Controller according to the General Data Protection Regulation (GDPR) and other national data privacy laws of member states, as well as other data privacy regulations is:

Petite Ayami GmbH

Osterbrooksweg 35-45, Schenefeld, 22869

E-Mail: info@petite-ayami.com

Categorically, we collect and use our users‘ personal data only as far as it is necessary to operate a functional website as well as provide our contents and services. The collection and use of personal data are carried out periodically only after obtaining the user’s consent. There is an exception to this in such cases where obtaining consent ahead of time is not possible for practical reasons and the processing of data is permitted per legal provisions.

Where we obtain the data subject’s consent for processing operations for personal data, Article 6(1) lit. a EU General Data Protection Regulation (GDPR) serves as legal basis for the processing of personal data. When processing personal data as part of fulfilling a contract of which the data subject is a contracting party, Article 6(1) lit. b GDPR serves as legal basis. This also applies to processing operations essential to the implementation of precontractual measures. Where the processing of personal data is necessary for compliance with a legal obligation which our business is subject to, Article 6(1) lit. c GDPR serves as legal basis.

If the processing is necessary to the preservation of a legitimate interest held by our business or a third party and the data subject’s interests, constitutional rights and fundamental freedoms do not outweigh this, Article 6(1) lit. f GDPR serves as legal basis for the processing.

The data subject’s personal data will be deleted or made unavailable as soon as they are no longer necessary for fulfilling the purpose of their collection. The recording of data can also occur when it is provided for by European or national legislature in Union law regulations, laws, or other provisions (e.g. in accordance with German Tax Code in certain cases for up to 10 years) which the data subject is subject to. Data blocking or deletion will also occur if a storage period required by the mentioned standards expires unless there is a necessity for the continued storage of the data for the conclusion or the fulfilment of a contract.

With every visit to our website, our system will automatically collect data and information from the visiting computer’s operating system.

The following data will be collected:

• Information about the type and version number of the used browser
• The user’s operating system
• The user’s internet service provider
• The user’s IP address

Article 6(1) lit. f GDPR serves as legal basis for the temporary storage of data. Temporarily storing the IP address is necessary to ensure the website is delivered to the user’s computer. Therefore, the user’s IP address needs to be stored for the duration of the session. The data is deleted as soon as it no longer needed to achieve the purpose of its storage. In the case of the data recorded for the delivery of the website, this will occur when the respective session has ended.

This website uses  WordPress.com-Stats, a web analytics software provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA, using Quantcast’s Inc. tracking technology, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA and comScore Inc., 11950 Democracy Drive, Suite 600 Reston, VA 20190, USA.. WordPress.com-Stats uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address anonymized prior to its storage) will be stored on the server in the USA. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The legal basis is Art. 6 (1) lit. f GDPR.

You can opt-out from being tracked by Quantcast with effect for the future by setting an opt-out cookie  in your Browser: http://www.quantcast.com/opt-out

You can opt-out from being tracked by comScore with effect for the future by setting an opt-out cookie  in your Browser: http://www.scorecardresearch.com/OptOutTag.aspx.

If you delete your browser’s cookies, you’ll have to set these opt-out cookies again.

We maintain an online presence within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services.

We would like to point out that you use these pages and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information we offer on our website https://petiteayamicom.wpcomstaging.com/.

When you visit our various online presences, the respective provider of the website records your IP address and other information that is available on your PC in the form of cookies. The data collected about you in this context will be processed by the respective provider and possibly transferred to countries outside the European Union. What information the providers of the services receive and how this is used is described in general in their respective data usage guidelines. There you will also find information about contact options and setting options for advertisements.

As the provider of the information service, we also collect and process data from your use of our service for the purpose of advertising and communication, to answer your questions and to advertise various products, services and events, and for the purposes of applicant management. The legal basis is Art. 6 (1) lit. f and b GDPR.

Also in the case of requests for information and the assertion of user rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. If you still need help, you can of course contact us.

You can also find us at: 

• https://www.instagram.com/lasultanedesaba_germany/ on http://www.Instagram.com. The Instagram service is one of the Facebook products provided by Facebook Ireland Limited. We use the technical platform and the services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbor, Dublin 2, Ireland for the information service offered there. You can find the complete data guidelines of Instagram here: https://help.instagram.com/519522125107875?helpref=page_content

You can fill out a contact form on our website. We use such contact forms in order to simplify communications. If a user chooses this option, the following data is transmitted to us and stored:

• Name (required field)
• Email address (required field)
• All information you enter into the “message” field

Additionally:

• The user’s IP address

Alternatively, you can contact us at the provided email address. In that case the user’s personal data transmitted via the email will be stored. In this context, no data will be disclosed to third parties. The data will be exclusively used for processing the conversation.

Article 6 (1) lit. f GDPR serves as legal basis for the processing of data which has been transmitted as part of an email. If the email communications aim for the signing of a contract, Article 6 (1) lit. b GDPR serves as additional legal basis for the processing.

The processing of personal data from the input screen is solely used to facilitate communications. In the case of email communications, this also includes the necessary legitimate interest in the processing of data. Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary for fulfilling the purpose of their collection.

When visiting us on-site or as part of our various events you have the opportunity to sign up for our email newsletter, text message information services or phone services.

In order to do this, you will receive a consent form which you can fill out in person or online.

Email Newsletters

In order to dispatch the newsletter you signed up for, we use a newsletter dispatch tool by our providers MailPoet Sending Service and Mailchimp. We use the so-called double opt-in process for newsletter signups. I.e. after you sign up we will send you an email to the email address you stated where we ask you for a confirmation that you wish to receive the newsletter. For the purpose of signing up for the newsletter, you will be redirected to an external website. Our newsletter subscribers’ email addresses as well as the login data necessary for recording/ verification of newsletter signup are stored exclusively on servers located in the European Union/ European Economic Area. This data is only processed on our account to dispatch newsletters and to store login data within the tool; it will not be used for other purposes and especially not for e.g. dispatch our own email messages to you via our provider. Art. 28 GDPR (processing by a processor) is the legal basis for the use of the provider.

Article 6 (1) lit. f GDPR acts as legal basis for the analysis of newsletter use (Processing necessary preserve legitimate interests). If you do not wish for analysis of the newsletter, we recommend you unsubscribe from the from the newsletter by clicking the “unsubscribe” button included in every newsletter.

Please note with the revocation of your consent that all our communication channels have a transitional period and a processing period because we work with external service providers and need a certain lead time.

On our website we also offer the possibility to purchase our products in an online store. Here we process your personal data on the basis of Art. 6 Para. 1 lit. b GDPR.

All other information is optional and is only used for better customer communication or other commercial law obligations.

Cookies are also used when using our online store; you can find more information on this under the “Cookies” section.

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions (e.g. due to the tax code in certain cases for 10 years) to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data in order to conclude or fulfil a contract.

Transmission of data to transport service providers

For the purpose of delivering ordered goods, we work together with logistics service providers / transport companies and / or shipping partners: The following data can be transmitted to them for the purpose of delivering the ordered goods or to announce them: first name, last name, postal address, e-mail address , Telephone number (e.g. for forwarding announcements). The legal basis for processing is Art. 6 (1) lit. b GDPR.

The website offers different payment methods, Paypal or credit card payment. In order to guarantee the security of your data during the transfer to the selected payment service provider, we work with an encryption method via HTTPS. The legal basis is Article 6 Paragraph 1 lit. b GDPR, as the processing of the data is necessary for the implementation of the contract between you and us.

Paypal

On our website you have the opportunity to purchase Petite Ayami products. If a user makes use of this option, the following data will be transmitted to us and stored:

• Salutaton
• First Name Last Name
• Street / no., Postal code and city, country
• E-mail adress
• The IP address of the user
• The date and time of the message

The data will only be used for sales and forwarded to the Paypal payment service to process the payment process. Your data will be sent to PayPal (Europe) S.à r.l. & Cie, S.C.A. , with registered office at 22-24 Boulevard Royal, L-2449 Luxembourg, transmitted and processed. This includes in particular the data linked to your user account. You can find more information on PayPal’s data protection in the PayPal data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

The legal basis for the processing of the data transmitted in the course of the purchase is Art. 6 Para. 1 lit. b GDPR. The processing of the personal data from the input mask serves us only to process your purchase. The other personal data processed during the sending process serve to prevent misuse of the form and to ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal retention periods (commercial code or tax code) to prevent this. 

If your personal data is being processed, you are the data subject in accordance with the GDPR and you have the following rights against the controller:

• You are entitled to information from the controller whether any personal data concerning you is being processed by us.
• You have a right to rectification, completion, restriction, and erasure of your personal data against the controller.
• You have a right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format (right to data portability).
• You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based Article 6(1) GDPR lit. e or f.
• You have the right to withdraw your consent at any time with regards to Article 7(3) GDPR.
• Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement if you consider the processing of personal data relating to you infringes the GDPR.

If you want to assert any of your rights, you can contact us at info@petite-ayami.com or via the contact persons stated in the legal notice.

We prohibit the use of the Website by anyone under the age of 18 without the consent of a parent or a legal guardian, who must also be at least 18 years of age. The collection of personal data from children under the age of 13 does not take place, at least not with our knowledge.