Privacy policy
Privacy Policy
Thank you for your interest in our online shop (https://hallute.com) (hereinafter "shop" or "website"). This Privacy Policy explains transparently how we process your personal data.
1. Who is the controller?
The controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is:
HALLUTE TRADE LLC
Registration number: 2023-002011155
1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, USA
Email: support@hallute.com
Phone: +44 7418 354390
2. What does data protection cover?
Data protection law governs the handling of personal data. Personal data means any information relating to an identified or identifiable natural person (hereinafter "data").
3. What categories of data do we process and where do they come from?
In connection with the use of our shop, we process the following categories of data:
Data you provide: you provide data to us when you place an order, contact us (for example via the contact form or by email) or create a customer account. Exactly which data you provide depends on the respective form. This may include your name, email address, phone number, other contact details such as your address, and, in the case of a refund, your bank account details (IBAN). Each form indicates which data are mandatory. Further information can be found in section 4.
Access data: when you visit our website, we may record access data in so-called server log files.
Cookies: to make the use of our website more convenient and to enable certain functions, we use cookies or similar technologies, among other things for advertising and analytics purposes. Further information can be found in section 4 and in the cookie settings, where you can change your preferences at any time.
Special categories of data: we do not collect or process special categories of personal data.
4. For what purposes and on what legal basis do we process your data?
We process your data for the purposes described below. As a rule, you are under no statutory or contractual obligation to provide your data. Without them, however, we may not be able to provide you with our website and services.
4.1 Performance of a contract (Article 6(1)(b) GDPR)
Creating a customer account: to create a customer account, you must first register. During registration, we process some of your data, for example your name and email address. The scope of the data collected is shown in the registration form.
Processing orders: we collect and process the data you provide when placing an order in order to fulfil our contractual obligations: processing and shipping your order, handling payment on delivery, processing refunds by bank transfer, and communicating with you about your order, for example in the case of questions, returns and complaints. The forms always indicate which data are mandatory and which are voluntary.
4.2 Consent (Article 6(1)(a) GDPR)
Advertising and analytics: with your consent, we use your data to contact you electronically for marketing purposes (newsletter, customer satisfaction surveys, product availability notifications). If you consent, we tailor the content of the newsletter to your interests. With your consent, we also use cookies or similar technologies on our website and on the websites of our advertising partners in order to show you advertising tailored to your interests, to offer functions that make the website easier to use and to analyse how the website is used in order to improve it.
You may withdraw your consent at any time with effect for the future. For marketing messages, simply click the unsubscribe link included in every message or contact us at support@hallute.com or at the address given in section 1. You can withdraw your consent to cookies in the cookie settings.
4.3 Legal obligation (Article 6(1)(c) GDPR)
Data security: as operators of the shop, we are obliged to ensure the security of your data. For this purpose, we may process data as part of security measures.
Retention obligations: we are obliged to retain certain data (for example commercial correspondence and accounting records) for the period required by law. These data can only be deleted after the statutory retention periods have expired, even if you request their deletion earlier.
4.4 Legitimate interests (Article 6(1)(f) GDPR)
On the basis of our legitimate interests, we process data only to the extent necessary and only where your interests, fundamental rights and freedoms do not override them. You can obtain further information about the balancing of interests carried out using the contact details given in section 1.
Server log files: when you visit our shop, we record access data such as the name of the requested file, the date and time of access, the amount of data transferred and the provider from which the request originates. The processing is based on our legitimate interest in ensuring the smooth operation of the website and improving our services.
Country and language settings: based on your IP address, we may suggest the appropriate country and language so that prices are displayed in the correct currency. The processing is based on our legitimate interest in providing a user-friendly website.
Product recommendations: if you make a purchase from us, we may use your email address to send you information about similar products. You may object to this use at any time by clicking the unsubscribe link included in every message or by writing to support@hallute.com.
Fraud prevention: we use device, access and order data to reduce the risk of fraud in online orders, in order to protect ourselves, our customers and other users from misuse. You may object to this processing on grounds relating to your particular situation by writing to support@hallute.com.
5. Who receives my data?
Where we pass data on to service providers, we ensure that their processing, protection and transfer comply with the applicable law. We pass data on to the following recipients:
Shop platform: our website runs on an e-commerce platform which processes data on our behalf as a processor for the purpose of operating the shop (Article 28 GDPR).
Delivery: in order to deliver your order, we pass on the necessary data (name, address, phone number and the amount to be collected on delivery) to courier companies and to warehousing and logistics service providers. This transfer is necessary for the performance of the contract (Article 6(1)(b) GDPR).
Refunds: to process refunds by bank transfer, we pass on the necessary data (name, IBAN and amount) to our bank or payment service provider (Article 6(1)(b) GDPR).
Newsletter, product recommendations and surveys: we use external service providers for the technical delivery of the newsletter, personalised product recommendations and emails, and for carrying out customer satisfaction surveys.
Our partners process your data only in accordance with our instructions and on our behalf. We have contractually ensured that they comply with all data protection rules and that the data passed on are limited to the necessary minimum (Article 28 GDPR).
In addition, in connection with the use of tracking functions on our website, and only if you have given your consent, we pass data on to third parties for advertising purposes. Further information and choices are available in the cookie settings.
6. Are my data transferred to a third country?
Our company and some of our service providers are located outside the European Economic Area (EEA), in particular in the USA. In these countries, the level of data protection may not correspond to that required by the GDPR, and public authorities may have access to data. We therefore only transfer data where the European Commission has decided that the third country or recipient ensures an adequate level of protection (Article 45 GDPR, for example for recipients certified under the EU-US Data Privacy Framework), where we have concluded the EU Standard Contractual Clauses together with supplementary measures (Article 46 GDPR), or where you have given your explicit consent (Article 49(1)(a) GDPR). You can obtain further information and a copy of the Standard Contractual Clauses using the contact details given in section 1.
7. How long are my data stored?
In accordance with Article 5(1)(e) GDPR, we store your data for as long as required by law or for as long as we need them to achieve the purposes described in section 4. After that, the processing of the data is restricted or the data are deleted, in line with the principles of data minimisation and storage limitation. You can obtain further information about deletion and retention periods using the contact details given in section 1.
8. What rights do I have?
You can exercise the rights listed below using the contact details given in section 1.
Right of access: you may request information about the personal data we process about you (Article 15 GDPR). In some cases, this right may be restricted by applicable law.
Right to rectification: if your data are incorrect (or out of date) or incomplete, you may request their rectification or completion (Article 16 GDPR).
Right to erasure: under the conditions set out in Article 17 GDPR, you may request the erasure of your personal data. This right depends, among other things, on whether we still need the data to fulfil our contractual or statutory obligations.
Right to restriction of processing: you may request that we restrict the processing of your data (Article 18 GDPR).
Right to data portability: you may request that we provide the data you have given us in a structured, commonly used and machine-readable format, or transmit them to another controller (Article 20 GDPR).
Right to object: you may object at any time to the processing of your data on grounds relating to your particular situation (Article 21 GDPR). We may not be able to comply with your request in all cases, for example if the processing is required by law. You may object to processing for direct marketing purposes at any time (Article 21(2) GDPR).
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint: we are committed to working with you to find a fair solution to any concerns about the protection of your data. Regardless of this, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
Contact
If you have any questions about the protection of your personal data, please contact us at support@hallute.com.