Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 Thank you for visiting our website and for your interest. Below, we explain how your personal data is handled when you use our website. Personal data means any information that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Diane & Rose. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential information, such as orders or inquiries sent to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol displayed in your browser’s address bar.

2) Data Collection When Visiting Our Website

If you use our website solely for informational purposes without registering or otherwise providing information, we only collect data that your browser transmits to our server (“server log files”). When you access our website, we collect the following information that is technically necessary to display the website:

• Website visited

• Date and time of access

• Amount of data transmitted

• Referring source

• Browser used

• Operating system used

• IP address used (where applicable, in anonymized form)

This processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed to third parties or used for other purposes. However, we reserve the right to subsequently review server log files if there are specific indications of unlawful use.

3) Cookies

To make your visit to our website more attractive and enable the use of certain functions, Diane & Rose uses cookies on various pages. Cookies are small text files stored on your device.

Some cookies are deleted after the end of your browser session (“session cookies”). Other cookies remain on your device and allow us or our partner companies to recognize your browser when you return (“persistent cookies”).

When cookies are set, certain user information, such as browser information, location information, and IP address values, may be collected and processed. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies are used to simplify the ordering process by remembering settings, such as the contents of your shopping cart. Where cookies process personal data, processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract or Art. 6(1)(f) GDPR based on our legitimate interest in providing an effective and user-friendly website experience.

We may also work with advertising partners who help us make our online services more relevant to you. In such cases, third-party cookies may be stored on your device.

You can configure your browser to notify you when cookies are being set and decide whether to accept them individually or reject cookies in certain cases or altogether.

Please note that disabling cookies may limit certain functions of our website.

4) Contacting Us

When you contact Diane & Rose, for example through a contact form or by email, personal data may be collected. The information collected through a contact form is shown in the respective form.

This information is stored and used solely for responding to your inquiry and for the associated technical administration.

The legal basis for processing is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry relates to entering into a contract, Art. 6(1)(b) GDPR provides an additional legal basis.

Your data will be deleted once your inquiry has been fully resolved, provided that there are no statutory retention obligations requiring us to retain it.

5) Customer Accounts and Contract Processing

In accordance with Art. 6(1)(b) GDPR, personal data that you provide to Diane & Rose for the performance of a contract or when creating a customer account will be collected and processed.

The data collected can be seen in the relevant input forms. You may request deletion of your customer account at any time by contacting us.

We store and use the information you provide for the performance of the contract. After the contract has been completed or your customer account has been deleted, your information will be blocked in accordance with applicable tax and commercial retention periods and deleted after those periods expire, unless you have expressly consented to further use or further use is otherwise legally permitted.

6) Use of Your Data for Direct Marketing

6.1 Email Newsletter

If you subscribe to the Diane & Rose email newsletter, we will regularly send you information about our offers.

The only mandatory information required to receive the newsletter is your email address. Any additional information is voluntary and may be used to personalize our communications.

We use a double opt-in procedure. This means that we will only send you newsletters after you have expressly confirmed that you wish to receive them.

By activating the confirmation link, you consent to the use of your personal data pursuant to Art. 6(1)(a) GDPR.

When you subscribe to the newsletter, we may store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, so that potential misuse of your email address can be traced.

You may unsubscribe from our newsletter at any time using the unsubscribe link contained in the newsletter or by contacting us. After unsubscribing, your email address will be removed from our newsletter distribution list unless further processing is legally permitted or you have expressly consented to it.

6.2 Email Newsletters to Existing Customers

If you provide your email address when purchasing goods or services, Diane & Rose reserves the right to send you information about goods or services similar to those you previously purchased.

You may object to the use of your email address for marketing purposes at any time. Once your objection is received, your email address will no longer be used for this purpose.

7) Data Processing for Order Fulfillment

7.1 Personal data collected by Diane & Rose may be shared with the shipping company responsible for delivering your order to the extent necessary to complete delivery.

Payment information may also be shared with the financial institution or payment provider responsible for processing your payment. The legal basis for transferring this information is Art. 6(1)(b) GDPR.

7.2 Payment Service Providers

PayPal

If you choose to pay using PayPal or a payment method processed through PayPal, the payment information necessary to process the transaction may be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

PayPal may conduct credit checks for certain payment methods and may share relevant information with credit agencies where permitted. You may object to certain processing by contacting PayPal, although PayPal may continue processing information where necessary to process contractual payments.

SOFORT

If you select SOFORT as your payment method, payment processing is carried out through SOFORT GmbH, part of the Klarna Group. Information necessary to process your payment and order may be transmitted to SOFORT for this purpose.

8) Review Reminders

If you have expressly consented, Diane & Rose may use your email address to send you a one-time reminder asking you to review your order.

You may withdraw this consent at any time by contacting us.

9) Use of Social Media: Social Plugins

9.1 Facebook

Our website may use social plugins or links associated with Facebook.

To increase the protection of your data, these buttons may be integrated as HTML links rather than unrestricted plugins. This means that simply visiting a page containing these buttons does not necessarily establish a connection with Facebook’s servers.

If you click the button, a new browser window may open and connect you to Facebook.

9.2 Google+

The source policy states that the website may use Google+ social plugins integrated through HTML links. When clicked, these links may establish a connection with the relevant Google service.

9.3 Instagram

Our website may use social plugins or links associated with Instagram.

Where these buttons are implemented through HTML links, simply visiting the page does not establish a connection with Instagram. A connection may be established after you click the relevant button.

10) Online Marketing

10.1 Google DoubleClick

The website may use DoubleClick by Google for online marketing purposes.

DoubleClick may use cookies to display relevant advertisements, improve campaign performance reporting, and prevent users from seeing the same advertisement repeatedly.

Google may also use cookie IDs to measure conversions, such as when a user views or clicks an advertisement and subsequently makes a purchase.

Processing is carried out on the basis described in the source policy under Art. 6(1)(f) GDPR.

10.2 Google AdWords Conversion Tracking

Diane & Rose may use Google AdWords and Google AdWords conversion tracking to advertise products and measure the effectiveness of advertising campaigns.

Conversion tracking cookies may be placed when a user clicks on a Google advertisement. The information collected may be used to generate conversion statistics.

According to the source policy, these cookies generally expire after 30 days and are not intended to personally identify users.

11) Web Analytics Services

Google Analytics

The website may use Google Analytics to analyze how visitors use the website.

Google Analytics may use cookies stored on your device to collect information about website usage. The source policy states that IP anonymization is used to shorten IP addresses and reduce direct personal identification.

The information collected may be used to evaluate website usage, generate reports about website activity, and provide other services relating to website and internet usage.

You may prevent cookies from being stored by changing your browser settings. However, doing so may prevent you from using certain website functions to their full extent.

The source policy also describes cross-device analysis using a User ID.

12) Retargeting / Remarketing / Recommendation Advertising

Facebook Custom Audiences / Facebook Pixel

The website may use the Facebook Pixel.

Where express consent has been provided, this technology may be used to track user behavior after users view or click Facebook advertisements. This information may be used to evaluate advertising effectiveness and improve future advertising campaigns.

The source policy states that this processing takes place only where express consent has been given pursuant to Art. 6(1)(a) GDPR.

Google AdWords Remarketing

Diane & Rose may use Google AdWords Remarketing to advertise the website in Google search results and on third-party websites.

Google may place cookies in your browser to enable interest-based advertising based on pages you have visited.

You may be able to disable advertising cookies through your browser or Google's advertising settings. Disabling cookies may limit certain website functions.

13) Your Rights

13.1 Data Subject Rights

Under applicable data protection law, you may have the following rights concerning your personal data:

• Right of access under Art. 15 GDPR

• Right to rectification under Art. 16 GDPR

• Right to erasure under Art. 17 GDPR

• Right to restriction of processing under Art. 18 GDPR

• Right to information under Art. 19 GDPR

• Right to data portability under Art. 20 GDPR

• Right to withdraw consent under Art. 7(3) GDPR

• Right to lodge a complaint under Art. 77 GDPR

These rights are subject to the conditions and exceptions established under applicable law.

13.2 Right to Object

Where Diane & Rose processes your personal data on the basis of legitimate interests, you may have the right to object to such processing based on your particular circumstances.

If your personal data is processed for direct marketing purposes, you may object to this processing at any time.

Once a valid objection to direct marketing is received, the affected personal data will no longer be processed for direct marketing purposes.

14) Retention of Personal Data

The length of time personal data is stored is determined by the applicable statutory retention periods, including commercial and tax-law retention requirements.

After the applicable retention period expires, the relevant data will generally be deleted if it is no longer required for the performance or preparation of a contract and Diane & Rose no longer has a legitimate interest in retaining it.

Important: I translated the document you provided and replaced “Shop Name” with “Diane & Rose.” I have not updated its legal substance. The source contains older references such as Google+, Google Universal Analytics, Google AdWords, and the EU–US Privacy Shield, so I would not publish this version as a current US-store privacy policy without updating those sections.