Privacy Policy

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ethan & Elle Boutique. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" string and the lock icon in your browser's address bar.


2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website for informational purposes only (i.e., without registering or transmitting information to us), we collect only the data that your browser transmits to our server ("server log files"). When you access our website, the following data is collected, which is technically necessary to display the website:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you accessed the site
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymized form)

Data processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or otherwise used. However, we reserve the right to retrospectively review server log files if there are concrete indications of unlawful use.


3) COOKIES

To make your visit to our website attractive and to enable the use of certain features, we use "cookies" on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after the browser session ends (session cookies), while others remain on your device, allowing us or partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a predefined duration, which varies depending on the cookie.

Some cookies simplify processes by storing settings (e.g., remembering the contents of a virtual shopping cart for a subsequent visit). If cookies process personal data, this is done either in accordance with Article 6(1)(b) GDPR for contract execution or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interest in providing the best possible website functionality and a user-friendly browsing experience.

We may collaborate with advertising partners who help make our online offerings more interesting for you. In such cases, cookies from partner companies may also be stored on your device. You will be informed about the use of such cookies and the scope of the collected information individually and separately.

You can configure your browser to notify you when cookies are set, allow them individually, or exclude cookies in specific cases or altogether. Instructions for adjusting cookie settings are available for common browsers via the following links:

Please note that disabling cookies may limit the functionality of our website.


4) CONTACTING US

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in a contact form is indicated in the respective form. This data is stored and used solely for responding to your inquiry or for technical administration related to your inquiry. The legal basis for processing this data is our legitimate interest in responding to your inquiry, as per Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Article 6(1)(b) GDPR also applies. Your data will be deleted after your inquiry has been fully processed, provided no statutory retention obligations apply.


5) DATA PROCESSING FOR ACCOUNT CREATION AND CONTRACT EXECUTION

In accordance with Article 6(1)(b) GDPR, personal data is collected and processed if you provide it to us for contract execution or account creation. The specific data collected is indicated in the input forms. You can delete your account at any time by contacting the controller at the provided address.

We store and use the data you provide to execute the contract. After the contract is fully executed or your account is deleted, your data will be blocked and deleted following the expiration of tax and commercial retention periods unless you have explicitly consented to further use or we are legally permitted to use the data for other purposes, as described below.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is optional and is used to personalize the communication. We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an email newsletter after you explicitly confirm that you consent to receiving newsletters. You will receive a confirmation email, where you will need to click on a link to confirm that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1)(a) GDPR. When you register for the newsletter, we store the IP address registered by your Internet Service Provider (ISP) and the date and time of registration to track any potential misuse of your email address at a later time. The data collected during the newsletter subscription will be used solely for promotional purposes through the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by notifying the responsible party mentioned above. After unsubscribing, your email address will be promptly removed from our mailing list unless you have explicitly consented to further use of your data or unless we reserve the right to use your data for other legally permitted purposes, about which we inform you in this statement.

6.2 Sending Email Newsletters to Existing Customers
If you have provided us with your email address during the purchase of goods or services, we reserve the right to send you regular offers for similar goods or services from our range via email. For this, we do not need to obtain separate consent from you. Data processing in this context is based solely on our legitimate interest in personalized direct advertising as per Art. 6 (1)(f) GDPR.

If you initially objected to the use of your email address for this purpose, we will not send any emails. You can object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the responsible party mentioned above. You will incur no costs beyond the transmission fees according to the basic rates. Upon receiving your objection, the use of your email address for advertising purposes will be promptly discontinued.

7) DATA PROCESSING FOR ORDER HANDLING

7.1 The personal data we collect will be shared with the transport company responsible for delivery as part of contract processing, to the extent necessary for delivering the goods. We will share your payment details with the commissioned credit institution as part of payment processing, if required. Where payment service providers are utilized, further details will be provided below. The legal basis for sharing the data is Art. 6 (1)(b) GDPR.

7.2 Use of Payment Service Providers (Payment Processors)

  • PayPal
    For payments via PayPal, credit card via PayPal, direct debit via PayPal, or – where offered – "purchase on account" or "installment payment" via PayPal, we share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") as part of payment processing. The sharing of data is carried out in accordance with Art. 6 (1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – where offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be shared with credit agencies in accordance with Art. 6 (1)(f) GDPR based on PayPal's legitimate interest in determining your creditworthiness.

The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide whether to provide the respective payment method. The credit report may include probability values (so-called score values). These scores are calculated based on a scientifically recognized mathematical-statistical method, incorporating address data, among other factors.

Further information on data protection, including the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this data processing at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment process.

  • SOFORT
    If you select the payment method “SOFORT,” the payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we transfer the information you provided during the order process along with details about your order in accordance with Art. 6 (1)(b) GDPR.

SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be shared for payment processing with SOFORT and only to the extent necessary. Further information about SOFORT's data protection policy can be found here: https://www.klarna.com/sofort/datenschutz.

8) CONTACT FOR REVIEW REMINDERS

We use your email address for a one-time reminder to submit a review for your order via our rating system, provided you have expressly consented to this during or after your order in accordance with Art. 6 (1)(a) GDPR.
You may revoke your consent at any time by notifying the responsible party.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution
Our website uses social plugins (“Plugins”) from the Facebook social network, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To protect your data, these buttons are integrated as HTML links rather than unrestricted plugins. This ensures no connection to Facebook’s servers occurs when visiting our website. If you click the button, a new browser window will open to Facebook, where you can interact with its plugins.

Facebook Inc. is certified under the EU-US Privacy Shield Framework, ensuring compliance with EU data protection standards.
For more details, see Facebook's privacy policy: https://www.facebook.com/policy.php.

9.2 Google+ Plugins with Shariff Solution
Our website also integrates Google+ social plugins via an HTML link for enhanced data protection. Clicking the button opens a new browser window to Google+.

Google LLC is certified under the EU-US Privacy Shield Framework. For details, visit Google's privacy policy: https://www.google.com/intl/de/policies/privacy/.

9.3 Instagram Plugin with Shariff Solution
We include Instagram plugins using HTML links. Clicking opens a new browser window to Instagram.

Instagram LLC is certified under the EU-US Privacy Shield Framework.
Further details: https://help.instagram.com/155833707900388/.

0) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to deliver ads relevant to users, improve campaign performance reports, and avoid displaying the same ads multiple times. Through a cookie ID, Google tracks which ads are displayed on which browsers and can prevent repeated displays. The processing is based on our legitimate interest in the optimal marketing of our website under Article 6(1)(f) GDPR.

Additionally, DoubleClick can track conversions using cookie IDs, such as when a user views a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically connects directly to Google's server. We have no control over the scope and further use of the data collected by Google through this tool and provide information based on our current knowledge: By integrating DoubleClick, Google receives the information that you visited the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or not logged in, Google may still obtain and store your IP address.

If you wish to opt out of this tracking, you can disable cookies for conversion tracking by configuring your browser to block cookies from the domain www.googleadservices.com (Google settings). This setting will be removed if you delete your cookies. Alternatively, you can learn more about cookie settings and adjust your preferences at the Digital Advertising Alliance website (aboutads.info). Finally, you can configure your browser to notify you about cookies and decide individually whether to accept them or exclude them for certain cases or entirely. Note that disabling cookies may limit the functionality of our website.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection standards.

For more information about the privacy policies of DoubleClick by Google, visit: Google Policies.


10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google AdWords to draw attention to our attractive offers through advertising materials (so-called Google AdWords) on external websites. This enables us to evaluate the effectiveness of individual advertising campaigns. Our goal is to show you ads that interest you, make our website more engaging, and ensure fair advertising cost calculations.

A conversion tracking cookie is set when a user clicks on a Google AdWords ad. These cookies are small text files stored on your computer and typically expire after 30 days. They do not personally identify users. If a user visits specific pages on this website and the cookie has not expired, Google and we can detect that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie, so cookies cannot be tracked across AdWords customers' websites.

The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you do not wish to participate in tracking, you can opt out by disabling the Google conversion tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising under Article 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection standards.

For more information on Google's privacy policies, visit: Google Policies.

You can permanently disable cookies for ad preferences by adjusting your browser settings or installing a browser plugin available at: Google Plugin.


11) WEB ANALYTICS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google Analytics uses cookies—small text files stored on your computer—to analyze your use of the website. The information generated by the cookie about your website usage (including the shortened IP address) is typically transmitted to and stored on a Google server in the USA.

This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures IP anonymization by truncating IP addresses and excludes direct personal references.

You can prevent the storage of cookies by adjusting your browser settings. However, disabling cookies may limit website functionality. You can also prevent data collection via Google Analytics by installing a browser plugin: Google Opt-Out.

Google LLC is certified under the EU-US Privacy Shield.

For further details on Universal Analytics and privacy: Google Support.


12) Retargeting/Remarketing/Recommendation Advertising

Facebook Custom Audience via Pixel Process
This website uses the "Facebook Pixel" provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If explicit consent is granted, this allows the behavior of users to be tracked after they have viewed or clicked on a Facebook ad. This process helps evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can contribute to optimizing future advertising strategies.

The data collected is anonymous for us, meaning it does not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Facebook, which makes it possible to link it to the respective user profile. Facebook can use this data for its own advertising purposes in accordance with Facebook's Data Use Policy (https://www.facebook.com/about/privacy/).

This enables Facebook and its partners to display advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes. These processing activities occur exclusively with explicit consent according to Art. 6 (1) lit. a GDPR.

Consent for the use of the Facebook Pixel may only be declared by users who are older than 13 years. If you are younger, please ask your legal guardian for permission.

Facebook Inc., based in the USA, is certified under the US-European Privacy Shield Agreement, which ensures compliance with the data protection standards applicable in the EU.

To deactivate the use of cookies on your computer, you can adjust your Internet browser settings to prevent cookies from being stored on your computer in the future or to delete already stored cookies. Disabling all cookies may, however, restrict certain functions on our website. You can also disable the use of cookies by third-party providers such as Facebook on the Digital Advertising Alliance website: https://www.aboutads.info/choices/.


Google AdWords Remarketing
Our website uses the features of Google AdWords Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.

Further data processing only occurs if you have consented to Google linking your web and app browsing history with your Google account and using information from your Google account to personalize ads you view on the web. If you are logged into Google during your visit to our website, Google uses your data along with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target audiences.

You can permanently disable the placement of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/. Alternatively, you can learn more about the use of cookies and adjust your settings on the Digital Advertising Alliance website at www.aboutads.info. Finally, you can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

Google LLC, based in the USA, is certified under the US-European Privacy Shield Agreement, which ensures compliance with the data protection standards applicable in the EU.

Further information and Google's privacy policy regarding advertising can be found here: https://www.google.com/policies/technologies/ads/.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) concerning the processing of your personal data by the data controller. Below, we provide you with information about these rights:

  • Right of Access (Art. 15 GDPR):
    You have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage period or the criteria used to determine the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if not collected by us, the existence of automated decision-making (including profiling), and meaningful information about the logic involved as well as the significance and potential consequences of such processing for you. You also have the right to be informed about guarantees provided under Art. 46 GDPR in the event of data transfers to third countries.
  • Right to Rectification (Art. 16 GDPR):
    You have the right to demand the immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete data stored by us.
  • Right to Erasure (Art. 17 GDPR):
    You have the right to request the deletion of your personal data under the conditions of Art. 17 (1) GDPR. This right does not apply if processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or the establishment, exercise, or defense of legal claims.
  • Right to Restriction of Processing (Art. 18 GDPR):
    You have the right to request the restriction of the processing of your personal data if:
    • You contest the accuracy of your data while it is being verified.
    • You oppose the deletion of your data due to unlawful processing and request the restriction of its use instead.
    • You require the data for the establishment, exercise, or defense of legal claims, even if we no longer need the data for the original purpose.
    • You have objected to processing based on your particular situation, pending verification of whether our legitimate reasons override yours.
  • Right to Notification (Art. 19 GDPR):
    If you exercise your right to rectification, erasure, or restriction of processing, the controller is obligated to notify all recipients to whom your personal data has been disclosed unless this is impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
  • Right to Data Portability (Art. 20 GDPR):
    You have the right to receive your personal data that you provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller, where technically feasible.
  • Right to Withdraw Consent (Art. 7 (3) GDPR):
    You have the right to withdraw consent previously given for data processing at any time with future effect. Following your withdrawal, the affected data will be deleted immediately unless processing can be based on a legal basis that does not require your consent. The withdrawal of consent does not affect the legality of processing carried out based on the consent before its withdrawal.
  • Right to Lodge a Complaint (Art. 77 GDPR):
    If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or location of the alleged infringement, without prejudice to any other administrative or judicial remedy.


13.2 Right to Object

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with future effect.

If you exercise your right to object, we will stop processing the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising purposes. You can exercise this right as described above.

If you exercise your right to object, we will stop processing your personal data for direct marketing purposes.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax law retention periods). After the expiration of this period, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of a contract and/or there is no legitimate interest on our part in continuing to store it.