Privacy Policy

  1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
    1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any information that can be used to personally identify you.

1.2 The controller responsible for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is Ella & Ivy. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the prefix “https://” and the padlock symbol in your browser’s address bar.

  1. DATA COLLECTION WHEN VISITING OUR WEBSITE
    When using our website purely for information (i.e. if you do not register or provide us with information in another way), we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data which is technically required for us to display the website to you:

  • The website you visited

  • Date and time at the moment of access

  • Amount of data sent in bytes

  • Source / referrer from which you reached the site

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

Processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used otherwise. However, we reserve the right to retrospectively check the server log files if concrete indications point to unlawful use.

  1. COOKIES
    To make visiting our website attractive and to enable use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser again on your next visit (persistent cookies).

When cookies are used, they collect and process certain user information individually, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a set duration, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Where individual cookies implemented by us also process personal data, processing is done in accordance with Article 6 (1) (b) GDPR either for the execution of the contract or in accordance with Article 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may cooperate with advertising partners who help us make our online offer more interesting for you. For this purpose, when you visit our website, cookies from partner companies may also be stored on your hard drive (third-party cookies). If we cooperate with such advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance, or exclude acceptance of cookies for certain cases or in general. Each browser is different in how it manages cookie settings. The method is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers via the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

  1. CONTACT
    When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data will be stored and used solely for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR. If your contact aims at concluding a contract, the additional legal basis is Article 6 (1) (b) GDPR. Your data will be deleted after final processing of your request, insofar as the circumstances indicate that the matter in question has been conclusively resolved and unless legal retention obligations prevent deletion.

  2. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING
    In accordance with Article 6 (1) (b) GDPR, personal data will also be collected and processed if you provide it to us for the performance of a contract or in opening a customer account. Which data is collected can be seen from the respective input forms. You may delete your customer account at any time by sending a message to the above address of the controller (Ella & Ivy).

We store and use the data you have provided for contract processing. After full completion of the contract or deletion of your customer account, your data will be blocked in view of tax and commercial retention periods and deleted after those periods, provided that you have not expressly consented to further use of your data or a legally permitted further use by us has been reserved, about which we will inform you below.

  1. USE OF YOUR DATA FOR DIRECT ADVERTISING
    6.1 Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of other data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for newsletter dispatch. This means that we will only send you a newsletter after you have expressly confirmed that you agree to receive the newsletter. We then send you a confirmation email in which you are asked to click a corresponding link to confirm that you want to receive newsletters in the future.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Article 6 (1) (a) GDPR. When registering for the newsletter, we store your IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to trace any potential misuse of your email address at a later time. The data we collect when registering for the newsletter will be used exclusively for the purpose of marketing communication via newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by notifying the aforementioned controller. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve a legally permitted further use of the data, which we will inform you about in this policy.

6.2 Sending newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you offers for similar goods or services from our range by email. For this we do not need a separate consent. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you marketing emails. You have the right to object at any time to the use of your email address for the above advertising purpose with future effect by sending a message to the controller named above. For you, only transmission costs in accordance with the base rates will be incurred. Once we receive your objection, the use of your email address for advertising purposes will cease immediately.

  1. DATA PROCESSING FOR ORDER PROCESSING
    7.1 The personal data we collect will, in the course of contract processing, be forwarded to the shipping company commissioned with delivery, insofar as this is necessary for shipping the goods. Your payment data will be forwarded to the credit institution commissioned for payment processing insofar as this is required for payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for forwarding data is Article 6 (1) (b) GDPR.

7.2 Use of payment service providers

  • PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal or — if offered — “purchase on account” or “installment payment” via PayPal, we forward your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of the payment processing. The forwarding is carried out in accordance with Article 6 (1) (b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right for payment methods credit card via PayPal, direct debit via PayPal or — if offered — “purchase on account” or “installment payment” via PayPal to carry out a credit check. For this purpose, your payment data may, where necessary, be forwarded in accordance with Article 6 (1) (f) GDPR based on PayPal’s legitimate interest in assessing your ability to pay to credit agencies. The result of the credit check in terms of the statistical probability of default is used by PayPal to decide whether to make the respective payment method available. The credit check may include so-called score values. If score values are part of the result, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data may be included in the calculation. Further data protection information, including the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still be authorized to process your personal data if this is necessary for contractual payment processing.

  • SOFORT
    If the payment method “SOFORT” is selected, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to which we forward the information you provided during the order process along with the information about your order in accordance with Article 6 (1) (b) GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The forwarding of your data is done exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary. More information on SOFORT’s privacy policy is available at: https://www.klarna.com/sofort/datenschutz

  1. CONTACT FOR REVIEW REMINDER
    Own review reminder (not sent by a third-party review system)

We use your email address to send you a one-time reminder to write a review of your order for the review system we use, provided you gave us your explicit consent for this during or after your order in accordance with Article 6 (1) (a) GDPR. You may revoke your consent at any time by notifying the controller responsible for data processing.

  1. USE OF SOCIAL MEDIA PLUGINS
    9.1 Facebook plugins with Shariff solution
    On our website we use so-called social plugins (“Plugins”) of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To increase the protection of your data when you visit our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link embedded in the site. This ensures that when you call up a page on our website that contains such buttons, no connection is made to Facebook’s servers yet. If you click the button, a new browser window opens and calls up Facebook, where you (if necessary after entering your login data) can interact with the plugins.

Facebook Inc., based in the USA, is certified for the US-European “Privacy Shield” framework, which ensures compliance with the data protection level applicable in the EU.

You can find information on the purpose and extent of data collection and further processing and use of the data by Facebook, as well as your related rights and settings to protect your privacy, in Facebook’s privacy policy: https://www.facebook.com/policy.php

9.2 Google+ plugins with Shariff solution
On our website we use so-called social plugins (“Plugins”) of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To increase the protection of your data when you visit our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link embedded in the site. Thus, when you open a page on our website that contains such buttons, no connection to Google+ servers is established yet. If you click the button, a new browser window opens and calls up Google+, where you (if necessary after login) can interact with the plugins.

Google LLC, based in the USA, is certified for the US-European “Privacy Shield” framework, which ensures compliance with the data protection level applicable in the EU.

You can find information on the purpose and extent of data collection and further processing and use of data by Google, as well as your related rights and settings, in Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram plugin with Shariff solution
On our website we use so-called social plugins (“Plugins”) of Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

To increase the protection of your data when you visit our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link embedded in the site. If you click the button, a new browser window opens and calls up Instagram, where you (if necessary after login) can interact with the plugins.

Instagram LLC, based in the USA, is certified for the US-European “Privacy Shield” framework, which ensures compliance with the data protection level applicable in the EU.

You can find information on the purpose and extent of data collection and further processing and use of the data by Instagram, as well as your related rights and settings, in Instagram’s privacy policy: https://help.instagram.com/155833707900388/

  1. ONLINE MARKETING
    10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to display user-relevant advertisements, to improve performance reports of campaigns, or to avoid showing the same advertisement to a user multiple times. Using a cookie ID, Google records which ads are shown in which browser and can thus prevent multiple displays of the same ad. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6 (1) (f) GDPR.

DoubleClick can also record conversions via cookie IDs that relate to ad requests. This is the case, for example, if a user sees a DoubleClick ad and later visits the advertiser’s website via the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal information.

As a result of the marketing tools used, your browser automatically connects directly to Google’s server. We have no influence over the extent and further use of the data collected by Google through this tool and thus inform you to the best of our knowledge: through the integration of DoubleClick, Google receives information that you accessed a specific part of our online presence or clicked an ad. If you are registered with a Google service, Google may assign the visit to your account. Even if you are not registered with Google or not logged in, Google may find and store your IP address.

If you wish to opt out of this tracking, you can disable cookies for conversion tracking by configuring your browser to block cookies from the domain www.googleadservices.com, or via https://www.google.de/settings/ads. Note that this setting is deleted when you clear your cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn about cookie settings and make choices. Finally, you can configure your browser to notify you about cookie setting and individually decide on acceptance or exclude acceptance generally or in certain cases. If you reject cookies, the functionality of our website may be restricted.

Google LLC, based in the USA, is certified for the US-European “Privacy Shield” framework, which ensures compliance with the data protection level applicable in the EU.

More information about DoubleClick’s privacy policy is available at: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program “Google AdWords” and, in the context of Google AdWords, uses conversion tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to draw attention to our attractive offers on external websites by means of advertisements. We can determine how successful individual advertising measures are in relation to advertising campaign data. Our intention is to display advertisements you might find interesting and make our website more attractive to you, and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google AdWords advertisement. Cookies are small text files stored on your computer that usually expire after 30 days and do not personally identify users. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that a user clicked the ad and was redirected to this page. Each AdWords customer receives a different cookie, so cookies cannot be tracked across AdWords customer websites.

The information collected via the conversion cookie is used to create conversion statistics for AdWords customers who use conversion tracking. Customers receive the total number of users who clicked their ad and were redirected to a page with a conversion tracking tag, but they do not receive information that can personally identify users. If you do not wish to participate in tracking, you may disable the conversion tracking cookie through your browser settings. You will then not be included in conversion tracking statistics. We use Google AdWords based on our legitimate advertising interest in accordance with Article 6 (1) (f) GDPR.

Google LLC, based in the USA, is certified for the US-European “Privacy Shield” framework, ensuring compliance with the EU’s data protection level.

You can permanently disable cookies for advertisement preferences by preventing them via your browser settings or by downloading and installing the browser plug-in available at https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of our website may no longer or only partially be usable if you deactivate cookies.

  1. WEB ANALYTICS SERVICES
    Google (Universal) Analytics

This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to and stored on a Google server in the USA.

This website uses Google Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by truncation and thereby excludes direct personal attribution. Within EU Member States or other states party to the Agreement on the European Economic Area, Google truncates your IP address before transmission. Only in exceptional cases is the full IP address transferred to a Google server in the USA and then truncated there. In such exceptional cases, processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google uses this information to evaluate your use of the website, to compile reports about website activity, and to provide us with other services relating to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You can prevent the storage of cookies by configuring your browser software accordingly; however, please note that in this case you may not be able to use all features of this website. You can also prevent data generated by the cookie and related to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively to the browser plug-in or within mobile browsers, click on the following link to set an opt-out cookie that prevents Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): deactivate Google Analytics

Google LLC, based in the USA, is certified under the “Privacy Shield” framework, which ensures compliance with the EU data protection level.

This website also uses Google Analytics for cross-device analysis of visitor flows, using a user ID. Upon first visit, a unique, permanent and anonymized ID is assigned to the user across devices. This allows interaction data from different devices and sessions to be attributed to a single user. The user ID contains no personal data and is not transmitted to Google.

You can object to the collection and storage via the user ID at any time for the future. To do this, you must disable Google Analytics on all systems you use, such as in another browser or on your mobile device. The deactivation can be done using the Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, within mobile browsers, click the opt-out link above.

Further notes on Universal Analytics are available here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

  1. RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
    Facebook Custom Audience via Pixel procedure
    This website uses the “Facebook Pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If you give express consent, it is possible to track users after they have seen or clicked a Facebook advertisement. This procedure is used to evaluate the effectiveness of Facebook advertising campaigns for statistical and market research purposes and may contribute to optimizing future advertising measures.

The data collected are anonymous for us and do not allow conclusions about the identity of users. However, they are stored and processed by Facebook, which may link them to user profiles and use them for its own advertising purposes in accordance with Facebook’s data use policy (https://www.facebook.com/about/privacy/).

You may allow Facebook and its partners to place advertisements on and off Facebook. For this, a cookie may be stored on your computer. These processing operations occur only if you give express consent in accordance with Article 6 (1) (a) GDPR. Consent for use of the Facebook Pixel may only be given by users aged 13 or older. If you are younger, please ask your legal guardians for permission.

Facebook Inc., based in the USA, is certified for the “Privacy Shield” framework, which ensures compliance with the EU’s data protection level.

To disable use of cookies on your computer, you may configure your browser so that no future cookies are stored or existing cookies are deleted. Disabling all cookies may result in certain features of our website being no longer usable. You can also disable cookies from third-party providers like Facebook via the Digital Advertising Alliance at https://www.aboutads.info/choices/

Google AdWords Remarketing
Our website uses Google AdWords remarketing features. This enables us to advertise for this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google sets a cookie in your browser device, which, using a pseudonymous cookie ID and on the basis of the pages you visited, enables interest-based advertising. Processing is based on our legitimate interest in optimal marketing of our website according to Article 6 (1) (f) GDPR.

No further data processing takes place unless you have given Google permission to link your browser and app browsing history to your Google account, and use information from your Google account to personalize ads you view. If you are logged in to Google during your visit, Google may use your data along with Google Analytics data to generate cross-device remarketing audiences. For this, your personal data may be temporarily linked with Google Analytics data to build and define audience lists.

You can disable cookie placement for ad preferences permanently by installing a browser plug-in or configuring your browser. Alternatively, you can get information and make settings via the Digital Advertising Alliance at www.aboutads.info. Again, rejecting cookies may restrict functionality of the site.

Google LLC, based in the USA, is certified for the “Privacy Shield” framework, ensuring compliance with the EU data protection level.

Further information and privacy policies on advertising and Google are available at: https://www.google.com/policies/technologies/ads/

  1. RIGHTS OF THE DATA SUBJECT
    13.1 Under current data protection law, you have comprehensive rights vis-à-vis the controller regarding processing of your personal data (rights of access and intervention), which we inform you about below:

  • Right of access under Article 15 GDPR: you have the right to obtain confirmation as to whether personal data concerning you is being processed, and if so, to access the data and obtain information about the purposes of processing, the categories of data, recipients or categories of recipients, the planned storage period or criteria for determining that period, the existence of rights to rectification, erasure, restriction of processing, objection, complaint to a supervisory authority, origin of the data if not collected from you, the existence of automated decision-making including profiling and meaningful information on the logic involved and the significance and envisaged consequences of such processing, as well as your right to information about safeguards under Article 46 GDPR for any transfer of data to third countries.

  • Right to rectification under Article 16 GDPR: you have the right to timely correction of inaccurate personal data concerning you and/or completion of incomplete data stored with us.

  • Right to erasure (“right to be forgotten”) under Article 17 GDPR: you have the right to request deletion of your personal data under the conditions set out in Article 17 (1) GDPR. However, this right does not apply if processing is necessary for freedom of expression and information, compliance with a legal obligation, public interest, or the exercise, establishment or defense of legal claims.

  • Right to restriction of processing under Article 18 GDPR: you have the right to request restriction of processing under certain conditions (e.g. while accuracy of data is contested, or if you prefer restriction over erasure, or if we no longer need the data for processing but you need it for legal claims, or if you have objected and it is unclear whether our legitimate interests override yours).

  • Right to notification under Article 19 GDPR: if you have exercised your right to rectification, erasure, or restriction with respect to the controller, the controller must inform all recipients to whom personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed of those recipients.

  • Right to data portability under Article 20 GDPR: you have the right to receive personal data you have provided in a structured, commonly used and machine-readable format, or request transmission to another controller, if technically feasible.

  • Right to withdraw consent under Article 7 (3) GDPR: you have the right to withdraw given consent at any time with effect for the future. In the event of withdrawal, we will delete the affected data immediately, unless further processing without consent is permissible on another legal basis. The lawfulness of processing until withdrawal is unaffected.

  • Right to lodge a complaint under Article 77 GDPR: if you believe that processing of your personal data is unlawful, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work or alleged infringement.

13.2 Right to object

If we process your personal data based on a balancing of interests, you have the right to object at any time to processing for reasons arising from your particular situation, with effect for the future.

If you object, we will cease processing the relevant data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct advertising, you have the right to object at any time to processing of personal data concerning you for such advertising. The objection can be made as described above. If you exercise your right to object, processing of the relevant data for direct advertising purposes will cease.

  1. DURATION OF STORAGE OF PERSONAL DATA
    The duration of storage of personal data is determined by statutory retention periods (e.g. commercial and tax law retention obligations). After expiry of the period, the relevant data is routinely deleted, provided it is no longer necessary for contract fulfillment or initiation and/or no legitimate interest of ours in further storage remains.