We are pleased that you are interested in our online shop and we attach great importance to protecting your privacy. Below we would like to inform you in detail about how we handle your data.

1. Introduction and contact details of the person responsible

1.1 We warmly welcome you to our website and would like to thank you for your interest. Below we would like to inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Chaymae Mouhibi, located at Gräfenhäuserstr. 2, 64293 Darmstadt, Germany. You can contact us by email at Abayaatlas@gmail.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of data processing.

1.3 To ensure the security of your personal data and other confidential content (such as orders or inquiries to the person responsible), we use SSL or TLS encryption on this website. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2. Collection of data when visiting our website

If you use our website for information purposes only, i.e. without registering or otherwise providing us with information, we only record the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following technically necessary data in order to enable you to display the website:

• The website visited
• date and time of access
• Amount of data transferred in bytes
• Source/reference from which you came to the page
• browser used
• Operating system used
• IP address used (possibly in anonymized form)

This data is processed in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to subsequently check the server log files if there is concrete evidence of illegal use.

3. Hosting & content delivery network

3.1 Shopify

We use the system of the provider Shopify International Limited, based in Ireland, to host our website and display the page content. Data may be transferred to Shopify Inc., Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. The data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with Shopify that guarantees the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. An appropriate level of data protection when data is transferred to Canada is ensured by an adequacy decision of the European Commission. When data is transferred to the USA, the provider relies on standard contractual clauses of the European Commission.

3.2 Cloudflare

We use the content delivery network of the provider Cloudflare Inc. based in the USA. This service enables us to quickly deliver large media files via a network of regionally distributed servers. The processing is carried out to improve the stability and functionality of our website. We have concluded a data processing agreement with Cloudflare that guarantees the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. When data is transferred to the USA, the provider relies on standard contractual clauses of the European Commission.

4. cookies

We use cookies to make your visit to our website more pleasant and to enable certain functions. These are small text files that are stored on your device. Some cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for longer and help us to save your settings on the website (so-called "persistent cookies"). Please refer to the cookie settings in your web browser to find out how long these cookies are stored for.

If we also process personal data through certain cookies, this is done either to fulfill the contract in accordance with Article 6 Paragraph 1 Letter b of the General Data Protection Regulation (GDPR), with your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR or to protect our legitimate interests in the best possible functionality of the website and a user-friendly design of the page visit in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.

Please note that the functionality of our website may be limited if you do not accept cookies.

5. contact

If you contact us (e.g. via the contact form or by e-mail), we process personal data only for the purpose of processing and answering your request and only to the extent necessary.

The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 Paragraph 1 Letter f of the GDPR. If your contact is aimed at concluding a contract, Article 6 Paragraph 1 Letter b of the GDPR also serves as the legal basis for the processing. Your data will be deleted as soon as the matter in question has been conclusively clarified and there are no statutory retention periods to the contrary.

6. Use of customer data for direct marketing

6.1 Registration for our email newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. Providing your email address is required in order to send you the newsletter. Providing further data is optional and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, whereby you only receive the newsletter after you have expressly confirmed your consent by clicking on a confirmation link in an email sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 paragraph 1 letter a of the GDPR. We store your IP address, which was assigned by the Internet service provider (ISP), as well as the date and time of your registration in order to be able to trace possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for sending the newsletter and is not passed on to third parties.

You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by sending a corresponding message to the person responsible named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is legally permissible and about which we will inform you in this declaration.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing products or services, we reserve the right to regularly send you offers by email for similar products or services from our range that correspond to those you have already purchased. No separate consent is required for this purpose in accordance with Section 7 Paragraph 3 of the German Act Against Unfair Competition (UWG). Data processing is carried out exclusively on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Paragraph 1 Letter f of GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails for direct advertising.

You have the right to object to the use of your email address for advertising purposes at any time and with effect for the future by informing the person responsible named above. You will only incur the transmission costs according to the basic rates. After receiving your objection, the use of your email address for advertising purposes will be stopped immediately.

7. data processing for order processing

7.1 To the extent necessary for the processing of contracts for delivery and payment, we will pass on the personal data we collect to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Paragraph 1 Letter b of GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact details provided when ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally prescribed period as part of our statutory information obligations in accordance with Art. 6 Paragraph 1 Letter c of GDPR. Your contact details will be used strictly for the purpose of notifying you about updates owed by us and will only be processed to the extent necessary for the respective information.

To process your order, we also work with the following service providers who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2 Use of payment service providers

7.3 Apple Pay If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed using the "Apple Pay" function on your device running iOS, watchOS or macOS. Payment will be made by charging the payment card stored with "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code previously specified by you and verify it using the "Face ID" or "Touch ID" function on your device.

To process the payment, the information you provide during the ordering process is transmitted to Apple in encrypted form together with the information about your order. Apple encrypts this data again with a specific developer key before it is transmitted to the payment service provider of the payment card stored with Apple Pay to process the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is completed, Apple sends your device account number and a transaction-specific, dynamic security code to the original website to confirm the success of the payment.

If personal data is processed as part of these transmissions, this is done solely for the purpose of payment processing in accordance with Art. 6 Paragraph 1 Letter b of GDPR. Apple stores anonymized transaction data, such as the approximate purchase amount, the approximate date and time, and information on the successful completion of the transaction. Anonymization excludes personal identification. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, the communication between the Mac and the authorization device occurs over encrypted channels on Apple's servers. Apple does not process or store any of this information in a form that allows you to be identified. You can disable the use of Apple Pay on your Mac in your iPhone's settings by going to "Wallet & Apple Pay" and unchecking "Allow payments on Mac."

For more information about Apple Pay’s privacy policy, please visit the following website address: https://support.apple.com/de-de/HT203027 .

7.4 Google Pay

If you choose the "Google Pay" payment method, the payment will be processed via the Google Pay app on your mobile device with Android 4.4 or higher and NFC function. The payment will be processed by charging a payment card stored with Google Pay or a verified payment system such as PayPal. To authorize payments via Google Pay of more than €25, you must first unlock your mobile device using a verification measure such as facial recognition, password, fingerprint or pattern.

As part of the ordering process, the information you provide and information about your order will be passed on to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a transaction number in order to verify the payment. This transaction number does not contain any information about the actual payment data of your payment method stored in Google Pay, but serves as a unique numerical token. Google merely acts as an intermediary to process the payment process, and the transaction is carried out between you and the originating website by charging the payment method stored in Google Pay.

The processing of personal data within the scope of these transmissions takes place exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made through Google Pay. This includes the date, time and amount of the transaction, the merchant location and description, a description of the goods or services purchased provided by the merchant, photos you attach, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the purpose of the transaction and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 (1) (f) GDPR due to the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored when using other Google services.

The Google Pay terms of use can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found at the following internet address: [ https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de .

7.5 Klarna

This website offers payment methods from the provider Klarna Bank AB. For payment methods where you pay in advance (e.g. credit card payment), your payment data provided during the order process (name, address, bank and payment card information, currency, transaction number) will be passed on to Klarna in accordance with Art. 6 Para. 1 lit. b GDPR. The data will be passed on solely for the purpose of processing the payment and only to the extent necessary.

For payment methods where Klarna makes advance payments (e.g. purchase on account or instalment payments, direct debit), you will be asked to provide personal information during the ordering process (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, and alternative payment methods if applicable).

In order to protect our legitimate interest in determining the solvency of our customers, we transmit this data to Klarna for credit checks in accordance with Art. 6 (1) (f) GDPR. Klarna uses the personal data you provide and other information (e.g. shopping cart, invoice amount, order history, payment experience) to check whether the selected payment option can be granted with regard to payment and/or default risks.

Identity and credit information from credit agencies can also be included in the credit check. The credit agencies used and further information can be found at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values ​​(so-called score values). These score values ​​are based on scientifically recognized mathematical and statistical procedures and include, among other things, address data.

You can object to this processing of your data at any time by sending us or Klarna a message. However, Klarna reserves the right to continue to process your personal data if this is necessary for the contractual payment processing.

7.6 PayPal

This website offers payment methods from the provider PayPal (Europe) Sarl et Cie, SCA. For payment methods where you pay in advance (e.g. credit card payment), your payment data provided during the ordering process (name, address, bank and payment card information, currency, transaction number) will be passed on to PayPal in accordance with Art. 6 Para. 1 lit. b GDPR. The data will be passed on exclusively for the purpose of payment processing and only to the extent necessary.

For payment methods where PayPal makes an advance payment (e.g. purchase on account or instalment payments, direct debit), you will be asked to provide personal information during the ordering process (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and alternative payment methods if applicable).

In order to protect our legitimate interest in determining the solvency of our customers, we transmit this data to PayPal for credit checks in accordance with Art. 6 (1) (f) GDPR. PayPal uses the personal data you provide and other information (e.g. shopping cart, invoice amount, order history, payment experience) to check whether the selected payment option can be granted with regard to payment and/or default risks.

The credit report may contain probability values ​​(so-called score values). These score values ​​are based on scientifically recognized mathematical and statistical procedures and include, among other things, address data.

You can object to this processing of your data at any time by sending us or PayPal a message. However, PayPal reserves the right to continue to process your personal data if this is necessary for the contractual payment processing.

7.7 Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) will be passed on to this provider in accordance with Art. 6 Paragraph 1 Letter b of GDPR. Your data will be passed on exclusively for the purpose of processing the payment with the provider and only to the extent that is necessary for this purpose.

7.8 IMMEDIATELY

One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.

If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) will be passed on to this provider in accordance with Art. 6 Paragraph 1 Letter b of GDPR. Your data will be passed on exclusively for the purpose of processing the payment with the provider and only to the extent that is necessary for this purpose.

8. online marketing

Facebook pixel for creating custom audiences with advanced data matching (with cookie consent tool)

Within our online offering, we use the "Facebook Pixel" service in advanced data matching mode. The provider of the service is Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").

When a user clicks on an ad we have placed on Facebook, the URL of our linked page is extended by a parameter using "Facebook Pixel". This URL parameter is then stored in the user's browser by a cookie that is set by our linked page itself. The cookie records certain customer data such as the email address that we collect on our website when the user performs actions such as making purchases, registering an account or registering (extended data matching). The cookie is read and enables the data, including the specific customer data, to be transmitted to Facebook.

We use "Facebook Pixel" with enhanced data matching to make our Facebook advertisements (so-called "Facebook Ads") more effective and to ensure that they correspond to the interests of users or have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences").

In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). The advanced data matching feature allows us to better measure the effectiveness of our advertising campaigns because more attributed conversions are recorded compared to the standard version of "Facebook Pixel".

All transmitted data is stored and processed by Facebook so that it can be assigned to a user profile. Facebook can use the data for its own advertising purposes and pass it on to its partners in order to place ads on and outside of Facebook.

The processing described, including the setting of cookies to read information on the end device, only takes place if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures that the data of our website visitors is protected and not passed on to third parties without authorization.

The information generated by Facebook is usually transferred to a Facebook server and stored there. It may also be transferred to Meta Platforms Inc. servers in the USA.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure an appropriate level of data protection in the USA.

9. web analysis services

This website uses the "Google Tag Manager", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). The Google Tag Manager provides a technical basis for bundling, controlling and tying various web applications, including tracking and analysis services, via a uniform user interface.

The Google Tag Manager itself does not store any information on the user's devices and does not read it. The service also does not carry out any independent data analyses.

However, when you visit the site, your IP address will be transmitted to Google and may be stored there. A transfer to Google LLC servers in the USA is also possible.

This processing only takes place if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without your consent, the Google Tag Manager will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google that ensures that the data of our website visitors is protected and not passed on to third parties without authorization.

For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure an appropriate level of data protection in the USA.

Further data protection information on Google Tag Manager can be found here: [Link to Google Tag Manager’s privacy policy]

For data protection-relevant services and applications that have been merged in Google Tag Manager, you will receive separate information in the relevant sections of this privacy policy.

10. Retargeting/remarketing and conversion tracking

• TikTok Pixel

This website uses the conversion tracking technology of the provider TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

If you have reached our website via an advertisement on the provider's website, we can track the success of the advertisement using cookies and similar technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, possibly including your IP address, is read using tracking technology in order to record and evaluate predefined user actions (such as completed transactions, leads, search queries on the website or visits to product pages). This enables us to track statistics on usage behavior on our website, which we use to optimize our offering.

This processing, in particular the setting of cookies to collect information on your device, only takes place if you have expressly given your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures that the data of our website visitors is protected and not passed on to third parties without authorization.

11. Tools and Others

11.1 Lexoffice

For accounting, we use the cloud-based accounting software from the provider Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany.

The provider processes incoming and outgoing invoices and, if applicable, our company's bank transactions in order to automatically record invoices, reconcile them with transactions and use them to create financial accounting in a partially automated process.

If personal data is processed, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

11.2 Cookie Consent Tool

This website uses a "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications for which consent is required. The tool is presented to users when they visit the website in the form of an interactive user interface, where they can give consent for certain cookies and/or cookie-based applications by activating checkboxes. By using the tool, only the necessary cookies/services are loaded if the user gives the corresponding consents. This ensures that such cookies are only set on the user's device if consent has been given.

The tool uses technically necessary cookies to save your cookie settings. Personal user data is generally not processed.

If personal data (such as the IP address) is processed for the storage, assignment or logging of cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, individual and user-friendly cookie consent management and a legally compliant design of our website.

The additional legal basis for the processing is Art. 6 (1) (c) GDPR. As the responsible party, we are subject to the legal obligation to make the use of non-technically necessary cookies dependent on the consent of the user.

We have concluded a data processing agreement with the provider, which ensures that the data of our website visitors is protected and not passed on to third parties without authorization.

Further information about the provider and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12. rights of the data subject

12.1 Under applicable data protection law, you as a data subject have certain rights vis-à-vis the controller with regard to the processing of your personal data. These rights include:

• The right to information according to Article 15 of the General Data Protection Regulation (GDPR).
• The right to rectification according to Article 16 GDPR.
• The right to erasure (“right to be forgotten”) according to Article 17 GDPR.
• The right to restriction of processing pursuant to Article 18 GDPR.
• The right to information according to Article 19 GDPR.
• The right to data portability according to Article 20 GDPR.
• The right to withdraw consent given in accordance with Article 7 paragraph 3 GDPR.
• The right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR.

12.2 Right of objection

If we process your personal data on the basis of a legitimate interest pursuant to Article 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. In this case, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed by us in order to conduct direct advertising, you have the right to object at any time to the processing of your data for the purpose of such advertising. If you exercise your right of objection, we will stop processing your data for direct marketing purposes.

13. Duration of storage of personal data

The duration for which your personal data is stored depends on the respective legal basis, the purpose of the processing and, if applicable, the statutory retention periods (e.g. retention periods under commercial and tax law).

If we process your personal data on the basis of your consent in accordance with Article 6 paragraph 1 letter a of the GDPR, the data will be stored until you withdraw your consent.

If there are statutory retention periods for data that is processed within the framework of contractual or similar obligations pursuant to Article 6 Paragraph 1 Letter b GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required to fulfil or initiate a contract and we have no legitimate interest in continuing to store it.

If we process your personal data on the basis of Article 6(1)(f) GDPR, the data will be stored until you exercise your right of objection in accordance with Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data for the purpose of direct marketing on the basis of Article 6 Paragraph 1 Letter f GDPR, the data will be stored until you exercise your right of objection in accordance with Article 21 Paragraph 2 GDPR.

Unless the specific information in this statement on particular processing situations states otherwise, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.