OnlyGrace GmbH
Neuhusstrasse 37
8633 Wolfhausen
Switzerland

Email: service@onlygrace.de

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offering. Pursuant to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests in the correct presentation of our offering, which prevail within the context of a balancing of interests. All access data will be deleted no later than seven days after your visit to the site.

Hosting services provided by a third party
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected as part of the use of this website or in forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is located in a country outside the European Union for which the European Commission has determined by decision that it provides an adequate level of data protection.

2. Data collection and use for contract processing, contact and when opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we absolutely need the data to process the contract or your contact, and without it you cannot send the order or contact. The data collected can be seen in the respective input forms. We use the data you provide in accordance with Art. 6 (1) (b) GDPR to process the contract and process your inquiries.
If you have given your consent in accordance with Art. 6 (1) (a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.
After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiration of the retention periods required by tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use your data in any other way that is permitted by law and about which we will inform you in this statement. You can delete your customer account at any time and can do so either by sending a message to the contact option described below or via a dedicated function in your customer account.

3. Data transfer

In order to fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select during the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

We also use an external merchandise management system for order and contract processing. The data transfer and processing that takes place in this regard is based on order processing.

We use payment service providers and shipping service providers based in a country outside the European Union. Personal data is only transferred to these companies if necessary to fulfill the contract.

The same applies to the transfer of data to our manufacturers or wholesalers in cases where they carry out shipping for us (drop shipping).

4. Email newsletter

Email advertising with newsletter registration
If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.

You can unsubscribe from the newsletter at any time. You can do so either by sending a message to the contact details below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this policy.

5. Use of data for payment processing

Identity and credit check when selecting Klarna payment services
If you choose Klarna's payment services, we ask for your consent in accordance with Art. 6 (1) (a) GDPR that we may transmit the data necessary for processing the payment and for an identity and credit check to Klarna. In Germany, the data contained in Klarna's Privacy Policy mentioned credit agencies are used.
Klarna uses the information received on the statistical probability of a payment default to make a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the contact details below. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of your personal data by contacting Klarna at any time.

6. Cookies and web analysis

In order to make visiting our website more attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests in an optimized presentation of our offer in accordance with Art. 6 (1) (f) GDPR, which override our legitimate interests in balancing interests. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can find out how long they are stored for in the overview in the cookie settings of your web browser. You can set your browser so that you are informed when cookies are set and decide individually whether to accept them or to exclude cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these settings for each browser at the following links:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for website analysis. This web analysis service is provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ( www.google.de ). This serves to safeguard our legitimate interests in an optimized presentation of our offer, which override our interests in balancing interests, in accordance with Art. 6 (1) (f) GDPR. Google (Universal) Analytics uses methods such as cookies to analyze your use of the website. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will generally not be merged with other Google data. Once the purpose for which it was collected no longer applies and we no longer use Google Analytics, the data collected in this context will be deleted.

To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be obtained here Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click <a href=""javascript:gaOptout()"">this link</a> to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you will need to click the link again.

7. Online marketing

Google Fonts
The script code “Google Fonts” is integrated into this website. Google Fonts is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. ( www.google.de ). This serves to safeguard our legitimate interests in a uniform presentation of the content on our website in accordance with Art. 6 (1) (f) GDPR, which override our interests when balancing interests. In this context, a connection is established between the browser you use and the Google servers. This tells Google that our website was accessed via your IP address.
To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be obtained here Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield. Further information about data processing by Google can be found in the Privacy Policy from Google.

8. Social Media

The purpose and scope of data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your related rights and setting options for protecting your privacy can be found in the data protection information of the providers:

Our online presence on Facebook, YouTube, Instagram

Our presence on social networks and platforms serves to improve and actively communicate with our customers and prospects. We provide information about our products and current special offers there.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called user profiles are created using pseudonyms. These profiles can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your device. Visitor behavior and user interests are stored in these cookies. According to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (approval) to data processing, e.g. using a checkbox, the legal basis for data processing is Art. 6 (1) (a) GDPR.
To the extent that the aforementioned social media platforms are headquartered in the USA, the following applies: For the USA, an adequacy decision has been issued by the European Commission. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be obtained here can be viewed.
For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your related rights and settings options for protecting your privacy, in particular the opt-out option, please refer to the providers' privacy policies linked below. If you still need assistance in this regard, please contact us.

Facebook: https://www.facebook.com/about/privacy/
The data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR, which you here can view.
Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found here .

Google/YouTube: https://policies.google.com/privacy?hl=de

Instagram: https://help.instagram.com/519522125107875

Opt-out option:

Facebook: https://www.facebook.com/settings?tab=ads

Google/YouTube: https://adssettings.google.com/authenticated?hl=de

Instagram: https://help.instagram.com/519522125107875

9. Contact options and your rights

As a data subject, you have the following rights:

• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• pursuant to Art. 16 GDPR, you have the right to immediately request the rectification of inaccurate or incomplete personal data stored by us;
• According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • is necessary to assert, exercise or defend legal claims;
• According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
  • you dispute the accuracy of the data;
  • the processing is unlawful but you oppose its erasure;
  • we no longer need the data, but you need it to assert, exercise or defend legal claims or
  • You have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
• Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or of our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data, as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.