Privacy Policy

Privacy Policy


1) Introduction and Contact Details of the Controller

1.1

Thank you for visiting our website and for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can be used to identify you personally.

1.2

The controller for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is:

Vailin Limited
9 Chiu Lung Street, Eubank Plaza, Room B 16/F, Central, Hong Kong
Email: veinovafashion.customerservice@outlook.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection when Visiting our Website

2.1

When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our website server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no disclosure or other use of the data. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting

Shopify

We use the system of the following provider for hosting our website and displaying the page content:

Shopify International Limited,
Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data may also be transferred to:

Shopify Inc.,
150 Elgin Street, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on Shopify's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow settings to be saved (so-called "persistent cookies").

If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of a given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in a functional and user-friendly website.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or generally exclude the acceptance of cookies.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When you contact us, for example by email, personal data will be processed exclusively for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding or performing a contract, the additional legal basis is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted when it is clear from the circumstances that the matter in question has been definitively clarified and no statutory retention obligations prevent deletion.

6) Data Processing when Opening a Customer Account

If you open a customer account on our website, the personal data required for this will be processed in accordance with Art. 6 para. 1 lit. b GDPR.

Which data is required for opening an account can be found in the respective input form on our website.

You can delete your customer account at any time by sending a message to the email address mentioned above. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods conflict, and there is no legitimate interest in further storage.

7) Data Processing for Order Fulfillment

7.1

To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned shipping company and payment service providers in accordance with Art. 6 para. 1 lit. b GDPR.

7.2

To fulfill our contractual obligations, we work with external shipping partners. We only pass on your name, delivery address, and – if necessary for delivery – further contact details to the shipping partner commissioned by us for the purpose of goods delivery.

7.3

Shopify Payments

One or more online payment methods from the following provider are available on this website:

Shopify International Limited,
Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method offered via Shopify Payments, the payment data provided during the order process, as well as information about the content of your order, will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR, to the extent necessary for payment processing.

Depending on the selected payment method, payment processing may also technically take place via other payment service providers connected with Shopify Payments. The payment methods specifically displayed in the checkout are decisive.

8) Retargeting / Remarketing / Conversion Tracking

TikTok Pixel

This website uses the conversion tracking technology of the following provider:

TikTok Technology Limited,
10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you have reached our website via an advertisement, it is possible to track whether certain user actions have occurred on our website with the help of cookies and/or similar technologies.

In this process, certain device and browser information may be processed, including possibly the IP address, to evaluate user actions defined by us, e.g.:

  • Completed orders
  • Product page views
  • Other interactions on the website

This serves for statistical analysis and optimizing our offer.

All processing described above, in particular the setting of cookies or similar technologies, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can withdraw your consent at any time with effect for the future by changing the relevant settings in our cookie consent tool.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

9) Rights of the Data Subjects

9.1

The applicable data protection law grants you, vis-à-vis the controller, in particular the following rights:

  • Right of access according to Art. 15 GDPR
  • Right to rectification according to Art. 16 GDPR
  • Right to erasure according to Art. 17 GDPR
  • Right to restriction of processing according to Art. 18 GDPR
  • Right to notification according to Art. 19 GDPR
  • Right to data portability according to Art. 20 GDPR
  • Right to withdraw granted consents according to Art. 7 para. 3 GDPR
  • Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR

9.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data concerned, unless there are compelling legitimate grounds for the processing that override your interests, or the processing serves for the assertion, exercise, or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. In the event of an objection, we will cease processing for these purposes.

10) Duration of Storage of Personal Data

The duration of the storage of personal data depends on the respective legal basis, the purpose of processing, and – if applicable – on the statutory retention periods.

When processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR, the data will be stored until the data subject withdraws their consent.

When processing is for contract fulfillment in accordance with Art. 6 para. 1 lit. b GDPR, the data will be stored for as long as necessary for contract processing and as long as statutory retention periods exist.

When processing is based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, the data will be stored until the data subject exercises their right to object, unless there are compelling legitimate grounds for further processing.

Otherwise, personal data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.