Data Protection

Privacy Policy & Data Protection

Audrey London

Last updated: [add current date if desired]

1. Information About the Collection of Personal Data and the Data Controller

1.1 General Information

We are pleased that you are visiting our website and thank you for your interest in Audrey London. Protecting your personal data is very important to us. This Privacy Policy explains how we collect, process, and use your personal data when you visit or use our website.

Personal data means any information that can be used to identify you personally.

1.2 Data Controller

The data controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Audrey London
📧 Email: info@audrey-london.com

The data controller is the natural or legal person who determines the purposes and means of processing personal data.

1.3 Data Security

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries. You can recognise an encrypted connection by “https://” in your browser address bar and the lock icon.

2. Data Collection When Visiting Our Website

If you use our website for informational purposes only, we collect only the data that your browser automatically transmits to our server (so-called server log files). This includes:

  • Visited pages

  • Date and time of access

  • Amount of data transmitted

  • Referring URL

  • Browser type and version

  • Operating system

  • IP address (anonymised where applicable)

Processing is carried out pursuant to Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring the stability, security, and functionality of our website.
These data are not merged with other data sources and are only reviewed retrospectively if there are indications of unlawful use.

3. Cookies

Our website uses cookies to enhance user experience and enable certain website functions.

Cookies are small text files stored on your device. Some cookies are deleted when you close your browser (session cookies), while others remain stored for a defined period (persistent cookies).

Cookies may collect information such as:

  • Browser type

  • IP address

  • Device and location data

If personal data is processed via cookies, this is done on the basis of:

  • Art. 6(1)(b) GDPR (contract performance), or

  • Art. 6(1)(f) GDPR (legitimate interest in website optimisation)

You can manage or disable cookies at any time via your browser settings. Please note that disabling cookies may limit website functionality.

4. Contact

When you contact us via email or contact forms, personal data is collected solely for the purpose of processing your enquiry.

Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest in responding), or

  • Art. 6(1)(b) GDPR (contract initiation)

Your data will be deleted once the enquiry has been fully processed, unless statutory retention obligations apply.

5. Customer Accounts and Contract Processing

When you place an order or create a customer account, we process personal data necessary to fulfil the contract pursuant to Art. 6(1)(b) GDPR.

Customer accounts can be deleted at any time by contacting us at info@audrey-london.com.

After order completion or account deletion, data is retained only in accordance with statutory tax and commercial retention requirements and deleted thereafter.

6. Use of Personal Data for Marketing Purposes

6.1 Email Newsletter

If you subscribe to our newsletter, we use your email address exclusively to send promotional information.

Subscription is carried out using a double opt-in procedure. Legal basis: Art. 6(1)(a) GDPR.

You may unsubscribe at any time via the link in each newsletter or by emailing info@audrey-london.com.

6.2 Advertising to Existing Customers

If you have previously purchased from us, we may send you offers for similar products based on Art. 6(1)(f) GDPR (legitimate interest).

You may object at any time. Upon objection, your email will no longer be used for marketing purposes.

7. Data Processing for Order Fulfilment

7.1 Shipping and Payment

Personal data is shared only with:

  • Shipping providers (for delivery)

  • Payment providers (for payment processing)

Legal basis: Art. 6(1)(b) GDPR

7.2 Payment Providers

Depending on the selected payment method, data may be processed by providers such as PayPal or Klarna (SOFORT).
These providers process data independently in accordance with their own privacy policies.

8. Review Reminder Emails

With your explicit consent, we may send a one-time reminder to review your purchase.
Legal basis: Art. 6(1)(a) GDPR.
Consent may be withdrawn at any time.

9. Social Media Plugins (Shariff Solution)

Our website integrates social media links (e.g. Facebook, Instagram) using privacy-friendly Shariff technology.
No data is transferred to social networks until you actively click a social button.

10. Online Advertising & Analytics

We may use advertising and analytics tools such as:

  • Google Ads

  • Facebook Pixel

  • Google Analytics (with IP anonymisation)

These tools are used only with consent where legally required or based on legitimate interest in website optimisation (Art. 6(1)(f) GDPR).

Users can opt out via browser settings or provider-specific opt-out tools.

11. Retargeting & Remarketing

We may use remarketing services (e.g. Facebook Custom Audiences, Google Remarketing) to display interest-based advertising.

Processing is carried out only with consent where required (Art. 6(1)(a) GDPR) or on legitimate interest grounds.

12. Rights of Data Subjects

You have the following rights under GDPR:

  • Right of access (Art. 15)

  • Right to rectification (Art. 16)

  • Right to erasure (Art. 17)

  • Right to restriction of processing (Art. 18)

  • Right to data portability (Art. 20)

  • Right to withdraw consent (Art. 7(3))

  • Right to lodge a complaint with a supervisory authority (Art. 77)

13. Right to Object

You may object at any time to the processing of your personal data based on legitimate interest.
If you object to processing for direct marketing purposes, your data will no longer be used for such purposes.

14. Data Retention Period

Personal data is stored only for as long as necessary to fulfil contractual or legal obligations.
After statutory retention periods expire, data is securely deleted.

15. Contact

If you have questions about this Privacy Policy or the processing of your personal data, please contact:

📧 info@audrey-london.com
🏷️ Audrey London