Datenschutzerklärung

Privacy Policy

Aromadora operates this shop and this website, including all related information, content, features, tools, products, and services to provide you, as a customer, with a personalized shopping experience (the “Services”). Our shop is based on Shopify, which enables us to offer you the Services. This Privacy Policy explains how we collect, use, and share personal data when you visit or use the website, make a purchase or another transaction through the Services, or otherwise interact with us. In the event of any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy shall take precedence with regard to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use, and disclosure of your data as described herein.

What Personal Data Do We Collect or Process?

When we use the term “personal data,” we mean information that identifies you or can be directly associated with you. Personal data does not include information that has been anonymized or aggregated so that it cannot reasonably identify you.

Depending on how you interact with the Services, where you live, and applicable laws, we may collect or process the following categories of personal data, including any inferences drawn from this data:

  • Contact Information: Name, mailing address, billing address, shipping address, phone number, email address.

  • Financial Information: Credit and debit card details, bank account numbers, payment information, transaction details, payment method, confirmation, and other payment-related data.

  • Account Information: Username, password, security questions, configurations, and settings.

  • Transaction Information: Items viewed, added to cart, wishlisted, purchased, returned, exchanged, or canceled, as well as your purchase history.

  • Communications: Any data you provide when contacting us, such as customer support inquiries.

  • Device Information: Information about your device, browser, network, IP address, and other identifiers.

  • Usage Data: How and when you interact with the Services.

Sources of Personal Data

We may collect personal data from the following sources:

  • Directly from you: When you create an account, access or use the Services, communicate with us, or otherwise provide your data.

  • Automatically through the Services: From your device or when you visit our site or use our Services, including through cookies and similar technologies.

  • From our service providers: When third parties collect or process data on our behalf.

  • From our partners and other third parties.

How Do We Use Your Personal Data?

Depending on how you interact with us, we may use your personal data for the following purposes:

  • Providing, customizing, and improving the Services: Fulfilling contracts, processing payments, managing orders, storing configurations, shipping, facilitating returns and exchanges, enabling reviews, and personalizing your shopping experience with product recommendations.

  • Marketing and Advertising: Sending promotional communications by email, SMS, or post; displaying online ads based on your activity.

  • Security and Fraud Prevention: Authenticating accounts, enabling secure payments, detecting and investigating fraudulent, illegal, or malicious activity, and protecting public safety.

  • Communication: Providing customer support, responding to your requests, and maintaining our business relationship.

  • Legal Compliance: Complying with laws or responding to legal requests, investigations, litigation, and enforcement of our policies and rights.

Sharing of Personal Data

We may share your personal data with third parties under the following circumstances:

  • With service providers and third parties acting on our behalf (e.g., IT, payment processing, analytics, customer support, cloud services, order fulfillment).

  • With business and marketing partners who provide advertising and marketing services, such as personalized ads across different retailers and platforms.

  • With your consent, for instance, when using social media integrations or requesting third-party delivery.

  • With our affiliates and group companies.

  • In business transactions, such as mergers, insolvencies, or in legal compliance, enforcement of terms, or protecting rights and safety.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal data to enable and enhance the Services. Data you provide may be shared with Shopify or third parties, including those in countries outside your residence.

We also use advanced Shopify features that draw on data from interactions across multiple merchants and platforms. In such cases, Shopify is the controller for that data. For more details, refer to Shopify’s Consumer Privacy Policy.

Third-Party Links and Websites

Our Services may link to external websites not operated or controlled by us. Please review their privacy and security policies. We are not responsible for the practices, accuracy, or content of third-party platforms. Any information shared in public or semi-public spaces (e.g., social networks) may be visible to others.

Children's Data

Our Services are not intended for use by children under the age of majority in their country. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe a child has shared personal data with us, please contact us to request deletion. As of this policy's effective date, we do not knowingly “sell” or “share” data from individuals under 16.

Data Security and Retention

While we strive to protect your data, no system is completely secure. We advise against transmitting sensitive data via insecure channels.

We retain personal data as needed to provide Services, manage your account, meet legal obligations, resolve disputes, or enforce agreements.

Your Rights and Choices

Depending on your location, you may have the following rights:

  • Right of Access: Request to see your personal data.

  • Right to Deletion: Request that we delete your personal data.

  • Right to Correction: Request corrections to inaccurate data.

  • Right to Data Portability: Obtain a copy or request transfer of your data.

  • Communication Preferences: Opt-out of marketing emails via the unsubscribe link; transactional emails may still be sent.

If you reside in the UK or EEA, you may also have:

  • Right to Object or Restrict Processing.

  • Right to Withdraw Consent, which does not affect prior processing.

You can exercise these rights through the Services or by contacting us (details below). Verification of identity may be required, and in some cases, an authorized agent may submit requests on your behalf.

Complaints

If you have concerns about how we handle your data, please contact us. You may also file a complaint with your local data protection authority. A list of EEA supervisory authorities is available here.

International Data Transfers

Your data may be stored or processed outside your country. Where applicable, we rely on standard contractual clauses or other recognized legal mechanisms for data transfers outside the EEA or UK.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal or operational reasons. The updated version will be posted on this website with the revised “Last Updated” date and, where required, we will notify you.

Contact

For questions or to exercise your rights, please contact us via:

Hamburg, Altona

We are the data controller under applicable privacy laws.