Privacy Policy

1. Controller

The controller responsible for the processing of your personal data on this website is:

Amare Vella, Luca Soares Borchers, Waldburgstraße 54/1, 71032 Böblingen, Germany. Email: info@amarevella.com. Phone: +49 160 5923399.

We have not appointed a data protection officer, as we are not legally required to do so.

2. Your rights

Under the GDPR you have the right to:

request information about the personal data we hold about you (Art. 15)
have inaccurate data corrected (Art. 16)
have your data erased (Art. 17)
have processing restricted (Art. 18)
receive your data in a portable format (Art. 20)
object to processing based on our legitimate interests, including direct marketing (Art. 21)
withdraw consent at any time, with effect for the future (Art. 7 (3))

To exercise any of these rights, email info@amarevella.com. We respond within one month.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

You may also complain to the authority in your own country of residence.

3. Hosting

This store is hosted by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland. Shopify stores our website data on servers in the European Union and processes personal data on our behalf under Art. 28 GDPR.

Shopify automatically records server log data, including your IP address, browser type, operating system, referring page and the time of your request. This is necessary to deliver the site securely and reliably.

Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a secure and functioning website.

4. Visiting the website

When you browse our store without ordering, we process your IP address, device and browser information, the pages you view and the time of your visit. This data is used to deliver the site and to detect abuse.

Legal basis: Art. 6 (1) (f) GDPR. Retention: server logs are deleted after 30 days unless needed to investigate an incident.

5. Placing an order

To process an order we collect your name, billing and delivery address, email address, telephone number where given, order details and payment information.

We use this data to conclude and perform the contract with you, and to meet our legal obligations under commercial and tax law.

Legal basis: Art. 6 (1) (b) GDPR for performance of the contract, and Art. 6 (1) (c) GDPR for statutory retention.

Retention: order and invoice data is retained for ten years under § 147 AO and § 257 HGB.

Recipients of your order data

Sellship GmbH, Allersbergerstraße 185 / Building C1, 90461 Nürnberg, Germany — warehousing, packing and dispatch, as our processor under Art. 28 GDPR.
DHL (Deutsche Post DHL Group) — delivery. DHL receives your name, delivery address and, where you provided it, your email address or telephone number for delivery notifications.
Billbee GmbH and Picqer B.V. — order and warehouse management software used to process your order, as our processors.
Our payment providers, see section 6.
Our tax advisor, where required for bookkeeping.

6. Payments

Depending on the payment method you choose, your payment data is transmitted to the respective provider. We do not receive or store full card numbers.

Shopify Payments — Shopify International Limited, Dublin, Ireland
PayPal — PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Klarna — Klarna Bank AB (publ), Stockholm, Sweden. Klarna may carry out a credit assessment and process data for fraud prevention on the basis of its own legitimate interest. Klarna's own privacy notice applies: klarna.com/privacy
Apple Pay, Google Pay, Shop Pay — processed through the wallet provider and Shopify Payments

Legal basis: Art. 6 (1) (b) GDPR for performance of the contract, and Art. 6 (1) (f) GDPR for fraud prevention.

7. Customer accounts

If you create an account, we store the details you enter and your order history so you can see past orders and check out faster. You can delete your account at any time by emailing info@amarevella.com.

Legal basis: Art. 6 (1) (b) GDPR.

8. Contacting us

When you email us, use our contact form or write to us through Shopify Inbox, we process the details you provide in order to answer you. Our contact forms are provided by Hulk Form Builder (HulkApps) and Shopify Forms, and chat messages by Shopify Inbox, each as our processor.

Legal basis: Art. 6 (1) (b) GDPR where your message concerns a contract, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering enquiries.

Retention: enquiries are deleted once they are settled and no retention period applies.

Our newsletter is sent through Klaviyo Inc., 125 Summer Street, Boston MA 02110, USA, as our processor. Klaviyo is certified under the EU–US Data Privacy Framework; transfers are additionally covered by standard contractual clauses under Art. 46 GDPR.

If you subscribe, we process your email address, and where you provide them your name and country, to send you our newsletter. Klaviyo records whether emails are opened and which links are clicked, so we can see which content is relevant.

Legal basis: Art. 6 (1) (a) GDPR, your consent. You can withdraw consent at any time using the unsubscribe link in every email or by writing to info@amarevella.com. Withdrawal does not affect processing carried out before it.

Retention: until you unsubscribe. Records of your consent are kept for as long as needed to demonstrate it.

10. Product reviews

Product reviews on our site are collected and displayed by Judge.me Ltd, 128 City Road, London EC1V 2NX, United Kingdom, as our processor. The United Kingdom is covered by an adequacy decision of the European Commission.

If you submit a review, we process your name or display name, your rating and text, any images you upload and your email address.

Legal basis: Art. 6 (1) (a) GDPR where you consent to your review being published, and Art. 6 (1) (f) GDPR for our legitimate interest in showing customer feedback.

11. Size recommendation

Our size recommendation tool (SmartSize) processes the body measurements you enter to suggest a size. The values are not linked to your identity and are not stored beyond your session.

Legal basis: Art. 6 (1) (a) GDPR. These features run only if you start them.

12. Cookies and tracking

We use cookies and similar technologies. Details of each category and how to change your choice are in our Cookie Notice.

Strictly necessary cookies are set on the basis of § 25 (2) TDDDG and Art. 6 (1) (f) GDPR. All other cookies and tracking technologies are set only with your consent under § 25 (1) TDDDG and Art. 6 (1) (a) GDPR, which you give through our consent banner and can withdraw at any time.

Meta Pixel — Meta Platforms Ireland Ltd, Dublin. Measures the success of our advertising on Facebook and Instagram and allows us to show ads to people who have visited our site. Data may be transferred to Meta Platforms Inc. in the USA.
TikTok Pixel — TikTok Information Technologies UK Ltd. Same purpose for advertising on TikTok.
Pinterest Tag — Pinterest Europe Ltd, Dublin. Same purpose for advertising on Pinterest.
Google Analytics / Google Ads — Google Ireland Ltd, Dublin. Measures how our site is used and the success of our advertising.
Shopify Analytics — aggregated statistics about how our store is used.

All of these are set only after you consent, and transfers to the USA are covered by standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

13. Other services on this site

Nova Multi Currency Converter — detects your country to display estimated prices in your local currency.
Transcy and Translate & Adapt — serve translated content.
VF Image Resizer and Section Store — theme and image functionality, no personal data processed beyond delivery of the page.

14. Transfers outside the EU

Some of our providers are based outside the European Economic Area, in particular in the USA and the United Kingdom. Where this is the case, transfers are based on an adequacy decision of the European Commission, on standard contractual clauses under Art. 46 (2) (c) GDPR, or on your explicit consent under Art. 49 (1) (a) GDPR.

You can request a copy of the safeguards in place by emailing info@amarevella.com.

15. Security

This site uses TLS encryption, recognisable by the lock symbol in your browser. We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. No transmission over the internet can be guaranteed to be completely secure.

16. Children

Our store is not directed at children. We do not knowingly collect data from persons under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

17. Changes

We may update this Privacy Policy to reflect changes in our processing or in the law. The current version always applies and is dated at the top of this page.