data protection

1. Responsible Party

The party responsible for data processing on this website is:
Elysianne
Email: service@elysianne.de

The controller, according to the General Data Protection Regulation (GDPR), is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

---

2. General Information on Data Processing

The use of our website is generally possible without providing personal data. Personal data (e.g., name, address, or email address) is only collected if you voluntarily provide it to us – for example, as part of an order, registration, or contact request.

This data will not be disclosed to third parties without your express consent. We treat your data confidentially and in accordance with statutory data protection regulations.

Please note that data transmission over the Internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

---

3. Rights of the Data Subjects

You have the right:

• to information about your data stored by us (Art. 15 GDPR),

• to correction of inaccurate or incomplete data (Art. 16 GDPR),

• to erasure of your data (Art. 17 GDPR) or – if statutory retention periods exist – to restriction of processing (Art. 18 GDPR),

• to data portability (Art. 20 GDPR),

• to object to processing (Art. 21 GDPR),

• to withdraw consent with future effect (Art. 7 para. 3 GDPR),

• to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR).

---

4. Detailed Data Processing

4.1 Server Log Files

When you visit our website, your browser automatically transmits certain data to our server. This includes:

• IP address

• Date and time of access

• Browser type and version

• Operating system

• Referrer URL (the previously visited page)

• Pages accessed

This data is collected for technical reasons to ensure stability, security, and functionality (legal basis: Art. 6 para. 1 lit. f GDPR). This data is not merged with other data. The data is deleted after seven days at the latest.

---

4.2 Cookies

Our website uses cookies to provide certain functions and improve usability.

Necessary cookies serve the basic functionality of the website (e.g., shopping cart).
Analytics and marketing cookies help us better understand user behavior.

The legal basis is Art. 6 para. 1 lit. b GDPR (for contract-related cookies) or Art. 6 para. 1 lit. f GDPR (legitimate interest).

You can control the use of cookies via your browser settings. Please note that if individual cookies are deactivated, the functionality of the website may be limited.

---

4.3 Customer Account & Order

If you create a customer account or place an order, we process your data (e.g., name, address, email, order information) for the fulfillment and processing of your order.

The legal basis is Art. 6 para. 1 lit. b GDPR.

Data will be deleted after contract completion, taking into account statutory retention periods.

---

4.4 Newsletter

When subscribing to the newsletter, we process your email address (and possibly name) for the regular sending of current offers and content.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

You can unsubscribe from the newsletter at any time via the unsubscribe link or by sending us a message.

---

4.5 Contact

If you contact us by email or form, we process your information to handle your request.

Legal basis: Art. 6 para. 1 lit. b GDPR.
Your data will be deleted as soon as the request has been fully processed.

---

4.6 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, USA. The service analyzes user behavior (e.g., page views, time spent). Your IP address is transmitted anonymously (IP masking).

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in analysis and optimization).

You can prevent collection by Google Analytics with a browser add-on:
https://tools.google.com/dlpage/gaoptout

---

4.7 Facebook Plug-ins

Our website may contain social plug-ins from Facebook (e.g., "Like" button). The provider is Meta Platforms Ireland Ltd., Dublin, Ireland. When these contents are loaded, personal data such as the IP address may be transmitted.

Legal basis: Art. 6 para. 1 lit. f GDPR.
Further information: https://www.facebook.com/policy.php

---

4.8 AI-generated Image Content

For the visual design of our website, we sometimes use image material generated with the help of Artificial Intelligence (e.g., by DALL·E from OpenAI). These images do not show real people and do not contain any personal data.

The use is exclusively for design purposes based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in an appealing and innovative web presence.

---

5. Objection to Advertising Emails

The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising or informational materials is hereby objected to. We reserve the right to take legal action in the event of unsolicited advertising (e.g., spam emails).