Privacy Policy

Privacy Policy

1. Information on the Collection of Personal Data and Contact Details of the Controller

We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data includes all information that can personally identify you.

The data controller for this website under the General Data Protection Regulation (GDPR) is Olive & Lily Savannah. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock icon in your browser bar.

2. Data Collection When Visiting Our Website

If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (server log files). When you visit our website, we collect the following data, which is technically necessary to display the website to you:

  • The website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the site

  • Browser used

  • Operating system used

  • IP address used (in anonymized form, where applicable)

The processing is carried out pursuant to Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used otherwise. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3. Cookies

To make visiting our website attractive and enable certain functions, we use cookies. These are small text files stored on your device.

  • Session cookies are deleted after your browser session ends.

  • Persistent cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit.

Cookies may collect and process specific user information, such as browser and location data, as well as IP addresses. Persistent cookies are automatically deleted after a defined period.

Some cookies simplify ordering processes (e.g., remembering the contents of a virtual shopping cart). Processing via cookies may be based on Art. 6 (1) (b) GDPR (contract execution) or Art. 6 (1) (f) GDPR (legitimate interest in website functionality and user-friendly design).

If we cooperate with advertising partners using third-party cookies, you will be informed separately.

You can adjust your browser to notify you when cookies are set and decide whether to accept cookies individually or reject them entirely. Please note: disabling cookies may limit the functionality of our website.

4. Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. This data is used solely to respond to your request and for technical administration. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in responding to requests). If your contact relates to a contract, the additional legal basis is Art. 6 (1) (b) GDPR.

Your data will be deleted once your inquiry is resolved, provided there are no legal storage obligations.

5. Data Processing for Customer Accounts and Contracts

In accordance with Art. 6 (1) (b) GDPR, we collect and process personal data if you provide it for contract execution or to open a customer account. You can delete your customer account at any time by contacting us.

After contract completion or account deletion, your data will be blocked and deleted after tax and commercial retention periods expire, unless you consent to further use.

6. Use of Data for Direct Marketing

  • Newsletter Subscription: With your consent (Art. 6 (1) (a) GDPR), we will send newsletters via double opt-in. You may unsubscribe anytime.

  • Existing Customers: If you provided your email when purchasing, we may send you similar offers (Art. 6 (1) (f) GDPR). You may object at any time.

7. Data Processing for Order Fulfillment

Your personal data is passed to shipping providers as necessary for delivery, and to payment providers or banks for payment processing (Art. 6 (1) (b) GDPR).

8. Social Media Plugins

We use Facebook, Google+, and Instagram plugins with the Shariff solution, ensuring no direct connection to the respective servers until you actively click. Please see their privacy policies for details:

9. Online Marketing & Analytics

  • Google DoubleClick & AdWords: Used for targeted advertising and conversion tracking.

  • Google Analytics (Universal): Collects anonymized data on website use (with _anonymizeIp()). Opt-outs available: https://tools.google.com/dlpage/gaoptout

  • Facebook Pixel & Google Remarketing: Used for remarketing and custom audiences with your consent (Art. 6 (1) (a) GDPR).

10. Data Subject Rights

Under GDPR, you have the right to:

  • Access (Art. 15)

  • Rectification (Art. 16)

  • Erasure (Art. 17)

  • Restriction (Art. 18)

  • Data portability (Art. 20)

  • Withdraw consent (Art. 7 (3))

  • File a complaint (Art. 77)

You also have the right to object (Art. 21) to processing based on legitimate interest or direct marketing.

11. Data Retention

The duration of storage of personal data is determined by statutory retention periods. After expiry, the data is routinely deleted unless necessary for contract fulfillment or if legitimate interest in retention exists.