PRIVACY POLICY
Information on the Processing of Personal Data
Thank you for visiting our website and for your interest in Sanna’s Closet. Protecting your personal data is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website. Personal data refers to any information that can be used to identify you directly or indirectly.
Data Controller
The data controller responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) is:
Sanna’s Closet
Email: info@sannacloset.com
The data controller determines how and for what purpose personal data is processed.
Our website uses SSL/TLS encryption to ensure secure data transmission. You can recognize this by the “https://” in the browser address bar and the lock symbol. We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Data Collection When Visiting Our Website
If you browse our website without registering or submitting information, we only collect data that your browser automatically transmits to our server (server log files). This includes:
-
Visited pages
-
Date and time of access
-
Amount of data transferred
-
Referring website
-
Browser type and version
-
Operating system
-
IP address (anonymized where possible)
This data is processed based on our legitimate interest in maintaining website security and functionality in accordance with Art. 6(1)(f) GDPR. The data is not merged with other data sources and is only reviewed if there are indications of unlawful activity.
Cookies
Our website uses cookies to improve usability and provide certain functions. Cookies are small text files stored on your device.
Some cookies are deleted when you close your browser (session cookies), while others remain on your device to recognize you during future visits (persistent cookies).
Cookies may collect information such as browser type, device data, and IP address. Processing is based on:
-
Art. 6(1)(b) GDPR where cookies are required for contract-related functions
-
Art. 6(1)(f) GDPR for website optimization and user experience
You can manage or disable cookies through your browser settings at any time. Please note that limiting cookies may affect website functionality.
When required, we request your consent for non-essential cookies through a cookie banner.
Contacting Us
If you contact us via email or a contact form, we collect the personal data you provide solely to respond to your request.
Processing is based on Art. 6(1)(f) GDPR. If your inquiry relates to a contract, Art. 6(1)(b) GDPR applies. Your data will be deleted once the request is resolved, unless legal retention obligations apply.
Customer Accounts and Order Processing
When you place an order or create a customer account, we process your personal data to fulfill contractual obligations under Art. 6(1)(b) GDPR.
You may request deletion of your customer account at any time by contacting us. After order completion or account deletion, your data is retained only as required by legal obligations and then deleted.
Email Marketing
Newsletter Subscription
If you subscribe to our newsletter, we use your email address to send updates and offers. Subscription requires confirmation via a double opt-in process.
Processing is based on your consent under Art. 6(1)(a) GDPR. You can unsubscribe at any time using the link in the newsletter or by contacting us.
Marketing Emails to Existing Customers
If you provided your email during a purchase, we may send offers for similar products based on our legitimate interest under Art. 6(1)(f) GDPR. You may object at any time, and we will stop sending marketing emails immediately.
Order Processing and Payments
To fulfill your order, we may share necessary data with shipping providers and payment processors. Data transfer is limited to what is required for contract fulfillment under Art. 6(1)(b) GDPR.
Payment providers process your data independently under their own privacy policies.
Review Reminder
With your consent, we may send a one-time email reminder requesting a product review. You may withdraw consent at any time by contacting us.
Social Media Plugins
Our website may include links to social media platforms such as Facebook and Instagram. These are embedded as links only, meaning no data is transferred until you click on them.
Once you click a link, the respective platform’s privacy policy applies.
Online Advertising and Analytics
We may use tools such as Google Ads, Google Analytics, and remarketing technologies to analyze website usage and display relevant advertising.
Data processing is based on our legitimate interest in marketing optimization under Art. 6(1)(f) GDPR or your consent under Art. 6(1)(a) GDPR where required.
IP addresses are anonymized where possible. You can opt out via browser settings or provider opt-out tools.
Your Rights Under GDPR
You have the right to:
-
Access your personal data
-
Correct inaccurate data
-
Request deletion of your data
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent at any time
-
File a complaint with a supervisory authority
If your data is processed for marketing purposes, you may object at any time.
Data Retention
Personal data is stored only as long as required by legal obligations or for contract fulfillment. After the retention period expires, data is securely deleted.
Contact
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: