Privacy policy
Privacy Policy
Responsible for data processing is:
Hueseyin Bueber Obere Vorstadt 4 91575 Windsbach Email: info@duneglam.com
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information on how we handle your data.
- Access Data and Hosting
You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to protect our predominant legitimate interests in presenting our offerings correctly in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
- Data Processing for Contract Execution and Contact
2.1 Data Processing for Contract Execution
For the purpose of contract execution (including inquiries about and processing of any existing warranty and defect claims as well as any statutory update obligations), in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us when placing your order. Mandatory fields are marked as such because in these cases we need the data to process the contract and cannot send the order without it. The data collected can be seen from the respective input forms. For further information on the processing of your data, especially regarding the transfer to our service providers for the purpose of order, payment, and shipping processing, please refer to the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.2 Customer Account
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can either be done by sending a message to the contact option described in this privacy policy or by using the designated function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
2.3 Contact
As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR when you voluntarily provide it to us when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because in these cases we need the data to process your contact request. The data collected can be seen from the respective input forms. After complete processing of your inquiry, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
- Data Processing for the Purpose of Shipping Processing
For the fulfillment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. The same applies to the transfer of data to our manufacturers or wholesalers in cases where they take over the shipping for us (drop shipping). These are considered shipping service providers within the meaning of this privacy policy.
Our service providers are located and/or use servers in the following countries: Australia, Brazil, China, India, Mexico, Russia, Serbia, Singapore, South Africa, Turkey, Ukraine. There is no adequacy decision of the European Commission for these countries. Our cooperation with you is based on these guarantees: Standard contractual clauses of the European Commission, Standard contractual clauses of a supervisory authority, Approved binding corporate rules, Approved contractual clauses, Approved codes of conduct, Approved certification mechanism.
Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection by decision: Andorra, Argentina, South Korea, Switzerland, Faroe Islands, Guernsey, Isle of Man, Israel, Japan, Jersey, Canada, New Zealand, Uruguay, United Kingdom, USA. There is an adequacy decision of the European Commission on an adequate level of data protection for the USA as the basis for a transfer to third countries, provided that the respective service provider is certified. Until certified by our service providers, data transmission continues to be based on this basis: Standard contractual clauses of the European Commission.
Data transfer to shipping service providers for the purpose of shipping notification
If you have given us your express consent during or after your order, we will pass on your email address to the selected shipping service provider on the basis of this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, so that the shipping service provider can contact you for the purpose of delivery notification or coordination. The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.