Privacy policy
PRIVACY POLICY
This privacy policy applies to the website www.bogaluxurybags.com
Person responsible:
Gökden Gökboga
Thelottstraße 14
80933 Munich
contact@bogaluxurybags.com
Data protection officer:
Gökden Gökboga
Thelottstraße 14
80933 Munich
contact@bogaluxurybags.com
Processing of personal data
We process your personal data within the framework of the website as follows (for further data processing within the framework of the website, please refer to the following sections of this data protection declaration)
Log files when visiting the website
When using our website, our hosting provider logs so-called "log file" data each time the server is accessed, such as the name of the website accessed, previously visited page ("referrer" URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including the investigation of misuse. The log file data is deleted or anonymised after a maximum of 30 days, unless it is required for longer due to a security-relevant incident, e.g. for clarification or evidence purposes.
Making contact:
When you contact us, we process your personal data such as name, address, email address, telephone number, etc., which we need to respond to your enquiry.
The legal basis for the processing of your personal data in the context of contact enquiries is Art. 6 para. 1 b) GDPR, if your request is aimed at concluding a contract, otherwise Art. 6 para. 1 f) GDPR, whereby our legitimate interest lies in responding to enquiries.
In the context of contact enquiries, we store your personal data for as long as is necessary to process your enquiry or with regard to statutory retention obligations.
Registration/orders:
When you register or place orders, we process your personal data such as name, address, e-mail address, telephone number, date of birth, user name you have chosen yourself, payment data or similar, which we require for the fulfilment of the contractual relationship with you or for the implementation of pre-contractual measures taken at your request.
We store your personal data collected in the context of registration or orders for as long as is necessary for the fulfilment of the contractual relationship (including the provision of the customer account, if applicable) and/or for the implementation of pre-contractual measures taken at your request and/or with regard to warranty, guarantee or comparable obligations and/or with regard to statutory retention periods.
The legal basis for the processing of your personal data collected in the context of registration or orders is Art. 6 para. 1 b) GDPR ("fulfilment of contract").
The provision of this personal data is not required by law or contract. However, it is necessary for the conclusion of the contract, i.e. the execution of the registration or order, insofar as the relevant information in our registration/order process is mandatory (instead of only voluntary).
Newsletter:
If you register for our newsletter, we process the data collected in the process, such as your email address, title, etc., for the purposes of sending the newsletter.
Insofar as the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the above-mentioned purposes.
We store the personal data that we need to send the newsletter for as long as we need it for this purpose or until you withdraw your consent to receive the newsletter. Any legitimate continued storage for other purposes (e.g. customer communication) remains unaffected by this.
Cookies
Cookies are small text files that are stored on the user's computer and enable the use of the website by the user to be analysed. Cookies can be used, for example, to make the use of the website easier and more convenient for the visitor or to enable certain functions in the first place, or, for example, to analyse visitor flows.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 b) GDPR for the execution of the contract, in accordance with Art. 6 para. 1 a) GDPR in the case of consent given or in accordance with Art. 6 para. 1 f) GDPR to safeguard our legitimate interests in the economic operation of our online offer and a user-friendly and effective design of the page visit.
The storage period of cookies may be limited to the duration of the respective browser session, i.e. the cookies are deleted again after the browser is closed (temporary cookies); or the storage period may extend beyond this in order to recognise the user on the next visit and then, for example, display preferred content (persistent cookies). Unless we state otherwise in this privacy policy or as part of our cookie management services or other separate information on cookies, you should assume that cookies are persistent and that they are stored for up to two years.
You can revoke your consent to the use of cookies or object to data processing by cookies at any time by deleting the cookies in your browser settings.
You can also set your browser so that the storage of cookies is only accepted if you agree to this.You can revoke, object to and/or manage your cookies here:https://www.conversionbear.com/solutions/ultimate-gdpr-eu-cookie-bar-by-conversion-bear-lpAs far as advertising cookies are concerned, you can block and/or manage many of them via the following services:
www.aboutads.info/choices/
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you reject cookies, you may not be able to use certain website functions, services, applications or tools.Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site.
Google may transfer your data to servers worldwide. Google bases data transfers to the USA on the EU-US data protection framework.Google bases data transfers to countries without an adequate level of data protection on the EU standard contractual clauses.Details can be found in the following section of Google's privacy policy: https://policies.google.com/privacy/frameworks
You can find Google's privacy policy at: https://policies.google.com/privacy.The data processed as part of the use of Google Analytics is automatically deleted after a maximum of 30 days.
Insofar as the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the above-mentioned purposes.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Rights of data subjects
In accordance with Art. 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access by the data subject"). In accordance with Art. 16 GDPR, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").
In accordance with Art. 17 GDPR, you can request the erasure of personal data concerning you if one of the reasons listed there applies ("right to be forgotten").
In accordance with Art. 18 of the General Data Protection Regulation, you also have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed there applies ("right to restriction of processing").
In accordance with Art. 20 of the General Data Protection Regulation, you have the right to be provided with personal data concerning you and to have this data transferred to another controller ("right to data portability").
Withdrawal of consent:
See section "Right of withdrawal" in this privacy policy.
Right to object:
See section "Right to object" in this privacy policy.
You have the right to lodge a complaint with the competent supervisory authority.
Right of cancellation:
You can revoke any consent you have given to the processing of your personal data at any time, e.g. by sending an email to our email address stated at the beginning. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Right to object
Insofar as our data processing is based on Article 6 (1) f) GDPR ("legitimate interests"), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.
Disclosure of your data
Unless already listed elsewhere in this privacy policy, we will pass on your personal data to the following recipients or categories of recipients
- Payment service provider
- Shipping service provider
Unless already listed elsewhere in this privacy policy, we intend to transfer your personal data to the following third country or international organisation.
We operate our online shop with the software and on the servers of Shopify; according to its privacy policy, Shopify processes the data worldwide, including in Canada and the USA; you can access Shopify's privacy policy, which also contains more detailed information on the transfer of data abroad, here: https://www.shopify.de/legal/datenschutz