my legitimate interests—provided these are not overridden by your rights or interests—such as:
  1. Providing and improving my services. I use your information to deliver the services you requested and in my legitimate interest to improve them.
  2. Compliance with my seller policies and terms of use. I use your information as necessary to fulfill my obligations under my seller policy and terms of use.

Sharing and Disclosure of Information

Customer data is essential to my business. I share your personal data only for specific reasons and under particular circumstances, including:

• Service providers: I engage trusted third-party providers to perform tasks and services for my shop, such as parcel delivery services. I share your personal data with these third parties only to the extent necessary for the completion of these services.
• Business transfers: If I sell or merge my business, I may disclose your information as part of this transaction, as permitted by law.
• Compliance with laws: I may collect, use, store, and share your data if I have a good faith belief that it is necessary to:
  • Respond to legal processes or regulatory requirements;
  • Enforce my agreements, terms, and policies;
  • Prevent, investigate, and address fraud, illegal activities, security, or technical issues; or
  • Protect the rights, property, and safety of my customers or others.

Data Retention

I store your personal data only as long as necessary to provide my services and as described in my privacy policy. However, I may be required to retain this information to comply with legal obligations, resolve disputes, and enforce my agreements. Generally, I keep your data for the following period: 4 years.

Transfer of Personal Data Outside the EU

I may store and process your information through third-party hosting services in the USA and other countries. As a result, I may transfer your personal data to countries with different data protection and government surveillance laws than those in your country. If I am expected to transfer information about you outside the EU, I rely on the EU-US Privacy Shield as the legal basis for the transfer, as Google Drive is certified under the EU-US Privacy Shield.

Newsletter

You have the option to subscribe to my newsletter via my website. For this, I require your email address and your declaration of consent to receive the newsletter.

Once you have subscribed, I will send you a confirmation email with a link to verify your subscription.

You can unsubscribe from the newsletter at any time. Please send your cancellation to the following email address: xxx.com. I will then promptly delete your data related to the newsletter subscription. This revocation does not affect the lawfulness of processing carried out based on consent before its withdrawal.

Your Rights

If you reside in certain regions, including the EU, you have a number of rights regarding your personal data. Some of these rights apply generally, while others apply only in specific cases. These rights include:

• Access: You may have the right to access and receive a copy of the personal data I hold about you by contacting me using the details below.
• Modification, Restriction, Deletion: You may also have the right to modify your personal data, restrict my use of it, or delete it. Except for exceptional circumstances (such as when I must store data for legal reasons), I will generally delete your personal data upon request.
• Objection: You can object to:
  1. My processing of some of your data based on my legitimate interests.
  2. Receiving marketing messages from me after you have explicitly agreed to receive them.
     In such cases, I will delete your personal data unless I can provide compelling legitimate grounds for its continued use or if it is legally required.
• Complaint: If you reside in the EU and wish to raise concerns about my use of your data—without prejudice to any other rights available to you—you have the right to contact your local data protection authority.

Contact

Under the EU General Data Protection Regulation, I, [Your Name], am the data controller of your personal data. If you have any questions or concerns, you can contact me at office@houseofjacquards.com.  Alternatively, you can reach me at the following address: