Privacy Policy

INFORMATION ON PERSONAL DATA COLLECTION AND RESPONSIBLE PARTY

1.1 We are delighted that you are visiting our website and appreciate your interest. Below, we explain how we handle your personal information when you use our website. Personal data includes any information that can be used to identify you personally.


1.2 The entity responsible for data processing on this website under the General Data Protection Regulation (GDPR) is Everleigh Rose. The responsible party is the individual or organization that determines the purposes and methods of processing personal data, either independently or jointly with others.


1.3 This website employs SSL/TLS encryption to ensure the security of personal data and other sensitive information (such as orders or inquiries submitted to the responsible party). You can identify a secure connection by the “https://” in your browser’s address bar and the padlock icon.


No automated decision-making or profiling takes place that would have legal effects or similarly significant impacts on you, as described in Art. 22 GDPR.

 

 DATA COLLECTION DURING WEBSITE VISIT

When accessing our website for informational purposes only, i.e., without registering or submitting personal information, we collect only the data your browser sends to our server (so-called server log files). This includes:

 

  • The webpage you visited

  • Date and time of access

  • Amount of data transmitted (in bytes)

  • Source/referrer from which you accessed our website

  • Browser type and version

  • Operating system

  • IP address (anonymized where applicable)

 


Processing is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in maintaining the stability and functionality of our website. This data is not shared with third parties unless legally required. We may review server logs later if there is evidence of unauthorized activity.

 

COOKIES

 

To enhance your browsing experience and enable specific functionalities, our website uses cookies—small text files stored on your device. Some cookies are deleted after your session (session cookies), while others remain (persistent cookies) to recognize your device on subsequent visits.


Cookies may collect information such as browser type, location, and IP address. Persistent cookies are automatically removed after a set period, depending on the type.


Some cookies help simplify processes, e.g., retaining items in a shopping cart. If cookies process personal data, this occurs under Art. 6(1)(b) GDPR for contract execution or Art. 6(1)(f) GDPR to optimize website functionality and user experience.


We may collaborate with advertising partners who store third-party cookies on your device to personalize offers. You will be informed about any such data collection.


You may adjust your browser settings to accept, reject, or delete cookies. For guidance, consult your browser’s help menu:

 

  • Internet Explorer: Manage Cookies

  • Firefox: Allow and Block Cookies

  • Chrome: Cookie Settings

  • Safari: Manage Cookies

  • Opera: Cookie Preferences

 


On your first visit, we will request consent for non-essential cookies through a cookie banner. You may update your preferences at any time. Note that declining cookies may limit some website functionality.

 

 

CONTACTING US

 

When contacting us (via email or contact form), personal data is collected solely to respond to your inquiry and manage associated administrative tasks.


Legal basis: Art. 6(1)(f) GDPR for legitimate interest. If your contact relates to a contract, Art. 6(1)(b) GDPR also applies. Data will be deleted once your inquiry is resolved, unless retention is required by law.

 

 

CUSTOMER ACCOUNTS AND CONTRACT PROCESSING

 

When opening an account or completing a purchase, we collect and process personal data as required under Art. 6(1)(b) GDPR. The data required will be indicated in the respective forms.


You may delete your account anytime by notifying Everleigh Rose. Data required for contract fulfillment will be stored and restricted after completion, then deleted following legal retention requirements, unless you have consented to further use or we are legally permitted to retain data.

 

 

DIRECT MARKETING

 

6.1 Newsletter Subscription

 

By subscribing to our newsletter, you consent to receiving updates about promotions and new products. Only your email address is mandatory. Additional information is optional to personalize content.


We use double opt-in: a confirmation email ensures consent. Collected data is stored for newsletter purposes only. You may unsubscribe anytime via the link or by contacting info@everleighrose.com.

 

6.2 Marketing to Existing Customers

 

We may email offers related to previously purchased products. This is based on legitimate interest (Art. 6(1)(f) GDPR). You may object at any time by contacting info@everleighrose.com. Basic transmission costs apply.

 

 

ORDER PROCESSING

 

7.1 Data Use for Delivery

 

Personal data may be shared with delivery services for order fulfillment. Payment information may be shared with payment providers if necessary. Legal basis: Art. 6(1)(b) GDPR.

 

7.2 Payment Providers

 

PayPal and SOFORT (Klarna Group) may process payment data as required for order completion. All transfers comply with Art. 6(1)(b) GDPR.


Further details on their privacy policies can be found on the respective providers’ websites.

 

 

SOCIAL MEDIA PLUGINS

 


Our website uses social plugins (Facebook, Instagram, Google+) embedded via HTML links to protect your privacy. No data is transmitted to these services unless you interact with the plugin. These services operate under the EU-US Privacy Shield.

 

 

 

 

ONLINE MARKETING & ANALYTICS

 


We may use:

 

  • Google Analytics (with anonymized IPs)

  • Google Ads / AdWords Conversion Tracking

  • Facebook Pixel

 


All tools are used with either legitimate interest (Art. 6(1)(f)) or explicit consent (Art. 6(1)(a)). You may opt-out via browser settings or respective opt-out tools.

 

 

RIGHTS OF DATA SUBJECTS

 


You have rights under GDPR, including:

 

  • Access (Art. 15)

  • Rectification (Art. 16)

  • Erasure (Art. 17)

  • Restriction of Processing (Art. 18)

  • Notification (Art. 19)

  • Data Portability (Art. 20)

  • Withdraw Consent (Art. 7(3))

  • Lodge a Complaint (Art. 77)

 


Right to object to processing for legitimate interests or direct marketing is also granted.

 

 

DATA RETENTION

 


Data is retained according to legal requirements (commercial and tax laws). After this period, data is deleted unless needed for contract fulfillment or other legitimate purposes.

 

 

CONTACT

 


For questions regarding this Privacy Policy or your data rights, please contact us at:


Everleigh Rose

Email: info@everleighrose.com