Privacy Policy

1) Information About the Collection of Personal Data and Contact Details of the Controller

1.1 Thank you for visiting our website and for your interest in Amaelia Palm Beach. Below, we explain how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.

1.2 The data controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Amaelia Palm Beach, reachable at support@amaelia-palmbeach.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 To protect your personal data and other confidential content (such as orders or inquiries) during transmission, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock icon in your browser’s address bar.

2) Data Collected When You Visit Our Website

When you use our website for informational purposes only, meaning you don’t register or otherwise provide us with information, we only collect the data your browser sends to our server (so-called “server log files”). This data is technically necessary to display the website:

  • The page you visited
  • Date and time of access
  • Amount of data sent in bytes
  • The source or referring page you came from
  • Browser used
  • Operating system used
  • IP address used (in anonymized form, where applicable)

This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in improving the stability and functionality of our website. The data is not shared or used for any other purpose. However, we reserve the right to review the server log files if there are concrete indications of unlawful use.

3) Cookies

To make your visit to our website more enjoyable and to enable certain features, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted when you close your browser (session cookies). Others remain on your device and allow us or our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies). These are automatically deleted after a set period, which varies by cookie. Cookies may collect and process information such as browser and location data and IP address values.

Some cookies simplify the ordering process by saving settings, for example by remembering the contents of your shopping cart for a later visit. Where personal data is processed by cookies we use, this is done under Art. 6(1)(b) GDPR to perform the contract, or under Art. 6(1)(f) GDPR to safeguard our legitimate interest in a well-functioning, customer-friendly website.

We also work with advertising partners who help us make our website more relevant to you. Non-essential cookies, including advertising and analytics cookies, are only placed with your consent via our cookie banner, under Art. 6(1)(a) GDPR. You can change or withdraw your consent at any time through the cookie settings on our website.

You can also set your browser to notify you when cookies are placed and decide whether to accept them, either case by case or in general. How this works differs per browser and is explained in your browser’s help menu:

Please note that if you do not accept cookies, some features of our website may be limited.

4) Contacting Us

When you contact us, for example by email or through our contact form, we collect personal data. The data collected through a contact form can be seen in that form. We store and use this data only to respond to your request and for the related technical administration. The legal basis is our legitimate interest in responding to your request under Art. 6(1)(f) GDPR. If your inquiry relates to concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR. We delete your data once your inquiry has been fully resolved, unless legal retention obligations apply.

5) Data Processing for Customer Accounts and Orders

Under Art. 6(1)(b) GDPR, we collect and process personal data you provide to us to fulfill a contract or when you open a customer account. The data collected can be seen in the relevant input forms. You can delete your customer account at any time by contacting us. We store and use the data you provide to process your order. Once your order has been fully processed or your customer account has been deleted, your data is restricted in line with tax and commercial retention periods and deleted after these periods expire. This does not apply if you have explicitly consented to further use of your data, or if we have reserved a legally permitted further use, which we explain below.

6) Use of Your Data for Direct Marketing

6.1 Signing up for our email newsletter
If you sign up for our email newsletter, we will regularly send you information about our offers. The only required information is your email address. Any additional information is voluntary and used to address you personally. We use a double opt-in process: we only send you our newsletter after you have confirmed your subscription by clicking the link in our confirmation email.

By clicking the confirmation link, you consent to the use of your personal data under Art. 6(1)(a) GDPR. When you subscribe, we store your IP address and the date and time of registration so we can trace any misuse of your email address later. The data collected during sign-up is used only to send you our newsletter. You can unsubscribe at any time using the link in each newsletter or by contacting us. After you unsubscribe, we promptly remove your email address from our mailing list, unless you have explicitly consented to further use or a legally permitted further use applies, which we explain in this policy.

6.2 Emails to existing customers
If you provided your email address when purchasing from us, we may send you offers by email for products similar to those you have already purchased. We do not need separate consent for this. This processing is based on our legitimate interest in personalized direct marketing under Art. 6(1)(f) GDPR. If you objected to this use of your email address when you first provided it, we will not send you marketing emails. You can object at any time, with effect for the future, by using the unsubscribe link in any email or by contacting us. Once we receive your objection, we will stop using your email address for marketing immediately.

7) Data Processing for Order Fulfillment

7.1 To deliver your order, we share your personal data with our fulfillment partner and with the shipping company responsible for delivery, to the extent necessary. We share your payment details with the relevant payment provider to the extent necessary to process your payment. The legal basis is Art. 6(1)(b) GDPR.

7.2 Payment providers

Shopify Payments: Our online store runs on Shopify. If you pay by credit card or another payment method offered through Shopify Payments, your payment details are processed by Shopify and its payment partners to the extent necessary to complete your payment, under Art. 6(1)(b) GDPR. More information: https://www.shopify.com/legal/privacy

PayPal: If you pay with PayPal, or with a credit card, direct debit, or “Pay Later” option via PayPal, we share your payment details with PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”), to the extent necessary for payment processing, under Art. 6(1)(b) GDPR.
For some payment methods, PayPal may run a credit check. For this, your payment data may be shared with credit agencies based on PayPal’s legitimate interest in assessing your creditworthiness under Art. 6(1)(f) GDPR. PayPal uses the result to decide whether to offer the relevant payment method. The credit report may include probability values (score values) based on recognized mathematical-statistical methods, which take into account address data, among other things. For more information, including the credit agencies used, please see PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full
You can object to this processing at any time by contacting PayPal. PayPal may still be entitled to process your data where necessary for payment processing.

8) Review Requests

If you have explicitly consented to it during or after your order, we use your email address to remind you once to leave a review of your order. This is based on Art. 6(1)(a) GDPR. You can withdraw your consent at any time by contacting us.

9) Social Media Links

Our website contains links to our profiles on social networks such as Facebook and Instagram, operated by Meta Platforms Ireland Ltd. (for users in the EU/EEA) and Meta Platforms, Inc. (USA) (“Meta”). These buttons are simple links, not embedded plugins. No connection to Meta’s servers is made when you visit our website; a connection is only made when you click a button and are taken to the relevant page.

For the purpose and scope of data collection by Meta, and your rights and privacy settings, please see:

10) Online Marketing

10.1 Google Ads conversion tracking and remarketing
With your consent (Art. 6(1)(a) GDPR), this website uses Google Ads, including conversion tracking and remarketing, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA (“Google”).

Conversion tracking helps us measure how effective our ads are. When you click on one of our Google ads, a cookie is placed that lets us and Google see that you visited our website after clicking the ad. We only receive aggregated statistics and no information that identifies you personally.

Remarketing allows us to show you ads for our products on Google and on third-party websites, based on a pseudonymous cookie ID and the pages you visited. If you are logged in to your Google account and have allowed Google to personalize ads, Google may link this data to your account across devices.

You can manage personalized ads from Google at https://adssettings.google.com and learn more about cookie choices at www.aboutads.info. More information: https://policies.google.com/privacy

11) Web Analytics

Google Analytics 4
With your consent (Art. 6(1)(a) GDPR), this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited and Google LLC (“Google”). Google Analytics uses cookies to analyze how visitors use our website. Google uses this information on our behalf to evaluate website use, compile activity reports, and provide related services. In Google Analytics 4, IP addresses are not logged or stored.

You can withdraw your consent at any time through our cookie settings. You can also prevent data collection by Google Analytics by installing Google’s browser add-on: https://tools.google.com/dlpage/gaoptout
More information: https://policies.google.com/privacy

12) Retargeting and Ad Measurement

Meta Pixel and Conversions API
With your explicit consent (Art. 6(1)(a) GDPR), this website uses the Meta Pixel and the Meta Conversions API from Meta Platforms Ireland Ltd. and Meta Platforms, Inc. (“Meta”). These tools let us track user behavior after someone has seen or clicked on one of our Facebook or Instagram ads. We use this to measure how effective our ads are and to show our ads to relevant audiences, including people who have previously visited our website.

The data is anonymous to us and does not allow us to identify individual users. However, Meta stores and processes the data, may link it to your Facebook or Instagram profile, and may use it for its own advertising purposes in line with Meta’s privacy policy: https://www.facebook.com/privacy/policy

You can withdraw your consent at any time through our cookie settings. You can also manage your ad preferences in your Meta account settings, or at https://www.aboutads.info/choices/

13) Your Rights

13.1 Applicable data protection law gives you the following rights regarding the processing of your personal data:

  • Right of access (Art. 15 GDPR): You have the right to know what personal data we process about you, the purposes of processing, the categories of data, the recipients, the planned storage period, the source of your data if we did not collect it from you, and whether automated decision-making, including profiling, takes place. You also have the right to information about the safeguards in place when your data is transferred to third countries.
  • Right to rectification (Art. 16 GDPR): You have the right to have inaccurate data corrected and incomplete data completed without delay.
  • Right to erasure (Art. 17 GDPR): You have the right to have your personal data deleted if the conditions of Art. 17(1) GDPR are met. This right does not apply if processing is necessary for exercising freedom of expression and information, for complying with a legal obligation, for reasons of public interest, or for establishing, exercising, or defending legal claims.
  • Right to restriction of processing (Art. 18 GDPR): You have the right to have processing of your data restricted while we verify the accuracy of data you have disputed. The same applies if you prefer restriction over deletion of unlawfully processed data, if you need the data for legal claims after we no longer need it, or if you have objected to processing and it has not yet been determined whether our legitimate grounds override yours.
  • Right to notification (Art. 19 GDPR): If you have exercised your right to rectification, erasure, or restriction, we will inform all recipients of your data of this, unless this is impossible or involves disproportionate effort. You have the right to be told who these recipients are.
  • Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format, or to have it transferred to another controller where technically feasible.
  • Right to withdraw consent (Art. 7(3) GDPR): You can withdraw your consent to data processing at any time, with effect for the future. We will then delete the data concerned without delay, unless another legal basis allows further processing. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
  • Right to lodge a complaint (Art. 77 GDPR): If you believe the processing of your personal data violates the GDPR, you have the right to file a complaint with a supervisory authority, in particular in the country where you live or work or where the alleged violation took place.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THIS AT ANY TIME. IF YOU DO, WE WILL STOP PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

14) How Long We Keep Your Data

How long we store personal data depends on the applicable legal retention periods, such as commercial and tax retention periods. Once these periods expire, the data is routinely deleted, unless it is still needed to perform or prepare a contract, or we have a continued legitimate interest in storing it.

15) Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at support@amaelia-palmbeach.com.