SALE : -30% on the CAPRI COLLECTION. DISCOUNT CODE will be applied automatically!

This privacy policy describes how your personal information is collected, used and shared when you use Shivadiva GmbH, Kantstr. 108, 10627 Berlin (hereinafter "Shivadiva", "Seller" or "we") or make a purchase. ) in the following online shops:

"Shiva Diva" (shiva-diva.com)

A General information


When you visit the Website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone and some of the cookies installed on your device. In addition, as you browse the Website, we collect information about the individual web pages or products you view, the websites or search terms that referred you to the Website, and information about how you interact with the Website. We refer to this automatically collected information as "Device Information".

We collect device information using the following technologies:

- “Cookies” are data files placed on your device or computer, often including an anonymous unique identifier. For more information about cookies and how to disable cookies, visit http://www.allaboutcookies.org.

- "Log Files" track the actions occurring on the Site and collect data such as your IP address, browser type, internet service provider, referring/exiting pages and date/time stamps.

- "Web beacons", "tags" and "pixels" are electronic files that are used to record information about how you surf the website.

- "Facebook Tracking"

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including PayPal credit card numbers), email address, and phone number. We refer to this information as "Order Information". When we talk about "Personal Information" in this Privacy Policy, we are talking about both Device Information and Order Information.

How do we use your personal information?

We use the Order Information that we collect generally to fulfill orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this ordering information to:

- communicate with you;
- Check our orders for potential risk or fraud. and
- When complying with the preferences you have shared with us, provide information or advertising about our products or services.

We use the device information we collect to identify potential risks and fraud (in particular your IP address) and more generally to improve and optimize our website (e.g. by creating analytics about how our customers browse and interact with the website and to evaluate the success of our marketing and advertising campaigns).

Disclosure of your personal information

We share your personal information with third parties so that we can use your personal information as described above. For example, we use Shopify to power our online store. For more information about how Shopify uses your personal information, visit: https://www.shopify.com/legal/privacy. We also use Google Analytics to understand how our customers use the website. You can find more information about how Google uses your personal data here: https://www.google.com/intl/en/policies/privacy/. You can also disable Google Analytics here: https://tools.google.com/dlpage/gaoptout. We also use Facebook Pixel.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

behavioral advertising

As described above, we use your personal information to provide you with targeted advertisements or marketing communications that we think may be of interest to you. For more information about targeted advertising, visit the Network Advertising Initiative ("NAI") training page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising using the links below:


- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

In addition, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at: http://optout.aboutads.info/.

Don't track

Please note that we do not change our website's data collection and use practices when you see a "Do Not Track" signal on your browser.

Your personal information

Your personal information remains private and confidential. We will never sell, rent or trade your personal information in any way with any other company. All data collected is for Shivadiva only.

We don't like spam as much as you do. We will never send you unsolicited emails. If you subscribe to the Amazingy newsletter, you will receive regular e-newsletters from us. Clear unsubscribe dates are always displayed in the newsletter.

If you do not wish to receive our e-newsletter, we will only contact you to answer your questions, to send you your order confirmation, to contact you with payment problems or to inform your order of changes to your account. We will not contact you via email at any other time.

This website uses cookies to make the website easier to use. For example, a cookie is placed so the system knows what's in your shopping cart and it is not emptied when you visit another site. We also use cookies to enable us to use Google Analytics.

We do not place tracking cookies used for advertising on your PC. This means that we won't give you those annoying ads on other websites that seem to follow you even when you go to bed.

security


When you place an order on our website, your information is encrypted using 128-bit encryption. We never receive your full credit card details or store this information anywhere in our systems.

Protecting your privacy is of the utmost importance to us. Below you will find details on how we handle your data


B PRIVACY POLICY


Sect. 1. General


We will process your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) exclusively in accordance with the provisions of the German Data Protection Act and the Data Protection Act of the European Union (EU). In addition to information on processing purposes, recipients, legal bases and storage times, the following provisions also inform you about your rights and who is responsible for your data processing. This privacy policy only applies to our websites. If you are directed to other websites via links on our website, please familiarize yourself with the respective use of your data there.

Sect. 2 Data processing to fulfill the contract

(1) Purpose of data processing

Your personal data, which you provide to us during the ordering process, is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we ask for the necessary payment data in order to forward them to a payment service provider commissioned by us. Therefore, the processing of your data collected during the ordering process is carried out exclusively for the purpose of fulfilling the contract.

If you send us an inquiry by e-mail or via the contact form etc. before the conclusion of the contract, we process the data received in order to carry out pre-contractual measures and to answer your questions, e.g. Our products.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(b) of the GDPR.

(3) Recipient Categories

Payment service provider, shipping service provider, hosting provider, possibly goods management system, possibly suppliers (drop shipping).

(4) Storage Duration

We store the data required for contract processing until the statutory warranty and, if applicable, the contractual warranty periods have expired.

We store the data required under commercial and tax law for the statutory periods, usually ten years (cf. § 257 HGB, § 147 tax regulation (AO)).

The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.

Sect. 3 comments

(1) Purpose of data processing

Adding comments is possible. Your personal data collected in this area (e.g. name / pseudonym, email address, website) will be processed solely for the purpose of publishing your comments.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(f) of the GDPR.

(3) Legitimate Interest

Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection remains intact because you can publish your comment under a pseudonym.

(4) Storage Duration

A specific storage period is not intended. You can request the deletion of your comment at any time.

(5) Right to Object

You have the right at any time to object to the processing of data that has been carried out in accordance with Article 6 paragraph 1 letter f of the GDPR and is not intended for direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you can object to the processing at any time without giving reasons.

Sect. 4 More information

(1) Purpose of data processing

Send your name, address and in some cases your phone number to postal services (either DHL, FedEx, Deutsche Post, UPS or Hermes) so they can ship your order to you and contact you with any problems or questions.

Submitting your name, phone number, and email address to Freshdesk by Freshworks, Inc. This is the software we use to contact you if we have questions about your order. We also use this software to reply to you when you email us.

In the case of prize draws, we store your details so that we can let you know if you have won and will send you your prize in any case.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(a) of the GDPR.

Sect. 5 Web analysis with Google Analytics


(1) Purpose of data processing

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. ("Google"). Google Analytics uses so-called "cookies", small text files that are placed on your computer to analyze how you use the website. The information generated by the cookie about your use of this website is transmitted to and stored by Google on a server in the USA. If the anonymizeIP function is activated on this website, Google will shorten your IP address in advance in the member states of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. Google only transfers the full IP address to the server in the USA and shortens it there in exceptional cases. Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide website operators with other services related to website and internet usage.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(f) of the GDPR.

(3) Legitimate Interest

Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. For your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP ()" so that the IP addresses are only processed in abbreviated form in order to exclude direct personal references.

(4) Recipient Categories

Google, partner company

(5) Transfer to a third country

Google LLC, based in the USA, is certified for the EU-US data protection agreement "Privacy Shield", which guarantees compliance with the data protection regulations applicable in the EU.

(6) Storage Duration

Unlimited

(7) Right to Object

You can prevent the installation of cookies in your browser settings. If you change your settings, you may not be able to use all the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug available at the following link -Download and install in: optout

You can also generate a block by setting an opt-out cookie. If you wish to prevent the future collection of your data when you visit this website, click here: Disable Google Analytics

Sect. 6 Information about cookies


(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your internet browser on your computer system. These cookies are used, for example, when several products need to be placed in a shopping cart.

Other cookies remain stored permanently and recognize your browser on your next visit. These cookies are used, for example, to permanently store your passwords for a customer account.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(a) of the GDPR.

You have expressly consented to the use of cookies on our website as follows: Cookies are used on this website to ensure the best possible user experience. If you continue we'll assume that you are happy to receive cookies from this website.

(3) Storage Duration

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored for a few minutes to several years.

(4) Right of Withdrawal

If you do not want these cookies to be stored, please disable the use of cookies in your internet browser. However, this can lead to a functional restriction of our website.

Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

Sect. 7 social plugins


(1) We use social plugins from facebook.com, operated by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition "Facebook Social Plugin". If you click the "Like" button or enter a comment, the relevant information is sent directly from your browser to Facebook and stored there. Details on how Facebook handles your personal data and your relevant rights can be found in the data protection regulations: Facebook. If you do not want Facebook to collect information about you through our websites, you should log out of Facebook before visiting our website. You can also completely prevent the saving of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (Facebook).

(2) In connection with Twitter and the re-tweet functions, we use the so-called "social plugins" from twitter.com, which are operated by Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The plugins are marked with a Twitter logo like the blue "Twitter bird". If you use the re-tweet functions, the websites you visit will be shared with third parties and linked to your Twitter account. Details on how Twitter uses your data, as well as your rights and setting options for protecting your personal data, can be found in the privacy policy: Twitter. If you do not like the fact that Twitter assigns the data collected via our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the saving of Twitter plugins with add-ons for your browser, e.g. with the script blocker (NoScript).

(3) On our website we use so-called "social plugins" from the social network Google+, which is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). The plugins are recognizable, for example, on buttons displaying "+1" on a white or colored background. An overview of Google plugins and their appearance can be found here. If you call up a page of our website that contains such a plugin, your browser develops a direct connection to the Google servers. The content of the plugins is transmitted directly to your browser by Google and merged on the page. Through the integration, Google receives the information that your browser has called the corresponding page of our website, even if you do not have a profile with Google+ or are not registered with Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. If you are logged in with Google+, Google can directly assign t Visiting our website to your Google+ profile. If you interact with the plugins, for example by pressing the "+1" button, the corresponding information is transmitted directly to a server by Google and stored there. In addition, the information will be published on Google+ and displayed to your contacts on Google+. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your relevant rights and setting options for protecting your privacy can be found in Google's data protection declaration. If you do not like the fact that Google assigns the data collected via our website directly to your profile on Google+, you must log out of Google+ before visiting our website on Google+. You can also completely prevent Google plugins from loading with add-ons for your browser.

Sect. 8 newsletters

(1) Purpose of data processing

When registering for the newsletter, your e-mail address will be used for advertising purposes, i. H. The newsletter informs you in particular about products from our product range. For statistical purposes, we can evaluate which links are displayed in the newsletter. However, we cannot identify which specific person accessed the links. You have expressly given the following consent separately or, if necessary, during the ordering process: You will receive 2 - 4 newsletters per month, which are filled with news, tips and tricks and special offers. Simple unsubscribe details are always displayed in the newsletter.

(2) Legal Basis

The legal basis for such processing is set out in Article 6(1)(a) of the GDPR.

(3) Recipient Categories

if necessary: ​​newsletter provider

(4) Storage Duration

Your e-mail address will only be saved for the duration of your registration.

(5) Right of Withdrawal

You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: You can change your mind at any time by clicking the unsubscribe link in the footer of any email you receive from us or by contacting us at at the following URL: https : //goo.gl/WFnVGC. We will treat your data with respect.

Sect. 9 Rights of the data subject

If your personal data is processed, you are the "data subject" within the meaning of the GDPR and have the following rights vis-à-vis the person responsible for processing:


1 Right of access of the data subject

You can ask the controller to confirm whether your personal data is being processed.

In the case of such processing, you can request the following information from the Controller:

(1) the purposes of processing the personal data;

(2) the categories of personal data concerned;

(3) the recipients or categories of recipients to whom the personal data have been or will be disclosed;

(4) the estimated period for which the personal data will be stored or, if not possible, the criteria used to determine that period;

(5) the right to request the controller to rectify or erase the personal data or to restrict the processing of personal data relating to the data subject or to object to such processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) the right to all available information about the source of the data, if the personal data is not collected from the data subject;

(8) the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR, and - at least in those cases - meaningful information for you about the logic involved and the consequences and intended effects of such processing.

As a data subject, you have the right to be informed whether your personal data will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate security measures in accordance with Article 46 GDPR in relation to the transfer.

2 Right to Rectification

You have the right to have your personal data corrected and/or completed by the person responsible if your processed personal data is incorrect or incomplete. The controller must make the correction immediately.

3 Right to restriction of processing

You have the right to obtain from the controller a restriction of processing if one of the following conditions applies:

(1) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to erase the personal data and instead request that the use of the personal data be restricted;

(3) The person responsible for processing no longer needs the personal data for the purpose of processing, but you need them to assert, exercise or defend legal claims. or

(4) if you object to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the person responsible for the processing outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data, with the exception of storage, may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural or legal person or from Reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction of processing is lifted.

4 Right to Erasure

a) Obligation to delete
You have the right to obtain from the controller the deletion of your personal data without undue delay and the controller is obliged to delete this data without undue delay if one of the following reasons applies:

(1) The personal data are no longer required for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing pursuant to Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a DSGVO is based and for which there is no other legal basis for the processing.

(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.

(4) your personal data has been unlawfully processed;

(5) Your personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

(6) Your personal data was collected in connection with the information society offerings in accordance with Article 8(1).

b) Obligation to inform other persons responsible for processing (third parties)
If the controller has published your personal data and is obliged to erase them pursuant to Article 17(1) of the GDPR, he must take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform You, the data controller who processes the personal data, that you, as the data subject, have requested the deletion of links to, or the copy or replication of, this personal data.

c) Exceptions
The right to erasure does not apply if processing is necessary:

(1) to exercise the right to freedom of expression and information;

(2) to comply with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or to perform a task performed in the public interest or to exercise the official powers delegated to the controller;

(3) for reasons of public interest in the field of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, for scientific or historical purposes or for statistical purposes pursuant to Article 89(1), to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously impair the attainment of the objectives of such processing; or

(5) to establish, exercise or defend legal claims.

5 Duty to notify

If you have exercised your right to correct, erase or restrict the processing of your personal data, the data controller is obliged to inform all recipients to whom the personal data have been communicated about this correction or erasure of the data or the restriction of the processing, unless this proves impossible or requires a disproportionate effort.

You have the right to be informed by the controller about these recipients.

6 Right to Data Portability

You have the right to receive the personal data that you have provided to the data controller in a structured, commonly used and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from the controller who received the personal data.

(1) The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(b)(1); and

(2) The processing is automated.

When exercising this right, you also have the right to have your personal data transferred directly from one person responsible to another, insofar as this is technically feasible. The freedoms and rights of other people must not be affected.

The right to data portability does not apply to the processing of personal data that is necessary to perform a task carried out in the public interest or to exercise official powers conferred on the controller.

7 Right to Object

For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which is based on Article 6 paragraph 1 letters e or f. This also applies to profiling based on these provisions.

The person responsible for the processing will no longer process the personal data concerning you, unless the person responsible for the processing can demonstrate that there are compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves the purpose of justification , exercise or defense of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. This also applies to profiling if it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

As part of the use of information society services, you have the option, notwithstanding Directive 2002/58 / EC, to exercise your right to object in an automated manner using technical specifications.

8 Right of withdrawal of the declaration of consent under the Data Protection Act

You have the right to revoke your declaration of consent under the Data Protection Act at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

9 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces a legal effect on you or similarly significantly affects you.

This does not apply if the decision:

(1) is necessary for entering into, or the performance of, a contract between you and a controller;

(2) authorized by Union or Member State law to which the controller is subject and which also lays down appropriate measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your express consent.

However, these decisions must not be based on special categories of personal data as referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and appropriate measures are in place to protect your rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller must take appropriate measures to protect the rights and freedoms and your legitimate interests, at least the right to human intervention of the controller give its own position and dispute the decision.

10 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes this regulation .

The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a legal remedy under Article 78.

C Contact us


For more information about our privacy practices, if you have any questions or would like to make a complaint, please email mail@sanker.law or email our data officer.

Sank Lawyers
Bornheimer Strasse 127
53119 Bonn