Privacy policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.bavarishop.com (the “Site”).

Right to data portability
You have the right to receive the data that we process on the basis of your consent or in the fulfilment of a contract, and to have your data transmitted to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible person, this will only be done to the extent that it proves technically feasible.

SSL or TLS encryption
Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries you may send to us as the site operator. You can recognise an encrypted connection by noticing a change in the browser address line from "http: //" to "https: //" and the appearance of a lock symbol.

SSL or TLS encryption ensures that any data you send us cannot be read by third parties.

Encrypted payment transactions on this website
If, after the conclusion of a chargeable contract, there is an obligation to provide us with your payment details (e.g. an account number for direct debit authorisation), this data will be required for payment processing.

Payment transactions via our various payment methods (ApplePay, GooglePay, PayPal, Visa/ MasterCard/ American Express, ShopifyPay) are made exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by noticing a change in the browser address line from "http: //" to "https: //" and the appearance of a lock symbol.
Encrypted communication means the payment details you submit to us cannot be read by third parties.

Disclosure of information, blocking, deletion
You have the right to free information about your stored personal data, its origin and recipient, and the purpose of any data processing. And where necessary, you have a right to request the rectification, blocking or deletion of this data. You can contact us at any time at the address given below.

PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (eg credit card numbers, PayPal, ApplePay, GooglePay or other information that will be required for payment processing), email address, and phone number. We refer to this information as “Order Information”.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfil any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
- Communicate with you;
- Screen our orders for potential risk or fraud; and
- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
- Other data can be used to analyse user behaviour.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to otherwise protect our rights.

BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt-out of targeted advertising by using the links below:
- Facebook Group: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
- Pinterest https://help.pinterest.com/en/article/edit-personalization-settings

Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Social media
Shared content via plugins
Our site content can be shared on social networks like Facebook, Instagram, Pinterest or Twitter in a way which is data protection compliant. Direct contact between these networks and users is not established until a user actively clicks on a social media button.

This action does not initiate an automatic transfer of user data to the operators of these platforms. If the user is logged in to one of these social networks, an information window will appear when using Facebook & Twitter social media buttons. This allows the user to confirm the text content before submission.

Our users can share our website content on social networks in a way which is data protection compliant, and which does not allow network operators to create a full surfing profile.

Facebook plugins (Like & Share button)
Facebook social network plugins provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our pages. These Facebook plugins can be recognised on our site by the Facebook logo or the "Like-Button" label. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, this plugin establishes a direct connection between your browser and the Facebook server. Thus Facebook receives the information that you have visited our site as an IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link our page content to your Facebook profile. As a result, Facebook can associate your visit to our pages with your user account. Please note that we as the provider of these pages are not aware of the content of the data transmitted and its subsequent use by Facebook. For more information, please refer to Facebook’s data protection policy at https://de-de.facebook.com/policy.php.

If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account prior to your visit.

Twitter plugin
Twitter social media service functions are integrated within our site. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When using Twitter and the "Re-Tweet" function, any websites you visit will be linked to your Twitter account and shared with other users, and such data will also be transmitted to Twitter. Please note that we as the provider of these pages are not aware of the content of the data transmitted and its subsequent use by Twitter. For more information, please refer to Twitter’s data protection policy at: https://twitter.com/privacy.

You can change your Twitter privacy settings under Account Settings at https://twitter.com/account/settings.

Pinterest plugin
Pinterest social media service functions are integrated within our site. These features are provided by Pinterest Inc. at 651 Brannan Street, San Francisco, CA 94103, USA. When using Pinterest and the "Pin it" function, any websites you visit will be linked to your Pinterest account and shared with other users, and such data will also be transmitted to Pinterest. Please note that we as the provider of these pages are not aware of the content of the data transmitted and its subsequent use by Pinterest. For more information, please refer to Pinterest’s data protection policy at: https://policy.pinterest.com/en/privacy-policy.

You can change your Pinterest privacy settings under Account Settings at https://www.pinterest.co.uk/settings/#accountBasics.

Analysis tools and advertising
Google Analytics
Our website uses some functions of the web analytics service Google Analytics, provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses what are known as "cookies". These are text files stored on your computer which facilitate an analysis of your use of our website. The information generated by a cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The grounds for storing Google Analytics cookies are cited in Art. 6 (1) f GDPR. A website operator has a legitimate interest in analysing user behaviour in order to optimise its advertising and website performance.

IP anonymisation
IP anonymisation is active on our website. As a result, your IP address will be shortened by Google prior to its transmission to the United States within member states of the European Union, or other parties to the agreement within the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of our website, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator. The IP address Google Analytics receives from your browser will not be merged with any other Google data.

Browser plugin
You can prevent the storage of cookies by activating the relevant setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to their fullest extent. In addition, you may also prevent Google from collecting data generated by cookies related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be installed which will prevent the collection of your data during future visits to this website: disable Google Analytics. For more information about how Google Analytics handles user data, please refer to Google’s data protection policy at :
https://support.google.com/analytics/answer/6004245?hl=en

Order processing
We have entered into a contract data processing agreement with Google whereby the strict requirements of the data protection authorities are fully implemented when Google Analytics is employed.

Google Analytics and demographics
Our website uses the Google Analytics demographics feature. That means reports containing statements about the age, gender and interests of our website visitors can be produced. This data is obtained via Google’s interest-based advertising and third-party visitor data. None of this data can be assigned to any specific person. You can disable this feature at any time via the ad settings in your Google Account, or initiate a general prohibition which will prevent Google Analytics from collecting your data, as outlined in the section "Objection to data collection".

Google AdWords and Google Conversion Tracking
Our website uses Google AdWords, an online advertising program provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we also use a feature known as conversion tracking. Here, a conversion tracking cookie is set whenever an ad served by Google is clicked. Cookies are small text files that the Internet browser stores on a user's computer. These cookies expire after 30 days and are not used to personally identify the user. When a user visits certain pages of our website while the cookie is still valid, both we and Google can recognise that the user clicked on an ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information gathered via the conversion cookie is used to generate conversion statistics for those AdWords advertisers who have opted for conversion tracking. Customers receive a report about the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive any information which could personally identify a user. If you don’t want to participate in tracking, you can easily opt out by disabling Google Conversion Tracking cookies in your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics.

The grounds for storing "conversion cookies" are cited in Art. 6 (1) f GDPR. A website operator has a legitimate interest in analysing user behaviour in order to optimise its advertising and website performance.

For more information about Google AdWords and Google Conversion Tracking, see Google’s data protection policy at: https://www.google.com/settings/ads/onweb/.

You can set your browser so you are informed about the setting of cookies and allow cookies only in individual cases. You can also choose to accept certain kinds of cookies, opt for a general exclusion, or enable the automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website: https://www.google.com/policies/technologies/ads/.

Facebook pixels
Our website uses Facebook's visitor action pixel for conversion measurement. This feature is provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

This enables the tracking of a visitor’s behaviour after he has been redirected to the provider's website by clicking on a Facebook ad. As a result, the effectiveness of Facebook advertisements can be evaluated for statistical and market research purposes and future advertising measures can be refined and optimised.

Any data collected is anonymous to us as the website operator, so we cannot draw conclusions about user identity. However, the data is stored and processed by Facebook in a way which makes a connection to the respective user profile possible, and Facebook can also use the data for its own advertising purposes in accordance with Facebook’s data usage directive. As a result, Facebook can enable ads to be displayed both on Facebook and outside of Facebook. As site operators, we cannot influence this data use.

For more information about how to protect your privacy, please refer to Facebook’s data protection policy at: https://www.facebook.com/about/privacy/.

You can also disable the remarketing Custom Audiences feature in the Ad Settings section by visiting https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen To achieve this, you must be logged in to Facebook.

If you do not have a Facebook account, you can still opt out of Facebook-based advertising via the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/uk/your-ad-choices

Newsletter
Newsletter data
If you wish to receive our newsletter mentioned on our website, we will require your e-mail address, as well as information allowing us to verify you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data will be collected, except on a purely voluntary basis. We use this data exclusively for delivery of the requested information and will not pass your data on to third parties.

The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Article 6 (1) a GDPR). You can revoke your consent to the storage of your data and e-mail address and its use for sending the newsletter, for example via the "unsubscribe" newsletter link. Any prior data processing operations remain lawful and unaffected by your revocation.

The data you deposit with us for the purpose of obtaining the newsletter will be saved until you cancel your newsletter registration. Any data stored with us for other purposes (such as e-mail addresses for the member's section) will remain unaffected.

DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS
If you are a European resident, you have the right to access the personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfil contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact our Privacy Compliance Officer: Benyamin Amini by e‑mail at info@bavarishop.com or by mail using the details provided below:

Bavari Ltd - Bavarishop.com
[Re: Privacy Compliance Officer]
71-75 Shelton Street, Covent Garden, WC2H 9JQ LONDON, United Kingdom