Privacy Policy
1) Information on the Collection of Personal Data and Controller Contact Details
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. “Personal data” means any information relating to an identified or identifiable natural person.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Livella London. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
2) Data Collection When Visiting Our Website
When you use our website for purely informational purposes—i.e., if you do not register or otherwise transmit information to us—we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data which are technically necessary to display the website to you:
- The website visited on our domain
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymised form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data are neither shared with third parties nor used for any other purpose. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
3) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use “cookies” on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after the end of the browser session—i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). Where cookies are set, they collect and process, to an individual extent, certain user information such as browser and location data as well as IP address values. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie.
In some cases, cookies serve to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping basket for a later visit). Where personal data are also processed by cookies implemented by us, processing takes place either pursuant to Art. 6(1)(b) GDPR for the performance of a contract or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly, effective design of the site visit.
We may work with advertising partners who help us make our online offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed separately in the following paragraphs about the use of such cookies and the scope of the information collected in each case.
Please note: you can set your browser to inform you about the setting of cookies and decide individually on their acceptance, or to exclude the acceptance of cookies for specific cases or in general. Each browser manages cookie settings differently. You can find explanations on how to change your cookie settings in the help menu of each browser at the links below:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please be aware that disabling cookies may limit the functionality of our website.
4) Contacting Us
When you contact us (e.g., via contact form or email), personal data are collected. Which data are collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and the related technical administration. The legal basis for processing is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after final processing of your enquiry, provided that it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no statutory retention obligations to the contrary.
5) Data Processing When Opening a Customer Account and for Contract Fulfilment
Pursuant to Art. 6(1)(b) GDPR, personal data are further collected and processed if you provide them to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. You may delete your customer account at any time by sending a message to the controller’s address stated above. We store and use the data you provide for contract processing. After complete fulfilment of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved a legally permissible further use which we inform you about below.
6) Use of Your Data for Direct Advertising
6.1 Subscribing to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any other data is voluntary and will be used to address you personally. We use the double opt-in procedure. This means that we will only send you a newsletter by email once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to click a link to confirm that you wish to receive newsletters in the future.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. When subscribing, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of subscription so that we can trace possible misuse of your email address at a later date. The data collected during newsletter registration are used exclusively for advertising purposes by means of the newsletter. You can unsubscribe at any time via the link provided in the newsletter or by sending a message to the controller named at the beginning. After you unsubscribe, your email address will be deleted from our mailing list without delay, unless you have expressly consented to further use of your data or we reserve a use of data that is permitted by law and about which we inform you in this policy.
6.2 Newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this, we do not need separate consent from you. Data processing is based solely on our legitimate interest in personalised direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails. You may object to the use of your email address for advertising purposes at any time with effect for the future by notifying the controller mentioned at the beginning. You will incur only transmission costs according to the basic rates. After receiving your objection, we will immediately stop using your email address for advertising purposes.
7) Data Processing for Order Handling
7.1 Personal data collected by us will be passed on to the transport company commissioned with delivery to the extent necessary for delivery of the goods. Your payment data will be passed on to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If we use payment service providers, we explicitly inform you about this below. The legal basis for transferring data is Art. 6(1)(b) GDPR.
7.2 Use of payment service providers
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or—if offered—“purchase on account” or “instalment payment” via PayPal, we pass your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. The transfer takes place pursuant to Art. 6(1)(b) GDPR and only insofar as necessary for payment processing.
For the methods credit card via PayPal, direct debit via PayPal or—if offered—“purchase on account” or “instalment payment” via PayPal, PayPal may perform a credit check. For this purpose, your payment data may be transmitted to credit agencies pursuant to Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in determining your ability to pay. The result of the credit check regarding the statistical probability of default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values) based on a scientifically recognised mathematical-statistical procedure; address data are among the factors considered. Further information—incl. on the credit agencies used—can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by notifying PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for contractual payment processing.
- SOFORT (Klarna Group)
If you choose the payment method “SOFORT”, payment is processed via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we forward the information provided during the ordering process along with order information pursuant to Art. 6(1)(b) GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Data are transferred solely for the purpose of payment processing with SOFORT and only to the extent necessary. Further privacy information: https://www.klarna.com/sofort/datenschutz
8) Review Reminders
Own review reminder (no sending via an external customer review system)
We may use your email address to send a one-time reminder to submit a review of your order in our review system, provided you have expressly consented to this pursuant to Art. 6(1)(a) GDPR during or after your order. You may withdraw your consent at any time by notifying the controller responsible for data processing.
9) Use of Social Media: Social Plugins
9.1 Facebook plugins using the Shariff solution
(Notice: Any special additional customs clearance charges and/or import duties are not included in the price and are borne by the customer.)
Our website uses “social plugins” (“plugins”) of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
To increase the protection of your data when visiting our website, these buttons are integrated into the page merely as HTML links (not as fully active plugins). This ensures that when a page of our website containing such buttons is called up, no direct connection is yet established with Facebook’s servers. If you click a button, a new browser window opens and loads Facebook, where you can interact with the plugins there (after entering your login data, if necessary).
Facebook Inc., USA, is certified under the EU-US Privacy Shield (ensuring compliance with the data protection level applicable in the EU).
For information on the purpose and scope of data collection and further processing and use of the data by Facebook as well as your rights and settings options to protect your privacy, please see Facebook’s privacy policy: https://www.facebook.com/policy.php
9.2 Google+ plugins using the Shariff solution
Our website uses social plugins of the Google+ network, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
To protect your data, these buttons are integrated only as HTML links. Thus, no connection to Google’s servers is established when our pages are loaded. If you click the button, a new window opens and calls Google+, where you can interact with plugins (after logging in if needed).
Google LLC, USA, is certified under the EU-US Privacy Shield.
Further details on data processing by Google and your rights/settings can be found here: https://www.google.com/intl/de/policies/privacy/
9.3 Instagram plugins using the Shariff solution
Our website uses social plugins of Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).
To increase data protection, these buttons are integrated only as HTML links. Thus, no connection to Instagram’s servers is established when the page loads. If you click a button, a new window opens to Instagram where you can interact (after logging in if necessary).
Instagram LLC, USA, is certified under the EU-US Privacy Shield.
For details, see: https://help.instagram.com/155833707900388/
10) Online Marketing
10.1 DoubleClick by Google
This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).
DoubleClick uses cookies to display relevant ads to users, to improve campaign performance reports, and to avoid showing the same ads multiple times. Using a cookie ID, Google records which ads are displayed in which browser and can thus prevent multiple displays. Processing is based on our legitimate interest in optimally marketing our website pursuant to Art. 6(1)(f) GDPR.
DoubleClick can also record conversions related to ad requests via cookie IDs (e.g., when a user sees a DoubleClick ad and later visits the advertiser’s website and makes a purchase). According to Google, DoubleClick cookies do not contain personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence on the extent and further use of the data collected by Google and therefore inform you according to our knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered/logged in, it is possible that the provider will learn and store your IP address.
You can opt out of this tracking by disabling cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). This setting is deleted when you delete your cookies. Alternatively, visit the Digital Advertising Alliance at www.aboutads.info to learn about cookies and make settings. Finally, you can set your browser to notify you about cookies and decide individually on their acceptance or exclude cookies for specific cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Google LLC, USA, is certified under the EU-US Privacy Shield.
More information on DoubleClick privacy: https://www.google.de/policies/privacy/
10.2 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, within Google Ads, conversion tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Ads). We can determine how successful the individual advertising measures are in relation to the campaign data. Our interest is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on a Google ad. Cookies are small text files stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not expired, Google and we can recognise that the user clicked the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information obtained with the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked their ad and were redirected to a page with a conversion tracking tag. They do not, however, receive information that personally identifies users.
If you do not wish to participate in tracking, you can block this use by disabling the Google conversion tracking cookie in your browser’s user settings. You will then not be included in conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6(1)(f) GDPR.
Google LLC, USA, is certified under the EU-US Privacy Shield.
Further information on Google’s privacy policy: https://www.google.de/policies/privacy/
You can permanently disable cookies for ad preferences by configuring your browser accordingly or by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/plugin?hl=de
Please note that some features of this website may not function or may be limited if you disable the use of cookies.
11) Web Analytics
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to and stored on a Google server in the USA.
This website uses Google Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymisation of the IP address by truncation and excludes direct personal reference. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. In such exceptional cases, processing is based on Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting data generated by the cookie and related to your use of the website (incl. your IP address) and from processing this data by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, you can click the following link to set an opt-out cookie that will prevent future collection by Google Analytics on this website (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies, you must click the link again): Deactivate Google Analytics
Google LLC, USA, is certified under the EU-US Privacy Shield.
This website also uses Google Analytics for cross-device analysis of visitor flows via a user ID. When a page is first called up, a unique, permanent, anonymised ID is assigned to the user and set across devices. This makes it possible to assign interaction data from different devices and sessions to a single user. The user ID does not contain personal data and does not transmit such data to Google. You can object to data collection and storage via the user ID at any time with effect for the future. To do this, you must deactivate Google Analytics on all systems you use (e.g., in another browser or on your mobile device). Deactivation can be done with Google’s browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, set the opt-out cookie as described above. Further notes on Universal Analytics: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376
12) Retargeting/Remarketing/Referral Advertising
Facebook Custom Audiences via the pixel
This website uses the “Facebook Pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With your explicit consent, user behaviour can be tracked after users have seen or clicked a Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimise future advertising measures. The data collected are anonymous to us and do not allow us to draw conclusions about the identity of users. However, the data are stored and processed by Facebook, enabling a connection to the respective user profile and allowing Facebook to use the data for its own advertising purposes in accordance with Facebook’s Data Policy (https://www.facebook.com/about/privacy/). A cookie may also be stored on your computer for these purposes. These processing operations are carried out only with your explicit consent pursuant to Art. 6(1)(a) GDPR. Consent to use the Facebook Pixel may only be given by users over 13 years old. If you are younger, please ask your legal guardians for permission. Facebook Inc., USA, is certified under the EU-US Privacy Shield. To disable cookies on your computer, set your browser to prevent cookies from being stored in the future or to delete stored cookies. Disabling all cookies may mean some website functions no longer work. You can also disable third-party cookies such as Facebook via the Digital Advertising Alliance: https://www.aboutads.info/choices/
Google Ads Remarketing
Our website uses Google Ads Remarketing to advertise this website in Google search results and on third-party websites. Provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google sets a cookie in your device’s browser which, by means of a pseudonymous cookie ID and based on the pages you visit, enables interest-based advertising. Processing is based on our legitimate interest in optimal marketing of our website pursuant to Art. 6(1)(f) GDPR.
Further processing occurs only if you have agreed with Google that your web and app browsing history is linked to your Google account and information from your Google account is used to personalise ads you view on the web. If you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form audiences.
You can permanently disable cookies for ad preferences by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/onweb/
Alternatively, visit the Digital Advertising Alliance at www.aboutads.info to learn about cookies and make settings. Finally, you can set your browser to notify you about cookies and decide individually on their acceptance or exclude cookies for specific cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Google LLC, USA, is certified under the EU-US Privacy Shield. Further information and Google’s advertising privacy policy: https://www.google.com/policies/technologies/ads/
13) Rights of the Data Subject
13.1 Applicable data protection law grants you the following rights with respect to the controller regarding the processing of your personal data (rights of access and intervention), about which we inform you below:
- Right of access (Art. 15 GDPR): In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the envisaged storage period or the criteria used to determine that period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR when your data are transferred to third countries.
- Right to rectification (Art. 16 GDPR): You have the right to obtain the rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us without undue delay.
- Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data where the conditions of Art. 17(1) GDPR are met. This right does not apply, in particular, where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
- Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing of your personal data where: the accuracy of the data is contested by you (for a period enabling us to verify the accuracy); processing is unlawful and you oppose erasure and request restriction instead; we no longer need the data for the purposes of processing but you require them for the establishment, exercise or defence of legal claims; or you have objected to processing pending verification of whether our legitimate grounds override yours.
- Right to notification (Art. 19 GDPR): If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
- Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request transmission to another controller, where technically feasible.
- Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw consent once given for data processing at any time with effect for the future. In the event of withdrawal, we will delete the affected data without delay, provided there is no legal basis for further processing without consent. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data infringes the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
13.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AFTER A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. FURTHER PROCESSING IS RESERVED WHERE WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR WHERE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU OBJECT, WE WILL STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.
14) Duration of the Storage of Personal Data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the period has expired, the corresponding data are routinely deleted, provided they are no longer required for the fulfilment of the contract or the initiation of a contract and/or we have no legitimate interest in continued storage.