Privacy Policy

Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Mollyandjane. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

If you use our website purely for informational purposes, meaning you do not register or otherwise transmit information to us, we only collect the data your browser sends to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referring page from which you came to the site

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be transferred or otherwise used. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after the end of your browser session (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data as well as IP address values, on an individual basis. Persistent cookies are automatically deleted after a predefined period, which may differ depending on the cookie.

In some cases, cookies serve to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Article 6(1)(b) GDPR either for the performance of a contract or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies (third-party cookies) are also stored on your hard drive when you visit our website in such cases. If we work with such advertising partners, you will be informed about the use of such cookies and the scope of the information collected within the following paragraphs individually and separately.

Please note that you can set your browser to inform you about the setting of cookies and decide individually on their acceptance, or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used solely for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

Your data will be deleted once your inquiry has been fully processed, provided it can be inferred from the circumstances that the matter in question has been conclusively clarified and no statutory retention obligations apply.

5) Data Processing When Opening a Customer Account and for Contract Fulfilment

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of performing a contract or opening a customer account. The data collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the controller.

We store and use the data you provide to process the contract. After the contract has been fully executed or your customer account has been deleted, your data will be blocked with due regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, as explained to you in this policy.

6) Use of Your Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for receiving the newsletter is your email address. Any additional data that may be provided is voluntary and will be used to address you personally. For sending the newsletter, we use the double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email asking you to click a corresponding link to confirm that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. When registering for the newsletter, we store your IP address provided by your internet service provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later date.

The data we collect when you register for the newsletter will be used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, as explained in this policy.

6.2 Sending of the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this, we do not need separate consent from you. Data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Article 6(1)(f) GDPR.

If you have initially objected to the use of your email address for this purpose, we will not send you emails. You are entitled to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. The only costs for this are the transmission costs according to the basic rates. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

7) Data Processing for Order Handling

7.1 Transfer of Personal Data to Shipping Service Providers

Personal data collected by us will be passed on to the transport company commissioned with delivery as part of contract performance, insofar as this is necessary for the delivery of the goods. Your payment data will be passed on to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of data is Article 6(1)(b) GDPR.

7.2 Use of Payment Service Providers (Payment Services)

PayPal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “instalment payment” via PayPal, we will pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. The transfer is made in accordance with Article 6(1)(b) GDPR and only insofar as it is necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “instalment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit reference agencies in accordance with Article 6(1)(f) GDPR based on PayPal’s legitimate interest in determining your solvency. The result of the credit check, in relation to the statistical probability of payment default, is used by PayPal to decide whether to provide the respective payment method.

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included, among other factors, in the calculation of the score values.

For further information on data protection, including details of the credit reference agencies used, please refer to PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

SOFORT
If you choose the payment method “SOFORT,” payment processing will be carried out by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we will pass on the information you provided during the ordering process together with information about your order in accordance with Article 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden).

The transfer of your data is carried out exclusively for payment processing purposes with SOFORT and only insofar as it is necessary for this purpose. For more information about SOFORT’s data protection policy, please visit:
https://www.klarna.com/sofort/datenschutz

8) Contact for Review Reminders

Own review reminder (no dispatch via a customer review system)
We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent to do so during or after your order in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time by sending a message to the controller responsible for data processing.

9) Use of Social Media: Social Plugins

9.1 Facebook Plugins with Shariff Solution

On our website, so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”), are used.

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only using an HTML link. This type of integration ensures that when you call up a page of our website containing such buttons, no direct connection is established with Facebook’s servers. If you click on the button, a new browser window will open and load the Facebook page, where you can (if necessary, after entering your login data) interact with the plugins there.

Facebook Inc., based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options to protect your privacy, please refer to Facebook’s privacy policy:
https://www.facebook.com/policy.php

9.2 Google+ Plugins with Shariff Solution

On our website, so-called social plugins (“plugins”) of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), are used.

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only using an HTML link. This type of integration ensures that when you call up a page of our website containing such buttons, no direct connection is established with Google’s servers. If you click on the button, a new browser window will open and load the Google+ page, where you can (if necessary, after entering your login data) interact with the plugins there.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Google, as well as your rights and settings options to protect your privacy, please refer to Google’s privacy policy:
https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugins with Shariff Solution

On our website, so-called social plugins (“plugins”) of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”), are used.

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only using an HTML link. This type of integration ensures that when you call up a page of our website containing such buttons, no direct connection is established with Instagram’s servers. If you click on the button, a new browser window will open and load the Instagram page, where you can (if necessary, after entering your login data) interact with the plugins there.

Instagram LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and settings options to protect your privacy, please refer to Instagram’s privacy policy:
https://help.instagram.com/155833707900388/

10) Online Marketing

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Using a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being shown multiple times. Processing is carried out based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR.

Additionally, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This occurs, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence over the scope and further use of the data collected by Google through this tool and therefore inform you according to our current knowledge: by integrating DoubleClick, Google receives information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered or logged in to Google, there is a possibility that the provider will obtain and store your IP address.

If you want to opt out of this tracking process, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). This setting will be deleted if you delete your cookies. Alternatively, you can learn more about cookie placement and adjust your settings at the Digital Advertising Alliance website at www.aboutads.info. Finally, you can configure your browser to notify you about the setting of cookies and decide individually whether to accept them or exclude them in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

For more information on DoubleClick by Google’s privacy policy, please visit:
https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program “Google AdWords” and, within the scope of Google AdWords, the conversion tracking service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

We use Google AdWords to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google AdWords ad. Cookies are small text files stored on your computer. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, both Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across AdWords customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not want to participate in tracking, you can opt out by disabling the Google Conversion Tracking cookie in your browser settings. You will then not be included in conversion tracking statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising pursuant to Article 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

For more information on Google’s privacy policy, please visit:
https://www.google.de/policies/privacy/

You can permanently disable cookies for advertising preferences by blocking them in your browser software settings or by downloading and installing the browser plug-in available at:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you disable the use of cookies.

11) Web Analytics Services

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies — text files stored on your computer — to help analyze how you use the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by truncation and prevents direct personal reference. Using this extension, Google truncates your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. In these exceptional cases, processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website usage and internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting and processing data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plug-in available at:
https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can click the following link to set an opt-out cookie that will prevent future collection of your data by Google Analytics on this website (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click the link again): Disable Google Analytics

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. When you first visit a page, you are assigned a unique, permanent, and anonymized ID that is set across devices. This allows interaction data from different devices and sessions to be assigned to a single user. The user ID does not contain any personal data and does not transmit such data to Google.

You can object to data collection and storage via the user ID at any time with effect for the future. You must disable Google Analytics on all systems you use — for example, in another browser or on your mobile device.

You can disable tracking using the Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de) or by clicking the opt-out link mentioned above.

Further information on Universal Analytics can be found here:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) Retargeting/Remarketing/Referral Advertising

Facebook Custom Audience via Pixel
This website uses the “Facebook Pixel” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If express consent is given, it allows the behavior of users to be tracked after they have viewed or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and may help optimize future advertising measures.

The data collected is anonymous to us and does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s Data Use Policy (https://www.facebook.com/about/privacy/). This allows Facebook and its partners to display ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

These processing activities are carried out only if explicit consent is given in accordance with Article 6(1)(a) GDPR. Consent to the use of the Facebook Pixel may only be given by users over the age of 13. If you are younger, please ask your legal guardian for permission.

Facebook Inc., based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

To disable the use of cookies on your computer, you can configure your internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. Disabling all cookies may mean that some functions on our websites can no longer be performed. You can also disable the use of cookies by third-party providers such as Facebook on the Digital Advertising Alliance website: https://www.aboutads.info/choices/

Google AdWords Remarketing
Our website uses Google AdWords Remarketing functions to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For this purpose, Google places a cookie in your device’s browser that enables interest-based advertising based on the pages you visit using a pseudonymous cookie ID. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR.

Further processing will only take place if you have agreed with Google that your internet and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads you view on the web. In this case, if you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, your personal data will be temporarily linked by Google with Google Analytics data to form target groups.

You can permanently disable cookies for advertising preferences by downloading and installing the browser plug-in available here: https://www.google.com/settings/ads/onweb/

Alternatively, you can learn more about the placement of cookies and change your settings at the Digital Advertising Alliance website at www.aboutads.info. Finally, you can configure your browser to notify you about the setting of cookies and decide individually whether to accept them or exclude them in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

For more information about Google’s advertising policies, please visit:
https://www.google.com/policies/technologies/ads/

13) Rights of the Data Subject

13.1

Applicable data protection law grants you comprehensive rights with regard to the processing of your personal data by the controller (rights of access and intervention), which we outline below:

  • Right of access pursuant to Article 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling, and, where applicable, meaningful information about the logic involved and the significance and intended consequences of such processing, as well as your right to be informed about the safeguards pursuant to Article 46 GDPR if your data is transferred to third countries.

  • Right to rectification pursuant to Article 16 GDPR: You have the right to obtain the immediate rectification of inaccurate data concerning you and/or to have incomplete data stored by us completed.

  • Right to erasure pursuant to Article 17 GDPR: You have the right to request the erasure of your personal data where the requirements of Article 17(1) GDPR are met. This right does not apply in particular where the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.

  • Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of processing of your personal data as long as the accuracy of your data contested by you is being verified, if you oppose the erasure of your data due to unlawful processing and request the restriction of its use instead, if you need your data for the establishment, exercise, or defence of legal claims after we no longer need the data for the purposes of processing, or if you have objected to processing pending verification of whether our legitimate grounds override yours.

  • Right to notification pursuant to Article 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

  • Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, where technically feasible.

  • Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the relevant data immediately unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.

  • Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right — without prejudice to any other administrative or judicial remedy — to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

13.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the affected data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defence of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise the objection as described above.

If you exercise your right to object, we will stop processing the affected data for direct marketing purposes.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the expiry of the period, the corresponding data will be routinely deleted, provided it is no longer required for the fulfilment or initiation of a contract and/or we have no legitimate interest in continuing to store it.