Privacy Policy

PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how we process your personal data when you use our website. Personal data refers to all information that allows your identification.
1.2 The data controller for the processing of personal data on this website, as defined by the General Data Protection Regulation (GDPR), is Harvey & Willow. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the padlock symbol in the browser’s address bar.

2) COLLECTION OF DATA WHEN VISITING THE WEBSITE

If you use our website for informational purposes only, meaning if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary to display the website to you:

  • The website you visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (possibly anonymized)

The processing is carried out in accordance with Art. 6 (1) lit. f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used otherwise. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) COOKIES

To make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user data such as browser data, location data, and IP addresses individually. In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the content of a shopping cart for a later visit to the website). If personal data is processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b) GDPR for the fulfillment of the contract or in accordance with Art. 6 (1) lit. f) GDPR for the protection of our legitimate interests in ensuring the best possible functionality of the website and creating an effective and user-friendly design of the page for the customer.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies will also be stored on your computer when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, we will inform you separately and in detail about the use of such cookies and the scope of the data collected. Please note that you can configure your browser’s cookie settings to be informed about the installation of cookies and decide individually whether to accept cookies or exclude their installation for certain cases or in general. Every browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how to modify the cookie settings. You can find the corresponding links for the respective browsers here:

Please note that the functionality of our website may be limited if you do not accept cookies.

4) CONTACTING US

Personal data is collected when you contact us (e.g., via a contact form or email). The data collected in the case of a contact form can be found in the respective contact form. This data will be used exclusively to answer your inquiry or to contact you, as well as for the corresponding technical administration. The legal basis for the processing of the data is our legitimate interest in answering your inquiry in accordance with Art. 6 (1) lit. f) GDPR. If your contact serves the purpose of establishing a contract, an additional legal basis for the processing is Art. 6 (1) lit. b) GDPR. Your data will be deleted after processing your inquiry, unless there are legal retention obligations.

5) DATA PROCESSING WHEN CREATING A CUSTOMER ACCOUNT AND CONTRACT EXECUTION

In accordance with Art. 6 (1) lit. b) GDPR, personal data is collected and processed when you provide it to us for the execution of a contract or for creating a customer account. The data collected can be viewed in the respective forms. You can delete your customer account at any time by sending a message to the address of the responsible party mentioned above. We store and use the data you provide to execute the contract. After the contract is concluded or your customer account is deleted, your data will be blocked with respect to the tax and commercial retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data or we are legally permitted to retain your data, about which we will inform you later.

 

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution
Special fees for customs clearance and/or import duties are not included in the price and are borne by the customer.
Our website uses so-called social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
To better protect your data when visiting our website, these buttons are not fully integrated as plugins into the page but only via an HTML link. This type of integration ensures that no connection to Facebook's servers is established when you open a page of our website with these buttons. When you click the button, a new browser window opens, and you are redirected to the Facebook page where you can interact with the plugins (possibly after entering your login details).
Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.
The purpose and scope of the data collection, as well as further processing and use by Facebook, your rights in this regard, and the options for configuring the protection of your privacy can be found in Facebook's privacy policy: https://www.facebook.com/policy.php.

9.2 Google+ Plugins with Shariff Solution
Our website uses so-called social plugins (“plugins”) from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
To better protect your data when visiting our website, these buttons are not fully integrated as plugins into the page but only via an HTML link. This type of integration ensures that no connection to Google+ servers is established when you open a page of our website with these buttons. When you click the button, a new browser window opens, and you are redirected to the Google+ page where you can interact with the plugins (possibly after entering your login details).
Google LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.
The purpose and scope of the data collection, as well as further processing and use by Google, your rights in this regard, and the options for configuring the protection of your privacy can be found in Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/.

9.3 Instagram Plugin with Shariff Solution
Our website uses social plugins (“plugins”) from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).
To better protect your data when visiting our website, these buttons are not fully integrated as plugins into the page but only via an HTML link. This type of integration ensures that no connection to Instagram's servers is established when you open a page of our website with these buttons. When you click the button, a new browser window opens, and you are redirected to the Instagram page where you can interact with the plugins (possibly after entering your login details).
Instagram LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.
The purpose and scope of thedata collection, as well as further processing and use by Instagram, your rights in this regard, and the options for configuring the protection of your privacy can be found in Instagram’s privacy policy: https://help.instagram.com/155833707900388/.

10) ONLINE MARKETING

10.1 Google DoubleClick
This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).
DoubleClick uses cookies to display relevant ads to users, improve campaign performance, or prevent users from being redirected to other websites.
Google uses a cookie ID to track which ads are shown in which browser, and can prevent the same ad from being displayed more than once. The processing is based on our legitimate interest in optimally marketing our website according to Art. 6 (1) (f) GDPR.
Additionally, DoubleClick may use cookie IDs to track conversions related to ad displays. For example, if a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal data.
By using these marketing tools, your browser automatically establishes a direct connection with the Google server. We have no influence over the scope and further use of the data that Google collects through this tool and therefore inform you as best as we know: By integrating DoubleClick, Google is informed that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered or logged into Google, it is possible that the provider can capture and store your IP address.
If you wish to opt out of this tracking process, you can block the conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com. For more information on cookie settings from the Digital Advertising Alliance, visit www.aboutads.info and make the necessary adjustments. You can also configure your browser to notify you about cookie settings, allowing you to individually decide whether to accept cookies or exclude their acceptance for specific cases or generally. If you do not accept cookies, some functionalities of our website may be restricted.
Google LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.
For more information on DoubleClick by Google's privacy policy, visit: https://www.google.de/policies/privacy/.

10.2 Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to bring attention to our attractive offers on external websites through advertising materials (so-called Google AdWords). The data from the advertising campaigns enables us to determine the success of individual advertising measures. We want to show you ads that are of interest to you, make our website more interesting for you, and fairly calculate the advertising costs.
The conversion tracking cookie is set when a user clicks on a Google AdWords ad. Cookies are small text files that are stored on your computer system. Typically, these cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie is not yet expired, both Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, it is not possible to track the cookies across all websites of AdWords customers. The information collected with the conversion tracking cookie is used to create conversion statistics for AdWords customers who have activated conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could be used for the personal identification of users.
If you do not wish to participate in tracking, you can deactivate the use of cookies for Google conversion tracking by adjusting your browser settings to block cookies from the Google service: https://www.google.de/policies/privacy/.
Google LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.

For more information on Google's privacy policy, visit: https://www.google.de/policies/privacy/.
You can permanently disable cookies for advertising preferences by downloading and installing the browser plugin available at the following link:
https://www.google.com/settings/ads/onweb/

11) WEB ANALYSIS SERVICES - Google (Universal) Analytics

Google Universal Analytics
This website uses Google Analytics, a web analysis service by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses "cookies" (text files stored on your computer) to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.

This website uses Google Analytics with the extension "_anonymizeIp()", which shortens the IP address and excludes direct personal identification. This means that your IP address will be truncated by Google within the member states of the European Union or other states of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these exceptional cases, the processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes. Google uses this information on our behalf to analyze your use of the website, create reports on website activities, and provide us with other services related to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

You can reject the use of cookies by selecting the appropriate setting in your browser. However, please note that in this case, you may not be able to use all the features of this website. You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from processing these data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, instead of using the browser plugin or on mobile browsers, you can click the following link to set a deactivation cookie, which prevents Google Analytics from collecting data on this website in the future (this deactivation cookie only works in this browser and for this domain; if you delete the cookies in this browser, you will have to click this link again):
Google Analytics disable

Google LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.

This website also uses Google Analytics for cross-device analysis of visitor flow data, which is done through a user ID. When a page is first called, the user is assigned a unique, permanent, and anonymous ID that is set across all devices. This allows for associating interaction data of a single user across different devices and sessions. The user ID does not contain personal data and does not transmit such data to Google.

You can object to the collection and storage of data through the user ID at any time. To do so, you must deactivate Google Analytics on all systems you use, such as another browser or on your mobile device.
You can do so by using the Google browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, on mobile browsers, you can click the following link to set a deactivation cookie, which prevents Google Analytics from collecting data on this website in the future:
Google Analytics disable

For more information on Universal Analytics, visit: https://support.google.com/analytics/answer/2838718?hl=en 

12) RETARGETING/REMARKETING/ADVERTISING - Facebook Custom Audience via Pixel Method

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If explicitly agreed, it can track the behavior of users after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising measures.

The collected data is anonymous to us, so no conclusions can be drawn about the user's identity. However, the data is stored and processed by Facebook, so a connection to the relevant user profile can be established, and Facebook can use the data for its own advertising purposes according to Facebook's data usage policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to serve ads on and off Facebook. To do so, a cookie can be stored on your computer. This processing only takes place with your explicit consent in accordance with Art. 6 (1) (a) GDPR.

Consent to use the Facebook Pixel can only be granted by users over the age of 13. If you are younger 

than 13, we ask that you obtain consent from your legal guardian.

Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.

To deactivate the use of cookies on your computer, you can set your internet browser to ensure no cookies are stored on your computer in the future, or that any already stored cookies are deleted. However, disabling all cookies may result in certain features of our website no longer being functional. You can also disable the use of cookies by external providers like Facebook on the following website of the Digital Advertising Alliance:
https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses the features of Google AdWords Remarketing to display ads for this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). To do this, Google sets a cookie in your device’s browser, which allows interest-based ads to be shown through a pseudonymized cookie ID, based on the pages you visit. The processing takes place based on our legitimate interest in optimal marketing of our website according to Art. 6 (1) (f) GDPR.

Further data processing only occurs if you have granted Google permission to link your internet and app browsing history with your Google account and to use information from your Google account to personalize the ads you see on the internet. In this case, Google will temporarily merge your personal data with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create audience lists.

You can permanently disable the setting of cookies for advertising preferences by downloading and installing the browser plugin available at the following link:
https://www.google.com/settings/ads/onweb/

For more information, visit the Digital Advertising Alliance website at www.aboutads.info to learn how to adjust your cookie settings. You can also set your browser to notify you about cookie settings and allow you to decide whether to accept cookies or exclude their acceptance for specific cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield agreement, ensuring compliance with the data protection level applicable in the EU.

For more information on advertising and Google’s privacy policy, visit:
https://www.google.com/policies/technologies/ads/

 

13) RIGHTS OF THE DATA SUBJECT

13.1 The applicable data protection legislation grants you comprehensive rights against the data controller concerning the processing of your personal data (right to information and intervention), which we will inform you about as follows:

  • Right to Information according to Art. 15 GDPR: You have the right to request information about the personal data we process, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of the right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if it has not been directly collected from you, the existence of automated decision-making, including profiling, and if applicable, meaningful information about the logic involved, the scope, and the intended impact of such processing on you, as well as your right to information about the safeguards according to Art. 46 GDPR, if your data is transferred to third countries.

  • Right to Rectification according to Art. 16 GDPR: You have the right to request the immediate correction of inaccurate or incomplete personal data stored by us.

  • Right to Erasure according to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not apply if processing is required, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

  • Right to Restriction of Processing according to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data while the accuracy of disputed data is being verified, if you object to the erasure of your data due to unlawful processing and instead request restriction of processing, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need them, after the purpose has been fulfilled, or if you have lodged an objection based on your particular situation, as long as it is not yet clear whether our legitimate grounds override yours.

  • Right to Information according to Art. 19 GDPR: If you have exercised the right to rectification, erasure, or restriction of processing, the controller is required to inform all recipients to whom the personal data has been disclosed about this rectification or erasure of the data or restriction of processing, unless this is impossible or involves disproportionate effort. You have the right to be informed about these recipients.

  • Right to Data Portability according to Art. 20 GDPR: You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format or to request that this data be transmitted to another controller, provided this is technically feasible.

  • Right to Withdraw Consent according to Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the case of withdrawal, we will immediately erase the relevant data unless further processing can be based on another legal ground without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before the withdrawal.

  • Right to Lodge a Complaint according to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority – without prejudice to other administrative or judicial remedies – in the member state of your habitual residence, your place of work, or the place of the alleged violation.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

14) DURATION OF STORAGE OF PERSONAL DATA

The duration of storage of personal data is based on the respective legal retention period (e.g., retention periods under commercial and tax law). After the retention period expires, the relevant data will routinely be erased, unless it is still needed to fulfill a contract or to initiate a contract, and/or we no longer have a legitimate interest in further storage.