Privacy Policy

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website, and we thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data includes all information that can identify you personally.

1.2 The data controller for the processing of data on this website, as defined by the General Data Protection Regulation (GDPR), is Fashion Yard. The data controller for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock icon in your browser's address bar.

DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for displaying the website:

  • The website visited
  • Date and time of access
  • The amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used further in any other way. However, we reserve the right to check server log files later if there are concrete indications of illegal use.

COOKIES

To make your visit to our website more attractive and enable certain functions, we use so-called cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., when you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser during your next visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data, and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies are used to simplify the ordering process (e.g., by remembering the contents of a virtual shopping cart for a subsequent visit to the website). If personal data is processed by some of the cookies we use, the processing is carried out under Article 6(1)(b) of the GDPR either to fulfill a contract or under Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the site visit.

In some cases, we work with advertising partners to make our online offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the data collected in the sections below.

Note that you can configure your browser to inform you about the placement of cookies and to decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or generally. The management of cookie settings differs from browser to browser. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

Please note that the functionality of our website may be limited if cookies are not accepted.

CONTACTING US

If you contact us (e.g., via a contact form or email), your personal data will be processed to handle the contact request and for any follow-up inquiries. The processing of these data is based on Article 6(1)(b) of the GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), if it has been provided.

The data you provide to us will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions—particularly retention periods—remain unaffected. 

DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

If you decide to open a customer account, we collect and process your personal data as specified in Article 6(1)(b) of the GDPR for the purpose of executing a contract or performing pre-contractual measures. The scope of the data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the data controller's address listed above. We store and use the data you provide to execute the contract. After the contract has been fully executed or your customer account has been deleted, your data will be blocked for further use and deleted after the expiry of any statutory retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use as permitted by law.

USE OF DATA FOR DIRECT MARKETING

Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. Mandatory information for sending the newsletter is solely your email address. The provision of additional data is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you an email newsletter unless you have explicitly confirmed that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm that you want to receive newsletters in the future by clicking on a corresponding link.

By activating the confirmation link, you consent to the use of your personal data under Article 6(1)(a) of the GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later time. The data collected by us when registering for the newsletter is used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the data controller mentioned above. After you unsubscribe, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to further data use as permitted by law and about which we inform you in this declaration.

DATA PROCESSING FOR ORDER HANDLING

To process your order, we work together with the service provider(s) listed below, who support us wholly or partly in the execution of concluded contracts. Certain personal data will be transmitted to these service providers as outlined below.

We pass on your payment data to the commissioned credit institution as part of the payment processing, provided this is necessary for payment handling. If we use payment service providers, we explicitly inform you about this below. The legal basis for the transfer of data is Article 6(1)(b) of the GDPR.

Use of Payment Service Providers
When making payments via [specific payment provider], your data (e.g., name, address, and payment information) are collected, processed, and stored by the payment provider. The payment service provider directly processes these payment details for the purpose of payment handling. Please refer to the privacy policy of [payment provider's name] for further details on data processing.

RIGHTS OF THE DATA SUBJECT

The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) with regard to the processing of your personal data, which we inform you about below:

  • Right of Access (Article 15 GDPR): You have the right to obtain information about your personal data that we process, the purposes of processing, the categories of data processed, the recipients of your data, the storage period, and the rights you can exercise.
  • Right to Rectification (Article 16 GDPR): You have the right to demand the correction of incorrect data or completion of incomplete data stored by us.
  • Right to Erasure (Article 17 GDPR): You have the right to request the deletion of your personal data under certain conditions.
  • Right to Restriction of Processing (Article 18 GDPR): You can demand the restriction of the processing of your data in specific situations.
  • Right to Data Portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another data controller.
  • Right to Object (Article 21 GDPR): If we process your data based on legitimate interests, you have the right to object to the processing of your data for reasons relating to your particular situation.
  • Right to Withdraw Consent (Article 7(3) GDPR): You can withdraw consent once given at any time with future effect.

To exercise your rights, please contact the data controller listed above.

 

DURATION OF DATA STORAGE

The duration of the storage of personal data depends on the respective statutory retention period (e.g., retention periods under commercial and tax law). After the expiration of this period, the corresponding data is routinely deleted, provided it is no longer necessary for the fulfillment or initiation of the contract and/or we have no legitimate interest in further storage.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

DATA SECURITY

We use appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are continuously updated in line with technological developments.

CONTACT INFORMATION

If you have any questions about this privacy policy or the processing of your personal data, you can contact the data controller as listed above.

12) THE RIGHTS OF THE DATA SUBJECT

12.1 The applicable data protection laws provide you with comprehensive rights as a data subject (rights to information and intervention) concerning the processing of your personal data, which we inform you about below:

  • Right to Information under Article 15 of the GDPR: You have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or criteria for determining the retention period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected by us, the existence of automated decision-making, including profiling, and if applicable, meaningful information about its logic, as well as the significance and expected consequences of such processing for you, and your right to information about the safeguards under Article 46 of the GDPR when your data is transferred outside the EU for the first time.

  • Right to Rectification under Article 16 of the GDPR: You have the right to immediate correction of inaccurate data and/or completion of incomplete data stored by us.

  • Right to Erasure under Article 17 of the GDPR: You have the right to request the erasure of your personal data if the conditions in Article 17(1) of the GDPR are met. However, this right does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims.

  • Right to Restriction of Processing under Article 18 of the GDPR: You have the right to request the restriction of processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to unlawful processing and instead request the restriction of its use, if you need your data for the establishment, exercise, or defense of legal claims, after we no longer need this data for the purposes it was collected, or if you have objected to processing based on your specific situation, as long as it has not yet been determined whether our legitimate grounds override your rights.

  • Right to Information under Article 19 of the GDPR: If you have invoked the right to rectification, erasure, or restriction of processing with the data controller, the data controller is obliged to notify all recipients to whom your personal data has been disclosed about the rectification or erasure of data or the restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the data controller.

  • Right to Data Portability under Article 20 of the GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request the transfer to another data controller, provided this is technically feasible.

  • Right to Withdraw Consent under Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately erase the relevant data unless further processing is based on a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to Object under Article 21 of the GDPR: If you object to the processing of your personal data for reasons related to your specific situation based on Article 6(1)(e) or (f) of the GDPR, we will cease processing your data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.
    If you wish to object to the processing of your personal data for direct marketing purposes, you have the right to object at any time to such processing. If you object, your personal data will no longer be used for direct marketing.

  • Right to Lodge a Complaint under Article 77 of the GDPR: If you believe that the processing of your personal data is in violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state where you reside, work, or where the alleged infringement took place.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA IN CONNECTION WITH A LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU WISH TO EXERCISE YOUR RIGHT TO OBJECT OR WITHDRAWAL, A SIMPLE EMAIL TO INFO@FASHION-YARD.COM IS SUFFICIENT. PLEASE NOTE: YOU CAN ONLY OBJECT TO FUTURE PROCESSING AND NOT TO PROCESSING THAT HAS ALREADY TAKEN PLACE.

13) DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is based on the respective legal retention period (e.g., retention periods according to commercial and tax law). After this period expires, the respective data will be routinely deleted unless they are no longer necessary for the fulfillment of the contract or the initiation of the contract, and/or we no longer have a legitimate interest in further retention.

14) PROCEDURE FOR CHANGES TO THIS PRIVACY POLICY

We reserve the right to adapt this privacy policy to ensure that it complies with applicable legal requirements or to reflect changes in our services, such as the introduction of new services. The new privacy policy will apply to your next visit.

15) QUESTIONS TO THE RESPONSIBLE PERSON

If you have any questions regarding data protection, please email us or directly contact the person responsible for data protection in our organization:

ATTN: Jeroen, who can be reached at info@fashion-yard.com. Always mention the name of the contact person.

  1. WEB ANALYTICS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies," text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the anonymized IP address) is usually transferred to a Google server in the USA and stored there.

This website uses Google Analytics solely with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by truncating it and excluding direct personal identification. This extension ensures that your IP address is truncated within the EU member states or other parties to the Agreement on the European Economic Area in advance. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. In these exceptional cases, the processing is carried out based on Article 6, Paragraph 1(f) of the GDPR, on the basis of our legitimate interest in statistical analysis of user behavior for the purpose of optimization and marketing.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the storage of cookies by making the appropriate settings in your browser software. However, we would like to point out that in such a case, you may not be able to use all the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Instead of the browser plugin, or in browsers on mobile devices, you can click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics. Google LLC, based in the USA, is certified under the EU-US Privacy Shield "Privacy Shield," which ensures compliance with the data protection level in the EU.

This website also uses Google Analytics to analyze visitor flows across devices, which is done via a user ID. Upon the first visit to a page, the user is assigned a unique, permanent, and anonymized ID that is set across devices. This allows the interaction data from different devices and sessions to be attributed to a single user. The user ID does not contain any personal data and does not transfer them to Google.

The collection and storage of data via the user ID can be objected to at any time with future effect. To do this, you need to deactivate Google Analytics on all the systems you use, such as in another browser or on your mobile device.

You can disable this by using a browser plugin provided by Google (https://tools.google.com/dlpage/gaoptout?hl=en). Instead of the browser plugin, or in browsers on mobile devices, you can click the following link to set an opt-out cookie that prevents the collection of Google Analytics data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics.

You can find more information about Universal Analytics here: https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

  1. RETARGETING/REMARKETING/RECOMMENDATION ADVERTISING

Facebook Custom Audience via Pixel Method

This website uses the "Facebook Pixel" from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, user behavior can be tracked after users have seen or clicked on a Facebook ad. This process is intended to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future ad campaigns.

The data collected is anonymous to us and therefore does not provide us with insights into the identity of users. However, the data is stored and processed by Facebook, which enables linking to the respective user profile and allows Facebook to use the data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/).

You may allow Facebook and its partners to display ads on and off Facebook. For this purpose, a cookie may be stored on your computer. These processing operations only take place when explicit consent has been given based on Article 6, Paragraph 1(a) of the GDPR.

Consent for the use of Facebook Pixel can only be given by users over 13 years old. If you are younger, we ask you to seek consent from your parents or guardian.

Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield "Privacy Shield," ensuring compliance with the data protection level in the EU.

If you wish to disable the use of cookies on your computer, you can set your internet browser to prevent cookies from being stored on your computer in the future or to delete already stored cookies. However, if you disable all cookies, some features of our websites may be limited. You can also disable the use of third-party cookies, such as Facebook's, at the following website for the Digital Advertising Alliance: https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses Google AdWords Remarketing features so that we can advertise this website in Google's search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google places a cookie in your device's browser, so that interest-based ads can automatically be shown based on the pages you have visited, and a pseudonymous cookie ID.

The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6, Paragraph 1(f) of the GDPR.

Further processing only takes place if you have given your consent for Google to link your internet and app browsing history to your Google account and use information from your Google account to personalize ads you see on the web. In this case, if you are logged into Google during your visit to our website, Google uses your data along with Google Analytics data to create and define audience lists for remarketing across devices. For this purpose, your personal data is temporarily linked to Google Analytics data to create audiences.

You can permanently disable the placement of cookies for ad preferences by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/onweb/

You can also get information about cookie placement and adjust settings on the Digital Advertising Alliance website: www.aboutads.info.

Finally, you can set your browser to notify you when cookies are placed and decide individually whether to accept or refuse cookies in certain cases or generally. If you do not accept cookies, some features of our website may be limited.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield "Privacy Shield," ensuring compliance with the data protection level in the EU.

You can find more information and the privacy policy regarding ads and Google here: https://www.google.com/policies/technologies/ads/

  1. THE DATA SUBJECT'S RIGHTS

13.1 The applicable data protection law gives you as the data subject extensive rights regarding the processing of your personal data by the data controller, which we inform you about below:

Right to information according to Art. 15 GDPR: You have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of the right to rectification, deletion, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details and intended consequences of such processing, as well as your right to information about safeguards according to Article 46 of the GDPR in the case of transfer of your data to third countries;

Right to rectification according to Art. 16 GDPR: You have the right to immediate rectification of incorrect data and/or completion of incomplete data stored by us;

Right to erasure according to Art. 17 GDPR: You have the right to request the erasure of your personal data under the conditions of Article 17(1) GDPR. This right does not exist, particularly if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise, or defend legal claims;

Right to restriction of processing according to Art. 18 GDPR: You have the right to request the restriction of processing your personal data as long as the accuracy of your data, which you contest, is verified, if you refuse to delete your data due to unlawful data processing and instead request the restriction of the use of your data, if you need your data for the establishment, exercise, or defense of legal claims, after we no longer need this data for the purpose, or if you have objected based on your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;

Right to notification according to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing against the data controller, the data controller is obliged to notify all recipients to whom your personal data have been disclosed about these actions, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit these data to another controller without hindrance from us;

Right to object according to Art. 21 GDPR: You have the right to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, for reasons arising from your particular situation. This also applies to profiling based on these provisions. If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to withdraw consent according to Art. 7(3) GDPR: If you have given us your consent to the processing of your data, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. For this, you can contact us or use the provided options.

Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of your personal data violates the GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU WISH TO EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA. HOWEVER, FURTHER PROCESSING MAY BE CARRIED OUT IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU WISH TO EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.