Privacy Policy
DATA PROTECTION DECLARATION
- INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when you use our website. Personal data is data that allows us to identify you directly or indirectly.
1.2 The controller of the data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is Hollis Toronto. The controller of personal data is the natural or legal person who, individually or jointly with others, determines the purposes and means for the processing of personal data.
1.3 For security reasons and to facilitate the transmission of personal data and other sensitive content (e.g. orders or data requests to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser bar.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser sends to our server (so-called “server log files”). When you visit the website, we collect the following data, which is technically necessary to display the website to you:
- Website visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable, in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 letter f of the GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not transferred or otherwise used. However, we reserve the right to review the server log files if there are concrete indications of unlawful use.
3) COOKIES
To make visiting our website attractive and to enable the use of certain functions, we use cookies on several pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and allow us or our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, we collect and process certain user information on an individual basis, such as browser data, location and IP addresses. Persistent cookies are automatically deleted after a certain period, which varies depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. to remember the contents of a virtual shopping cart on a subsequent visit to the website). Insofar as the individual cookies we implement also process personal data, the processing is carried out in accordance with Art. 6 para. 1 letter b of the GDPR for the performance of the contract or in accordance with Art. 6 para. 1 letter f of the GDPR to protect our legitimate interests. Our legitimate interest is to ensure optimal functionality of the website and a customer-friendly and efficient design of the website visit.
We may collaborate with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies will also be stored on your hard drive when you visit our website (third-party cookies). If we cooperate with the aforementioned advertising partners, you will be informed individually in the following sections about the use of these cookies and the extent of the data collected in each case. You can set your browser to notify you when cookies are placed and decide individually whether to accept cookies or to exclude the acceptance of cookies in certain cases or in general.
Each browser handles cookie settings differently. This is described in the help menu of each browser, which explains how to change the cookie settings. You can find this information for your browser in the following links:
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Safari: https://support.apple.com/kb/ph21411?locale=de_DE
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
If you do not accept cookies, the functionality of our website may be limited.
4) CONTACT US
When you contact us (e.g. via a contact form or e-mail), we collect personal data. Which data is collected in the case of a contact form, you can see in the corresponding form. This data is used exclusively to respond to your inquiry or to establish contact and related technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 letter f of the GDPR. If the purpose of your contact is the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 letter b of the GDPR. Your data will be deleted after the final processing of your request; this will occur when, depending on the circumstances, the matter has been definitively clarified and provided that there are no legal retention obligations to the contrary.
5) PROCESSING OF DATA WHEN OPENING A CUSTOMER ACCOUNT AND FOR PROCESSING THE CONTRACT
In accordance with Art. 6 para. 1 letter b of the GDPR, personal data is collected and processed when you provide it for the execution of a contract or when opening a customer account. Which data is collected can be seen in the corresponding forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the responsible person. We retain and use the data you have provided for the processing of the contract. After complete execution of the contract or deletion of your customer account, your data will be blocked in accordance with the tax and commercial retention periods according to tax and commercial law and will be deleted after these periods have expired, unless you have given your explicit consent to further use of your data or there is a legal use of your data or if we reserve the right to further use your data, about which we will inform you at a later date.
6) USE OF YOUR DATA FOR DIRECT ADVERTISING
6.1 Subscribing to our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory data for sending the newsletter is your e-mail address. Providing other data is optional and is used to address you in a personalized way. We use the double opt-in procedure to send you the newsletter. This means that we will only send you a newsletter by e-mail if you have explicitly confirmed that you wish to receive it. We will then send you a confirmation e-mail in which we ask you to confirm that you wish to receive future newsletters by clicking on a corresponding link.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 letter a of the GDPR. When you subscribe to the newsletter, we store your IP address provided by your Internet Service Provider (ISP), as well as the date and time of the subscription, to prevent abuse of your e-mail address. The data we collect when you subscribe to the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe at any time from the newsletter by using the link in the newsletter or by sending a corresponding message to the responsible person mentioned at the beginning. Once you have unsubscribed, your e-mail address will be removed immediately from the newsletter distribution list, unless you have given your explicit consent to further use of your data or if we reserve the right to use your data for other legally permissible purposes, about which we inform you in this statement.
6.2 Sending email newsletters to existing customers.
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you periodic e-mail offers on goods or services similar to those you have already purchased from us. For this, we do not require your separate consent. Data processing is only carried out on the basis of our legitimate interest in personalized direct mailings in accordance with Art. 6 para. 1 letter f of the GDPR. If at any time you object to the use of your e-mail address for this purpose, we will not send any further e-mails. You have the right to object at any time and with future effect to the use of your e-mail address for the aforementioned advertising purposes by informing the responsible person indicated at the beginning. For this purpose, you will only be charged the basic fee. Upon receipt of your objection, we will cease the use of your e-mail address for advertising purposes immediately.
7) DATA TRANSMISSION FOR ORDER PROCESSING
7.1 The personal data we collect is transmitted to the shipping company responsible for the delivery, insofar as this is necessary for the delivery of the products. Your payment data is transmitted to the relevant financial institution in the context of payment processing, insofar as this is necessary to process the payment. If payment service providers are used, you will be explicitly informed about this. The legal basis for the data transfer is Art. 6 para. 1 letter b GDPR.
7.2 Use of payment service providers
-
PayPal
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or, if available, “Buy Now” or “Pay by installments” via PayPal, we transfer your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). The transfer is made in accordance with Art. 6, para. 1, letter b of the GDPR and only to the extent necessary to process the payment. PayPal reserves the right to perform a credit check for payment methods by credit card through PayPal, direct debit through PayPal or, if available, “Buy Now” or “Installment Payment” through PayPal. For this purpose, your payment data may, if necessary, be transmitted to credit bureaus in accordance with Art. 6 para. 1 letter f of the GDPR, based on PayPal's legitimate interest in establishing your creditworthiness. PayPal uses the result of the creditworthiness check with respect to the statistical probability of non-payment to make decisions on the delivery of the respective payment method. The creditworthiness check may include probability values (called score values). Insofar as the scoring values form part of the result of the creditworthiness assessment, they are based on a scientifically recognized mathematical and statistical process. The calculation of the scoring values includes, but is not limited to, address data. For more information on data protection, including the credit bureaus used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You may object at any time to this processing of your data by sending a message to PayPal. However, PayPal reserves the right to further process your personal data if this is necessary for the contractual processing of payments. -
SOFORT
When you select the payment method “SOFORT”, the payment processing is performed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transfer the data you provided during the order process together with the information about your order in accordance with Art. 6 para. 1 letter b of the GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data takes place exclusively for payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find more information about SOFORT's privacy policy at the following link: https://www.klarna.com/sofort/datenschutz.
8) CONTACT FOR REVIEW REMINDER
Self-review reminder (without sending a customer review system)
We use your email address to remind you to leave a review of your order in the review system we use, provided that you have given us your explicit consent during or after your order, in accordance with art. 6, paragraph 1, letter a of the GDPR.
You may withdraw your consent at any time by sending a message to the data controller.
9) USE OF SOCIAL NETWORKS: SOCIAL PLUGINS
9.1 Facebook plugins with the Shariff solution
Specific additional customs fees and/or import duties are not included in the price and are the responsibility of the customer.
Our website uses so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
To protect your data during your visit to our website, these buttons are not available as unrestricted plugins, but are only integrated into the page via an HTML link. This form of integration ensures that when you open a page of our website containing these buttons, no connection has yet been established with the Facebook servers. When you click on the button, a new browser window opens and takes you to the Facebook page, where you can interact with the plugins there (possibly after entering your login data).
US-based Facebook Inc. is certified for the EU-US Privacy Shield, which ensures compliance with the level of privacy protection in the EU. For the purpose and scope of data collection and its further processing and use by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy statement: https://www.facebook.com/policy.php.
9.2 Google+ plugins as a Shariff solution
Our website uses so-called social plugins (“plugins”) of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
To protect your data during your visit to our website, these buttons are not available indefinitely as plugins, but only integrated into the page via an HTML link. This form of integration ensures that when you open a page on our website containing these buttons, no connection has yet been established with the Google+ servers. Clicking the button opens a new browser window and opens the Google+ page where you can interact with the plugins present there (possibly after entering your login data).
Google LLC, based in the United States, is certified for the EU-US Privacy Shield, which ensures compliance with the level of privacy protection in the EU.
For the purpose and scope of data collection and further processing and use by Google, as well as your privacy rights and settings, please refer to Google's privacy policy: https://www.google.com/intl/de/policies/privacy/.
9.3 Instagram Plugin as a Shariff Solution
Our website uses so-called social plugins (“plugins”) of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).
To protect your data during your visit to our website, these buttons are not available indefinitely as plugins, but are only integrated into the page via an HTML link. This type of integration ensures that when you open a page on our website containing these buttons, no connection has yet been established with Instagram's servers. When you click on the button, a new browser window opens and you are taken to the Instagram page where (possibly after entering your login details) you can interact with the plugins available there.
US-based Instagram LLC. is certified for the EU-US Privacy Shield, which ensures compliance with the level of privacy protection in the EU.
To learn about the purpose and scope of data collection and its further processing and use by Instagram, as well as your privacy rights and settings, please refer to Instagram's privacy statement: https://help.instagram.com/155833707900388/.
10) ONLINE MARKETING
10.1 DoubleClick de Google
This website uses the online marketing tool DoubleClick by Google from the operator Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).
DoubleClick uses cookies to show relevant ads to users, improve reporting on campaign performance or prevent a user from seeing the same ads multiple times. Google collects information through an ID cookie about the ads shown in each browser and can thus prevent ads from being shown multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Section 6(1) of the AVG.
In addition, DoubleClick may use cookie IDs to record so-called conversions in connection with ad requests. This occurs, for example, when a user sees a DoubleClick ad and subsequently visits the website of the same advertiser.
When using the marketing tools, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further processing of the data collected by Google using these tools, and we inform you accordingly: By using DoubleClick, Google receives information that you have visited the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can link the visit to your account. Even if you are not registered with Google or are not logged in, it is possible for the provider to find out and store your IP address.
This website uses Google AdWords conversion tracking. This website uses the online advertising program “Google AdWords” and within Google AdWords also the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to draw attention to our attractive offers through advertisements (so-called Google AdWords) on external websites. Using data from advertising campaigns, we can measure the success of individual advertising campaigns. Our goal is to show you advertisements that are of interest to you, to make our website more attractive to you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is placed when a user clicks on an AdWords ad served by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and do not serve for personal identification. If the user visits If you click on certain pages of this website and the cookie has not yet expired, Google and we can know that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a unique cookie. Therefore, cookies cannot be tracked across AdWords customers' websites. The information collected through the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. Customers are shown the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can block it by deactivating the Google conversion tracking cookie via your Internet browser in your user settings. In this way, you will not be included in the conversion tracking statistics. We use Google AdWords due to our legitimate interest in targeted advertising in accordance with Section 6(1)(f) of the AVG.
11) WEB ANALYSIS SERVICES
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address, which is shortened) is usually transmitted to and stored on a Google server in the USA.
This website exclusively uses Google Analytics with the “_anonymizeIp()” extension, which ensures that IP addresses are anonymized by truncation, preventing direct personal identification. Through this extension, your IP address is first shortened by Google within EU member states or other contracting states of the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. In such exceptional cases, the processing is carried out based on our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes, in accordance with Article 6(1)(f) of the GDPR.
Google will use this information on our behalf to track your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being stored by selecting the appropriate settings in your browser software; however, please note that in this case, you may not be able to use all functions of this website to their full extent. Additionally, you can prevent the data generated by the cookie related to your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing the browser add-on available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.
Instead of using the browser add-on or on mobile browsers, you can click the following link to set an opt-out cookie that prevents future data collection by Google Analytics on this website (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics.
12) Retargeting / Remarketing / Recommendation Ads
Facebook Custom Audience via Pixel Processes
This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, this allows tracking of user behavior after they have viewed or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns.
The data collected is anonymous to us and therefore does not allow us to identify users. However, the data is stored and processed by Facebook, which enables a link to the corresponding user profile, and Facebook may use the data for its own advertising purposes in accordance with Facebook’s privacy policy (https://www.facebook.com/about/privacy/).
You can authorize Facebook and its partners to display ads both on and off Facebook. For this purpose, a cookie may be stored on your computer. This processing only takes place with explicit consent in accordance with Article 6(1)(a) of the GDPR.
Consent for the use of the Facebook pixel can only be given by users over the age of 13. If you are younger, we ask that you obtain consent from your legal guardians.
Facebook Inc., based in the U.S., is certified under the EU-U.S. Privacy Shield, ensuring compliance with the applicable data protection standards in the EU.
If you wish to disable the use of cookies on your computer, you can set your Internet browser to prevent cookies from being installed on your computer in the future or to delete cookies that have already been installed. However, disabling all cookies may cause some features of our websites to stop working. You can also deactivate the use of cookies from third parties, such as Facebook, via the following Digital Advertising Alliance website: https://www.aboutads.info/choices/.
Google AdWords Remarketing
Our website uses Google AdWords remarketing functions, which we use to advertise this website in Google search results and on external websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google places a cookie on your device's browser, which automatically uses a pseudonymous cookie ID and enables interest-based advertising based on the pages you visit. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.
Further processing of the data only takes place if you have given your consent to link your web and app browsing history to your Google account and to use your Google account data to personalize the ads you see online. In this case, when you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target groups for remarketing on different devices. For this purpose, your personal data is temporarily linked with Google Analytics data to form target groups.
You can permanently deactivate the cookie settings for advertising preferences by downloading and installing the browser add-on available at the following link: https://www.google.com/settings/ads/onweb/.
In addition, you can find information about cookie settings and adjust your cookie settings through the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to inform you about the installation of cookies and decide individually about their acceptance or exclude the acceptance of cookies in specific cases or in general. If you do not accept cookies, this may limit the functionality of our website.
Google LLC, based in the USA, is certified by the EU-US Privacy Shield, which ensures that it complies with the level of data protection applicable in the EU.
For more information and privacy policy regarding ads and Google, please visit this link:
https://www.google.com/policies/technologies/ads/
13) RIGHTS OF THE INTERESTED PARTY
13.1 Current data protection legislation grants you extensive rights as a data subject vis-à-vis the data controller (rights of information and intervention), which we explain below:
Information rights according to Art. 15 AVG: In particular, you have the right to receive information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of the right of rectification, erasure, restriction of processing the existence of the right of rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, if not collected by us from you, the existence of automated decision-making, including profiling and potentially meaningful information about the logic involved and the expected consequences and effects of such processing, and your right to receive information about what safeguards under Art. 46 AVG apply to the transfer of your data to third countries.
Right of rectification according to Art. 16 GDPR: You have the right to the immediate rectification of incorrect data about you and/or the supplementation of incomplete data stored by us.
Right of erasure according to art. 17 GDPR: You have the right to request the erasure of your personal data, provided that the conditions of art. 17, paragraph 1 of the GDPR are met. However, this right does not exist if the processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
Right to restriction of processing according to art. 18 GDPR: You have the right to request the limitation of the processing of your personal data while the accuracy of your data is contested, if you object to the deletion of your data due to unlawful processing and instead request the limitation of its processing, if you need your data for the establishment, exercise or defense of legal claims, once we no longer need it for the purpose for which it was collected, or if you have raised objections on grounds relating to your particular situation, while it is unclear whether our legitimate interests prevail over those mentioned above.
Right to information according to Art. 19 AVG: If you have a right to rectification, deletion or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data in question have been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or requires an excessive effort. You have the right to be informed of these recipients.
Right to data portability according to Art. 20 AVG: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transfer to another data controller, insofar as this is technically possible;
Right to withdraw consent according to Art. 7(3) AVG: You have the right to withdraw your consent to data processing with future effect at any time. In the event of withdrawal, we will delete the data in question immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal;
Right to complain according to Art. 77 AVG: If you believe that the processing of your personal data has violated the AVG, you have the right - without prejudice to other administrative or judicial remedies - to lodge a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged violation took place.
13.2 RIGHT TO OBJECT
If we process your personal data on the basis of our overriding legitimate interests within the framework of the balancing of interests, you have the right at ANY TIME to object to such processing for reasons arising from your particular situation, with future effect.
If you exercise your right to object, we will stop processing the data in question. However, the processing may continue if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right at any time to object to the processing of your personal data for such marketing purposes. You may exercise your right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
14) Duration of storage of personal data
The retention periods for personal data are determined in accordance with the respective statutory retention periods (e.g. commercial and fiscal deadlines). After the expiration of this period, the relevant data will be routinely deleted, unless it is no longer required for the performance or initiation of a contract, and/or if there is no legitimate interest on our part to continue to retain it.