Privacy policy
PRIVACY POLICY
INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY
1.1 We are pleased that you are visiting our website and thank you for your interest. Below you will find information on how your personal data is processed when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is www.nova-rielle.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the responsible party). You can recognise an encrypted connection by the string "https://" and the padlock icon in your browser's address bar.
Furthermore, no automated decision-making or profiling takes place that has legal consequences or similarly significantly affects you, as referred to in Article 22 of the GDPR.
DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website purely for informational purposes, i.e. without registering or otherwise providing us with information, we only collect data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for the display of the website:
The visited webpage, date and time of access, amount of data sent in bytes, the source/referrer from which you accessed the page, browser used, operating system used, IP address (where applicable: anonymised).
Processing takes place in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used for any other purpose. We do however reserve the right to review server log files at a later date if there are concrete indications of unlawful use.
COOKIES
To make your visit to our website more enjoyable and to enable certain features, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies we use are deleted at the end of your browser session (session cookies). Others remain on your device so that we or our partner companies can recognise your browser on your next visit (persistent cookies).
Cookies collect and process specific user information such as browser and location data and IP addresses. Persistent cookies are automatically deleted after a set period of time, which varies per cookie.
Some cookies help simplify processes, such as saving items in a virtual shopping cart. Where cookies we implement also process personal data, this is done in accordance with Article 6(1)(b) or Article 6(1)(f) GDPR.
On your first visit to our website, we ask for your consent to the use of non-essential cookies via a cookie banner. You can adjust your preferences at any time. Please note that the functionality of our website may be limited if you do not accept cookies.
CONTACTING US
When you contact us (for example via a contact form or email), personal data is collected. This data is used solely to answer your enquiry or to get in touch with you and to handle the related technical administration.
The legal basis for processing is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Article 6(1)(b) GDPR serves as an additional legal basis. Your data will be deleted once your enquiry has been fully resolved, unless statutory retention obligations prevent this.
5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING
In accordance with Article 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for the purpose of executing a contract or opening a customer account.
You may delete your customer account at any time by notifying www.nova-rielle.com. We retain and use the data you provide for contract processing. Once the contract has been fully executed or your customer account has been deleted, your data will be restricted from further use and deleted after the expiry of statutory retention periods under tax and commercial law, unless you have given explicit consent for further use.
6) USE OF YOUR DATA FOR DIRECT MARKETING
6.1 Email newsletter subscription
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information to receive the newsletter is your email address. Providing additional data is optional and is used to personalise the newsletter.
We use a double opt-in procedure for sending the newsletter. This means we will only send you a newsletter if you have explicitly confirmed that you wish to receive one. After signing up, you will receive a confirmation email asking you to confirm your subscription by clicking a specific link.
By clicking the confirmation link, you consent to the use of your personal data in accordance with Article 6(1)(a) GDPR. When you sign up for the newsletter, we store your IP address as recorded by your internet service provider (ISP), along with the date and time of registration. This helps us trace any potential misuse of your email address.
Data collected during newsletter sign-up is used solely for promotional purposes via the newsletter. You may unsubscribe at any time via the link in the newsletter or by contacting www.nova-rielle.com. Upon unsubscribing, your email address will be immediately removed from our newsletter distribution list.
6.2 Email newsletter for existing customers
If you provided us with your email address during the purchase of goods or services, we reserve the right to regularly send you offers for similar goods or services by email. No separate consent is required for this. Data processing is based solely on our legitimate interest in personalised direct marketing in accordance with Article 6(1)(f) GDPR.
If you have objected to the use of your email address for this purpose, we will not send any marketing emails. You may object at any time by notifying www.nova-rielle.com. After receiving your objection, we will immediately cease using your email address for advertising purposes.
7) DATA PROCESSING FOR ORDER PROCESSING
7.1 Personal data we collect will, where necessary for the delivery of goods, be passed on to the transport company responsible for delivery as part of the contract execution. Your payment data will, where necessary, be passed on to the relevant payment processor. The legal basis for the transfer of data is Article 6(1)(b) GDPR.
7.2 Use of payment service providers
PayPal For payments via PayPal, credit card via PayPal, direct debit via PayPal, or — where offered — 'purchase on account' or 'payment in instalments' via PayPal, your payment data is transmitted to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") as part of the payment process. This data transfer takes place on the basis of Article 6(1)(b) GDPR and only to the extent necessary for payment processing. For more information, please refer to PayPal's privacy policy.
SOFORT If you select the "SOFORT" payment method, payment is processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"), part of the Klarna Group. Information provided during the ordering process will be passed on to SOFORT as necessary for payment processing in accordance with Article 6(1)(b) GDPR. For more information, please refer to SOFORT's privacy policy.
8) REVIEW REMINDER
We use your email address for a one-time reminder to submit a review of your order via our review system, provided you have given us explicit consent to do so in accordance with Article 6(1)(a) GDPR during or after your order. You may withdraw your consent at any time by contacting the data controller.
9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
9.1 Facebook plugins Our website uses social plugins ("Plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. To protect your data, these buttons are not integrated as full plugins but are embedded using an HTML link, ensuring no connection is made to Facebook's servers simply by visiting our website. A new browser window opens and the Facebook page loads only when you click the button. For more information, see Facebook's privacy policy: https://www.facebook.com/policy.php
9.2 Google+ plugins Our website uses social plugins from Google+, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. These buttons are embedded via HTML link to protect your data. For more information, see Google's privacy policy: https://www.google.com/intl/en/policies/privacy/
9.3 Instagram plugins Our website uses social plugins from Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA. These buttons are also embedded via HTML link. For more information, see Instagram's privacy policy: https://help.instagram.com/155833707900388/
10) ONLINE MARKETING
10.1 Google DoubleClick This website uses Google's DoubleClick online marketing tool, operated by Google LLC. DoubleClick uses cookies to display relevant ads, improve campaign performance reports, and prevent the same ads from being shown repeatedly. Processing is based on our legitimate interest in optimally promoting our website in accordance with Article 6(1)(f) GDPR. For more information: https://www.google.de/policies/privacy/
10.2 Google AdWords Conversion Tracking This website uses Google AdWords and conversion tracking by Google LLC. A conversion tracking cookie is placed when a user clicks on a Google AdWords ad. These cookies expire after 30 days and are not used for personal identification. Processing is based on our legitimate interest in targeted advertising in accordance with Article 6(1)(f) GDPR. For more information: https://www.google.de/policies/privacy/
13) RIGHTS OF THE DATA SUBJECT
13.1 Applicable data protection law grants you extensive rights regarding the processing of your personal data:
Right of access under Article 15 GDPR: You have the right to request information about your personal data processed by us.
Right to rectification under Article 16 GDPR: You have the right to request immediate correction of inaccurate data and/or completion of incomplete data we hold about you.
Right to erasure under Article 17 GDPR: You have the right to request deletion of your personal data where the conditions of Article 17(1) GDPR are met.
Right to restriction of processing under Article 18 GDPR: You have the right to request restriction of the processing of your personal data under certain circumstances.
Right to notification under Article 19 GDPR: Where you have exercised your rights to rectification, erasure or restriction, we are obliged to notify all recipients to whom your data has been disclosed.
Right to data portability under Article 20 GDPR: You have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to withdraw consent under Article 7(3) GDPR: You have the right to withdraw your consent to the processing of your data at any time with future effect.
Right to lodge a complaint under Article 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority.
13.2 RIGHT TO OBJECT
Where we process your personal data on the basis of our legitimate interest, you have the right to object to this processing at any time for reasons relating to your specific situation. If you exercise your right to object, we will cease processing the relevant data, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
If your personal data is processed for direct marketing purposes, you have the right to object at any time, after which we will immediately stop processing your data for such purposes.
RETENTION PERIOD FOR PERSONAL DATA
The retention period for personal data is based on the applicable statutory retention periods. After the retention period expires, the relevant data is routinely deleted, unless it is still necessary for the performance or initiation of a contract and/or we have a legitimate interest in further retention.
CONTACT
If you have any questions about our privacy policy or wish to exercise your rights, please contact us at: info@nova-rielle.com