Privacy Policy
1. INTRODUCTION
Thank you for visiting Ivoruxa. Protecting your personal data is important to us. This Privacy Policy explains which personal data we collect when you visit our website or place an order, why we collect it, how we use it and what rights you have. We process your data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other applicable data protection laws.
2. CONTROLLER
The controller responsible for processing your personal data on this website is:
Nayori UG (haftungsbeschränkt)
Trading as Ivoruxa
Finkenau 20
22081 Hamburg
Germany
Managing Director: Anil Kepceoglu
Commercial register: Amtsgericht Hamburg, HRB 199327
Email: hey@ivoruxa.com
Phone: +4915733020678
If you have any questions about this Privacy Policy or about how we handle your data, you can contact us at any time using the details above.
3. WHAT PERSONAL DATA WE COLLECT
Depending on how you use our website, we may collect the following categories of personal data:
Contact and identity data, such as your name, email address, phone number, billing address and delivery address.
Order data, such as the products you purchased, order numbers, order dates, prices, shipping option and delivery status.
Payment data, such as the payment method you chose and the status of your payment. Your full card or bank details are processed directly by our payment service providers and are not stored by us.
Account data, if you create a customer account, such as your login details and order history.
Communication data, such as the content of emails or messages you send us and our replies.
Technical data, such as your IP address, browser type and version, device type, operating system, the pages you visit, the date and time of your visit and the website that referred you to us.
Marketing data, such as whether you have subscribed to our newsletter and how you interact with our emails.
We do not intentionally collect special categories of personal data, such as information about health, religion or political opinions.
4. HOW WE COLLECT YOUR DATA
We collect personal data when you provide it to us directly, for example when you place an order, create an account, subscribe to our newsletter or contact our customer service.
We also collect certain technical data automatically when you visit our website, through server log files and, where you have given your consent, through cookies and similar technologies.
5. PURPOSES AND LEGAL BASES OF PROCESSING
We only process your personal data where we have a legal basis to do so. We use your data for the following purposes:
Processing your order. We use your contact, order and payment data to process your purchase, deliver your products, send you order and shipping confirmations, handle returns and refunds and provide customer service. The legal basis is the performance of a contract with you or the steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
Customer account. If you create an account, we process your data to manage your account and show you your order history. The legal basis is Article 6(1)(b) GDPR.
Customer enquiries. When you contact us by email or phone, we process your data to answer your request. Where your enquiry relates to an order or a contract, the legal basis is Article 6(1)(b) GDPR. In all other cases, it is our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
Operating and securing our website. We process technical data to provide our website, ensure it works properly, protect it against attacks and detect fraud. The legal basis is our legitimate interest in a secure and functioning online store (Article 6(1)(f) GDPR).
Newsletter. If you subscribe to our newsletter, we use your email address to send you news, offers and inspiration from Ivoruxa. The legal basis is your consent (Article 6(1)(a) GDPR). We use a double opt in procedure, which means you will receive an email asking you to confirm your subscription. You can unsubscribe at any time using the link in every newsletter or by emailing us.
Analytics and marketing. Where you have given your consent through our cookie banner, we use cookies and similar technologies to understand how visitors use our website, to improve our store and to show you relevant advertising. The legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG).
Legal obligations. We are required by commercial and tax law to keep certain records, such as invoices and order documents. The legal basis is compliance with a legal obligation (Article 6(1)(c) GDPR).
6. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies. Cookies are small text files that are stored on your device when you visit a website.
Strictly necessary cookies are required for the website to function, for example to remember the contents of your shopping basket, keep you logged in and complete the checkout process securely. These cookies are set on the basis of Section 25(2) TDDDG and our legitimate interest (Article 6(1)(f) GDPR) and do not require your consent.
Preference, analytics and marketing cookies are only set if you have given your consent through our cookie banner. You can withdraw or change your consent at any time through the cookie settings on our website. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
You can also block or delete cookies in your browser settings. Please note that if you block all cookies, some parts of our website may no longer work properly.
7. WHO WE SHARE YOUR DATA WITH
We only share your personal data where this is necessary for the purposes described above, where you have consented or where we are legally required to do so. We never sell your personal data.
Your data may be shared with the following categories of recipients:
Shipping carriers and fulfilment partners, who receive your name, delivery address and, where needed for delivery notifications, your email address or phone number. Our orders are shipped from warehouses in Germany and France.
Payment service providers, who process your payment securely on our behalf.
Our online shop platform and hosting provider, which operates the technical infrastructure of our online store.
Email and newsletter service providers, which help us send order confirmations and, if you have subscribed, our newsletter.
Analytics and advertising providers, but only if you have consented to the relevant cookies.
IT, security and customer service providers who support us in running our business.
Tax advisors, accountants and legal advisors, where required.
Public authorities, courts or law enforcement agencies, where we are legally obliged to disclose data.
Where service providers process data on our behalf, we have concluded data processing agreements with them in accordance with Article 28 GDPR, and they may only use your data according to our instructions.
8. TRANSFERS OUTSIDE THE EUROPEAN UNION
Some of our service providers may be located outside the European Union or the European Economic Area, or may transfer data to such countries. In these cases, we make sure that an adequate level of data protection is in place, for example through an adequacy decision of the European Commission or through the EU Standard Contractual Clauses.
9. HOW LONG WE KEEP YOUR DATA
We keep your personal data only for as long as necessary for the purposes for which it was collected.
Order and invoice data is kept for the periods required by German commercial and tax law, which is generally up to ten years.
Account data is kept until you delete your account or ask us to delete it, unless we are required to keep it for legal reasons.
Newsletter data is kept until you unsubscribe.
Customer service communication is generally deleted once your enquiry has been fully resolved, unless it relates to an order and must be kept for legal reasons.
Server log files are deleted after a short period, unless they are needed to investigate a security incident.
10. YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
The right of access to the personal data we hold about you (Article 15 GDPR).
The right to have inaccurate data corrected (Article 16 GDPR).
The right to have your data deleted, where the legal requirements are met (Article 17 GDPR).
The right to restrict the processing of your data (Article 18 GDPR).
The right to data portability, meaning to receive your data in a structured, commonly used and machine readable format (Article 20 GDPR).
The right to withdraw your consent at any time with effect for the future (Article 7(3) GDPR).
Right to object
Where we process your data on the basis of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Article 21 GDPR). If you object to the use of your data for direct marketing, we will stop using it for this purpose immediately.
To exercise any of these rights, simply send us an email at hey@ivoruxa.com.
Right to lodge a complaint
You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig Erhard Straße 22
20459 Hamburg
Germany
11. DATA SECURITY
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Our website uses SSL/TLS encryption, which you can recognise by the lock symbol in your browser's address bar.
12. CHILDREN
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will delete it.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our services or in the law. The current version is always available on this page.
14. CONTACT
If you have any questions about privacy or this policy, please contact us:
Ivoruxa
Nayori UG (haftungsbeschränkt)
Finkenau 20
22081 Hamburg
Germany
Email: hey@ivoruxa.com
Phone: +4915733020678