Privacy Policy

PRIVACY POLICY

Amelia's Boutique

1) Information about the collection of personal data and contact details of the data controller

1.1 Thank you for visiting our online shop. We appreciate your interest. In this policy, we explain how we process your personal data when you use our website. Personal data means any information that can identify you, either directly or indirectly.

1.2 The data controller, in accordance with the EU General Data Protection Regulation (GDPR), is Amelia's Boutique. The data controller is the person or organisation that determines the purposes and methods of processing your personal data.

1.3 To protect your data during transmission, we use SSL/TLS encryption. You can recognise a secure connection by “https://” in the browser address bar and the padlock symbol.

2) Data collection when visiting our website

When you visit our website without interacting with it (i.e. for purely informational use), we only collect the technical data your browser automatically transmits to us (so-called server log files):

  • Visited page

  • Date and time of access

  • Amount of data transferred

  • Referring source

  • Browser and operating system

  • IP address (anonymised where possible)

Processing is carried out in accordance with Article 6(1)(f) GDPR (legitimate interest in technical functionality and stability). Data will not be used for any other purpose or shared – unless misuse is suspected.

3) Cookies

We use cookies to enhance your experience and ensure full functionality of the shop. Some cookies are automatically deleted when you close your browser (session cookies), while others remain stored (persistent cookies), e.g. to remember items in your basket.

Third-party providers (such as Google or Meta) may also use cookies. You will be informed about this and can opt out at any time in your browser settings. Please note this may limit the website’s functionality.

Learn more about cookie settings in your browser:

  • Chrome

  • Firefox

  • Safari

  • Edge/IE

4) Contact

When you contact us (via contact form or e-mail), we collect and process the information you provide in order to respond to your request. The legal basis depends on the purpose (Article 6(1)(f) or (b) GDPR). Data is deleted once it is no longer required.

5) Customer accounts and order handling

If you create a customer account or place an order, we collect the necessary details to fulfil our contractual obligations. Data is deleted after the legally required retention period, unless you have given us consent for further use.

6) Direct marketing

6.1 Newsletters
When you subscribe, we will send you promotional emails. You must confirm via “double opt-in”, and you may unsubscribe at any time.

6.2 Newsletters for existing customers
We may send you offers relating to previous purchases. You may opt out of this at any time, free of charge.

7) Order processing

We only share the necessary personal information with delivery companies and payment providers to fulfil our contract with you (Article 6(1)(b) GDPR).

8) Review reminders

If you have given consent, we may contact you once after your purchase to invite you to review our products or services.

9) Social media and plugins

Facebook, Instagram, Google+
We use “Shariff” solutions, which only establish a connection with social media platforms if you actively click. This protects your data. Please refer to the respective providers’ privacy policies.

10) Online marketing

10.1 Google DoubleClick
Used to prevent duplicate ads and improve advertising performance. Google receives information via cookies, but no personally identifiable data – unless you are logged in.

10.2 Google Ads (Conversion Tracking)
When you click on ads, a cookie is set that allows us to analyse conversions. These cookies expire automatically and do not store personal data.

11) Web analytics

Google Analytics
We use Google Analytics with anonymised IP addresses to analyse user behaviour and improve our shop. You can opt out here:
https://tools.google.com/dlpage/gaoptout

12) Remarketing

Facebook Custom Audiences and Google Remarketing
We use remarketing via pixels and cookies. This requires your active consent. You can adjust your settings at any time in your browser or via About Ads.

13) Your rights

As a data subject, you have the following rights under GDPR:

  • Right of access (Art. 15)

  • Right to rectification (Art. 16)

  • Right to erasure (Art. 17)

  • Right to restriction of processing (Art. 18)

  • Right to data portability (Art. 20)

  • Right to object (Art. 21)

  • Right to withdraw consent (Art. 7(3))

  • Right to lodge a complaint with a supervisory authority (Art. 77)

14) Data retention

We store your data only as long as necessary for the respective purpose. Once the purpose has been fulfilled, or retention periods (e.g. for tax reasons) have expired, the data will be automatically deleted.