Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other information is provided for the respective processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the Standard Contractual Clauses of the European Commission.

 

Contact

Controller
Please contact us if you wish. The controller responsible for data processing is: Leon Hartmann (LAJ Studio), Elßholzstraße 15, 10781 Berlin, Germany, +49 155 10575691, info@bellamire.de.

Customer-initiated contact by email
If you contact us by email on your own initiative, we will collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of handling and responding to your enquiry. If the contact is made for the purpose of taking pre-contractual steps (e.g., advice in case of purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We will use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of contacting you. If the contact is made for the purpose of taking pre-contractual steps (e.g., advice in case of purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We will use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing of applications by email
Website visitors may apply by email for vacant positions advertised on our website. In doing so, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, telephone number), information on your professional qualifications and education, information on professional training and performance-related evidence.
Data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of the data is required to carry out the application procedure. The processing of your personal data is carried out on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the implementation of pre-contractual measures (completion of the application procedure as initiation of an employment contract).
If you have given us your consent to process personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.
If, as part of the application procedure, special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants, such as information on the degree of severe disability, this is carried out on the basis of Art. 9(2)(b) GDPR so that we can exercise rights arising from labour law and the law of social security and social protection and fulfil our obligations in this regard. We store your personal data for as long as necessary to decide on your application. Your data will then be deleted no later than six months afterwards, unless you have consented to further processing and use. If the application procedure results in an employment relationship, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the purpose of carrying out the employment relationship and then transferred to the personnel file.

Collection and processing when using the application form
When using the application form, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, telephone number), information on your professional qualifications and education, information on professional training and performance-related evidence. Data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship with you. The provision of the data is required to carry out the application procedure. The processing of your personal data is carried out on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the implementation of pre-contractual measures (completion of the application procedure as initiation of an employment contract).
If you have given us your consent to process personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.
If, as part of the application procedure, special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants, such as information on the degree of severe disability, this is carried out on the basis of Art. 9(2)(b) GDPR so that we can exercise rights arising from labour law and the law of social security and social protection and fulfil our obligations in this regard.
We store your personal data for as long as necessary to decide on your application. Your data will then be deleted no later than six months afterwards, unless you have consented to further processing and use. If the application procedure results in an employment relationship, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the purpose of carrying out the employment relationship and then transferred to the personnel file.

 

Orders

Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of the data is required for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of data transmission is limited to a minimum.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the Standard Contractual Clauses of the European Commission.

 

Reviews - Advertising

Review reminder
After your order, we would like to ask you to review your purchase from us. For this purpose, we use your personal data (name, email address, order information), independently of contract performance, to send you a review reminder by email after a purchase, provided that you have expressly consented to this.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.

Use of the email address for sending newsletters
We use your email address, independently of contract performance, exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send newsletters as part of data processing on our behalf. We pass on the information you provide when subscribing to the newsletter (email address, and if applicable first and last name) to Klaviyo. Data processing serves the purpose of sending newsletters and their statistical evaluation. To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device, and the time. Based on this data, usage profiles may be created under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical evaluation in order to improve newsletter campaigns. Your data is generally transferred to servers of Klaviyo in the USA and stored there. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and is therefore obliged to comply with European data protection principles. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.

Use of the mobile phone number for sending SMS advertising
We use your mobile phone number, independently of contract performance, exclusively for our own advertising purposes to send SMS advertising, provided that you have expressly consented to this.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your mobile phone number will then be removed from the distribution list.
Your mobile phone number will be passed on to a service provider for SMS dispatch as part of data processing on our behalf.

 

Shipping service providers - inventory management

Disclosure of the email address to shipping companies to provide information on shipment status
As part of contract performance, we pass on your email address to the transport company, provided that you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you about the shipment status by email. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.

Use of an external inventory management system
We use an inventory management system for contract processing as part of data processing on our behalf. For this purpose, your personal data collected as part of the order will be transmitted to Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.

 

Payment service providers - credit check

Use of PayPal Express
We use the payment service PayPal Express on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). Data processing serves the purpose of enabling you to pay via the PayPal Express payment service. To integrate this payment service, it is necessary that PayPal collects, stores and analyses data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. Cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering customers various payment options. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out
We use the PayPal Check-Out payment service on our website, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”). Data processing serves the purpose of enabling you to pay via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering customers various payment options. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report, where appropriate, on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of default to make a balanced decision about the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures, and address data may be included in their calculation. Your legitimate interests will be taken into account in accordance with the statutory provisions. Data processing serves the purpose of a credit assessment for the initiation of a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default when PayPal provides services in advance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. The provision of the data is required for the conclusion of the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you have chosen.

Third-party providers
If payment is made via the payment method of a third-party provider, the data required for payment processing will be transmitted to PayPal. This processing is carried out on the basis of Art. 6(1)(b) GDPR. To carry out this payment method, PayPal may then pass the data on to the respective provider. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Local third-party providers may include, for example:

• Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
• giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)

Invoice purchase via PayPal
If payment is made using the “invoice purchase” payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Ratepay may carry out a credit assessment on the basis of mathematical-statistical procedures (probability or score values) using credit agencies in accordance with the procedure described above. Data processing serves the purpose of a credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default when Ratepay provides services in advance. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options
We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. By selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering customers various payment options. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

“Pay Later” (invoice), “Pay Now” (direct debit), “Financing” (instalments)
For certain payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit) and “Financing” (instalments), Klarna reserves the right to obtain a credit report, where appropriate, on the basis of mathematical-statistical procedures using credit agencies. For this purpose, Klarna transmits the personal data required for a credit check (such as first and last name, address, gender, email address, IP address and data related to the order) to a credit agency for the purpose of identity and credit assessment and uses the information received about the statistical probability of default to make a balanced decision about the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures, and address data may be included in their calculation. Your legitimate interests will be taken into account in accordance with the statutory provisions. Data processing serves the purpose of a credit assessment for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default when Klarna provides services in advance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Klarna. The provision of the data is required for the conclusion of the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being concluded with the payment method you have chosen. Further information, in particular to which credit agencies Klarna discloses your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.
General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and as described in Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of SOFORT
We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; “SOFORT”) for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Data processing serves the purpose of offering you various payment methods via payment processing through the SOFORT payment service provider. If you choose the payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the SOFORT payment service provider can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Use of the payment service provider Mollie
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; “Mollie”) for payment processing on our website. Data processing serves the purpose of offering you various payment methods via payment processing through Mollie. If you choose one of Mollie’s payment options, the data required for payment processing will be transmitted to Mollie. This includes your payment details (e.g., bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, your address details and information about the product or service you purchased from us. This data processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the Mollie payment service provider can be found in Mollie’s privacy policy at https://www.mollie.com/de/privacy.

 

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your device. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and can decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
Under the following links you can find information on how to manage (including disable) cookies in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise stated below in this privacy policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary that the browser can be recognised again after a page change.
The use of cookies or comparable technologies is based on Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy & Compliance)
We use the consent tool “Shopify Privacy & Compliance” of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent for data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. Data processing serves the purpose of obtaining and documenting the necessary consents for data processing and thus complying with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify. Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision by the European Commission. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the Standard Contractual Clauses of the European Commission. Data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz and information on the cookies used at https://www.shopify.com/de/legal/cookies.

 

Rights of data subjects and storage period

Storage period
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, and thereafter in consideration of statutory retention periods, in particular under tax and commercial law, and will then be deleted after the expiry of these periods, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you are entitled to the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, under Art. 21(1) GDPR you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.

Right to lodge a complaint with a supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data is not lawful. You can lodge a complaint, among other places, with the supervisory authority responsible for us, which you can contact using the following details:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16–18 (5th floor)
10969 Berlin
Tel.: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After an objection has been made, the processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Last updated: 29/11/2023