Privacy Policy

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 We’re delighted you’re visiting our website – thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data includes any information that can identify you personally.

1.2 The party responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Victorias Finest. The controller is the individual or legal entity that alone or jointly determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock icon in your browser bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

If you simply browse our website without registering or submitting information in any other way, we only collect the data that your browser transmits to our server (known as “server log files”). This includes:

• The page you visited

• Date and time of access

• Amount of data transmitted (in bytes)

• Referring source or website

• Browser used

• Operating system used

• IP address (possibly anonymised)

This data is processed under Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of the website. This data is not shared or used in any other way. However, we reserve the right to check the server log files later if there are specific indications of unlawful use.

3) COOKIES

To make your visit to our website more enjoyable and enable the use of certain features, we use cookies on various pages. Cookies are small text files that are stored on your device. Some cookies are deleted after your browser session ends (session cookies), while others remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser during future visits (persistent cookies).

If cookies are used, they collect and process certain user information such as browser and location data and IP addresses. Persistent cookies are automatically deleted after a set period, which may vary depending on the cookie.

Some cookies simplify the order process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit). If any of the cookies we use process personal data, this is either based on Article 6(1)(b) GDPR for contract fulfilment, or Article 6(1)(f) GDPR for legitimate interest in ensuring the best possible functionality and user-friendliness of the website.

We may collaborate with advertising partners who help make our website more appealing. In this case, cookies from partner companies (third-party cookies) may be stored on your device when you visit our website. If we work with such partners, you’ll be informed below in detail.

You can set your browser to notify you about cookies and decide on a case-by-case basis whether to accept them, or to block cookies entirely. Each browser is different in how it handles cookie settings. You can find instructions for each browser at the links below:

• Internet Explorer:
  https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies

• Firefox:
  https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
  

• Chrome:
  https://support.google.com/chrome/answer/95647

• Safari:
  https://support.apple.com/kb/ph21411

• Opera:
  https://help.opera.com/en/latest/web-preferences/#cookies

Please note: Disabling cookies may limit the functionality of our website.

4) CONTACTING US

When you contact us (e.g., via contact form or email), we collect personal data. The specific data collected depends on the form used. This data is only used to respond to your enquiry and for the related technical administration.

The legal basis for processing is our legitimate interest in responding to your request under Article 6(1)(f) GDPR. If the purpose of your contact is to enter into a contract, the legal basis is Article 6(1)(b) GDPR.

Your data will be deleted once your enquiry is fully resolved, provided there are no legal retention obligations that prevent deletion.

5) DATA PROCESSING FOR ACCOUNT SET-UP AND ORDER HANDLING

According to Article 6(1)(b) GDPR, we collect and process your personal data when you provide it to us to fulfil a contract or open a customer account. The type of data collected is specified in the respective input forms.

You can delete your customer account at any time by contacting the controller at the address provided above. We store and use the data for contract fulfilment. After the contract has been fully processed or your account deleted, your data will be blocked and then deleted after the legal retention periods (e.g. tax or commercial law) expire—unless you’ve agreed to further use or we’re legally permitted to retain the data.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Signing up to our email newsletter
If you subscribe to our email newsletter, we’ll regularly send updates about our offers. The only required detail is your email address. Other information is voluntary and helps us address you personally.

We use a double opt-in system: You’ll receive an email asking you to confirm your subscription by clicking a link.

By clicking the confirmation link, you consent to us using your data under Article 6(1)(a) GDPR. We also store your IP address and the date/time of signup to prevent misuse.

You can unsubscribe at any time using the link in the newsletter or by contacting us directly. After unsubscribing, your email address is promptly deleted from the mailing list unless you’ve consented to further use or we’re legally permitted to retain it.

6.2 Sending newsletters to existing customers
If you’ve provided your email when buying goods or services, we may use it to send you offers for similar products or services. You don’t need to give separate consent.

This is based on our legitimate interest in personalised direct marketing under Article 6(1)(f) GDPR. You can object to this use of your email address at any time by contacting us. You’ll only pay standard communication charges for this. Upon objection, we’ll stop sending marketing emails.

7) DATA PROCESSING FOR ORDER FULFILMENT

7.1 Shipping and payment
We share your data with the shipping provider when it’s necessary for delivery. For payments, we share your data with the payment provider where necessary. If third-party payment services are used, details are provided below. The legal basis is Article 6(1)(b) GDPR.

7.2 Payment service providers
PayPal
If you pay via PayPal, credit/debit card through PayPal, or direct debit, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for processing. This is based on Article 6(1)(b) GDPR.

PayPal may perform a credit check for some payment options based on its legitimate interest under Article 6(1)(f) GDPR. The result of this check may influence PayPal’s decision to offer payment methods. You can view PayPal's privacy policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing by contacting PayPal, though they may still process your data where necessary for payment.

SOFORT
If you choose “SOFORT” as your payment method, payment is handled by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (part of Klarna Group, Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden).

We pass on the information provided during checkout to SOFORT only as needed. For more information:
https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REQUESTS

We may use your email address once to remind you to leave a review, if you’ve given us consent during or after a purchase, in line with Article 6(1)(a) GDPR.

You can revoke your consent at any time by contacting the data controller.

9) USE OF SOCIAL MEDIA PLUGINS

9.1 Facebook Plugins (Shariff solution)
We use plugins from Facebook (Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) on our website. These are embedded as HTML links using the Shariff method to protect your data. That means no data is transmitted to Facebook unless you click the link.

Meta is certified under the "Privacy Shield" agreement between the EU and USA.

To learn more:
https://www.facebook.com/policy.php

9.2 Google+ Plugins (Shariff solution)
Similar to Facebook, Google+ plugins (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are integrated using HTML links.

More info on Google’s data practices:
https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugin (Shariff solution)
We also use Instagram plugins (Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA), embedded via Shariff to protect your privacy.

More info:
https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google
We use the online marketing tool DoubleClick by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). It sets cookies to show relevant ads, avoid repeat ads, and track campaign performance.

DoubleClick uses cookie IDs to track which ads were shown in which browsers. Processing is based on our legitimate interest under Article 6(1)(f) GDPR in marketing our website effectively.

Google may also track conversions, such as when someone sees an ad and later purchases via the same browser. According to Google, DoubleClick cookies don’t contain personal data.

Due to these tools, your browser automatically connects to Google’s servers. If you’re logged into a Google service, your visit may be linked to your account.

You can disable cookies for conversion tracking by setting your browser to block cookies from www.googleadservices.com:
https://www.google.de/settings/ads

Or visit the Digital Advertising Alliance:
https://www.aboutads.info

Google’s privacy policy:
https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking
We use Google Ads (Google AdWords) and its conversion tracking tool. A cookie is set when someone clicks on one of our Google Ads.

These cookies usually expire after 30 days and don’t personally identify users. We can track how many people clicked on our ads and ended up on a page with a conversion tag.

You can disable this by adjusting your browser settings or using Google’s opt-out plugin:
https://www.google.com/settings/ads/plugin?hl=de

11) WEB ANALYTICS

Google (Universal) Analytics
We use Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). It uses cookies to analyse website usage.

This site uses the extension _anonymizeIp() to anonymise IP addresses. Google processes this on our behalf to analyse site use and compile reports. Your IP address is not combined with other Google data.

You can block cookies or install a plugin:
https://tools.google.com/dlpage/gaoptout?hl=de

Or click this link to opt out via cookie (must be reset if you clear cookies):
Google Analytics deactivate

Learn more:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) RETARGETING / REMARKETING / RECOMMENDED ADS

Facebook Custom Audiences (Pixel method)
We use the Facebook Pixel (Meta Platforms Inc.). If you consent, your behaviour after clicking a Facebook ad can be tracked. The data is anonymous to us but helps us improve ad performance.

More info:
https://www.facebook.com/about/privacy/

To opt out of cookies for advertising, visit:
https://www.aboutads.info/choices/

Google AdWords Remarketing
We also use Google Remarketing to advertise in search results and third-party websites. Google uses cookies and pseudonymous IDs based on your browsing history.

More info and opt-out:
https://www.google.com/settings/ads/onweb/
https://www.aboutads.info

13) YOUR RIGHTS

13.1 Your rights under the GDPR include:

• Access to your stored data (Art. 15)

• Correction of inaccurate or incomplete data (Art. 16)

• Deletion of your data under certain conditions (Art. 17)

• Restriction of processing (Art. 18)

• Notification of recipients if your data is corrected or deleted (Art. 19)

• Data portability (Art. 20)

• Withdrawal of consent (Art. 7(3))

• Lodging a complaint with a data protection authority (Art. 77)

13.2 Right to object
If we process your personal data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time based on your particular situation. If you object, we’ll stop processing unless we have compelling legal grounds.

If your data is used for direct marketing, you may object at any time, and we’ll stop processing your data for those purposes.

14) DATA RETENTION PERIOD

The duration for which we store your personal data depends on legal retention periods (e.g. commercial or tax law). Once these periods expire, we routinely delete the data unless it’s still needed to fulfil or initiate a contract, or we have a legitimate interest in retaining it.