Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is given in the following processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offerings.

Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. An adequacy decision of the EU Commission exists for Canada. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Contact

Controller

Contact us if you wish. The controller for data processing is: Ahmet Taspinar, Elisabethstraße 19, 46537 Dinslaken Germany, 017636266595, service@soulamour.de

Customer Initiated Contact by Email

If you contact us proactively by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of processing and responding to your contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing when using the Contact Form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing when using the Revocation Button

If you have concluded a contract via our online presence, we provide you with a revocation function (revocation button) through which you can submit your declaration of revocation directly.
When using the revocation function, we collect your personal data (name, email address, information for identifying the contract or part of the contract you wish to revoke, and the time (date and time) of sending the declaration of revocation) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to revoke your contract and for the proper processing of your revocation.

If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR. Otherwise, the data processing is carried out on the basis of Art. 6 Para. 1 lit. c GDPR, to fulfill a legal obligation to provide you with a revocation function on our online presence.
We only use your email address to process your declaration of revocation. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

The processing of your personal data serves the purpose of legally fulfilling the requirements for the design of the revocation function and is carried out on the basis of Art. 6 Para. 1 lit. c GDPR. This data processing is also carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly revocation option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR.

Customer Account Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the

lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.

Collection, Processing and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the performance of a contract with you.

Your data will be passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to a minimum.

Reviews Advertising

Data Collection when Writing a Comment or Review

When commenting on/reviewing an article or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling commenting/reviewing and displaying comments/reviews.

By submitting the comment/review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be deleted.

When your comment/review is published, only the name you provided will be published.

Furthermore, when submitting the comment/review, your IP address is stored for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment/review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your IP address will then be deleted.

Shopauskunft Customer Review

For our website, we use the review tool "shopauskunft.de" from Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; "Shopauskunft").
After your order, we would like to ask you to rate and comment on your purchase with us. For this purpose, you will receive an email from us, for which we use the technical system "Rechtssichere Bewertungsanfrage (RBA)" (Legally Secure Review Request). We process your order data (order number/invoice number, purchase value and shipping costs) and your email address. If necessary, we also use this data for the purpose of verifying your review.

The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent, provided you have expressly agreed to the transfer of your data and the receipt of the review invitation.
You can withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data protection when using Shopauskunft can be found at:

https://www.shopauskunft.de/datenschutz.

Use of Trustpilot

We use the "Trustpilot" review system from Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; "Trustpilot") on our website.
Trustpilot allows us to collect customer reviews and display them on our website to give you insight into the quality of our services.

After an order, you may receive an invitation from us or Trustpilot to submit a review, and then you can submit a review. The following data, among others, may be processed by us or Trustpilot: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review.

The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent, provided you have expressly agreed to the transfer of your data and the receipt of the review invitation. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection when using Trustpilot can be found at: https://de.legal.trustpilot.com/for-reviewers/end- user-privacy-terms.

Use of Judge.me

We use the "Judge.me" review system from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me allows us to collect customer reviews and display them on our website to give you insight into the quality of our services.

After an order, you may receive an invitation from us or Judge.me to submit a review, and then you can submit a review. The following data, among others, may be processed by us or Judge.me: email address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review

have). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision of the EU Commission exists for the United Kingdom.
Your data may be transferred to the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is based on special contracts approved for use in the United Kingdom, which offer the same protection that personal data has in the United Kingdom.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 Para. 1 S. 1 TDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR, provided you have expressly agreed to the transfer of your data and the receipt of the review invitation. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.

Use of the Email Address for Sending Newsletters

We use your email address to send you information and offers via newsletter, provided you have expressly consented. The data processing serves exclusively for advertising purposes. For this purpose, we process your email address and, if applicable, other data that you voluntarily provided when signing up for our newsletter.
The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may still store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the Email Address for Availability Notifications

We offer an item availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your email address for the respective item and, if you have consented, be informed by us via email when it becomes available. Upon item availability, you will receive a one-time email notification about the item's availability. Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time, without affecting the legality of the processing carried out based on the consent until revocation. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.

Shipping Service Providers

Transfer of email address to shipping company for information on shipping status

We pass on your email address to the transport company as part of contract processing, provided you have expressly consented to this in the order process. The transfer serves the purpose of informing you about the shipping status via email. Processing is based on Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out based on the consent until revocation.

Payment Service Providers

Use of Shopify Payments

We use the payment service "Shopify Payments" from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves the purpose of being able to offer you payment via the Shopify Payments service. By selecting and using a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 Para. 1 lit. b GDPR.

Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report can include probability values (score values) which are calculated based on scientifically recognized mathematical-statistical procedures and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with the legal provisions. Data processing serves the purpose of credit checking for contract initiation. Processing is based on Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Stripe makes advance payments.
You have the right to object at any time to the processing of your personal data based on Art. 6 Para. 1 lit. f GDPR for reasons arising from your particular situation, by notifying Stripe. The provision of data is necessary for the conclusion of the contract with the payment method you desire. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing during payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that in this case you may not be able to fully use all functions of this website.

You can find information on how to manage (including deactivating) cookies in the most important browsers under the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9- 2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again even after a page change.

The use of cookies or similar technologies is based on Section 25 (2) TDDDG. The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.

Analysis

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide other services associated with website use and internet use to the website operator.

The following information may be collected, among other things: IP address, date and time of page view, click path, information about the browser you are using and the device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and all other data that Google has about you.

The IP address is abbreviated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is carried out with your consent based on Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR.

The processing of your personal data is carried out with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the legality of the processing carried out based on the consent until revocation.

The information generated thereby about your use of this website is usually transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is available for the USA. Google has certified itself under the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner- sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.

Plug-ins and other things

Use of Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags, which are used for implementing tracking and analysis tools in particular. Data processing serves the purpose of tailoring and optimizing our website. Google Tag Manager itself does not store cookies or process personal data. However, it enables the triggering of other tags that can collect and process personal data.
Further information on terms of use and data protection can be found here.

Integration of the Händlerbund member logo

The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When you access our website, information is automatically sent to the server of Händlerbund e.V. by the browser used on your end device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:

IP address of the requesting computer,
date and time of access,
name and URL of the retrieved file,
website from which access is made (referrer URL),
browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data serves to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 Para. 1 Sentence 1 lit. f GDPR.

Data Subject Rights and Storage Period

Duration of storage

After complete contract processing, the data will first be stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods and then deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, you have a right to object to processing based on Art. 6 Para. 1 lit. f GDPR and to processing for direct marketing purposes, in accordance with Art. 21 Para. 1 GDPR.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240

Fax: +49 211 38424999 Email: poststelle@ldi.nrw.de

Right to object

If the personal data processing listed here is based on our legitimate interest under Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
After an objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.