Privacy Policy

1) Information about the collection of personal data and contact details of the controller

1.1 We are delighted that you have visited our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data is any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Novorelle Email: info@novorelle.com The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the “https://” in your browser line and the lock symbol.

2) Data collection when you visit our website

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Hosting

Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”) for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. for further processing on our behalf. In the event of data being transferred to Shopify Inc. in Canada, the European Commission's adequacy decision ensures an adequate level of data protection. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

Further processing on servers other than those mentioned above by Shopify will only take place within the scope specified below.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognized when you next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data and IP address values, to the extent specified for each cookie. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.

Some cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent being given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

When you contact us (e.g., via the contact form or email), personal data is collected. The data collected in the case of a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal storage obligations to the contrary.

6) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or when opening a customer account. The data collected can be seen in the respective input forms. You can delete your customer account at any time by sending a message to the above address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data in accordance with the law.

7) Use of customer data for direct marketing

7.1 Registration for our email newsletter

If you register for our email newsletter, we will send you regular information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of sending you the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named above. After you unsubscribe, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that is permitted by law and about which we inform you in this statement.

7.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with Section 7 (3) UWG, we are not required to obtain your separate consent for this. Data processing in this respect is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by notifying the controller named at the beginning. You will only incur the transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Newsletter dispatch via Omnisend

Our email newsletters are sent via the technical service provider Omnisend (Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom), to whom we pass on the data you provided when registering for the newsletter. This transfer is carried out in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g., email address) is stored on Omnisend's servers in the EU.

Omnisend uses this information to send and statistically evaluate the newsletters on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked on. Technical information is also collected (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal references are excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Furthermore, Omnisend may use this data itself in accordance with Art. 6 (1) lit. f GDPR on the basis of its own legitimate interest in the needs-based design and optimization of the service and for market research purposes, for example to determine the countries from which the recipients come. However, Omnisend does not use the data of our newsletter recipients to contact them itself or to pass it on to third parties.

We have concluded a data processing agreement with Omnisend, which obliges Omnisend to protect our customers' data and not to pass it on to third parties.

You can view Omnisend's privacy policy here: https://www.omnisend.com/privacy

8) Data processing for order processing

8.1 To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company responsible for delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you of this explicitly below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.2 In order to fulfill our contractual obligations to our customers, we work with external shipping partners. We will pass on your name, delivery address and, if necessary for delivery, your telephone number to a shipping partner selected by us exclusively for the purpose of delivering the goods in accordance with Art. 6 (1) lit. b GDPR.

8.3 Use of payment service providers (payment services)

- Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment will be processed via the “Apple Pay” function on your iOS, watchOS, or macOS device by debiting a payment card stored with “Apple Pay.” Apple Pay uses security features built into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code you have previously set and verify your identity using the “Face ID” or “Touch ID” feature on your device.

For the purpose of processing the payment, the information you provide during the ordering process, together with the information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for the purpose of executing the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment has been successful.

If personal data is processed during the transfers described above, it will be processed exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely prevents any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made using Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow payments on Mac.”

For more information about Apple Pay privacy, visit the following website: https://support.apple.com/de-de/HT203027

- Google Pay

If you choose the ‘Google Pay’ payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment will be processed via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with NFC functionality by debiting a payment card stored in Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay in excess of €25, you must first unlock your mobile device using the verification method you have set up (e.g., facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information you provide during the ordering process will be forwarded to Google along with the information about your order. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which is used to verify that the payment has been made. This transaction number does not contain any information about the actual payment details of your payment method stored with Google Pay, but is created and transmitted as a unique numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for the payment process. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.

If personal data is processed during the transfers described above, it will be processed exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 (1) lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

The Google Pay Terms of Service can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found at the following Internet address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

- Klarna

If you select a Klarna payment service, payment will be processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) will be forwarded to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision about the establishment, execution, or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractual payment processing.

Your personal data will be processed in accordance with the applicable data protection regulations and in accordance with the information provided in Klarna's privacy policy for data subjects based in Verenigd Koninkrijk https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

- PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we will pass on your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for the purpose of payment processing. The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

- Shopify Payments

We use the payment service provider “Shopify Payments,” 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank code, credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) lit. b GDPR. Your data will only be passed on to Stripe Payments Europe Ltd. for the purpose of payment processing and only to the extent necessary for this purpose. For more information on Shopify Payments' privacy policy, please visit the following website: https://www.shopify.com/legal/privacy.

Information on data protection at Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

- SOFORT

If you select the payment method “SOFORT,” payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b GDPR. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT's privacy policy at the following Internet address: https://www.klarna.com/sofort/datenschutz.

9) Contacting you for a review reminder

Review reminder by Loox

If you have given us your express consent during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will transfer your email address and, if applicable, other customer data collected previously to the review tool Loox, a service provided by Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel (“Loox”), so that it can send you a review reminder by email. You can withdraw your consent at any time by sending a message to the data controller or to the review platform.

The transfer of data to Loox in Israel is ensured by an adequacy decision of the European Commission.

We have concluded a data processing agreement with Loox, which obliges Loox to protect our customers' data and not to pass it on to third parties. This agreement can be viewed here: https://loox.io/legal/data_processing_addendum.pdf

More information on Loox's data protection can be found at https://loox.io/legal/privacy_policy_merchants.pdf

10) Online marketing

10.1 Facebook Pixel for creating custom audiences with extended data matching (with cookie consent tool)

Within our online offering, the so-called “Facebook Pixel” of the social network Facebook is used in extended data matching mode, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).

Based on your express consent, when you click on an advertisement placed by us on Facebook, Facebook Pixel adds an addition to the URL of our linked page. This URL parameter is then stored in the user's browser via a cookie, which is set by our linked page itself. In addition, this cookie collects specific customer data, such as the email address we collect on our website linked to the Facebook ad during processes such as purchase transactions, account logins, or registrations (extended data matching). The cookie is then read by Facebook Pixel and enables the data, including specific customer data, to be forwarded to Facebook.

With the help of the Facebook pixel with extended data matching, Facebook is able to precisely determine the visitors to our online offering as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel with extended data matching to display the Facebook ads we place only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel with extended data matching, we also want to ensure that our Facebook ads correspond to the potential interests of users and do not appear annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). Compared to the standard version of Facebook Pixel, the enhanced data matching feature helps us to better measure the effectiveness of our advertising campaigns by recording more attributed conversions.

All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook.

These processing operations are carried out exclusively with your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Consent to the use of the Facebook pixel may only be given by users who are over 16 years of age. If you are younger, we ask you to ask your legal guardians for permission.

The information generated by Facebook is usually transferred to a Facebook server and stored there, which may also involve transfer to Facebook Inc. servers in the US. You can withdraw your consent at any time with future effect. To exercise your right of withdrawal, remove the check mark next to the “Facebook Pixel” setting in the “Cookie Consent Tool” integrated into the website.

10.2 Use of Google Ads conversion tracking

This website uses the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your Internet browser under the keyword “user preferences.” You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 (1) lit. f GDPR. When using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

You can find further information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in available from Google at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be limited if you have disabled the use of cookies.

To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, deactivate this service in the “Cookie Consent Tool” provided on the website or, alternatively, follow the option described above to object.

11) Retargeting/Remarketing/Referral Advertising

Bing Ads (Microsoft Corporation)

This website uses the conversion tracking technology “Bing Ads” from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing advertisement. Cookies are small text files that are stored on your device. These cookies expire after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in the process, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective marketing.

The information collected using the conversion cookie is used to compile conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad. This allows us to determine the total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this by deactivating the Bing Ads conversion tracking cookie in your Internet browser under user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the EU consumer opt-out page http://www.youronlinechoices.com/de/praferenzmanagement/

to check whether Microsoft advertising cookies are set in your browser and to disable them.

Further information about Microsoft Bing Ads' privacy policy can be found at the following Internet address: https://privacy.microsoft.com/de-de/privacystatement

To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for objecting set out above.

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, which allows us to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie on your device's browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Any further processing of data only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize the ads you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked to Google Analytics data in order to form target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in available from Google at the following link:

https://www.google.com/settings/ads/onweb/

Further information and the privacy policy regarding advertising and Google can be found here:

https://www.google.com/policies/technologies/ads/

12) Tools and other information

Cookie consent tool based on Usercentrics technology

This website uses a cookie consent tool with technology from Usercentrics GmbH, Rosental 4, 80331 Munich (hereinafter “Usercentrics”) to obtain effective user consent for cookies and cookie-based applications that require consent.

By integrating a corresponding JavaScript code, users are shown a banner when they visit the website, in which they can give their consent to certain cookies and/or cookie-based applications by ticking a box. The tool blocks all cookies requiring consent until the respective user grants the appropriate consent by ticking the box. This ensures that such cookies are only set on the user's device if consent has been given.

In order for the cookie consent tool to be able to clearly assign page views to individual users and to individually record, log, and store the consent settings made by the user for the duration of a session, certain user information (including the IP address) is collected by the cookie consent tool when our website is accessed, transmitted to Usercentrics' servers, and stored there.

This data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

A further legal basis for the data processing described is Art. 6 (1) lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

We have entered into a data processing agreement with Usercentrics, whereby we oblige Usercentrics to protect the data of visitors to our website and not to pass it on to third parties.

Further information on the use of data by Usercentrics can be found in the Usercentrics privacy policy at https://usercentrics.com/privacy-policy/.

13) Rights of the data subject

13.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and intended effects of such processing, as well as your right to be informed of the guarantees provided in accordance with Art. 46 GDPR when your data is transferred to third countries;
Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain the rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us without undue delay;
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not apply in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data is being verified if you refuse to have your data deleted due to unlawful data processing and instead request the restriction of the processing of your data if you need your data to assert, exercise or defend legal claims, after we no longer need this data for the purpose for which it was collected or if you have objected to its processing on grounds relating to your particular situation, pending verification of whether our legitimate grounds override your interests;
Right to notification pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided that this is technically feasible.
Right to withdraw consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing is based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

13.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. FURTHER PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and, if applicable, the respective statutory retention period (e.g., commercial and tax retention periods).

When personal data is processed on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR, this data will be stored until the data subject revokes their consent.

If there are statutory retention periods for data that is processed within the scope of legal obligations or obligations similar to legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer necessary for the fulfillment of the contract or for the initiation of a contract and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Company Name: Novorelle
Address: 12 Farwig Lane, BR1 3RB Bromley ,
United Kingdom
Chamber of Commerce Number: 598745
Email: info@novorelle.com
Phone Number: +31616070204