Privacy Policy

 

1. Data Controller and Contact Information

We are glad you are visiting our website. Below we explain how we handle your personal data when you use our site. Personal data is any information that can be used to identify you personally.

The data controller for data processing on this website is Eugenia's Boutique. For any privacy-related questions, please contact us at support@eugeniasboutique.com.

For your security, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser.

2. Data Collection When Visiting Our Website

When you visit our website without registering or submitting any information, we only collect data automatically transmitted by your browser (server log files), including:

  • Pages visited and date/time of access
  • Amount of data sent (in bytes)
  • Source/referring page
  • Browser and operating system used
  • IP address (anonymised where applicable)

This data is processed in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in maintaining the stability and functionality of the website. The data is not shared and is not used for any other purpose.

3. Cookies

We use cookies to make your visit more enjoyable and to enable certain features. Cookies are small text files stored on your device. We use both session cookies (deleted when you close your browser) and persistent cookies (which remain on your device for a set period).

Cookies may collect browser and location data as well as IP addresses. They may also be used to simplify the ordering process, for example by saving the contents of your shopping cart.

We may work with advertising partners who use third-party cookies to help us make our website more relevant to you. You will be informed separately when this is the case.

You can manage or disable cookies through your browser settings:

Please note that disabling cookies may limit the functionality of the website.

4. Contact Requests

When you contact us (e.g. by email), we collect the personal data you provide. This data is used solely to respond to your enquiry and for related administrative purposes, in accordance with Article 6(1)(f) GDPR. Your data will be deleted once your enquiry has been fully resolved, unless otherwise required by applicable retention obligations.

5. Customer Accounts and Order Management

If you create a customer account or place an order, we collect and process your personal data in accordance with Article 6(1)(b) GDPR. You may request deletion of your customer account at any time by contacting us at support@eugeniasboutique.com. Data is retained for the period required under applicable tax and commercial law before being deleted.

6. Email Marketing

Newsletter — If you subscribe to our newsletter, we will send you regular updates about our offers. Only your email address is required. We use a double opt-in process, meaning you will receive a confirmation email and must click a link to confirm your subscription.

You may unsubscribe at any time via the link in any newsletter or by contacting us at support@eugeniasboutique.com. Your email address will be removed from our mailing list immediately upon unsubscription.

Existing customers — If you have previously made a purchase with us, we may send offers for similar products by email, in accordance with Article 6(1)(f) GDPR. You may object to this use of your email address at any time by contacting us.

7. Order Processing and Data Sharing

We share your personal data with delivery partners to the extent necessary to fulfil your order, and with payment providers to process your payment, in accordance with Article 6(1)(b) GDPR.

8. Review Reminders

With your explicit consent (Article 6(1)(a) GDPR), we may send a one-time reminder by email to leave a review of your order. You may withdraw your consent at any time by contacting us.

9. Social Media Plugins

Our website may include buttons for Facebook, Google+, and Instagram. To protect your privacy, these are implemented as HTML links rather than direct plugins — this means no connection to third-party servers is made simply by visiting our website. A connection is only established if you actively click a button.

For more information on how these platforms handle your data, please refer to their respective privacy policies:

10. Online Advertising

We use the following Google advertising tools, all of which are based on our legitimate interest in effective marketing (Article 6(1)(f) GDPR):

DoubleClick by Google — used to display relevant ads and prevent the same ads from being shown repeatedly. Cookies used do not contain personal data. You may opt out at https://www.google.de/settings/ads or www.aboutads.info.

Google AdWords Conversion Tracking — helps us understand which ads lead to purchases on our website. Conversion cookies expire after 30 days and are not used for personal identification. You may opt out via your browser settings or the plugin at https://www.google.com/settings/ads/plugin.

11. Web Analytics – Google Analytics

We use Google Analytics to analyse how visitors use our website. The tool uses cookies and transmits anonymised IP addresses to Google's servers. We use the _anonymizeIp() extension to ensure that IP addresses are truncated before processing.

You may opt out of Google Analytics data collection by installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout

12. Retargeting and Remarketing

Facebook Custom Audiences (Facebook Pixel) — With your explicit consent (Article 6(1)(a) GDPR), we use the Facebook Pixel to track user behaviour following interaction with our Facebook ads, for statistical and optimisation purposes. The data is anonymous to us but may be linked to your Facebook profile by Facebook. Consent may only be given by users aged 13 or over.

You may opt out at: https://www.aboutads.info/choices/

Google AdWords Remarketing — We use Google AdWords Remarketing to display interest-based ads in Google search results and on third-party websites. Google places a pseudonymised cookie in your browser for this purpose. You may permanently disable this at: https://www.google.com/settings/ads/onweb/

13. Your Rights

Under applicable data protection law, you have the following rights regarding your personal data:

  • Right of access (Article 15 GDPR) — request information about what data we hold about you
  • Right to rectification (Article 16 GDPR) — request correction of inaccurate or incomplete data
  • Right to erasure (Article 17 GDPR) — request deletion of your data, subject to legal obligations
  • Right to restriction of processing (Article 18 GDPR) — request that we limit how we use your data
  • Right to data portability (Article 20 GDPR) — receive your data in a structured, machine-readable format
  • Right to withdraw consent (Article 7(3) GDPR) — withdraw consent at any time without affecting prior processing
  • Right to lodge a complaint (Article 77 GDPR) — contact your local supervisory authority

Right to object — Where we process your data based on legitimate interest, you have the right to object at any time on grounds relating to your specific situation. If you object to processing for direct marketing purposes, we will cease such processing immediately. To exercise this right, please contact us at support@eugeniasboutique.com.

14. Data Retention

We retain personal data only for as long as required under applicable retention periods (e.g. under commercial or tax law). Once these periods have elapsed, data is deleted unless still needed to fulfil a contract or we have a legitimate interest in retaining it.

If you have any questions about this privacy policy, please contact us at support@eugeniasboutique.com.