Datenschutzerklärung

1. Introduction

This Privacy Policy explains how carolinalinens.shop collects, uses, shares, stores and protects personal information when individuals visit our website, create an account, place an order, contact customer service, subscribe to marketing or otherwise interact with us. In this policy, “we”, “us” and “our” refer to the operator of carolinalinens.shop.

Data-protection contact: info@carolinalinens.shop. The identity and geographic address of the legal controller must be added to the website’s trader disclosures before publication as a fully compliant privacy notice; they have not been invented in this draft.

2. Personal information we collect

We may collect identity and contact details such as name, billing address, delivery address, email address and telephone number; order details such as products, sizes, variations, value, returns and customer-service history; transaction information such as payment status, payment method type and fraud-screening results; account information such as login credentials and saved preferences; and technical information such as IP address, device type, browser, approximate location, identifiers, cookie data and website activity.

We may also collect communications, reviews, survey responses, photographs or videos supplied to support a product or delivery claim, marketing preferences, and information generated when a customer interacts with advertisements or emails. We do not ordinarily receive complete payment-card details because payments are generally processed by payment providers integrated with the Shopify platform.

3. How we collect information

Information may be provided directly by the individual, generated through use of the website, received from Shopify and connected service providers, supplied by payment processors, fraud-prevention services, carriers and fulfilment partners, or derived from customer interactions and order records. Where information is received from another source, we use it only for appropriate purposes and provide privacy information as required by law.

4. Purposes and lawful bases

We process personal information to take steps requested before entering a contract and to perform contracts, including processing orders, arranging payment, delivering goods, providing order updates, administering returns and refunds, and responding to product or account questions. This processing is generally necessary for the performance of a contract or to take requested pre-contract steps.

We process information to comply with legal obligations, including accounting, tax, product-safety, consumer-rights, fraud-prevention and lawful authority requirements. We may retain transaction records where legislation requires us to do so.

We may rely on legitimate interests to secure the website, prevent abuse and fraud, improve services, understand store performance, manage suppliers, establish or defend legal claims, and communicate with existing customers about closely related products where permitted. We consider the necessity and impact of this processing and do not rely on legitimate interests where the individual’s rights and interests override ours.

We rely on consent where required, including for certain non-essential cookies and some electronic marketing. Consent can be withdrawn at any time without affecting processing that occurred before withdrawal. Withdrawing consent may not affect processing carried out under another lawful basis.

5. Orders and payments

When an order is placed, we use the supplied details to verify and accept the order, take or arrange payment, conduct proportionate fraud checks, communicate about fulfilment, deliver the products, manage returns and provide customer service. Payment providers process payment information under their own privacy terms and security controls.

Automated tools may flag transactions for additional review based on factors such as payment consistency, device data, location or unusual ordering patterns. We do not intend to make solely automated decisions that produce legal or similarly significant effects without appropriate safeguards where the law requires them.

6. Shopify and service providers

Our store is hosted using Shopify. Shopify may process personal information to provide the commerce platform, checkout, security, analytics and related services. We may also use providers for payment processing, hosting, email delivery, customer support, analytics, advertising, fraud prevention, order fulfilment, warehousing, shipping, returns and professional advice.

Service providers receive only the information reasonably needed for their role and are expected to protect it under contractual and legal obligations. Some providers may act as independent controllers for particular activities, in which case their own privacy notices also apply.

7. Cookies and similar technologies

The website may use cookies, pixels, local storage and comparable technologies for essential functions such as checkout, security, shopping-cart persistence and account access. With consent where required, we may also use these technologies for analytics, personalisation, advertising measurement and marketing.

A cookie banner or preference tool should be used to provide choices for non-essential technologies. Browser settings may also permit cookies to be blocked or deleted, but disabling essential technologies may prevent parts of the store from functioning correctly.

8. Marketing communications

We may send marketing by email or other electronic channels when we have valid consent or another lawful permission. Every marketing email should include a straightforward unsubscribe method. An individual can also opt out by contacting info@carolinalinens.shop. We may retain a minimal suppression record after an opt-out so that the preference is respected.

Service communications about an order, security alert, return, refund or policy change are not marketing and may still be sent where necessary to administer the customer relationship.

9. Sharing personal information

We may share information with Shopify, payment providers, fraud-prevention services, fulfilment facilities, carriers, returns processors, technology and analytics providers, marketing providers where permitted, professional advisers, insurers, banks, auditors, regulators, courts, law-enforcement bodies and other parties where disclosure is lawful and necessary.

If the business or its assets are reorganised, financed, sold or transferred, relevant information may be disclosed under suitable confidentiality protections and transferred as part of that transaction. We do not sell personal information in the ordinary meaning of selling a customer list for money.

10. International transfers

Some service providers may process information outside Germany or the European Economic Area. Where the GDPR restricts an international transfer, we rely on an applicable safeguard such as an adequacy decision, approved Standard Contractual Clauses and supplementary measures, or another lawful transfer mechanism. Information about relevant safeguards may be requested at info@carolinalinens.shop.

11. Retention

We retain personal information only for as long as reasonably necessary for the purpose collected, including to perform contracts, provide support, meet legal and tax obligations, resolve disputes, prevent fraud and enforce agreements. Retention periods vary by record type. Order and accounting records may be kept for several years where required; customer-service evidence may be retained for the life of a claim; marketing records are kept until consent is withdrawn or the information is no longer needed, subject to maintaining a suppression list.

When information is no longer required, we delete, anonymise or securely isolate it, subject to technical backup cycles and legal preservation duties.

12. Security

We use reasonable administrative, organisational and technical safeguards designed to protect personal information from accidental loss, unauthorised access, alteration or disclosure. No internet transmission or storage system is completely secure, and we cannot promise absolute security. Customers should use unique passwords, keep account credentials confidential and contact us if they suspect unauthorised activity.

13. Individual rights

Depending on the circumstances, individuals may have rights to be informed, access their personal information, correct inaccurate information, request erasure, restrict processing, object to processing, receive certain information in a portable format, and withdraw consent. Rights are not absolute and may be subject to legal conditions and exemptions.

The right to object to direct marketing can be exercised at any time. An individual may also object to processing based on legitimate interests; we will stop unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims.

To exercise a right, email info@carolinalinens.shop. We may request reasonable information to confirm identity and locate the relevant records. We normally respond within one month, although the law allows an extension for complex or numerous requests where the individual is informed.

14. Complaints

Please contact info@carolinalinens.shop first so we can investigate a privacy concern. Individuals also have the right to lodge a complaint with the competent German data-protection supervisory authority, including the authority responsible for the controller’s establishment or the individual’s habitual residence, workplace or alleged infringement. This does not prevent an individual from seeking another remedy available by law.

15. Children

Our store is intended for adults who can enter a binding purchase contract. We do not knowingly seek personal information directly from children. If a parent or guardian believes a child has supplied personal information, they should contact us so that we can assess and, where appropriate, delete it.

16. Third-party links

The website may link to third-party sites or services. Their privacy practices are controlled by their own notices, and we are not responsible for how an independent third party uses personal information.

17. Changes to this policy

We may update this policy to reflect operational, legal or regulatory changes. The updated version will be posted on carolinalinens.shop with a revised date. Where a change materially affects individuals, we will provide additional notice when required.

18. Contact

Privacy and data-protection enquiries: info@carolinalinens.shop