Privacy Policy

Responsible for data processing:

Cécile Garcia
Kolpingstraße 15
68165 Mannheim

Email: info@cecilegarcia.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our website without providing personal information. Each time a webpage is accessed, the web server automatically stores a server log file that contains, for example, the name of the requested file, your IP address, the date and time of access, the transferred data volume, and the requesting provider (access data) and documents the access. These access data are used exclusively for the purpose of ensuring the smooth operation of the site and improving our offer. This serves to protect our legitimate interests in a correct presentation of our offer in accordance with Art. 6 (1) (f) GDPR.

2. Data Processing for Contract Execution and Contact

2.1 Data Processing for Contract Execution

We collect personal data when you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such since we need these data to process the contract or your contact request, and without them, the order cannot be completed, or the request cannot be sent. The data collected can be seen from the respective input forms. We use the data you provide to process contracts and handle your inquiries (including inquiries regarding and processing warranty and performance claims and any statutory update obligations) in accordance with Art. 6 (1) (b) GDPR.

After completing the contract, your data will be restricted for further processing and deleted after any tax and commercial retention periods, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

2.2 Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 (1) (b) GDPR when you voluntarily provide it to us during contact (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such, as we need these data to process your inquiry. The collected data can be seen from the respective input forms. After fully processing your inquiry, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

3. Data Processing for Delivery

To fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we pass your data to the shipping service provider assigned with the delivery, insofar as this is necessary for delivering the ordered goods. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using the contact details provided in this privacy policy.

Data Sharing for Delivery Notification

If you have given us your explicit consent during or after your order, we will forward your email address to the selected shipping service provider to enable them to contact you prior to delivery for notification or coordination purposes, in accordance with Art. 6 (1) (a) GDPR.

Consent can be revoked at any time by sending a message to the contact details provided in this privacy policy or directly to the shipping service provider using the contact details below. After revocation, we delete your data unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

4. Data Processing for Payment

For payment processing, we collaborate with the following partners: technical service providers, credit institutions, and payment service providers.

4.1 Transaction Processing

Depending on the selected payment method, we forward the necessary data for processing the payment transaction to our technical service providers, who act as data processors on our behalf, or to the commissioned credit institutions or payment service providers, to the extent that this is necessary for processing the payment. This is done in accordance with Art. 6 (1) (b) GDPR. Some payment service providers collect the required data themselves, e.g., on their website or through a technical integration during the order process.

4.2 Fraud Prevention and Optimization of Payment Processes

We may provide additional data to our service providers, which they use, together with the data necessary for processing the payment, to prevent fraud and optimize our payment processes (e.g., invoicing, handling contested payments, supporting accounting). This is done in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in fraud prevention and efficient payment management.

5. Email Marketing

Email Newsletter

If you subscribe to our newsletter, we will use the necessary or separately provided data to send you our email newsletter regularly based on your consent in accordance with Art. 6 (1) (a) GDPR.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting us using the details provided in this policy. After unsubscribing, we will delete your email address unless you have expressly consented to further use or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

6. Cookies