Privacy Policy

 

PRIVACY POLICY

  1. INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 G'day! We're stoked to have you drop by our website and appreciate your interest. Below, we'll give you the lowdown on how we handle your personal info when you're cruising our site. Personal info includes any data that can suss you out.

1.2 The legend responsible for looking after data on this website, in line with the New Zealand Privacy Principles (NPP), is Ivory. The responsible party for sorting out personal data is the person or crew, natural or legal, who decides what's what when it comes to handling personal data.

1.3 To keep things fair dinkum and safeguard the transmission of personal data and other confidential bits (like orders or hollers to the responsible crew), this website uses SSL or TLS encryption. You'll know it's all good with an encrypted connection when you see "https://" and a padlock symbol in your browser's address bar.

  1. DATA COLLECTION WHEN YOU ROCK UP TO OUR WEBSITE

When you're just cruising around our website without getting your name down or giving us any other info, we only pick up the stuff your browser sends to our server (that's what we call "Server-Logfiles"). When you hit up our website, we collect the following data that we need on the tech side to show you the goods:

  • The page you're checking out
  • Date and time when you're hitting us up
  • Amount of data sent in bytes
  • Source/link that brought you to the page
  • Browser you're using
  • Operating system you're on
  • IP address being used (might be anonymized) We process this stuff according to Art. 6 Para. 1 lit. f of the GDPR, because it helps us keep the site running smoothly and shipshape. We don't share or use this data for anything else. But, if there's any dodgy business going on, we might take a squiz at the server logs later.
  1. COOKIES

To make your time on our website top-notch and make sure you can use all the good stuff, we use what we call cookies on different pages. These are small text files that get stored on your device. Some of the cookies we use are gone once you close your browser (we call these "session cookies"). Others stick around on your device and let us or our mates (that's cookies from third parties) recognize your browser next time you swing by (we call these "persistent cookies"). When cookies are set, they collect and process certain user info like browser and location data, as well as IP addresses. Persistent cookies get cleared out automatically after a set period, which can vary depending on the cookie. Sometimes, cookies are there to make things easier, like remembering what's in your virtual cart for when you come back later. If we're using cookies that process personal data, we do it according to Art. 6 Para. 1 lit. b of the GDPR, either to make sure we're sticking to the deal or according to Art. 6 Para. 1 lit. f of the GDPR, because it's in our best interests to keep the website running smooth and friendly for our customers. We might team up with advertising partners who help us make our online offerings more interesting for you. In these cases, when you're on our website, cookies from our partner companies might also get stored on your device (these are cookies from third parties). If we're working with these advertising mates, we'll give you the lowdown on the cookies they're using and what info they're collecting in the following sections. Keep in mind that you can set your browser to let you know when cookies are being set and decide on each one individually whether to accept it or not, or you can block cookies altogether for certain cases or all cases. Every browser has its own way of managing cookie settings. You can find out how to change your cookie settings in the help menu of your browser. Here are the links for different browsers:

  • Internet Explorer: [link]
  • Firefox: [link]
  • Chrome: [link]
  • Opera: [link] Keep in mind that if you don't accept cookies, some features of our website might not work as well.
  1. GETTING IN TOUCH

When you hit us up (like through a contact form or email), we pick up some personal data. The deets we pick up if you're using a contact form are laid out in the form itself. We only hang onto this info to sort out your issue or get back to you, and for the tech stuff that goes along with that. We're all about keeping things fair dinkum, so we process this data according to Art. 6 Para. 1 lit. f of the GDPR, because we're all about making sure your issue gets sorted. If your message is about making a deal, then Art. 6 Para. 1 lit. b of the GDPR is also in play. Once we've sorted out your issue, we'll chuck out your data, unless there's a good reason to hang onto it or we have to keep it around because of the law.

  1. HANDLING YOUR DATA WHEN YOU SIGN UP FOR AN ACCOUNT AND DURING ORDER PROCESSING

According to Art. 6 Para. 1 lit. b of the GDPR, we'll pick up and process your personal data when you give it to us for making a deal or signing up for an account. You can see what data we're picking up in the forms you fill out. You can delete your account any time by shooting us a message at the address listed above. We'll hang onto the data you give us for making a deal. Once the deal's done or your account's gone, we'll lock up your data for as long as we have to under tax and commercial laws, and then we'll delete it, unless you've said we can keep using it or we're allowed to use it more by law, which we'll let you know about below.

  1. USING YOUR DATA FOR DIRECT MARKETING

6.1 Signing up for our email newsletter When you sign up for our email newsletter, we'll send you the latest on our offers. The only thing you've gotta give us is your email address. Any other info you give us is up to you, and it's just so we can make things more personal. When we send you our newsletter, we use what's called the "Double Opt-in" process. This means we'll only send you our newsletter after you've told us you're down for it. We'll send you a confirmation email and you'll need to click on a link in that email to say you're in. When you click that confirmation link, you're giving us your OK to use your personal data, according to Art. 6 Para. 1 lit. a of the GDPR. When you sign up for the newsletter, we'll hang onto your IP address, the date, and the time of your sign-up, as added security in case someone tries anything dodgy with your email address later. We only use the data we pick up when you sign up for the newsletter to send you the newsletter. You can unsubscribe from the newsletter any time by clicking the link in the newsletter itself or by sending us a message at the address listed above. Once you've unsubscribed, we'll delete your email address from our newsletter list right away, unless you've said we can keep using it or we're allowed to keep using it by law, which we'll let you know about in this policy. 6.2 Sending the email newsletter to existing customers If you've given us your email address when you bought something, we might send you offers for similar stuff by email. We won't ask you again if that's OK. We'll just go ahead and do it. We're all about keeping it real, and this is just us getting the word out about our gear. We're doing this according to Art. 6 Para. 1 lit. f of the GDPR, because we're all about making our marketing personal for you. If you've said before that you're not down for this kind of thing, we won't send you anything. You've got the right to tell us you're not cool with us using your email address for this kind of thing at any time, by sending a message to the responsible crew listed above. You'll just need to cover the costs of getting the message to us. Once we get your message, we'll stop using your email address for marketing right away.

  1. HANDLING YOUR DATA FOR ORDER PROCESSING

7.1 The personal data we pick up gets passed on to the transport company we've partnered with, as needed, to get your gear to you. We'll also pass your payment info on to the bank we're working with, to sort out your payment. If we're working with payment service providers, we'll let you know more about them in the sections below. We're passing on this data according to Art. 6 Para. 1 lit. b of the GDPR. 7.2 Using Payment Service Providers

  • PayPal When you pay with PayPal, or use PayPal for credit card payments, direct debits, or, if we offer them, "pay later" or "pay in installments," we'll pass your payment info on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (that's "PayPal"). We're passing this info on according to Art. 6 Para. 1 lit. b of the GDPR, and only as much as we need to for sorting out your payment. PayPal might do a credit check if you're using credit card payments, direct debits, or "pay later" or "pay in installments." If they do, they might pass your payment data on to credit agencies, according to Art. 6 Para. 1 lit. f of the GDPR. PayPal's all about making sure you can pay your bills. They'll use the results of the credit check to decide whether to offer you those payment options. The credit check might include some probability values (that's "score values"). The score values are based on tried and true mathematical-statistical methods. They might include info like your address. You can find out more about PayPal's privacy policy, including which credit agencies they work with, here: [link] You can tell PayPal to stop processing your data for this kind of thing at any time by sending them a message. But PayPal might still need to process your personal data if they have to for sorting out your payment.
  • SOFORT If you choose to pay with SOFORT, your payment will be handled by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"). We'll pass on the info you've given us during checkout, along with your order info, according to Art. 6 Para. 1 lit. b of the GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). We're only passing on your data to SOFORT to sort out your payment, and only as much as we need to for that. You can find out more about SOFORT's privacy policy here: [link]
  1. GETTING IN TOUCH TO REMIND YOU TO LEAVE A REVIEW Sending reminders for your review (not through a customer review system)

We'll use your email address to remind you once to leave a review for your order, using the review system we use, if you've given us your explicit consent to do that, according to Art. 6 Para. 1 lit. a of the GDPR. You can revoke your consent at any time by sending a message to the responsible crew for data processing.

 

Certainly, here is the translation of Part 2:

  1. USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Special additional customs clearance costs and/or import duties are not included in the price and are borne by the customer. Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). To increase the protection of your data when visiting our website, these buttons are not integrated as plugins without restrictions, but only embedded into the page using an HTML link. This type of integration ensures that when a page of our website containing such buttons is accessed, no connection is made to Facebook's servers yet. When you click on the button, a new browser window opens and calls up the Facebook page where you can interact with the plugins there (possibly after entering your login data). Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy: Facebook Privacy Policy

9.2 Google+ Plugins as Shariff Solution

Our website uses so-called social plugins ("plugins") of the social network Google+, which is operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To increase the protection of your data when visiting our website, these buttons are not integrated as plugins without restrictions, but only embedded into the page using an HTML link. This type of integration ensures that when a page of our website containing such buttons is accessed, no connection is made to Google+'s servers yet. When you click on the button, a new browser window opens and calls up the Google+ page where you can interact with the plugins there (possibly after entering your login data). Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For the purpose and scope of data collection and the further processing and use of data by Google, as well as your related rights and privacy settings, please refer to Google's privacy policy: Google Privacy Policy

9.3 Instagram Plugin as Shariff Solution

Our website uses so-called social plugins ("plugins") from the online service Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"). To increase the protection of your data when visiting our website, these buttons are not integrated as plugins without restrictions, but only embedded into the page using an HTML link. This type of integration ensures that when a page of our website containing such buttons is accessed, no connection is made to Instagram's servers yet. When you click on the button, a new browser window opens and calls up the Instagram page where you can interact with the plugins there (possibly after entering your login data). Instagram LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and privacy settings, please refer to Instagram's privacy policy: Instagram Privacy Policy

  1. ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick"). DoubleClick uses cookies to display relevant ads to users, to improve campaign performance reports, or to prevent a user from seeing the same ads repeatedly. Via a cookie ID, Google collects information about which ads are displayed in which browser and can thus prevent them from being displayed multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR. In addition, DoubleClick can use cookie IDs to record conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser's website and make a purchase there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. If you wish to opt-out of this tracking process, you can disable cookies for conversion tracking by adjusting your browser settings to block cookies from the domain www.googleadservices.com, Google Ad Settings, although this setting will be deleted when you delete your cookies. Alternatively, you can learn about setting cookies and make settings regarding them at the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to notify you when cookies are set and individually decide whether to accept them or to reject them in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. Further information on the privacy policy of DoubleClick by Google can be found at the following Internet address: DoubleClick Privacy Policy

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We are interested in showing you advertisements that are of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs. The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked through the websites of AdWords customers. The information collected by means of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not want to participate in tracking, you can block this usage by disabling the Google conversion tracking cookie through your internet browser user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR. Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. Further information on the privacy policy of Google can be found at the following Internet address: Google Privacy Policy

You can permanently deactivate cookies for ad preferences by preventing them from being set by configuring your browser software accordingly or by downloading and installing the browser plug-in available at the following link: Google Ad Settings Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

  1. WEB ANALYSIS SERVICES

Google (Universal) Analytics

  • Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address truncated by the last octet prior to its storage) will be transmitted to and stored by Google on servers in the United States. This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and excludes direct personal reference. By means of this extension, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Google Analytics Opt-out Browser Add-on Alternatively to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Disable Google Analytics Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. This website also uses Google Analytics for cross-device analysis of visitor traffic conducted through a user ID. The first time a page is accessed, the user is assigned a unique, permanent, and anonymized ID that is set across devices. This allows interaction data from different devices and different sessions to be assigned to a single user. The user ID does not contain any personal data and does not transmit any such data to Google. Data collection and storage via the user ID can be objected to at any time with effect for the future. To do this, you must deactivate Google Analytics on all systems you use, for example, in a different browser or on your mobile device. You can deactivate it using a browser plugin from Google (Google Analytics Opt-out Browser Add-on). Alternatively, or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Disable Google Analytics Further information on Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

 

  1. RETARGETING/ REMARKETING/ REFERRAL ADVERTISING Facebook Custom Audience via Pixel Method This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). In the event of explicit consent, this allows the tracking of user behavior after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns. The data collected is anonymous to us, thus providing no insights into the identity of the users. However, the data is stored and processed by Facebook, enabling a connection to the respective user profile, and Facebook may use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to display ads on and off Facebook. Additionally, a cookie may be stored on your computer for these purposes. These processing operations are carried out only with the express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Consent to the use of the Facebook Pixel may only be given by users who are older than 13 years. If you are younger, we ask you to obtain permission from your legal guardians. Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. To disable the use of cookies on your computer, you can configure your internet browser so that no cookies can be stored on your computer in the future or that cookies already stored are deleted. However, deactivating all cookies may result in some functions on our website not being executed. You can also disable the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

Google AdWords Remarketing Our website uses the features of Google AdWords Remarketing, through which we advertise this website in Google search results and on third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in the browser of your device,

which automatically enables interest-based advertising based on a pseudonymous cookie ID and based on the pages you have visited. The processing is based on our legitimate interest in the optimal marketing of our website pursuant to Art. 6 Para. 1 lit. f GDPR. Further data processing will only take place if you have consented to Google linking your internet and app browser history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into your Google account during your visit to our website in this case, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data to create target groups. You can permanently disable the setting of cookies for advertising preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/ Alternatively, you can inform yourself about setting cookies and make settings regarding them at the Digital Advertising Alliance at the internet address www.aboutads.info. Finally, you can set your browser to inform you about the setting of cookies and decide on their acceptance individually or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited. Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For more information and the privacy policy regarding advertising and Google, please visit: https://www.google.com/policies/technologies/ads/

  1. RIGHTS OF THE DATA SUBJECT 13.1 The applicable data protection law grants you comprehensive rights with regard to the processing of your personal data by the data controller (rights of data subjects), about which we inform you below: Right to information pursuant to Art. 15 GDPR: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR. Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data. Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR: You have the right to obtain the erasure of personal data concerning you without undue delay if one of the grounds specified in Art. 17 GDPR applies, e.g., if the data is no longer necessary for the purposes for which it was collected or otherwise processed. Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to obtain restriction of processing if one of the conditions specified in Art. 18 GDPR applies, e.g., if you have objected to processing, for the duration of any resulting review.

Right to data portability pursuant to Art. 20 GDPR: In certain circumstances specified in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to have this data transmitted to another controller. Right to withdraw consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. 13.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA BASED ON A LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS SUBJECT TO THE CONDITIONS OF ARTICLE 21 GDPR.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME. IF YOU EXERCISE YOUR RIGHT TO OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THESE PURPOSES.

DURATION OF STORAGE OF PERSONAL DATA The duration of the storage of personal data is based on the respective statutory retention period (e.g., commercial and tax retention periods). After the expiration of the period, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment of the contract or the initiation of a contract and/or there is no longer a legitimate interest on our part in the continued storage.

For any inquiries or questions related to these Terms & Conditions, please contact us at:
Email: info@aubreysisters.com