Privacy Policy

1. Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Glamory GmbH & Co. KG, Carl-Benz-Straße 7, 24568 Kaltenkirchen, Germany, Tel.: +49 4191 99138-50, Fax: +49 4191 99138-51, E-Mail: shop@glamory.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

2. Data collection when visiting our website

When you use our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you came to the page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3. Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

Some of the cookies serve to simplify the ordering process by storing settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

• Google Chrome: Cookie settings in Chrome
• Mozilla Firefox: Cookie settings in Firefox
• Safari: Cookie settings in Safari
• Microsoft Edge: Cookie settings in Edge
• Opera: Cookie settings in Opera

Please note that if cookies are not accepted, the functionality of our website may be limited.

4. Contacting us

When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

5. Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide us with this data for the purpose of executing a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or further data use permitted by law has been reserved by us.

6. Data processing for order processing

To process your order, we work with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

7. Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Here, the extended data protection mode is used, which, according to the provider, only initiates the storage of user information when the video(s) are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be directly assigned to your account when you click a video. If you do not want your data to be associated with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research and/or designing its website to meet demand. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.

Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which can trigger further data processing operations without our influence.

Further information on data protection at "YouTube" can be found in the YouTube Terms of Use at youtube.com/static?template=terms and in Google's privacy policy at policies.google.com/privacy.

Insofar as legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

8. Rights of the data subject

The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

• Right of access according to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed about which safeguards pursuant to Art. 46 GDPR exist for the transfer of your data to third countries;
• Right to rectification according to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or to have incomplete data stored by us completed;
• Right to erasure according to Art. 17 GDPR: You have the right to demand the erasure of your personal data if the conditions of Art. 17 Para. 1 GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• Right to restriction of processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defense of legal claims, after we no longer need this data after the purpose has been achieved, or if you have objected for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
• Right to notification according to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients;
• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, insofar as this is technically feasible;
• Right to withdraw consent according to Art. 7 Para. 3 GDPR: You have the right to withdraw consent once given for the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
• Right to lodge a complaint according to Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

9. Right to object and withdrawal of consent

9.1 Right to object: If we process your personal data within the framework of a balancing of interests based on our overriding legitimate interest, you have the right to object to the processing of your personal data at any time with effect for the future, provided that there are reasons arising from your particular situation that speak against the processing. If you exercise this right, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. In this case, the processing of your data for advertising purposes will be stopped.

9.2 Withdrawal of consent: If the processing of your data is based on consent, you can withdraw this at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To exercise your withdrawal, you can contact us using the contact details provided.

10. Duration of storage of personal data

The duration of the storage of personal data depends on the respective legal basis, the purpose of processing and – if applicable – the statutory retention periods. For example, data processed on the basis of explicit consent is subject to the storage period specified in the consent. If personal data is processed for the performance of a contract, it is stored for the duration of the contractual relationship. In addition, there may be tax and commercial law retention periods of up to ten years, which necessitate longer storage.

11. Amendments to this privacy policy

We reserve the right to amend this Privacy Policy from time to time to adapt it to current legal requirements or to implement changes to our services. The Privacy Policy valid at the time of your next visit will then apply.

12. Contact

If you have any questions regarding the collection, processing, or use of your personal data, your rights, or the data protection practices of Glamory GmbH & Co. KG, please contact us: