ABOUT US

PRIVACY POLICY  

INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER  

1.1 We are pleased that you are visiting our website and thank you for your interest. In this Privacy Policy, we explain how we handle your personal data when you use our website. “Personal data” means all information that can be used, directly or indirectly, to identify you as an individual.  

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:  

**Olivia Montreal**  

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.  

1.3 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.  

No automated decision-making or profiling takes place that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.  

---

DATA COLLECTION WHEN VISITING OUR WEBSITE  

When you visit our website for purely informational purposes, i.e., without registering or otherwise transmitting information to us, we only collect the data that your browser automatically sends to our server (so‑called “server log files”). When you access our website, we collect the following technically necessary data to display the site and ensure stability and security:

- The page visited  
- Date and time of access  
- Amount of data transmitted (in bytes)  
- The referrer URL (the page from which you arrived at our site)  
- Browser type and version  
- Operating system used  
- IP address (possibly in anonymized form)

Processing takes place in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring the stability, security, and proper functionality of our website. This data is not passed on to third parties or used for other purposes. However, we reserve the right to subsequently review server log files if there are specific indications of unlawful use.  

---

COOKIES  

To make your visit to our website more user‑friendly and to enable certain functions, we use cookies on various pages. Cookies are small text files stored on your device by your browser.  

Some cookies are deleted after you close your browser (so‑called session cookies). Other cookies remain on your device for a defined period and allow us or our partners (third‑party cookies) to recognize your browser when you visit again (persistent cookies).  

Cookies may collect and process information such as browser type, location data, and IP address in an individual case. Persistent cookies are automatically deleted after a specified duration, which may differ depending on the cookie.  

Certain cookies make website processes easier—for example, by remembering items placed in your shopping cart for a later visit. Where personal data is processed by cookies used by us:  

- Processing for the performance of a contract or pre‑contractual measures is based on Art. 6(1)(b) GDPR.  
- Processing to protect our legitimate interest in ensuring optimal website functionality and a pleasant user experience is based on Art. 6(1)(f) GDPR.  

We may cooperate with advertising partners who help us make our online offer more relevant to you. When you visit our website, cookies from such partners (third‑party cookies) may also be stored on your device. If this is the case, we will provide you with detailed information below about the use of these cookies and the data processed.  

You can configure your browser to:  

- Notify you when cookies are set;  
- Decide on a case‑by‑case basis whether to accept them;  
- Generally exclude the acceptance of cookies for certain cases or in general.  

Please refer to your browser’s help section for how to manage cookie settings.  

When you first visit our website, we will ask for your consent via a cookie banner to use cookies that are not strictly necessary for the operation of the site. You may adjust or withdraw your cookie preferences at any time.  

If you choose not to accept certain cookies, some functions of our website may be limited.  

---

CONTACTING US  

If you contact us (for example, via a contact form or by email), we collect the personal data that you provide. The specific data collected depends on the respective form fields or the content of your message.  

We process this data solely for the purpose of responding to your inquiry, communicating with you, and handling any technical administration involved.  

The legal basis for this processing is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR. If your contact is directed toward the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.  

Your data will be deleted once your inquiry has been fully resolved, unless statutory retention obligations apply that require longer storage.  

---

5) DATA PROCESSING WHEN CREATING A CUSTOMER ACCOUNT AND FOR CONTRACT FULFILLMENT  

In accordance with Art. 6(1)(b) GDPR, we collect and process personal data that you provide to us for the purpose of performing a contract or opening a customer account. The type and scope of data collected are apparent from the respective input forms.  

You may request the deletion of your customer account at any time by contacting us as the controller. We use the data you provide only for performing and managing your contract.  

After the contract has been fully fulfilled or your customer account has been deleted, your data will be restricted from further processing and will be deleted once the applicable retention periods under commercial and tax law have expired, unless:  

- You have expressly consented to further use of your data, or  
- We are permitted by law to continue using your data for other purposes, which we inform you about in this Privacy Policy.  

---

6) USE OF YOUR DATA FOR DIRECT MARKETING  

6.1 SUBSCRIPTION TO OUR EMAIL NEWSLETTER  

If you subscribe to our newsletter, we will regularly send you information about our products, services, and special offers. The only mandatory information for receiving the newsletter is your email address. Any additional information you provide is optional and is used solely to personalize the newsletter.  

We use a double opt‑in process: you will receive a confirmation email after you sign up, and your subscription is only activated once you click the confirmation link.  

By clicking the confirmation link, you consent to the use of your personal data for this purpose (Art. 6(1)(a) GDPR). When you subscribe, we store:  

- The IP address assigned by your Internet Service Provider (ISP) at the time of registration, and  
- The date and time of registration,  

in order to be able to trace any possible misuse of your email address.  

We use the collected data exclusively for sending the newsletter. You may unsubscribe at any time by using the unsubscribe link in each newsletter or by contacting us as the controller.  

After you unsubscribe, your email address will be removed from the mailing list without delay unless you have expressly consented to further use, or we are legally allowed to retain and use the data for other purposes, as explained in this Privacy Policy.  

6.2 EMAIL NEWSLETTER TO EXISTING CUSTOMERS  

If you have provided your email address to us in connection with the purchase of goods or services, we may send you email offers for similar products or services, even if you have not separately subscribed to the newsletter. This processing is based on our legitimate interest in direct advertising (Art. 6(1)(f) GDPR).  

You may object to the use of your email address for this purpose at any time without incurring any costs beyond standard transmission charges. After you object, we will immediately stop sending you such marketing emails.  

---

7) DATA PROCESSING FOR ORDER HANDLING  

7.1  

In order to fulfill contracts, we share personal data with the shipping company entrusted with the delivery of your order, but only to the extent necessary for delivering the goods.  

We also transfer your payment data to the authorized financial institution or payment service provider as necessary for processing payment. Where we use specific payment service providers, we will inform you separately below. The legal basis for such data transfers is Art. 6(1)(b) GDPR.  

7.2 USE OF PAYMENT SERVICE PROVIDERS  

– **PayPal**  

If you choose a payment method offered via PayPal (e.g., PayPal, credit card via PayPal, direct debit via PayPal, and, where available, “purchase on account” or “installment payment” via PayPal), your payment data will be transmitted to:  

PayPal (Europe) S.à r.l. et Cie, S.C.A.  
22–24 Boulevard Royal  
L‑2449 Luxembourg  

Data processing is based on Art. 6(1)(b) GDPR and is necessary for payment handling.  

PayPal may carry out a credit check for certain payment methods (such as purchase on account or installment payment). For this purpose, PayPal may transmit your payment data to credit agencies, where this is necessary and justified by PayPal’s legitimate interest in assessing your creditworthiness (Art. 6(1)(f) GDPR).  

The credit check may include calculation of score values (probability values) based on recognized mathematical‑statistical methods, which may include address data. The outcome is used by PayPal to decide whether the requested payment method can be offered.  

Further information on PayPal’s data protection practices can be found in PayPal’s Privacy Policy on their website.  

You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still process your data if this is necessary for legally compliant payment processing.  

– **SOFORT (Klarna Group)**  

If you select the “SOFORT” payment method, payment processing is carried out by:  

SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany,  
part of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.  

Information you provide during the checkout process and data about your order will be transmitted to SOFORT as required for payment execution (Art. 6(1)(b) GDPR).  

Further details on data processing by SOFORT can be found in SOFORT’s own privacy policy on their website.  

---

8) REVIEW REMINDERS  

We may use your email address on a one‑time basis to send you a reminder to submit a review of your order, if you have given us your explicit consent for this in accordance with Art. 6(1)(a) GDPR during or after the ordering process.  

You may withdraw this consent at any time by notifying us as the controller.  

---

9) USE OF SOCIAL MEDIA PLUGINS  

9.1 FACEBOOK PLUGINS (SHARIFF SOLUTION)  

Our website uses social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).  

To enhance data protection when you visit our site, these plugins are not directly integrated into the page as active components. Instead, they are implemented as HTML links using the “Shariff” solution. This means that when you load a page on our website containing such plugins, no direct connection is made to Facebook’s servers.  

Only when you click on the corresponding button will a new browser window open and load Facebook, where you may then use Facebook plugins (after logging in, if necessary).  

For information on the purpose and scope of data collection and further processing by Facebook, as well as your rights and options for protecting your privacy, please see Facebook’s privacy policy on their website.  

9.2 GOOGLE+ PLUGINS (SHARIFF SOLUTION)  

Our website may use plugins from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), also via the Shariff solution.  

As with Facebook, no connection to Google’s servers is established simply by loading our pages. A connection is only established when you click the respective plugin button, at which point you may interact with Google+ (if logged in).  

For details on data handling by Google, please refer to Google’s privacy policy on their website.  

9.3 INSTAGRAM PLUGINS (SHARIFF SOLUTION)  

Our website uses plugins from Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”), again via the Shariff solution.  

No data is transmitted to Instagram servers simply by visiting our pages. A connection is only made when you click the embedded button, which opens Instagram in a new browser window.  

For more information on how Instagram handles your data, please see Instagram’s privacy policy on their website.  

Please note: any additional customs duties and/or import charges that may apply to international shipments are not included in the product price and are the responsibility of the customer.  

---

10) ONLINE MARKETING  

10.1 DOUBLECLICK BY GOOGLE  

We use the online marketing tool DoubleClick by Google, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).  

DoubleClick uses cookies to display relevant advertisements, improve campaign performance, and prevent the same ad from repeatedly appearing to the same user. Using a cookie ID, Google records which ads are displayed in which browser and can prevent repeated displays. Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in effectively marketing our website.  

DoubleClick may also record conversions related to ad impressions (e.g., when a user sees a DoubleClick ad and later makes a purchase on our site). These cookies do not contain direct personal data.  

Due to the technologies used, your browser automatically establishes a direct connection with Google’s servers. We have no influence over the scope or further use of the data that Google collects using DoubleClick. To our knowledge, Google receives information that you have accessed the relevant part of our website or clicked our ad, and, if you are logged in to a Google account, may associate this visit with your account.  

If you do not want DoubleClick to collect data, you may disable cookies for ad personalization by visiting https://www.google.de/settings/ads or via other settings options detailed by Google and the Digital Advertising Alliance.  

If you block cookies entirely, some features of our website may not function correctly. For additional details, please consult Google’s privacy policy.  

10.2 GOOGLE ADS (ADWORDS) CONVERSION TRACKING  

We use Google Ads and its conversion tracking feature. When you click on an ad placed by Google, a conversion‑tracking cookie is stored on your device. These cookies expire after 30 days and are not used to personally identify you.  

If you visit certain pages on our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across different customers’ websites.  

The information collected is used to compile statistics, such as the total number of users who clicked our ads and were redirected to pages with a conversion tag. We do not receive any information that personally identifies you.  

If you do not wish to participate in conversion tracking, you can disable this in your browser by blocking cookies from the domain “googleadservices.com” or by generally rejecting cookies. Processing is based on our legitimate interest in targeted advertising in accordance with Art. 6(1)(f) GDPR.  

Further information is available in Google’s privacy policy.  

---

WEB ANALYSIS SERVICES  

GOOGLE (UNIVERSAL) ANALYTICS  

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to enable analysis of your use of the website.  

The information generated by the cookie about your use of this site (including your IP address in truncated form) is usually transmitted to a Google server in the USA and stored there.  

We use Google Analytics with the “_anonymizeIp()” extension, which shortens your IP address within the EU or EEA before transmission, preventing direct personal identification. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.  

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in analyzing user behavior to optimize our website and marketing efforts.  

On our behalf, Google uses this information to evaluate website usage, compile reports on website activity, and provide further services related to website and internet usage. Your IP address transmitted by your browser within Google Analytics is not combined with other data held by Google.  

You can prevent cookies from being stored by adjusting your browser settings. You can also prevent Google from collecting and processing data generated by the cookie (including your IP address) by installing the browser add‑on available from Google (Google Analytics opt‑out browser add‑on).  

Alternatively, you can set an opt‑out cookie via a corresponding link (Google Analytics opt‑out) to stop data collection on this website in the future. If you delete cookies in your browser, you will need to set the opt‑out cookie again.  

This website may also use Google Analytics for cross‑device analysis via a user ID. A unique, pseudonymous ID is assigned to you when you first visit, and this can be used to match data across devices and sessions. The user ID does not contain personal data itself.  

You can object to cross‑device tracking at any time by disabling Google Analytics on all devices you use.  

Further information can be found in Google’s documentation on Universal Analytics.  

---

RETARGETING / REMARKETING / RECOMMENDED ADVERTISING  

FACEBOOK CUSTOM AUDIENCE VIA PIXEL  

We use the “Facebook Pixel” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With your explicit consent (Art. 6(1)(a) GDPR), this tool allows us to track user behavior after a user has seen or clicked a Facebook ad. This helps us measure the effectiveness of Facebook ads for statistical and market research purposes and to optimize our marketing activities.  

The collected data is anonymous to us; we cannot see the identity of individual users. However, Facebook may link this data to your Facebook account and use it for its own advertising purposes according to its Data Policy.  

You can manage your ad preferences within your Facebook account settings or via the tools provided by the Digital Advertising Alliance. Note that consent for the Facebook Pixel can only be given by users who are at least 13 years old.  

GOOGLE ADS REMARKETING  

We use Google Ads Remarketing functions, which allow us to display interest‑based advertisements to you on Google search results pages and across the Google Display Network.  

Google stores a cookie in your browser to recognize you when you visit websites that are part of the Google advertising network. On these pages, advertisements may be displayed that relate to content you have previously viewed.  

Processing takes place based on our legitimate interest in effective marketing (Art. 6(1)(f) GDPR). If you have additionally consented to Google linking your web and app browsing history with your Google account, and using this information to personalize ads, Google may use data from logged‑in users for cross‑device remarketing.  

You can disable personalized ads in your Google account settings or via browser plug‑ins provided by Google. You can also adjust your general cookie settings in your browser.  

---

RIGHTS OF THE DATA SUBJECT  

Under applicable data protection law, you have the following rights with respect to your personal data:  

- **Right of access (Art. 15 GDPR)**: You may request information about your personal data that we process, including the purposes of processing, categories of data, recipients, planned retention period, and other details.  

- **Right to rectification (Art. 16 GDPR)**: You may request the correction of inaccurate or incomplete personal data without undue delay.  

- **Right to erasure (Art. 17 GDPR)**: You may request the deletion of your personal data if the conditions of Art. 17(1) GDPR are met—for example, if the data is no longer necessary for the purposes for which it was collected. This right may be limited, in particular, where processing is necessary to comply with legal obligations, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.  

- **Right to restriction of processing (Art. 18 GDPR)**: You may request the restriction of processing of your data, for example, while the accuracy of the data is being verified or if you have objected to processing and it has not yet been determined whether our legitimate grounds override yours.  

- **Right to notification (Art. 19 GDPR)**: If you have exercised your rights to rectification, erasure, or restriction of processing, we are obliged to inform all recipients to whom your data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients upon request.  

- **Right to data portability (Art. 20 GDPR)**: You have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine‑readable format or, where technically feasible, to have it transmitted directly to another controller.  

- **Right to withdraw consent (Art. 7(3) GDPR)**: If processing is based on your consent, you may withdraw that consent at any time with effect for the future. Past processing activities remain lawful.  

- **Right to lodge a complaint (Art. 77 GDPR)**: If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.  

**Right to Object (Art. 21 GDPR)**  

If we process your personal data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time to such processing on grounds relating to your particular situation.  

If you object, we will cease processing the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.  

Where we process your personal data for direct marketing purposes, you have the right to object at any time to such processing. If you object to processing for direct marketing, we will no longer process your data for this purpose.  

---

RETENTION PERIOD  

We store your personal data for as long as is necessary to fulfill the purposes outlined in this Privacy Policy or as required by statutory retention periods (e.g., under tax or commercial law).  

Once the relevant retention period has expired, or the purpose for processing no longer applies, your personal data will be routinely deleted or anonymized, unless further processing is required for contract performance, contract initiation, or we have a legitimate interest in continued storage that outweighs your interests.  

---

CONTACT  

If you have any questions regarding this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights as a data subject, you can contact us at:  

**Email:** info@oliviamontreal.com