Privacy Policy

DATA PROTECTION

INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

  1. GENERAL INFORMATION

1.1 We are delighted that you are visiting the Bea & Jo Woodstock website and thank you for your interest. Below, we inform you about the handling of personal data when using our website. Personal data includes all information that can be used to identify you directly or indirectly.

1.2 The controller responsible for the processing of personal data on this website, within the meaning of the General Data Protection Regulation (GDPR), is Bea & Jo Woodstock.

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content, such as orders and inquiries. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser.

  1. DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for informational purposes only, without registering or providing information in any other way, we only collect the data that your browser sends to our server.

When you visit our website, we may collect the following technical information that is necessary to display and operate the website:

The website visited

Date and time of access

Amount of data sent in bytes

Source or reference from which you accessed the page

Browser used

Operating system used

IP address used, where applicable in anonymized or shortened form

Processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in maintaining the security, stability and functionality of our website.

The data is not used for other purposes unless required to investigate suspected misuse, security incidents or unlawful activity.

  1. COOKIES

To make your visit to our website attractive and to enable certain functions, we use cookies and similar technologies.

Cookies are small text files that are stored on your device. Some cookies are deleted when you close your browser. These are known as session cookies. Other cookies remain on your device for a specified period and may allow us or our service providers to recognize your browser during a later visit.

Cookies may be used for purposes such as remembering your preferences, maintaining the contents of your shopping cart, processing orders, improving website functionality and analyzing website usage.

Where cookies process personal data, the legal basis may be Article 6(1)(b) of the GDPR where the processing is necessary for the performance of a contract, Article 6(1)(f) of the GDPR where we rely on a legitimate interest, or Article 6(1)(a) of the GDPR where your consent is required.

We may also work with advertising and technology partners who may use cookies or similar technologies on our website. Where consent is legally required, these technologies will only be used after you have provided the necessary consent.

You can configure your browser to notify you when cookies are being placed on your device and decide whether to accept them. You can also delete existing cookies or disable cookies through your browser settings.

Please note that disabling certain cookies may limit some functions of the website, including parts of the shopping and checkout process.

  1. CONTACTING US

When you contact Bea & Jo Woodstock, for example through a contact form or email, we may collect personal data.

The specific information collected depends on the information you provide through the relevant contact method.

We use this information solely to respond to your request and for the associated technical administration.

The legal basis for processing this data is generally Article 6(1)(f) of the GDPR based on our legitimate interest in responding to customer inquiries.

If your inquiry relates to the conclusion or performance of a contract, Article 6(1)(b) of the GDPR may also apply.

Your information will be deleted once your request has been fully processed, unless legal obligations require us to retain the information for a longer period.

  1. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

In accordance with Article 6(1)(b) of the GDPR, personal data is collected and processed when you provide it to us for the performance of a contract or to create a customer account.

The specific information collected depends on the information you provide through the relevant forms.

We use the information you provide to process and fulfill your orders, provide customer support and perform our contractual obligations.

Once the contract has been fully performed or your customer account has been deleted, your information may continue to be stored where required for tax, accounting or other legal purposes.

Applicable statutory retention periods will be observed. After these periods expire, the relevant data will be deleted unless further processing is legally permitted or required.

  1. USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Registration for our email newsletter

If you subscribe to the Bea & Jo Woodstock email newsletter, we may regularly send you information about our products, services and offers.

The mandatory information required to send the newsletter is your email address. Any additional information you provide is voluntary.

Where required, we use a double opt in procedure. This means that after subscribing, you receive a confirmation email and must confirm your subscription before receiving marketing emails.

By confirming your subscription, you provide consent for the processing of your personal data for newsletter purposes in accordance with Article 6(1)(a) of the GDPR.

We may store information such as your email address, IP address and the date and time of registration to document your consent and prevent misuse.

You can withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting Bea & Jo Woodstock.

After unsubscribing, your email address will no longer be used for newsletter marketing unless another legal basis permits continued processing.

6.2 Sending email marketing to existing customers

If you have provided your email address to Bea & Jo Woodstock in connection with a purchase, we may send you information about similar products or services where this is permitted under applicable law.

The legal basis for such processing may be our legitimate interest in direct marketing under Article 6(1)(f) of the GDPR.

You can object to the use of your email address for direct marketing at any time.

Each marketing email will provide an appropriate method for unsubscribing.

After receiving your objection, we will stop using your email address for direct marketing purposes, unless another legal basis permits such processing.

  1. DATA PROCESSING FOR ORDER PROCESSING

7.1 The personal data collected from you is processed as necessary to fulfill your order.

Where required, we may share relevant information with delivery and logistics providers so that your order can be delivered to you.

Your payment information may also be processed by the payment provider you select during checkout.

Only the information necessary for the relevant payment or delivery process will be shared.

The legal basis for processing is Article 6(1)(b) of the GDPR where the processing is necessary for the performance of the contract.

7.2 Payment service providers

Depending on the payment methods available at checkout, payments may be processed by third party payment providers such as PayPal or other payment service providers.

When you select a payment method provided by a third party, the payment provider may process personal and payment information in accordance with its own privacy policy.

The information shared with the payment provider is limited to what is necessary to process the payment, prevent fraud and complete the transaction.

For further information, please refer to the privacy policy of the payment provider selected during checkout.

  1. CONTACT FOR REVIEW REMINDERS

If you have expressly consented during or after your order, we may use your email address to send you a one time reminder asking you to review your purchase through the review system used by Bea & Jo Woodstock.

The legal basis for this processing is Article 6(1)(a) of the GDPR.

You may withdraw your consent at any time by contacting Bea & Jo Woodstock.

  1. USE OF SOCIAL MEDIA

Our website may contain links to social media platforms such as Facebook and Instagram.

For privacy reasons, social media content may be provided through links or other technical solutions designed to avoid an automatic connection to the respective social media provider when you first visit our website.

When you click on a social media link, you may be redirected to the relevant platform.

The social media provider may then process personal data in accordance with its own privacy policy.

Bea & Jo Woodstock does not control the data processing carried out by external social media platforms.

For information about how your data is processed by a particular social media provider, please consult that provider's privacy policy.

  1. ONLINE MARKETING

10.1 Google advertising services

Where Google advertising technologies are used on the Bea & Jo Woodstock website, these technologies may use cookies or similar technologies to measure advertising performance, display relevant advertising and understand interactions with advertisements.

Where required by law, these technologies are only activated after you have provided the necessary consent.

Google may process information such as browser information, device information, website interactions and advertising identifiers.

The processing may include measuring conversions, such as whether a visitor who interacted with an advertisement subsequently completed a purchase.

You can manage your advertising and cookie preferences through your browser settings and the relevant Google privacy and advertising controls.

10.2 Google Ads conversion tracking

Where Google Ads conversion tracking is used, cookies or similar technologies may be used to determine whether visitors have interacted with an advertisement before visiting or purchasing from the website.

The information is used to measure the effectiveness of advertising campaigns and improve our marketing activities.

Where consent is required, this processing will only take place after the necessary consent has been provided.

  1. WEB ANALYTICS

Where analytics services such as Google Analytics are used on the Bea & Jo Woodstock website, these services may collect information about how visitors use the website.

This information may include pages visited, time spent on the website, browser information, device information, approximate location information and interactions with the website.

Analytics data is used to understand website performance, improve the customer experience and evaluate marketing activities.

Where required by applicable law, analytics technologies will only be used after the necessary consent has been obtained.

You can manage or withdraw your cookie consent through the cookie settings available on the website or through your browser settings.

  1. RETARGETING AND REMARKETING

Where retargeting or remarketing technologies are used, these technologies may allow advertising providers to recognize that a visitor has previously interacted with the Bea & Jo Woodstock website.

This may allow us to show relevant advertisements on external websites or platforms.

Such technologies may include advertising pixels, cookies and similar tracking technologies.

Where consent is required, these technologies will only be used after you have provided the necessary consent.

You can manage advertising preferences and disable certain forms of personalized advertising through your browser settings and the relevant settings provided by advertising platforms.

  1. RIGHTS OF THE DATA SUBJECT

13.1 Under the GDPR, you have several rights regarding the processing of your personal data.

Right of access according to Article 15 GDPR

You have the right to request information about whether we process your personal data and, where applicable, to receive information about the data we process, the purposes of processing, the categories of personal data, recipients, storage periods and other information required under the GDPR.

Right to rectification according to Article 16 GDPR

You have the right to request the correction of inaccurate personal data or the completion of incomplete personal data.

Right to erasure according to Article 17 GDPR

You may have the right to request the deletion of your personal data where the legal requirements for erasure are met.

This right is not absolute. Legal obligations or other lawful grounds may require us to retain certain information.

Right to restriction of processing according to Article 18 GDPR

Under certain circumstances, you have the right to request that we restrict the processing of your personal data.

Right to data portability according to Article 20 GDPR

Where applicable, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine readable format and to request that the data be transmitted to another controller where technically feasible.

Right to withdraw consent according to Article 7(3) GDPR

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint according to Article 77 GDPR

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

13.2 RIGHT TO OBJECT

Where we process your personal data based on a legitimate interest under Article 6(1)(f) of the GDPR, you may have the right to object to such processing for reasons arising from your particular situation.

If you object, we will stop processing the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

If you object to direct marketing, we will stop processing your personal data for those purposes.

  1. DURATION OF STORAGE OF PERSONAL DATA

The duration for which personal data is stored depends on the purpose for which it was collected and on applicable legal retention requirements.

Personal data related to orders, payments and transactions may need to be retained for tax, accounting and other legal purposes.

Once the applicable retention periods have expired, the relevant data will be deleted unless continued storage is legally required or permitted.

Bea & Jo Woodstock regularly reviews stored personal data and deletes information that is no longer required for the relevant purpose.