Privacy Policy

PRIVACY POLICY

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.

1.2 The party responsible for data processing on this website, as per the General Data Protection Regulation (GDPR), is Collins Street Boutique. The responsible party for processing personal data is the individual or legal entity who, alone or in conjunction with others, decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries directed to the responsible party). You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser.

DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website for informational purposes only (i.e., you do not register or otherwise provide information), we only collect the data that your browser transmits to our server (known as "server log files"). When you visit our website, we collect the following data that is technically necessary for displaying the website:

• Our visited website

• Date and time of access

• Data volume transmitted (in bytes)

• Source/reference from which you reached the page

• Browser used

• Operating system used

• IP address (potentially anonymized)

The processing is based on our legitimate interest in improving the stability and functionality of our website, per Art. 6(1)(f) GDPR. The data will not be transferred or used otherwise unless specific evidence suggests illegal use, in which case server log files may be reviewed retroactively.

COOKIES

To make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies we use are deleted after the end of the browser session (session cookies), while others remain on your device and allow us or partner companies to recognize your browser the next time you visit (persistent cookies). Cookies collect certain user information (e.g., browser and location data, and IP address values). Persistent cookies are automatically deleted after a specified period, which may vary by cookie.

Some cookies are used to simplify the order process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is processed through cookies, it is based on Art. 6(1)(b) GDPR, either for contract execution or Art. 6(1)(f) GDPR, to protect our legitimate interest in providing the best possible website functionality.

We may collaborate with advertising partners to make our internet offering more interesting to you. In this case, cookies from partner companies (third-party cookies) may also be stored on your device. If we collaborate with such partners, you will be informed about the use of these cookies and the collected data.

Please note that you can configure your browser settings to inform you about the use of cookies, individually accept them, or block them completely. Each browser manages cookie settings differently; you can find more information in the help menu of your browser:

• Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies

• Firefox: https://support.mozilla.org/kb/cookies-erlauben-und-ablehnen

• Chrome: https://support.google.com/chrome/answer/95647?hl=en

• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

• Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that disabling cookies may limit the functionality of our website.

CONTACT

When you contact us (e.g., via contact form or email), personal data will be collected. The data collected from the contact form will be evident from the form itself. This data will be stored and used exclusively for responding to your inquiry and managing the associated technical aspects. The legal basis for processing is our legitimate interest in responding to your inquiry, per Art. 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed, provided there are no legal retention requirements.

DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

As per Art. 6(1)(b) GDPR, personal data will be collected and processed if you provide this information for contract execution or when opening a customer account. The data collected can be seen in the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned responsible party. Your data will be stored and used for contract execution purposes. After contract execution or the deletion of your customer account, your data will be locked in accordance with tax and commercial law retention periods and deleted after these periods expire, unless you have expressly consented to further use of your data or legal permission for further data use applies.

USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will send you information about our offers regularly. The only required information for sending the newsletter is your email address. Additional data is voluntary and is used to address you personally. We use the double opt-in procedure for sending newsletters, meaning we will only send you a newsletter if you have explicitly confirmed that you agree to receive newsletters by clicking on the confirmation link in a confirmation email. By activating this confirmation link, you give us consent to use your personal data in accordance with Art. 6(1)(a) GDPR.

When registering for the newsletter, we save your IP address and the date and time of registration to trace any potential misuse of your email address. The data collected during the newsletter registration will be used exclusively for sending the newsletter. You can unsubscribe from the newsletter at any time via the link in the newsletter or by sending a message to the responsible party mentioned at the beginning. Once unsubscribed, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or legal permission for further data use applies.

6.2 Sending of Newsletter to Existing Customers

If you have provided your email address during the purchase of goods or services, we reserve the right to regularly send you email offers for similar products or services from our range. You do not need to give specific consent for this. Data processing for this purpose is based solely on our legitimate interest in personalized direct marketing, per Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send any further emails. You have the right to object to the use of your email address for direct marketing at any time by notifying the responsible party mentioned at the beginning. You will only incur transmission costs according to basic rates for this.

DATA PROCESSING FOR ORDER HANDLING

7.1 To fulfill your order, the personal data we collect will be passed on to the shipping company responsible for delivery, as necessary. We will also pass on your payment data to the assigned credit institution if it is required for processing your payment. If we employ payment service providers, we explicitly inform you below. The legal basis for this data transfer is Art. 6(1)(b) GDPR.

7.2 Use of Payment Providers (Payment Service Providers)

• PayPal: When paying via PayPal, your payment data will be forwarded to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. This transfer is based on Art. 6(1)(b) GDPR, and is necessary for payment processing.

• SOFORT: If you select the “SOFORT” payment option, payment processing will be carried out via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your information, as provided during the ordering process, will be transferred to SOFORT for payment processing. You can find additional information about data protection at SOFORT at: https://www.klarna.com/sofort/datenschutz

CONTACT FOR REVIEW REMINDERS

We use your email address for one-time reminders to submit a review of your order, provided that you have given us your express consent during or after your order, according to Art. 6(1)(a) GDPR. You can revoke your consent at any time by sending a message to the responsible party for data processing.

RIGHTS OF THE DATA SUBJECT

The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) concerning the processing of your personal data. These rights include:

• Right of access (Art. 15 GDPR): Obtain information about your personal data processed by us.

• Right to rectification (Art. 16 GDPR): Have inaccurate personal data corrected.

• Right to erasure (Art. 17 GDPR): Request the deletion of your personal data if conditions are met.

• Right to restriction of processing (Art. 18 GDPR): Restrict the processing of your personal data under specific conditions.

• Right to data portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format or request its transfer to another controller.

• Right to withdraw consent (Art. 7(3) GDPR): Withdraw your consent to data processing at any time with future effect.

• Right to lodge a complaint (Art. 77 GDPR): Lodge a complaint with a supervisory authority if you believe the processing of your personal data infringes the GDPR.

DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data depends on the relevant legal retention period (e.g., commercial and tax retention periods). After the expiry of the period, the corresponding data will be routinely deleted, provided that it is no longer necessary for contract fulfillment or contract initiation, and/or there is no legitimate interest on our part for further storage.