Privacy policy

Privacy Policy

1. WHO IS RESPONSIBLE
The controller responsible for processing your personal data on this website is:
Iuliia Troshina, Troshina U Project Studio
Altmühlstraße 10, 93059 Regensburg, Germany
Phone: +49 1512 0442197
Email: julii.und.aron@gmail.com

2. HOSTING AND SHOP SYSTEM
Our online shop runs on Shopify (Shopify International Limited, Dublin, Ireland). When you visit the shop, Shopify processes technical data such as your IP address, browser type, pages visited and the date and time of access, in order to deliver the website securely and reliably. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a functioning, secure shop). Shopify may transfer data to Shopify Inc. in Canada and to service providers in the USA; these transfers rely on adequacy decisions, the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

3. ORDERS AND CUSTOMER SERVICE
When you place an order, we process the data you enter at checkout (name, address, email, phone number, order details) to fulfil the contract, ship your order and handle returns. Legal basis: Art. 6(1)(b) GDPR. When you contact us by email, phone or WhatsApp, we use your data to answer your request. WhatsApp is provided by Meta (WhatsApp Ireland Limited); please only use it if you agree to Meta's processing of your messages.

4. PAYMENT
Payments are processed by the payment provider you choose at checkout, for example Shopify Payments (operated with Stripe), Klarna, Shop Pay, Google Pay or Apple Pay. We pass on the data needed for the payment; the provider processes it under its own privacy policy. Klarna may carry out an identity and credit check for payment on invoice or in instalments. Legal basis: Art. 6(1)(b) GDPR.

5. SHIPPING
To deliver your order, we pass your name, address and, where needed for delivery notifications, your email or phone number to the shipping carrier. Legal basis: Art. 6(1)(b) GDPR.

6. COOKIES AND CONSENT
We use cookies and similar technologies. Cookies that are strictly necessary to run the shop (for example the shopping cart and checkout) are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies, including analytics and marketing cookies, are only set after you agree in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via "Your Privacy Choices" in the footer.

7. META PIXEL AND CONVERSIONS API
With your consent, we use the Meta Pixel and the Meta Conversions API from Meta Platforms Ireland Limited (Dublin, Ireland). They help us measure the results of our ads on Facebook and Instagram and show our ads to relevant people. Meta receives information such as pages viewed, products added to cart and purchases, together with your IP address, browser data and, in hashed (encrypted) form, contact details such as your email or phone number. Data may be transferred to Meta Platforms Inc. in the USA on the basis of the EU-US Data Privacy Framework. We and Meta are joint controllers for the collection and transfer of this data. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time via "Your Privacy Choices".

8. SHOP ANALYTICS
With your consent, Shopify collects anonymised statistics about how visitors use our shop (for example visits and sales). Legal basis: Art. 6(1)(a) GDPR.

9. EMAIL NEWSLETTER
If you tick "Email me with news and offers", we use your email address to send you news about our perfumes. Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email or by writing to us.

10. HOW LONG WE KEEP YOUR DATA
We delete your data when it is no longer needed for the purpose it was collected. Order and invoice data must be kept for up to 10 years under German commercial and tax law (§ 147 AO, § 257 HGB). Consent-based data is deleted when you withdraw your consent.

11. YOUR RIGHTS
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on our legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. To exercise your rights, email us at julii.und.aron@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany).

12. CHANGES
We may update this policy when our shop or the law changes. The current version is always available on this page.