I. General information:
In the following, we will inform you how personal data is processed by ELIZA WEISS when you contact us by telephone or e-mail, use the website www.elizaweiss.com, or conclude contracts on the Internet or by conventional means. Data processing also takes place when you visit our offers on Facebook, Instagram and Pinterest.
1. Responsible for data processing
The responsible party for data processing on this website is:
Elisabeth Weiß Jägerstraße 38b D – 82008 Unterhaching Phone: +49 (0)89 66 50 84 20 E-mail: email@example.com
2. Cooperation with third parties
In some cases, we use external service providers and partners to process your data. These have been carefully selected and commissioned by us. The partners are either bound by our instructions within the framework of commissioned processing or have made other agreements with us regarding data protection, for example because we process the data under joint responsibility. We also work with partners who are professionally bound to secrecy, such as tax advisors, lawyers and other service providers.
As far as we cooperate with service providers in the field of logistics, we have trusted and selected service providers who cooperate with us in shipping the goods.
3. Automated decision making
We do not use automated decision making or profiling.
4. Data processing when you purchase our products and services:
If you purchase our products online or offline, hand over your jewelry to us for processing, we process personal data insofar as this is necessary for the establishment, content or amendment of a contractual relationship (inventory data).
The collected customer data are your name, address, contact details (e-mail and telephone number), payment data as well as customer and order number, as well as invoice data, in case of a revocation in case of payment in advance or cash on delivery we also process your account number. This master data on our customers is deleted after the statutory retention periods have expired.
We transmit personal data to third parties only if this is necessary in the context of the contract, such as to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing.
If you purchase the products through our website, we also store the data mentioned in section II.1, in addition to the time and date of purchase. In addition, we store your username during registration and your password. We also do this in order to be able to prove the conclusion of the contract.
The legal basis is Art. 6 para. 1 lit. b GDPR which permits the processing of data for the fulfilment of a contract or pre-contractual measures. Insofar as we have a legitimate interest in the data processing, the legal basis is Art. 6 para.1. lit.f GDPR.
5. Your rights as a data subject of data processing
If we process personal data from you, you can assert various rights against us in relation to data and information about you – within the framework of the legal requirements:
– You can request information (Art. 15 GDPR) about the data we have stored about you at any time. – In addition, you can demand that incorrect data be corrected (Art. 16 GDPR), – or that personal data be restricted for further processing (Art. 18 GDPR). – You may also request that data be deleted (Art. 17 GDPR). – You also have the right to have your data transferred to a third party or you (Art. 20 GDPR).
– If we use your data on the basis of consent, you have the right to revoke this consent at any time with effect for the future. Please address the revocation informally to the responsible office named in item 1.
We reserve the right to clarify whether you are also the person entitled to assert these rights, in particular to assert rights to information. We are obliged to clarify the identity of the person claiming rights. The legal text for the above standards can be found at https://dejure.org/gesetze/GDPR in Chapter III.
Your right of objection, according to Art 21 GDPR
Insofar as we use your data with a legitimate interest, you can object to the use at any time. Insofar as the objection is justified in individual cases on the basis of your particular situation, we will delete your data. We will not delete the data if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. Please address the objection to the controller named in item 1.
7. Deletion of personal data
In principle, we delete personal data as soon as the purpose for processing ceases to apply or the statutory retention periods have expired. The legal basis for storing the data is Art. 6 para.1 p.1 lit. c GDPR in the case of statutory retention periods and, if applicable, also a legitimate interest pursuant to Art. 6 para.1 p. 1 lit. f GDPR if we require the data to protect our rights. If necessary, we will also inform you about the deletion directly there in relation to individual processing operations.
Personal data is still required for storage if contractual or legal claims against us may still exist or if we need the data to check the lawfulness of the assertion of claims or if we, for our part, want to provide evidence of facts related to the processing. In this regard, the statutory limitation periods are particularly relevant. If we are required by law to retain data, we will delete it at the earliest after the expiry of the statutory periods, which may be commercial and tax periods. Legal basis can be, the contract performance Art. 6 para.1 lit. b GDPR, the retention periods Art. 6 para.1 S.1 lit. c GDPR and if necessary also a legitimate interest under Art. 6 para.1 S. 1. lit. f GDPR.
8. Amendment of the data protection declaration
Insofar as legal or technical changes make it necessary to adapt the data protection declaration, we will change it and adapt individual clauses or the entire declaration to the given circumstances. We will always place the current data protection declaration online at this point and archive the old declarations. If required, we will make the old data protection declarations available to you.
II. Data processing when using the website:
When you visit the website www.elizaweiss.com or use offers on the site or use subpages, however, data about you is processed, whether you contact us by e-mail, request or purchase services or products via a contact form or read our editorial offers. We analyze usage behavior, place advertisements on social networks and integrate third-party offers into our website. In addition to our website, you may also use social media linked or connected through the website. We set out below how we process this data.
1. Logging of usage and scope of data processing.
We store the usage processes even in the case of simple use (without registration or if you otherwise transmit information to us) on the website temporarily and regardless of what you do, in a log file. In doing so, we store
a. the date and time of access b. the duration of the access c. the IP address d. the operating system of the computer from which the access is made e. the web browser used to access the site f. websites from which the user has reached our site g. the subpages that are used h. the language settings
The legal basis for the storage is Art. 6 paragraph I p.1 lit. f GDPR. The storage of the IP address is necessary to ensure the functionality of the website and to guarantee the security of the website. We store the IP address for up to 14 days after the end of your visit. As a rule, a personal evaluation does not take place. The collection of data to provide the website and the storage of data in log files is necessary for the operation of the website.
2. Contact, by form or mail
If you send us inquiries via contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
The processing of the data entered in the contact form is thus based on our legitimate interest to respond to your request and your request. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interests Art. 6 para. 1 lit. f GDPR in the efficient processing of the requests you send to us.
3. Registration on the website
You can register on our website to use additional functions on the site, in particular to get information about and view your orders. In doing so, we ask for your e-mail address and password. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted as soon as you cancel the registration. Insofar as legal retention periods exist, the data will be retained.
The legal basis is the usage contract, according to Art 6 para.1 p. 1 lit b. GDPR for the customer account, which you conclude during registration.
4. Contract execution and payment transactions
Insofar as you conclude purchase transactions via our website, we process personal data for the execution of the purchase transaction in addition to the data mentioned in Section I. 4. If, after the conclusion of the contract, there is an obligation to provide us with your payment data (e.g., account number in the case of revocation in the context of cash on delivery or prepayment), this data is required for payment processing.
The payment transaction via the common means of payment (credit card or prepayment) is carried out exclusively via an encrypted SSL or TLS connection. The legal basis is the contract, according to Art. 6 para.1 p. 1 lit b. GDPR, which you conclude with us.
We use the payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. b GDPR for the performance of the contract.
In our newsletter we inform you about our products, such as jewelry and accessories at irregular intervals by e-mail. We send this e-mail with your consent in accordance with Art. 6 para.1 p. 1 lit. a GDPR.
For the technical implementation of the newsletter, we use the software Mail-Poet from the company “Automattic Inc. 60 29th Street #343, San Francisco, CA 94110 USA. We use the software with a legitimate interest according to Art. 6 para.1 lit. f GDPR to ensure a good quality of email delivery and to be able to increase the efficiency of sending the newsletter. The data is hosted on Mailpoet servers in Europe. Here you can find the location of the servers . A transfer of your data to the USA does not take place.
For the registration to the newsletter, we use the so-called double opt-in procedure. After you have registered for the newsletter, you will receive a confirmation e-mail. In this e-mail, you will be asked to confirm your subscription to the newsletter within 24 hours. If the confirmation is not received, your registration will expire.
Mandatory information for sending the newsletter is always your e-mail address. When you register for our newsletter, the information about the e-mail address, your IP address and the time of ordering the newsletter
and the confirmation of the newsletter by you are stored permanently. Our aim here is to log and store the newsletter order for evidence purposes.
Via the double opt-in procedure, we can exclude that third parties use your e-mail address during registration. This logging of the registration, and the double opt-in procedure as well as the personal form of address is carried out with a legitimate interest according to Art. 6 para.1 S.1 lit. f GDPR.
You have the option to unsubscribe from the newsletter at any time. You can object to a consent. In case of objection, the processing of your personal data for the above-mentioned purposes will become inadmissible in the future. However, this does not affect the processing of this data in the past.
In principle, we delete your data when you unsubscribe from the newsletter. In the event of an advertising objection, we reserve the right to add your e-mail address to a blacklist to ensure that you no longer receive advertising on this e-mail. Also, if you provide us with additional email addresses that you want us to block from receiving advertising, we will add them to the blocking list. We maintain this blocking list with a legitimate interest according to Art. 6 para.1 lit. f GDPR and thus ensure that you do not receive any unwanted advertising from us.
Insofar as we log your subscription to the newsletter, we store this data for a period of 3 years with the end of the year in which you unsubscribed from the newsletter. We do this based on our legitimate interest according to Art 6 para.1 lit. f GDPR, in order to be able to provide proof of the newsletter subscription even in legal disputes or authorities.
6. Cookies and tracking tools
Cookies are text files that are automatically stored in the browser on your computer with a string of characters specific to your computer, so that your browser is recognized when you return to our site. These cookies are only set with your consent § 25 Abs.2 Nr.1 TTDSG and Art.7 GDPR or if this is absolutely necessary for the operation of the website is based on § 25 Abs.2 Nr.2 TTDSG. For further processing, we base our consent on Art. 6 Abs.1 S.1 lit. a GDPR as well as on our legitimate interest according to Art. 6 Abs.1 S.1 lit. f GDPR.
a. Data processing in the USA
If you select Statistics and or External Media, your personal data will also be processed by Google and Facebook in the USA with your consent pursuant to Art. 49 I lit. a) GDPR. This consent can be revoked at any time with effect for the future. In the USA (but also in other third countries outside the EU), your data is not secure according to a ruling of the ECJ (ECJ – C311/18 of 16.07.2020) and you will not find sufficient legal protection if you suspect a violation of the law. U.S. companies are required by U.S. law to give U.S. authorities access to European users’ data. You are unlikely to learn that your data is being processed by U.S. authorities. Furthermore, from a European perspective, you will also not get sufficient legal protection should any processing of your personal data by US authorities take place; for example, they can access communications via submarine cables between the US and Europe without further consultation. To avoid this access, you must prevent data processing for marketing and statistical purposes.
b. Revocation of consent for data processing in the USA
You can prevent data processing in the USA by turning off cookies for statistical purposes and External Media in our Consent Tool.
Once you have given your consent, you can revoke it at any time. We give you the option to control this via this button:
7. Essential – Technically necessary cookies
Technically necessary cookies are – not only the cookies that are absolutely necessary to access the website at all, but also those cookies that enable basic functions of the website and ensure the service you have requested is displayed. This can be, for example, the cookie that stores your consent, but also a shopping cart function or a function that recognizes users after registration.
The legal basis for the use of the cookies or the use of tracking tools is for the absolutely necessary data processing according to § 25 para II no. 2. TTDS. The use of tracking tools is based on your consent according to § 25 Abs,1 TTDSG Art. 7 DS-H.
More information about essential cookies can be found here: Cookie Details
a. Borlabs cookie
In order to save your consent and to be able to retrieve the preferences you have chosen when you visit us again, it is mandatory to save the status of your consent in a cookie. Elisabeth Weiß is the publisher of the cookie. Here we rely on our obligation to manage the preferences you have chosen, the legal basis for the placement of the cookie in your terminal is § 25 Abs.2 Nr. 2 TTDSG. The further processing, we base on Art. 6 para.1 lit. f GDPR our legitimate interest to store your cookie preferences. This is necessary to use the website.
b. Shopping cart cookie
In order to store the items in the shopping cart and keep them ready for you, a cookie stores the shopping cart you have created. Here, the products are stored until you end the session. Legal basis for the setting of the shopping cart cookie is § 25 para 2 No. 2 TTDSG as this is absolutely necessary for the operation of the online store. The legal basis for further processing in this case is the initiation or execution of the contract according to Art. 6 para.1 lit. b GDPR, as the use of the shopping cart cookie is necessary for the initiation of the purchase contract.
c. Language settings
So that we know which language they use, a cookie stores the language settings you have selected. These are stored until you end the session. The legal basis for setting the cookie that stores the language settings is Section 25 (2) No. 2 TTDSG, as this is absolutely necessary for the operation of the online store. The legal basis in this case is our legitimate interest in delivering the website in the language you have chosen. This is based on Art. 6 para.1 lit. f GDPR, as the use of the shopping cart cookie is necessary for the initiation of the purchase contract.
8. Statistics – Google Analytics
With these cookies we analyze your user behavior when visiting our website. Our goal is to evaluate the demand for our offers in this way. In doing so, we want to get to know the usage habits at certain times, via certain end devices, at certain locations. Our goal here is to determine the economic exploitation of our offers and to market them.
The legal basis for the use of the cookies or the use of tracking tools is your consent in accordance with § 25 Abs.2 Nr. 1 TTDSG in conjunction with Art 7 GDPR The further processing is based on Art. 6 Abs.1 S.1 lit. a GDPR, your consent. based.
Insofar as the data processing takes place in the USA, we refer to Section II. 6 a.
You can prevent this tracking procedure by switching off the cookies for statistical purposes in our Consent Tool. Once you have given your consent, you can revoke it at any time. We give you the option to control this via this button:
In cooperation with Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter Google) we use Google Tag Manager, Google Analytics and Google Optimize, these services all run in the Google Marketing Platform. This platform allows us to optimize and interlock our website analytics.
Since Google also processes the data in the USA, Google invokes the standard data protection clauses issued by the Commission of the EU pursuant to Art. 46 (2) lit. c GDPR. Google wants to ensure the level of data protection of the GDPR with this and additional security measures, even if this is not guaranteed by Google. https://policies.google.com/privacy/frameworks?hl=de We additionally rely on your consent as described in section II 6 a and b of this information.
– Which cookies Google uses can be found here or in our cookie settings of this information https://policies.google.com/technologies/types?hl=de&gl=de. – Further information on data protection can be found here https://privacy.google.com/businesses/compliance/?hl=de#!?modal_active=none
9. External media
Content from video platforms and social media platforms will be loaded with your consent if you either agree to the external media or select them manually. You can make these settings in the Consent Tool.
The legal basis for the use of the cookies or the use of tracking tools is your consent in accordance with § 25 Abs.2 Nr.1 TTDSG in conjunction with Art. 7 GDPR. The further processing of the information is based on Art 6 para. 1 p.1 lit. a GDPR.
You can prevent this tracking procedure by switching off the cookies for statistical purposes in our Consent Tool.
Insofar as the data processing takes place in the USA, we refer to Section II. 6 a.
Once you have given your consent, you can revoke it at any time. We give you the option to control this via this button:
We incorporate videos into our site via the Youtube offering because Youtube’s offerings are ideal for complementing our products and have the necessary reach for our content. The provider of Youtube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in section II. 1. of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as a usage profile and uses it for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this.
Google also processes the data in the USA under the conditions stated in II 9. You can find out how Google and YouTube process the data at https://policies.google.com/privacy Opt-Out-Plugin.
If you have a Google account, you can log in there and make the settings for advertising: https://adssettings.google.com/authenticated
b. Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.
We store the fonts from our servers, so that no data transmission to Google takes place.
c. Google Recaptcha
When you send us messages via forms, we use Google reCAPTCHA to ensure that the input is made by a human and not abusively by automated processing. The provider of Recaptcha is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
When an entry is made via reCAPTCHA, Google receives the IP address and data such as the time the user spends on the website or mouse movements made by the user. The collected data is collected in the background. Website visitors are not informed that an analysis is taking place.
you can download a browser plugin to prevent the use by Google for advertising purposes. https://support.google.com/ads/answer/7395996?hl=de
The data processing is carried out in accordance with § 25 para 2 No. 1 TTDSG, in the further then by Art.6 paragraph 1 S.1 lit. a GDPR in conjunction with Art. 7 GDPR, your consent.
III. Operation and use of social media presences
We operate our own presences in “social media”; on the one hand, this is to shape and promote the ELIZA WEISS brand. The legal basis for data processing is your consent in accordance with Art. 6. para.1 p.1 lit. a GDPR.
In addition, it is our legitimate interest to use the popular channels such as Twitter, Facebook and Instagram and to maintain our own presence there. Here we refer to Art. 6 para.1 p.1 lit. f GDPR our legitimate interest.
1. Operation of the Facebook fan page analysis with Facebook Insights.
We operate our own Facebook account, on the one hand to share news in the portal but also to exchange information with users.
Insofar as you visit our Facebook fan page directly, data about your use of our page is transmitted to Facebook. We process this data under joint responsibility with Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). What data is collected with personal by Facebook is explained here: https://www.facebook.com/legal/terms/information_about_page_insights_data Furthermore, the addition for responsible parties applies, which establishes further obligations, about which we also inform you. https://www.facebook.com/legal/controller_addendum Facebook, for its part, also holds data protection information available: https://www.facebook.com/about/privacy about which we also inform you.
We use the evaluations from the page statistics on Facebook to track and analyze the use of our offer on Facebook and thus to increase the quality of our offers.
In addition, we use this information to advertise our products on Facebook, if necessary. We also do this with a legitimate interest according to Art. 6 para.1 p. 1 lit f GDPR.
Here you can find the essential information about the agreement between Facebook and us to process data within the Facebook account: https://www.facebook.com/legal/terms/page_controller_addendum
Under the link below, you can get an idea about the further data processing by Facebook. Insofar as you wish to assert your rights against us or Facebook, we ask you to contact Facebook directly, as Facebook is primarily responsible for processing data subject rights under the above agreement: https://www.facebook.com/legal/terms/page_controller_addendum
Here you can object to the above data processing in accordance with Art. 21 GDPR: https://www.facebook.com/help/contact/1994830130782319
According to Art. 26 (III) GDPR, you also have the right to contact us directly, please read the notes on data subject rights under I of this information.
We advertise our offers on Facebook and Instagram or via the two services and thus play out advertising based on the interests of our users. So-called “Facebook pixels” are used within our online offer. The Facebook pixel creates a connection to your end device directly through Facebook when you call up our web pages and enables a cookie to be stored on the end device or in the browser with which you visit our page. If you are logged into Facebook, the visit to our offer is stored in your Facebook profile. This data cannot be read by us and is anonymous. We cannot draw any conclusions about the identity of the individual user and his habits. However, personal data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can track your activities.
Facebook also stores the IP address of the users. Thus, it is traceable for us via the IP address from which device (based on the IP address) the actual user accesses our offer.
With the help of the Facebook pixel, we can also determine the effectiveness of the Facebook ads for statistical purposes. Thus, we can determine whether a user comes to our website after clicking, on a Facebook ad and whether the purchase of one of our products was successfully completed or cancelled. This is the one conversion measurement, which Facebook calls customer conversion. You can find more information about this here: https://www.facebook.com/business/help/780705975381000?id=1205376682832142
In addition to marketing our products from our store to specific target groups, we are able to use the Facebook pixel to analyze the use of our website and measure the success of our advertising campaigns and optimize
them. The use of the Facebook pixel and Facebook Custom Audience as well as the Custom Conversion statistics tool is done to optimize the delivery of advertising so that our ads are only delivered to people who are likely to find our products interesting.
2. Operation of a Youtube channel
We have integrated YouTube videos into our site and operate a channel on Youtube under the name ELIZA WEISS http://www.YouTube.com. Our videos are stored there, which can also be played directly from our website. These are integrated into our site in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.
If you do not want YouTube/Google to record data about your visit to our website, you must log out of Google/YouTube and delete the cookies in the browser you are using and make the settings at Google accordingly https://support.google.com/ads/answer/2662856?hl=de.
3. Operation of the Instagram account
We have included an Instagram button on the website that links to the pages of Instagram. Instagram is an application for sharing photos and images. This service is provided by Instagram Inc. (1601 Willow Road, Menlo Park, CA, 94025, USA). Your data is transferred to Instagram in the USA in the process.
If you do not want Instagram to store data about your visit to our website, you must log out of there and delete the cookies in the browser you are using.
As far as we advertise on Instagram, we refer to section III No. 1, there you will find the instructions on how the advertising runs.
4. Operation of the Pinterest account
We operate an offer on the technical platform Pinterest. This is operated by the company Pinterest Inc, 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). Your data is processed here in the USA
If you do not want Pinterest to store data about your visit to our website, you must log out of it and delete the cookies in the browser you are using.
General information and your rights
Under Section I of this Privacy Notice, you will find information about the data controller, our data protection officer and the rights you have against us when we process your data.
Translated with www.DeepL.com/Translator (free version)