Privacy policy

Privacy Policy

PRIVACY POLICY

Home Olivia Toronto

This Privacy Policy explains how Home Olivia Toronto collects, uses, stores, and protects your personal data when you visit our online store or use our services.

Please read this Privacy Policy carefully before using our website.

1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND DATA CONTROLLER DETAILS

1.1

Thank you for visiting our website and for your interest in our products.

Below, we explain how we process your personal data while you use our online store.

Personal data is any information that allows your direct or indirect identification.

1.2

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Home Olivia Toronto

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3

To protect the security of the transmission of personal data and other confidential information (for example, orders or enquiries), this website uses SSL or TLS encryption.

You can recognize a secure connection by the https:// indication in the browser's address bar and the padlock symbol.

2. COLLECTION OF DATA WHEN VISITING OUR WEBSITE

If you use our website exclusively for informational purposes, meaning that you do not register a user account or otherwise provide us with data, we only collect the data that your internet browser automatically sends to our server (so-called server log files).

When you visit our website, we automatically collect the following technical data:

  • website visited
  • date and time of access
  • amount of data transferred (in bytes)
  • source or link through which you arrived at our website
  • browser you use
  • operating system you use
  • IP address (if applicable, in anonymized form)

The processing of this data is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in ensuring the stability, security, and proper functioning of the website.

This data is not shared with third parties or used for other purposes.

However, we reserve the right to subsequently check server logs if there are specific indications of unlawful use of our website.

3. COOKIES

To provide you with the best possible user experience and ensure the proper functioning of our website, we use cookies.

Cookies are small text files that are stored on your device.

Some cookies are automatically deleted after closing the internet browser (session cookies), while others remain stored on your device and allow your browser to be recognized during your next visit (persistent cookies).

3. COOKIES

When cookies are placed, certain user data may be collected and processed, such as:

  • internet browser data
  • location data
  • IP address

Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the type of cookie.

In certain cases, cookies are used to simplify the ordering process by storing certain settings, for example the contents of the shopping cart when you revisit the website.

If certain cookies process personal data, the processing is carried out in accordance with Article 6(1)(b) of the GDPR for the performance of a contract or in accordance with Article 6(1)(f) of the GDPR to protect our legitimate interests in the optimal functioning of the website and a simpler and more efficient user experience.

We may cooperate with advertising partners who help us make our website more interesting and relevant to users. For this purpose, third-party cookies may also be stored on your device.

Managing cookies

You can configure your internet browser to notify you about the placement of cookies and decide for yourself whether you want to accept or reject them, either individually or entirely.

Please note that disabling cookies may limit the functionality of our website.

4. CONTACT

When you contact us through the contact form or by email, we collect the personal data that you voluntarily provide to us.

The data collected depends on the content of your enquiry.

This data is used exclusively for:

  • responding to your enquiry;
  • communicating with you;
  • providing customer support;
  • technical administration of your request.

The legal basis for data processing is our legitimate interest in responding to your enquiries in accordance with Article 6(1)(f) of the GDPR.

If your enquiry is related to the conclusion or performance of a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

Your data will be deleted after the processing of your request has been completed, unless there is a legal obligation to retain it further.

5. DATA PROCESSING WHEN OPENING A USER ACCOUNT AND PERFORMING A CONTRACT

In accordance with Article 6(1)(b) of the GDPR, we process the personal data you provide to us for the performance of a purchase contract or the opening of a user account.

The data collected is clearly indicated in the corresponding forms on our website.

You can delete your user account at any time by sending a request to our contact details.

We use your data exclusively for processing orders and performing the contract.

After the performance of the contract has been completed or after the user account has been deleted, the data will be blocked during the legally prescribed retention period in accordance with tax and accounting regulations, after which it will be permanently deleted, unless you have expressly consented to its further processing.

6. USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Newsletter subscription

If you subscribe to our newsletter, we will regularly send you information about our products, offers, and promotions.

The only mandatory information for subscribing to the newsletter is your email address.

We use the Double Opt-In procedure, which means that you will only start receiving the newsletter after you expressly confirm your subscription through the link that we will send to you by email.

By confirming your subscription, you give your consent to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR.

When you subscribe, we store your IP address as well as the date and time of subscription.

You can unsubscribe at any time through the link contained in every newsletter.

After unsubscribing, your email address will be immediately removed from our newsletter recipient list.

6.2 Newsletter for existing customers

If you provided us with your email address when purchasing products or services, we reserve the right to occasionally send you information about similar products or services from our offer.

No additional consent is required for such communication, as the processing is based on our legitimate interest in direct marketing in accordance with Article 6(1)(f) of the GDPR.

You can object to the use of your email address for marketing purposes at any time with effect for the future.

7. DATA PROCESSING FOR ORDER FULFILMENT

7.1 Delivery and payment processing

The personal data we collect will be forwarded to the delivery service responsible for delivering the order, to the extent necessary for the performance of the contract and delivery of the products.

The data required for payment processing will be forwarded to the appropriate payment service provider or financial institution exclusively to the extent necessary to process the payment.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

7.2 Payment service providers

PayPal

If you choose payment via PayPal, credit card via PayPal, direct debit via PayPal or, if available, purchase on account or instalment payment via PayPal, the data required for payment processing will be forwarded to:

PayPal (Europe) S.à.r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

The transfer of data is carried out in accordance with Article 6(1)(b) of the GDPR and exclusively for the purpose of payment processing.

PayPal reserves the right to carry out a creditworthiness check in accordance with its privacy policy.

SOFORT

If SOFORT is available as a payment method, payment processing is carried out by:

SOFORT GmbH
Theresienhöhe 12
80339 Munich
Germany

(part of the Klarna Group)

Your data is transferred exclusively for the purpose of payment processing and only to the extent strictly necessary for this purpose.

8. REMINDER TO LEAVE A REVIEW

If, during or after your purchase, you have given your express consent in accordance with Article 6(1)(a) of the GDPR, we may use your email address to send you a one-time reminder to leave a review about your order through the review system we use.

You may withdraw your consent at any time by sending a request to our data controller.

9. USE OF SOCIAL NETWORKS – SOCIAL PLUGINS

9.1 Facebook plugins (Shariff solution)

Our website uses plugins from the social network Facebook.

For greater protection of your personal data, these plugins are not directly connected to Facebook but use the so-called Shariff solution, whereby a connection to Facebook's servers is established only when you click the corresponding button yourself.

9.2 Google+ plugins (Shariff solution)

Our website may use plugins from the Google+ social network.

The same Shariff solution is applied, which prevents automatic connection to Google's servers until the user clicks the corresponding button.

9.3 Instagram plugins (Shariff solution)

Our website uses plugins from the Instagram social network.

The Shariff solution ensures that a connection to Instagram's servers is not established automatically, but only after your active action.

10. ONLINE MARKETING

10.1 Google DoubleClick

Our website uses Google DoubleClick to display relevant advertisements, improve the effectiveness of marketing campaigns, and prevent the repeated display of the same advertisements.

Google DoubleClick uses cookies which, according to Google, do not contain personal data.

The processing is based on our legitimate interest in effective advertising in accordance with Article 6(1)(f) of the GDPR.

10.2 Google Ads Conversion Tracking

Our website uses Google Ads Conversion Tracking.

This service enables the measurement of the effectiveness of our advertising campaigns.

When a user clicks on a Google advertisement, Google may place a conversion tracking cookie that is generally automatically deleted after approximately 30 days.

These cookies are not used to personally identify users.

Data processing is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

11. WEB ANALYTICS SERVICES

Google (Universal) Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies that enable analysis of how users use our website.

We use Google Analytics exclusively with the "_anonymizeIp()" function, which anonymizes the IP address by shortening it and prevents direct identification of the user.

Google uses the information collected on our behalf to:

  • analyze the use of the website;
  • prepare reports on user activity;
  • provide other services related to internet and website usage.

The IP address sent by your browser as part of Google Analytics will not be associated with other Google data.

Our website also uses the User ID function, which enables analysis of website usage across multiple devices.

During the first visit, a unique anonymous identifier is assigned that does not contain personal data nor transfer such data to Google.

You may object to the collection and storage of data through the User ID function at any time.

12. RETARGETING / REMARKETING / PERSONALIZED ADVERTISING

Facebook Custom Audience (Facebook Pixel)

Our website uses the Facebook Pixel.

If you have given your express consent, it is possible to track your behavior after you have viewed or clicked on a Facebook advertisement.

The purpose of this processing is:

  • measuring the effectiveness of Facebook advertising;
  • statistical analysis;
  • market research;
  • optimization of marketing campaigns.

The data we receive is anonymous.

However, Facebook may store and process the collected data in accordance with its privacy policy.

The processing is carried out exclusively on the basis of your express consent in accordance with Article 6(1)(a) of the GDPR.

Consent to the use of the Facebook Pixel may only be given by users over 13 years of age.

Google Ads Remarketing

Our website uses the Google Ads Remarketing function.

Google may store a cookie in your browser that enables the display of advertisements tailored to your interests based on previously visited pages.

Data processing is based on our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Additional data processing is carried out only if you have given Google consent to link your internet and app browsing history with your Google account.

13. RIGHTS OF DATA SUBJECTS

Applicable personal data protection regulations provide you with a wide range of rights regarding the processing of your personal data.

13.1 Your rights

Right of access (Article 15 of the GDPR)

You have the right to request information about your personal data that we process, including:

  • the purpose of processing;
  • categories of personal data;
  • recipients to whom the data has been or will be disclosed;
  • planned data storage period;
  • other information prescribed by the GDPR.

Right to rectification (Article 16 of the GDPR)

You have the right to request the correction of inaccurate personal data or the completion of incomplete data that we process.

Right to erasure (Article 17 of the GDPR)

You have the right to request the deletion of your personal data if the conditions prescribed by Article 17 of the GDPR are met.

Right to restriction of processing (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data in the cases provided for by the GDPR.

Right to notification (Article 19 of the GDPR)

You have the right to be informed of all recipients to whom your personal data has been disclosed.

Right to data portability (Article 20 of the GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another data controller where applicable.

Right to withdraw consent (Article 7(3) of the GDPR)

If processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Right to lodge a complaint (Article 77 of the GDPR)

If you believe that the processing of your personal data is not in accordance with applicable regulations, you have the right to lodge a complaint with the competent personal data protection authority.

13.2 Right to object

If we process your personal data on the basis of our legitimate interest, you have the right to object to such processing at any time for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for continuing the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

Objection to direct marketing

If we process your personal data for direct marketing purposes, you have the right to object to such processing at any time.

After receiving your objection, we will stop processing your personal data for direct marketing purposes.

14. RETENTION PERIOD OF PERSONAL DATA

We store personal data only for as long as necessary to achieve the purpose for which it was collected or for as long as required by applicable legal regulations.

The retention period for personal data is determined according to the corresponding statutory retention periods, including tax, accounting, and other applicable regulations.

After the expiry of the legally prescribed retention period, personal data is routinely deleted, provided that it is no longer required for the performance or conclusion of a contract and that there is no other legitimate interest in its further processing or storage.

CONTACT

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us via:

Home Olivia Toronto
Email: info@homeoliviatoronto.com