Privacy policy

DATA PROTECTION

INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1. Controller and General Information

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about the handling of personal data when using our website. Personal data includes all data with which you can be personally identified.

1.2 The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Eleanor Boutique.
The controller for personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2. Data Collection When Visiting Our Website

When you use our website for informational purposes only, without registering or providing information in any other way, we only collect the data that your browser transmits to our server (server log files). This includes:

  • Website visited

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Source/reference from which you accessed the page

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way unless there are concrete indications of unlawful use.

3. Cookies

To make your visit to our website attractive and enable certain functions, we use cookies. Cookies are small text files stored on your device.

  • Session cookies are deleted after closing the browser

  • Persistent cookies remain stored and are automatically deleted after a defined period

Cookies may store settings and simplify the ordering process (e.g., shopping cart memory).
If cookies process personal data, this is done on the basis of:

  • Article 6(1)(b) GDPR – contract performance

  • Article 6(1)(f) GDPR – legitimate interest in functionality and usability

You can configure cookie settings in your browser at any time. Please note that disabling cookies may limit website functionality.

4. Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected solely to respond to your request.

  • Legal basis: Article 6(1)(f) GDPR

  • If related to a contract: Article 6(1)(b) GDPR

Your data will be deleted once the request has been fully processed, provided no statutory retention obligations exist.

5. Customer Accounts and Contract Processing

Personal data is collected and processed for contract execution or customer account creation in accordance with Article 6(1)(b) GDPR.

You may request deletion of your customer account at any time. Data required for tax and accounting purposes will be retained according to statutory retention periods and deleted thereafter.

6. Use of Data for Direct Advertising

6.1 Newsletter Subscription

By subscribing to our newsletter, you consent to receiving promotional emails.

  • Legal basis: Article 6(1)(a) GDPR

  • Double opt-in procedure used

  • You may unsubscribe at any time

6.2 Advertising to Existing Customers

If you provided your email during a purchase, we may send offers for similar products.

  • Legal basis: Article 6(1)(f) GDPR

  • You may object at any time at no cost

7. Order Processing and Payment Providers

Personal data is shared with shipping and payment providers only as necessary for order fulfillment.

  • Legal basis: Article 6(1)(b) GDPR

Payment providers may include PayPal and SOFORT. Each provider processes data under its own privacy policy.

8. Review Reminder Emails

If you explicitly consent, we may send a one-time email asking for a product review.

  • Legal basis: Article 6(1)(a) GDPR

  • Consent can be withdrawn at any time

9. Social Media Plugins (Shariff Solution)

We use privacy-friendly Shariff buttons for:

  • Facebook

  • Instagram

  • Google+

No data is transmitted until you actively click the button.

10. Online Marketing

We use tools such as:

  • Google DoubleClick

  • Google Ads Conversion Tracking

These tools are used based on legitimate interest (Article 6(1)(f) GDPR) or consent where required.

11. Web Analytics – Google Analytics

This website uses Google Analytics with IP anonymization.

          Legal basis: Article 6(1)(f) GDPR

  • You may opt out via browser settings or Google’s opt-out plugin

12. Retargeting & Remarketing

We use:

  • Facebook Pixel (with consent)

  • Google Ads Remarketing

These services help optimize advertising performance.

13. Rights of the Data Subject

You have the right to:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7(3) GDPR)

  • Lodge a complaint (Art. 77 GDPR)

Right to Object

You may object at any time to data processing for direct marketing purposes.

14. Data Retention Period

Personal data is stored only for as long as legally required. After expiry of statutory retention periods, data is routinely deleted.

Contact Details

Eleanor Boutique
📧 Email: info@eleanor-boutique.com

Estimated Response Time: Within 24 hours

Business Hours:
Monday – Friday: 9:00 AM – 6:00 PM (EST)
Saturday – Sunday: 12:00 PM – 5:00 PM (EST)