Privacy Policy

1) Information About the Collection of Personal Data and Contact Details of the Controller

1.1

We’re glad you’re visiting our website and thank you for your interest.
In the following, we provide information about how we handle your personal data when you use our website.
Personal data refers to all data that can be used to identify you personally.

1.2

The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:
Julie & Mark Melbourne.
The controller is the natural or legal person who alone or jointly determines the purposes and means of processing personal data.

1.3

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries).
You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

If you visit our website for informational purposes only — that is, without registering or otherwise submitting information — we collect only the data that your browser transmits to our server (so-called “server log files”).
When you access our website, we collect the following technically necessary data to display the site properly:

  • Our visited website

  • Date and time of access

  • Amount of data transmitted in bytes

  • Referrer URL (the page you came from)

  • Browser used

  • Operating system used

  • IP address used (in anonymized form, if applicable)

This data is processed in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring the stability and functionality of our website.
The data is not shared or used for other purposes.
However, we reserve the right to review server log files later if specific indications of unlawful use arise.

3) Cookies

To make your visit to our website more attractive and to enable the use of certain features, we use “cookies” on various pages. Cookies are small text files stored on your device.

Some of the cookies we use are deleted after your browser session ends (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

When cookies are set, they may collect and process user-specific data such as browser type, location information, and IP address. Persistent cookies are automatically deleted after a set period, which may vary depending on the cookie.

Cookies may also help simplify the order process — for example, by remembering items in your shopping cart for future visits. If personal data is processed via cookies implemented by us, the processing is carried out either:

  • in accordance with Art. 6(1)(b) GDPR (performance of a contract), or

  • in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in providing a functional, user-friendly, and effective website.

We may also work with advertising partners who help us make our website more engaging. In this case, third-party cookies may be stored on your device when visiting our site. If we use such advertising partners, we will inform you separately about their use and the scope of the data collected.

Cookie Control in Your Browser

You can configure your browser to inform you when cookies are set, to accept them only in certain cases, or to block them entirely.

Here’s how to manage cookie settings in popular browsers:

Please note that disabling cookies may limit the functionality of our website.

4) Contacting Us

When you contact us (e.g. via contact form or email), we collect personal data. The specific data collected in the case of a contact form is visible from the form itself.

This data is used exclusively to respond to your inquiry and for the related technical administration.
The legal basis for processing is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR.
If your inquiry is related to entering into a contract, the additional legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted once your inquiry has been fully resolved and provided that no legal retention obligations apply.

5) Data Processing for Account Creation and Contract Fulfilment

In accordance with Art. 6(1)(b) GDPR, we collect and process personal data if you provide it to us for the purpose of fulfilling a contract or creating a customer account.

The specific data collected is shown on the respective input forms.
You may request the deletion of your account at any time by contacting us at the address mentioned above.

We use the data you provide to process the contract and fulfill your order.
After the contract has been completed or your customer account deleted, your data will be restricted from further use and deleted after any applicable tax and commercial law retention periods — unless you have explicitly consented to further use of your data or we are legally permitted to retain it for another purpose, which we will inform you of accordingly.

6) Use of Your Data for Direct Marketing

6.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you updates about our offers.
The only required information to receive the newsletter is your email address. Any additional information is optional and may be used to personalize the emails.

We use a double opt-in process, meaning we will only send you emails after you’ve explicitly confirmed that you want to receive them.
After signing up, you’ll receive a confirmation email with a link you must click to verify your subscription.

By clicking the confirmation link, you consent to the use of your personal data under Art. 6(1)(a) GDPR.
When you sign up, we store your IP address and the date and time of registration to help prevent misuse of your email address.

Your data is used exclusively for sending the newsletter.
You can unsubscribe at any time via the link in the email or by contacting us directly.

After unsubscribing, your email address will be deleted from our distribution list, unless you have explicitly consented to further use or we are legally permitted to retain it, in which case we will inform you accordingly in this policy.

6.2 Sending Email Newsletters to Existing Customers

If you have provided your email address while purchasing from us, we may occasionally send you promotions for similar products or services.

In this case, we do not require separate consent, as processing is based on our legitimate interest in personalized direct advertising under Art. 6(1)(f) GDPR.

If you initially objected to such use, you will not receive these emails.
You may opt out of future promotional emails at any time by contacting us directly. You will only be charged the standard communication rates for doing so.
Upon receiving your opt-out request, we will immediately stop using your email address for marketing purposes.

7) Data Processing for Order Fulfilment

7.1

The personal data we collect during the ordering process will be shared with the shipping provider responsible for delivering your order, if necessary for fulfilment.
Your payment data may also be shared with the financial institution or payment processor handling your transaction, where required.
If we use third-party payment services, we provide specific details below.
The legal basis for sharing this data is Art. 6(1)(b) GDPR — processing necessary for the performance of a contract.

7.2 Use of Payment Providers

• PayPal

If you choose PayPal (including credit card, direct debit, invoice, or installment options via PayPal), your payment data will be shared with:
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

This sharing of data occurs as required for payment processing under Art. 6(1)(b) GDPR.

PayPal may conduct a credit check for certain payment options (e.g. credit card, direct debit, invoice, installment).
This may involve sharing your data with credit agencies under Art. 6(1)(f) GDPR, based on PayPal’s legitimate interest in verifying your ability to pay.

The result of this credit check may influence PayPal’s decision on whether to offer you certain payment options.
Credit scoring may include statistical probability values (so-called score values), based on scientifically recognized methods — possibly including address data.

For full details, see PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this data processing at any time by contacting PayPal, although they may still process your data if necessary to complete the payment.

• SOFORT (Klarna Group)

If you select the payment method SOFORT, the transaction will be handled by:
SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
(a part of the Klarna Group – Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden).

We will forward the personal data and order details you provide during checkout to SOFORT in accordance with Art. 6(1)(b) GDPR, only as necessary for payment processing.

More information on SOFORT’s privacy policy is available here:
https://www.klarna.com/sofort/datenschutz

8) Contact for Review Reminders

Own review reminder (not sent via a customer review system)
We use your email address to send a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR during or after placing your order.

You may revoke your consent at any time by sending a message to the data controller.

9) Use of Social Media: Social Plugins

9.1 Facebook Plugins with Shariff Solution

So-called social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), are used on our website.

To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins but only using an HTML link. This kind of integration ensures that when you access a page on our website that contains such buttons, no direct connection to Facebook’s servers is established yet.
Only when you click on the button will a new browser window open and load the Facebook page, where you can interact with the plugins there (possibly after entering your login credentials).

Facebook Inc., based in the USA, is certified under the EU–US Privacy Shield framework, which ensures compliance with data protection standards applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and settings options to protect your privacy, please refer to Facebook’s privacy policy:
https://www.facebook.com/policy.php

9.2 Google+ Plugins with Shariff Solution

So-called social plugins ("plugins") from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), are also used on our website.

To enhance data protection when visiting our website, these buttons are also integrated using an HTML link only. This ensures that when a page on our site is accessed that contains such buttons, no direct connection is established with Google’s servers.

Only when you click the button does a new browser window open, loading the Google+ page where you can interact with its plugins (after entering login details, if required).

Google LLC, based in the USA, is certified under the EU–US Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

For information about the purpose and scope of data collection and further processing and use of the data by Google, as well as your rights and privacy settings options, please see Google’s privacy policy:
https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin Using the Shariff Solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, which is operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To enhance the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins but are instead embedded using a simple HTML link. This method of integration ensures that no connection to Instagram's servers is established when you access a page on our site containing such buttons.

Only when you click the button will a new browser window open and load the Instagram page, where you can interact with the plugins there (possibly after logging in).

Instagram LLC, based in the USA, is certified under the EU–US Privacy Shield Framework, which ensures compliance with data protection levels applicable in the EU.

For details on the purpose and scope of data collection, further processing and use of data by Instagram, as well as your rights and settings options for protecting your privacy, please refer to Instagram's privacy policy:
https://help.instagram.com/155833707900388/

10) Online Marketing

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent users from seeing the same ads multiple times.
By means of a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being shown repeatedly.

This processing takes place based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

In addition, DoubleClick can use cookie IDs to record so-called conversions related to ad requests — for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser’s website and make a purchase.

According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers.
We have no influence over the scope and further use of the data collected by Google using this tool and inform you based on our current knowledge:

By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us.
If you are registered with a Google service, Google may associate your visit with your account.
Even if you are not registered or logged in to Google, it is still possible that Google will identify and store your IP address.

Opting Out of Tracking

If you would like to object to this tracking process, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain
www.googleadservices.com

Please note: this setting will be deleted if you clear your browser cookies.

Alternatively, you can visit the Digital Advertising Alliance website at
www.aboutads.info
to learn more about how cookies are set and how to manage your preferences.

You can also configure your browser to notify you before cookies are placed, allow cookies only on a case-by-case basis, block them entirely, or automatically delete them when closing your browser.
Please note that if cookies are disabled, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield Framework, which ensures compliance with EU data protection standards.

For more information on Google's DoubleClick privacy policy, visit:
https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program Google AdWords and, within the scope of Google AdWords, conversion tracking from
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google AdWords to draw attention to our attractive offers through advertisements (called Google AdWords) on external websites.
By analyzing the data from these campaigns, we can determine how successful each advertising measure is. Our goal is to show you ads that are of interest to you, improve your experience on our website, and ensure fair billing of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google-served AdWords ad. Cookies are small text files placed on your computer system. These cookies generally expire after 30 days and are not used to personally identify users.

If a user visits specific pages of our website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across the websites of multiple AdWords customers.
The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking.
We learn the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can disable the Google Conversion Tracking cookie via your internet browser’s user settings. You will then not be included in the conversion tracking statistics.

We use Google AdWords based on our legitimate interest in targeted advertising under Art. 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the EU–US Privacy Shield Framework, which ensures compliance with EU data protection standards.

More information on Google’s data protection policy can be found here:
https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by adjusting your browser settings or by installing the browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that disabling cookies may limit the functionality of certain parts of our website.

11) Web Analytics Services

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses so-called “cookies,” which are text files stored on your device that help analyze your use of the website.
The information generated by the cookie about your use of this website (including your truncated IP address) is usually transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of your IP address by shortening it, thereby ruling out any direct personal reference.
Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

In such exceptional cases, processing is carried out on the basis of Art. 6(1)(f) GDPR, reflecting our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On behalf of Julie & Mark Melbourne, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage.
The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You can prevent cookies from being stored by adjusting your browser settings; however, please note that doing so may limit the functionality of this website.

You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, for mobile browsers or if you don’t want to use a plugin, you can click the following link to set an opt-out cookie:
Deactivate Google Analytics
(Note: this opt-out cookie only works in the current browser and only for this domain. If you delete your cookies, you’ll need to click the link again.)

Google LLC is certified under the EU–US Privacy Shield Framework, which guarantees compliance with European data protection standards.

Cross-Device Tracking with User-ID

This website also uses Google Analytics for cross-device analysis of user traffic using a User-ID.
When you first visit our website, you are assigned a unique, persistent, and anonymized ID. This ID allows us to track your interactions across multiple devices and sessions and associate them with a single anonymized profile.

The User-ID contains no personal data and is not shared with Google.

You can object to the collection and storage of data via User-ID at any time with effect for the future.
To do so, you must deactivate Google Analytics on every device you use (e.g. other browsers or mobile devices).

You can also deactivate Google Analytics using this browser plugin:
https://tools.google.com/dlpage/gaoptout?hl=en

Or by clicking the opt-out link again in each browser or mobile app.
More information about Universal Analytics is available here:
https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

12) Retargeting / Remarketing / Referral Advertising

Facebook Custom Audiences via Pixel

This website uses the “Facebook Pixel” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").
If you have given explicit consent, this allows us to track user behavior after they have viewed or clicked a Facebook ad.
This process helps us evaluate the effectiveness of Facebook ads for statistical and market research purposes, and it may be used to optimize future advertising campaigns.

The data collected is anonymous from our perspective and does not allow us to identify users personally.
However, Facebook may associate this data with your Facebook user profile and may use it for its own advertising purposes, in line with Facebook’s Data Use Policy:
https://www.facebook.com/about/privacy/

This allows Facebook and its partners to show you ads on and off the Facebook platform. A cookie may also be stored on your device for this purpose.
These data processing operations are carried out only with your explicit consent under Art. 6(1)(a) GDPR.

Only users over the age of 13 may provide valid consent for the use of Facebook Pixel.
If you are younger, please ask your parent or guardian for permission.

Facebook Inc., based in the USA, is certified under the EU–US Privacy Shield Framework, which ensures compliance with European data protection laws.

To disable the use of cookies on your device, you can configure your browser so that cookies are no longer stored or previously saved cookies are deleted.
Please note that disabling cookies may limit some features of our website.
You can also deactivate the use of cookies by third-party providers like Facebook by visiting the Digital Advertising Alliance website:
https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses the features of Google AdWords Remarketing, which allows us to advertise this site in Google search results and on third-party websites.
This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To do this, Google sets a cookie in your browser that uses a pseudonymous cookie ID and your browsing history to serve interest-based ads.
This processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

Additional data processing only occurs if you have given Google your explicit consent to link your web and app browsing history with your Google account and to allow this data to be used to personalize ads.

If you're logged into Google while visiting our website and have consented to this, Google will use your data together with Google Analytics data to create cross-device remarketing audiences.
For this, Google temporarily links your personal data with Google Analytics data to build target groups.

Disabling Ad Tracking and Cookies

You can permanently disable cookie-based ad tracking by downloading and installing this browser plugin:
https://www.google.com/settings/ads/onweb/

Alternatively, you can manage cookie settings via the Digital Advertising Alliance at:
www.aboutads.info

You can also configure your browser to notify you when cookies are being set and choose on a case-by-case basis whether to accept them, or block them entirely.
Note: disabling cookies may limit the functionality of this website.

Google LLC is certified under the EU–US Privacy Shield Framework, which ensures compliance with EU data protection standards.

More information about Google’s advertising privacy policies is available here:
https://www.google.com/policies/technologies/ads/

13) Rights of the Data Subject

13.1 Under the applicable data protection law, you have the following comprehensive rights (rights to information and intervention) vis-à-vis the data controller regarding the processing of your personal data. We inform you of these rights below:

  • Right of access pursuant to Art. 15 GDPR:
    You have the right to obtain access to your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to rectification, deletion, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if not collected from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the appropriate safeguards pursuant to Art. 46 GDPR if your data is transferred to third countries.

  • Right to rectification pursuant to Art. 16 GDPR:
    You have the right to obtain the immediate rectification of inaccurate data concerning you and/or to have incomplete data stored by us completed.

  • Right to erasure pursuant to Art. 17 GDPR:
    You have the right to request the erasure of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply, in particular, if processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

  • Right to restriction of processing pursuant to Art. 18 GDPR:
    You have the right to request the restriction of the processing of your personal data under the following conditions: while the accuracy of your data disputed by you is being verified; if you refuse erasure due to unlawful data processing and instead request restriction of processing; if you need your data for the establishment, exercise, or defense of legal claims even though we no longer need the data for the purposes of processing; or if you have objected to processing on grounds relating to your particular situation and it has not yet been determined whether our legitimate grounds override yours.

  • Right to notification pursuant to Art. 19 GDPR:
    If you have asserted the right to rectification, erasure, or restriction of processing against the data controller, they are obliged to inform all recipients to whom the personal data concerning you has been disclosed about this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about those recipients.

  • Right to data portability pursuant to Art. 20 GDPR:
    You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request the transfer of this data to another controller, where technically feasible.

  • Right to withdraw consent pursuant to Art. 7(3) GDPR:
    You have the right to withdraw any consent you have given for data processing at any time with effect for the future. In the event of withdrawal, we will immediately delete the relevant data, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint pursuant to Art. 77 GDPR:
    If you believe that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your workplace, or the place of the alleged violation.

13.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA.
HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS BEING PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the applicable statutory retention periods (e.g., commercial and tax-related retention periods).
After the expiration of these periods, the corresponding data is routinely deleted, provided that the data is no longer required for the fulfillment of a contract or the initiation of a contract and/or there is no legitimate interest on our part in continuing to store the data.