data protection
Privacy Policy
1. Responsible body
Responsible for data processing on this website is:
Elysianne
Email: service@elysianne.de
The controller within the meaning of the General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2. General information on data processing
You can generally use our website without providing any personal data. Personal data (e.g., name, address, or email address) is only collected if you provide it to us voluntarily—for example, as part of an order, registration, or contact request.
This data will not be shared with third parties without your express consent. We treat your data confidentially and in accordance with statutory data protection regulations.
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security gaps. Complete protection of data from access by third parties is not possible.
3. Rights of data subjects
You have the right:
-
to information about your data stored by us (Art. 15 GDPR),
-
to rectification of incorrect or incomplete data (Art. 16 GDPR),
-
to deletion of your data (Art. 17 GDPR) or – if statutory retention periods apply – to restriction of processing (Art. 18 GDPR),
-
to data portability (Art. 20 GDPR),
-
to object to processing (Article 21 GDPR),
-
to revoke consent with effect for the future (Art. 7 para. 3 GDPR),
-
to lodge a complaint with the competent data protection supervisory authority (Article 77 GDPR).
4. Data processing in detail
4.1 Server log files
When you visit our website, your browser automatically transmits certain data to our server. This includes:
-
IP address
-
Date and time of access
-
Browser type and version
-
Operating system
-
Referrer URL (the previously visited page)
-
pages viewed
This data is collected for technical reasons to ensure stability, security, and functionality (legal basis: Art. 6 (1) (f) GDPR). It will not be merged with other data. The data will be deleted after seven days at the latest.
4.2 Cookies
Our website uses cookies to provide certain features and improve user experience.
Required cookies ensure basic website functionality (e.g. shopping cart).
Analysis and marketing cookies help us better understand user behavior.
The legal basis is Art. 6 (1) (b) GDPR (for contract-related cookies) or Art. 6 (1) (f) GDPR (legitimate interest).
You can control the use of cookies through your browser settings. Please note that disabling individual cookies may limit the functionality of the website.
4.3 Customer account & order
When you create a customer account or place an order, we process your data (e.g. name, address, email, order information) to fulfill and process your order.
The legal basis is Art. 6 (1) (b) GDPR.
Data will be deleted after contract completion, taking into account statutory retention periods.
4.4 Newsletter
When you subscribe to the newsletter, we process your email address (and possibly your name) to regularly send you current offers and content.
Legal basis: Art. 6 (1) (a) GDPR (consent).
You can unsubscribe from the newsletter at any time using the unsubscribe link or by sending us a message.
4.5 Contact
If you contact us by email or form, we will process your information to process your request.
Legal basis: Art. 6 (1) (b) GDPR.
Your data will be deleted as soon as the request has been fully processed.
4.6 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, USA. This service analyzes user behavior (e.g., page views, length of stay). Your IP address is transmitted anonymously (IP masking).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in analysis and optimization).
You can prevent Google Analytics from collecting data using a browser add-on:
https://tools.google.com/dlpage/gaoptout
4.7 Facebook plug-ins
Our website may contain social plug-ins from Facebook (e.g., the "Like" button). The provider is Meta Platforms Ireland Ltd., Dublin, Ireland. When loading this content, personal data such as your IP address may be transmitted.
Legal basis: Art. 6 (1) (f) GDPR.
Further information: https://www.facebook.com/policy.php
4.8 AI-generated image content
For the visual design of our website, we sometimes use images generated using artificial intelligence (e.g., DALL·E from OpenAI). These images do not depict real people and do not contain any personal data.
The use is exclusively for design purposes based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in an appealing and innovative website.
5. Objection to advertising emails
We hereby expressly object to the use of contact information published in accordance with our legal notice to send unsolicited advertising or information materials. We reserve the right to take legal action in the event of unsolicited advertising (e.g., spam emails).
