Datenschutzerklärung

Introduction

This Privacy Policy explains how casahomeliving.shop collects, uses, stores and discloses personal information when customers or visitors:

• Visit our website;
• Browse products;
• Create or use an account;
• Place an order;
• Communicate with us;
• Request customer support;
• Subscribe to marketing where offered;
• Participate in promotions; or
• Otherwise interact with casahomeliving.shop.

For privacy enquiries or requests, contact:

info@casahomeliving.shop

For purposes of applicable European data-protection law, the operator of casahomeliving.shop determines the purposes and means of processing personal data associated with operating the store and therefore generally acts as a data controller in relation to customer information.

Shopify explains that merchants are generally controllers of their customers' data, while Shopify may act as a processor when processing merchant customer data on the merchant's instructions.

Personal Data We May Collect

Depending on how customers interact with the store, we may collect information such as:

Identity Information

This may include:

• Name;
• Billing name;
• Shipping recipient name; and
• Account information.

Contact Information

This may include:

• Email address;
• Telephone number where provided;
• Billing address;
• Shipping address; and
• Other contact information voluntarily supplied.

Order Information

This may include:

• Products purchased;
• Quantity;
• Product variations;
• Order value;
• Order history;
• Delivery method;
• Order status;
• Returns;
• Refunds; and
• Customer-service history.

Payment and Transaction Information

Payment transactions may involve payment processors and financial institutions.

Depending on the payment method, payment providers may process information required to authorise and complete the transaction.

casahomeliving.shop does not necessarily receive or store complete payment-card credentials.

Device and Technical Information

When customers visit the website, technical information may be collected automatically, including:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Language settings;
• Time-zone information;
• Referral information;
• Pages viewed;
• Interactions with the website; and
• Cookie or similar technology information.

Customer Service Information

When a customer communicates with us, we may process:

• Email communications;
• Questions;
• Complaints;
• Order information;
• Return information;
• Photographs supplied in relation to damaged products; and
• Other information voluntarily provided.

Purposes for Which We Process Personal Data

We may use personal information to:

• Provide the website;
• Process purchases;
• Confirm orders;
• Process payments;
• Arrange fulfilment;
• Deliver products;
• Communicate shipment information;
• Manage customer accounts;
• Process cancellations;
• Process withdrawals;
• Manage returns;
• Issue refunds;
• Handle complaints;
• Respond to enquiries;
• Prevent fraud;
• Protect website security;
• Comply with legal obligations;
• Maintain accounting and transaction records;
• Improve store functionality;
• Analyse website performance;
• Personalise services where legally permitted; and
• Send marketing communications where there is an appropriate lawful basis.

Legal Bases for Processing

Where the GDPR applies, processing must have an appropriate legal basis.

Depending on the activity, casahomeliving.shop may rely on:

Performance of a contract where processing is necessary to process an order, deliver products or provide requested customer services.

Compliance with legal obligations where information must be retained or processed for accounting, tax, consumer-protection, regulatory or legal purposes.

Legitimate interests where processing is necessary for legitimate business purposes such as fraud prevention, security, improving services or establishing and defending legal claims, provided those interests are not overridden by the rights and freedoms of the individual.

Consent where legally required, including for certain marketing activities and non-essential cookies or tracking technologies.

These correspond to lawful processing grounds recognised under Article 6 GDPR.

Shopify

Our ecommerce store is powered by Shopify.

Shopify provides technology that allows us to operate our online storefront, process orders and provide ecommerce functionality.

For EEA customer data, Shopify states that personal data is initially processed by Shopify International Limited in Ireland. Shopify and its subprocessors may subsequently process merchant customer personal data in other jurisdictions.

Shopify's current Data Processing Addendum states that merchant customer personal data may be transferred and processed in countries where Shopify, its affiliates or service providers operate, including Canada and Singapore, subject to applicable data-protection requirements.

Service Providers

We may use third parties to provide services necessary for the operation of our store.

Depending on the services used, these may include:

• Ecommerce platform providers;
• Hosting providers;
• Payment processors;
• Fraud-prevention providers;
• Order fulfilment providers;
• Warehousing providers;
• Delivery companies;
• Customer-support providers;
• Analytics providers;
• Advertising providers where legally permitted;
• Email service providers; and
• Professional advisers.

These providers may process personal information only to the extent necessary for their respective roles and subject to applicable legal requirements.

Payment Processing

When customers submit payment information, the information may be processed directly by the relevant payment processor.

Payment providers may independently process personal information according to their own privacy obligations.

Customers should review information made available by the applicable payment provider where appropriate.

Shipping and Fulfilment

We may disclose information necessary to fulfil an order to:

• Warehouses;
• Fulfilment providers;
• Logistics companies;
• Postal services;
• Couriers;
• Customs authorities where applicable; and
• Other parties reasonably required to complete delivery.

This may include a customer's name, delivery address, telephone number, email address, order details and tracking information.

Cookies and Similar Technologies

casahomeliving.shop may use cookies, pixels, local storage and similar technologies.

Some technologies are necessary for functions such as:

• Shopping cart operation;
• Checkout;
• Security;
• Authentication;
• Fraud prevention; and
• Website functionality.

Other technologies may be used for analytics, personalisation or advertising.

Under Section 25 TDDDG, storing information on or accessing information from a user's terminal device generally requires informed consent unless the technology is strictly necessary for transmitting a communication or providing a digital service expressly requested by the user.

Where consent is legally required, casahomeliving.shop should obtain appropriate consent before activating the relevant technology.

Customers can also manage available privacy choices through any consent-management tools displayed on the website.

Marketing Communications

Where marketing communications are offered, we may send them only where there is an appropriate lawful basis.

Where consent is relied upon, customers may withdraw that consent.

Customers may unsubscribe using an available unsubscribe function or by contacting:

info@casahomeliving.shop

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and as necessary to satisfy legal, accounting, tax, contractual and dispute-resolution obligations.

Different types of information may therefore be retained for different periods.

When information is no longer required, it may be deleted, anonymised or otherwise handled in accordance with applicable law.

International Data Transfers

Because Shopify and other service providers may operate internationally, personal information may be processed outside Germany or the European Economic Area.

Where GDPR restrictions on international transfers apply, appropriate transfer mechanisms must be used.

Shopify states that EEA information is received by its Irish entity and may subsequently be transferred internationally subject to applicable transfer protections.

Data Security

We seek to use reasonable technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Accidental loss;
• Misuse;
• Alteration;
• Unauthorised disclosure; and
• Destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for keeping passwords and account credentials confidential.

GDPR Rights

Where the GDPR applies, individuals may have rights including:

• The right to obtain access to personal data;
• The right to request correction of inaccurate personal data;
• The right to request erasure where legal requirements are satisfied;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to data portability where applicable;
• The right to withdraw consent where processing is based on consent; and
• The right to lodge a complaint with a competent supervisory authority.

These rights are subject to statutory conditions and exceptions.

Exercising Privacy Rights

To submit a privacy request, contact:

info@casahomeliving.shop

We may need to verify identity before fulfilling a request where appropriate.

We will handle valid requests in accordance with applicable data-protection requirements.

Children

Our store is intended for customers legally capable of entering into purchases or customers acting with appropriate parental or guardian involvement.

We do not knowingly seek to collect personal information from children in circumstances prohibited by applicable law.

If a parent or legal guardian believes that a child has provided personal information improperly, they may contact:

info@casahomeliving.shop

Fraud Prevention

We may process order, device, payment and account information for fraud-prevention and security purposes.

Where legally permissible, orders may be reviewed where fraud, misuse, unauthorised payment activity or security concerns are reasonably suspected.

Legal Disclosure

Personal information may be disclosed where reasonably necessary to:

• Comply with a legal obligation;
• Respond to valid legal process;
• Comply with a court order;
• Cooperate with competent authorities;
• Prevent fraud;
• Protect the rights or safety of customers or others;
• Establish or defend legal claims; or
• Enforce contractual rights.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Law;
• Technology;
• Shopify functionality;
• Service providers;
• Business practices; or
• Store operations.

The revised version will be published on casahomeliving.shop with an updated revision date.

Contact

For privacy-related questions:

casahomeliving.shop
Email: info@casahomeliving.shop