Privacy policy

Privacy Policy

Below we inform you about the type, scope and purpose of the processing of your personal data when using our store at the address "www.chunigula-mexfashion.com". Personal data is any information relating to an identified or identifiable natural person.

1. Person responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. For the personal data processed in this store, the controller within the meaning of the privacy policy is: Erzsebet Markworth, Anne-Frank-Str. 4, 33106 Paderborn, Germany, telephone 015112433782, e-mail info@chunigula-mexfashion.com (hereinafter "we").

2. When you visit our website

When you visit our website, our server collects the following information from your end device: browser type and version, operating system, the previously visited website ("referrer"), IP address and time of page view.

We collect and process this data in order to ensure the trouble-free operation of our website and to be able to recognize, ward off and pursue any misuse of our services. Furthermore, we use the collected data for statistical purposes, for example to evaluate which end devices and browsers are used to access our store, in order to continuously adapt and improve our offer to the needs of the users on this basis. This data processing is based on Article 6(1)(f) GDPR.

We delete all of the above personal data no later than twelve months after it has been collected.

3. When you place an order with us

When you place an order in our store, we process your name, delivery address and e-mail address as you provide them in the course of the ordering process. If you voluntarily provide additional data when placing your order (e.g. a different billing address or a telephone number), we also process this data.

We process this data electronically for the proper fulfillment of the contract, in particular for delivery, invoicing, posting payments and processing returns and complaints. This data processing is based on Article 6(1)(b) GDPR.

We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.

For a contract to be concluded between you and us, it is necessary that we receive your name, delivery address and e-mail address. The necessity of providing this data results from legal regulations (such as § 312i para. 1 item 3 BGB, § 14 para. 4 UStG). Without providing this data, you can therefore not conclude a contract with us.

When deciding on the conclusion of a contract, we refrain from automated decision-making and profiling.

4. Customer account

You can optionally create a customer account in our online store. The data required for this and processed by us result from the input mask for opening the customer account. The customer account is set up exclusively at your request. The legal basis is therefore your consent pursuant to Article 6(1)(a) GDPR. We keep the personal data associated with the customer account stored until you delete the customer account or you ask us to delete it. For personal data from contracts already concluded, the retention periods as set out in the section "When you order from us" shall apply, irrespective of the existence of the customer account.

5. Delivery and payment

Insofar as we send physical goods on the basis of the purchase contract, we transmit the name and address of the recipient and, insofar as you have consented thereto, your e-mail address, to Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn) as the shipping service provider, for the purpose of delivering the shipment, including, if applicable, prior e-mail notification of the expected time of delivery, and for the purpose of any return of your shipment to us on the basis of Article 6(1)(b) GDPR.

For the payment of your purchase, the payment service provider selected by you collects and processes your name, e-mail address, card or account number and/or other data, to the extent necessary for the payment method selected by you in each case. In this respect, the contract and data protection provisions of the payment service provider selected by you shall apply in addition.

When we receive a payment, we process the data that the payment service provider transmits to us.

When we receive a transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC) and the purpose of use transmitted.

The processing is based on Article 6(1)(b) GDPR. We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.

6. Order processors

To support our operational processes, we use the services of BillBee (BillBee GmbH, 32756 Detmold, Germany) as a processor in accordance with Article 28 GDPR.

For the operation of our website on the Internet, we use the technical services of Shopify (Shopify International Limited, Dublin 4, D04 XN32, Ireland) as a processor in accordance with Article 28 GDPR.

7. Contacting us

If you send us a message by e-mail, we store your message with the sender data transmitted with it (name, e-mail address and, if applicable, further information added by your e-mail program and the transmitting servers). For the receipt, storage and sending of e-mails, we use an e-mail provider that acts for us as a processor in accordance with Article 28 GDPR.

The legal basis for this data processing is our legitimate interest in answering your message and also being able to respond to any follow-up questions from you (Article 6(1)(f) GDPR). We will delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the provision in the following paragraph.

If you send us a legally relevant statement regarding the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing, regardless of the transmission channel, is also Article 6(1)(b) GDPR. In such a case, we will delete the data related to your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.

8. Newsletter

If you have subscribed to our newsletter, we will inform you by e-mail about new offers and features of our store. You will not receive more than one newsletter per week. You may at any time informally object to the use of your e-mail address for advertising purposes without incurring any costs other than the transmission costs according to the prime rates.

This data processing is based on your consent in accordance with Article 6(1)(a) GDPR. If you revoke your consent to the use of your e-mail address for advertising purposes, we will delete your e-mail address from our newsletter distribution list.

9. Comments and ratings

If you write a comment or a rating on one of our products in our store, we will publish your contribution at the appropriate place on our store website together with your user name, for which you can also specify a pseudonym. To prevent misuse of our offer, we store the IP address of the terminal device from which you write for a period of twelve months (Article 6(1)(f) GDPR). We reserve the right to delete unobjective or thematically inappropriate contributions at any time. Otherwise, we delete published contributions only upon request of the respective author.

10. Use of cookies

If you have consented to the use of cookies, we will place one or more "cookies" on your terminal device. A cookie is a small text file that allows us to recognize your terminal device when you visit our website again at a later occasion. Cookies also allow us to analyze certain user behavior, such as which page areas you view, how long you stay on our website, and when and how often you return to our website. Cookies placed by us are deleted no later than twelve months after your last visit to our website.

This data processing is based on your consent (Article 6(1)(a) GDPR).

You can prevent the depositing of cookies by going to the cookie settings of your internet browser and there objecting to the depositing of cookies for our site or for all websites. There you can also delete cookies that have already been placed.

11 Google services

If you have consented, we use certain services from Google on our website. If you visit our site from a location in the European Union, Norway, Iceland, Liechtenstein or Switzerland, "Google" is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, otherwise Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

General information about Google's use of data can be found at Google at https://policies.google.com/technologies/partner-sites ("How we use data from websites or apps on or in which our services are used").

12. Google Analytics

If you have consented, we use Google Analytics, a web analytics service from Google. Google places cookies on your terminal device. With these cookies, Google can collect information about how you use our website. This information is transferred to a Google server, evaluated there and made available to us. We use the information to better understand what visitors to our website are interested in, the success of our advertising materials and how we can improve our offer.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR).

For the creation of the usage analyses, Google acts as a processor for us (Article 28 GDPR), based on a processing agreement that incorporates the EU standard data protection clauses. You can access the content of the agreement with Google ("Data Processing Terms") online at privacy.google.com/businesses/processorterms.

We use Google Analytics with IP anonymization activated. This means that, as a rule, your IP address is shortened within the scope of the GDPR so that it is no longer possible to draw conclusions about you from the IP. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other data from Google. You can prevent the storage of cookies by selecting the appropriate settings on your browser software.

13. Social media

Social media buttons may be displayed in our store; they can be recognized by the logos of the social media platforms (hereinafter "platforms") (Facebook: "f" logo, Instagram: square camera, Pinterest: "p"). These are links to the respective platforms based in the USA. A click on such a link calls up the website of the respective platform, whereby the IP address of the calling up end device as well as the address of the page from which the link is made ("referrer") are transmitted to the called up platform in the USA. However, no data is collected or processed by us ourselves in connection with the social media buttons.

14. Your rights

You have the following rights in relation to the personal data we process about you:

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, we will inform you of the personal data stored about you and the further information pursuant to Article 15 (1) u. 2 GDPR.

You have the right to have inaccurate personal data concerning you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

You may request from us the immediate deletion of the personal data concerning you under the conditions of Article 17(1) of the GDPR, insofar as its processing is not necessary pursuant to Article 17(3) of the GDPR.

You may request us to restrict the processing of your data if one of the conditions of Article 18(1) GDPR applies. In particular, you may request the restriction instead of deletion.

We will notify any rectification or erasure of your personal data and any restriction of processing to all recipients to whom we have disclosed personal data relating to you, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you so request.

You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format, and may request that we transfer this data to another controller without hindrance, insofar as this is technically possible.

Insofar as data processing is based on your consent, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the data processing that took place until your revocation.

RIGHT TO OBJECT: FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU; this right to object exists in relation to that data processing which is carried out on the basis of Article 6(1)(f) GDPR for the protection of legitimate interests on our part or on the part of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data prevail. If you exercise your right to object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you, or for the establishment, exercise or defense of legal claims.

IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING (E.G. NEWSLETTER), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR SUCH PURPOSES.

If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement. This does not preclude other administrative or judicial remedies.