top of page

Privacy Policy

Controller responsible for data processing:

Merve Tuncbulut
Teplitzer Straße 9
91056 Erlangen
Germany
info@daphelia.com

We are pleased that you are visiting our online shop and thank you for your interest. We attach great importance to the responsible handling of your personal data. Below, we inform you about which data we collect, how we process it and for what purposes this is done.

1. Access Data and Hosting

You can generally visit our website without having to provide any personal information. However, each time our website is accessed, certain technical information is automatically collected by the web server and stored in so-called server log files. This may include, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider.

This data is used exclusively to ensure the secure and uninterrupted operation of our website and to continuously improve our online offering. The processing is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Stored access data is automatically deleted no later than seven days after your visit to our website.

​

2. Processing of Personal Data for Contract Performance and Contact Requests

We collect personal data when you voluntarily provide it to us in connection with an order or when contacting us, for example via a contact form or by email. Required information is identified as mandatory in the relevant forms, as this data is necessary to process your enquiry or perform the contract. Without this information, it is not possible to place an order or contact us through the respective form.

The personal data processed in each individual case is determined by the information requested in the respective input forms.

We use the data you provide exclusively for the performance of the contract and for processing your enquiries on the basis of Art. 6(1)(b) GDPR.

Further information on how your data is processed and, where applicable, transferred to service providers for order processing, payment processing or shipping can be found in the following sections of this Privacy Policy.

Once the contract has been fully performed, further processing of your data will be restricted. After expiry of the statutory retention periods under tax and commercial law, your personal data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we are legally entitled to continue processing the data. In such cases, we will provide you with the relevant information in this Privacy Policy.

​

3. Processing of Personal Data for Shipping

For the purpose of fulfilling the contract concluded with you, we transmit the personal data required for shipping to the shipping provider commissioned by us. Data is only transferred to the extent necessary for delivery of your order and is processed on the basis of Art. 6(1)(b) GDPR.

Disclosure of Your Contact Details for Delivery Notifications

If you have expressly given us your consent during or after placing your order, we will transmit your telephone number to the shipping provider selected by you pursuant to Art. 6(1)(a) GDPR. This enables the shipping provider to contact you prior to delivery, for example to arrange a delivery time or notify you of the upcoming delivery.

You may withdraw your consent at any time with effect for the future. To do so, it is sufficient to contact us using the contact details provided in this Privacy Policy or to contact the respective shipping provider directly (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). Once we receive your withdrawal, the data stored for this purpose will be deleted unless there is a legal basis for further processing or you have expressly consented to further use of your data.

​

4. Processing of Personal Data in Connection with Payments

For payment processing, we work with various service providers. These may include technical service providers, banks and external payment service providers.

4.1 Payment Processing

Depending on the payment method selected, the data required to process the payment will be transmitted to the relevant payment service provider, financial institution or our technical service providers, insofar as this is necessary to carry out the payment. The processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.

In certain cases, the relevant payment service provider collects the required data directly, for example via its own website or through a corresponding technical interface during the checkout process. The respective payment provider's privacy policy applies to such data processing.

If you have any questions about the payment service providers used or the processing of your data, you may contact us at any time using the contact details provided in this Privacy Policy.

4.2 Fraud Prevention and Optimisation of Payment Processes

To protect against fraudulent activities and to improve our payment and accounting processes, it may be necessary to transmit additional data to our service providers. These service providers process the information exclusively on our behalf and only for purposes such as fraud prevention, invoicing, handling disputed payments or supporting our financial accounting processes.

The processing is based on our legitimate interest in secure and efficient payment management pursuant to Art. 6(1)(f) GDPR.

5. Use of Cookies and Similar Technologies

To make our website user-friendly and to provide certain functions, we use cookies and similar technologies. Cookies are small text files that are stored on your device.

Some of these cookies are automatically deleted when you close your browser, known as session cookies. Other cookies remain stored on your device and enable us to recognise your browser when you visit our website again, known as persistent cookies.

In particular, we use technically necessary cookies that are essential for the proper operation of our website. These include, for example, functions such as the shopping cart or the storage of your selected preferences.

When these technologies are used, information such as your IP address, information about your device and browser, the time at which a page is accessed and data relating to your use of our website, such as the contents of your shopping cart, may be processed. This processing is based on our legitimate interest in providing a secure, technically reliable and user-friendly online offering pursuant to Art. 6(1)(f) GDPR.

You can manage your cookie preferences at any time directly through your browser settings. Further information is available for the following browsers, among others:

  • Microsoft Edge™

  • Safari™

  • Google Chrome™

  • Mozilla Firefox™

  • Opera™

6. Social Media

6.1 Integration of Instagram

Our website contains links to our Instagram profile. The relevant social media buttons are integrated solely as HTML links. This means that simply visiting our website does not establish a connection to Instagram's servers and no personal data is automatically transmitted to the provider.

Only when you actively click on the Instagram button will the Instagram website open in a new browser window. From that point onwards, data processing is carried out exclusively by the respective provider in accordance with its applicable privacy policy.

6.2 Our Profiles on Facebook, Instagram and Pinterest

If you have given the respective social network operator your consent pursuant to Art. 6(1)(a) GDPR, personal data may be processed automatically when you visit our company profiles on Facebook, Instagram or Pinterest.

The platform operators use this data in particular for statistical analysis, market research and the personalisation of advertisements. Pseudonymised user profiles are commonly created for this purpose in order to display interest-based advertising to you both within and outside the respective platform. Cookies or similar technologies are frequently used for these purposes.

Detailed information regarding the nature, scope and purpose of data processing, as well as your rights and options for protecting your privacy, can be found in the privacy policies of the respective providers. If you have any questions, you are also welcome to contact us.

Facebook and Instagram

Facebook and Instagram are operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When you visit our Facebook or Instagram pages, personal data may also be transferred to Meta Platforms, Inc., 1 Meta Way, Menlo Park, California 94025, USA.

Where personal data is transferred to third countries, such transfers are carried out in accordance with the requirements of the GDPR. Meta is certified under the EU-U.S. Data Privacy Framework. Where necessary, data transfers are additionally based on the Standard Contractual Clauses approved by the European Commission.

For certain processing activities, particularly in connection with page statistics ("Insights"), Meta and we act as joint controllers pursuant to Art. 26 GDPR. Further information can be found in Meta's privacy information.

7. Your Rights as a Data Subject

Under the General Data Protection Regulation, you have various rights in relation to the processing of your personal data.

In particular, you have the right:

  • pursuant to Art. 15 GDPR, to request information about the personal data we process about you;

  • pursuant to Art. 16 GDPR, to request the correction of inaccurate personal data or the completion of incomplete personal data;

  • pursuant to Art. 17 GDPR, to request the deletion of your personal data, provided that no statutory retention obligations or other legal grounds prevent such deletion. In particular, this right does not apply where processing remains necessary:

    • for exercising the right to freedom of expression and information;

    • for compliance with a legal obligation;

    • for reasons of public interest; or

    • for the establishment, exercise or defence of legal claims;

  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data where:

    • you contest the accuracy of the data;

    • the processing is unlawful but you do not wish the data to be deleted;

    • we no longer require the data for the original purposes, but you require it for the establishment, exercise or defence of legal claims; or

    • you have objected to the processing pursuant to Art. 21 GDPR;

  • pursuant to Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;

  • pursuant to Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority. In general, you may contact the supervisory authority responsible for your place of residence or employment or the supervisory authority responsible for our registered place of business.

If you have any questions regarding the processing of your personal data or wish to request access to, correction, restriction or deletion of your data, you may contact us at any time using the contact details provided in our Legal Notice. The same applies if you wish to withdraw consent you have previously given or object to the processing of your data.

Objection to Data Processing

Where we process personal data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing with effect for the future.

Where data is processed for direct marketing purposes, you may object at any time and without providing reasons.

Where data is processed for other purposes, you have the right to object only where there are grounds relating to your particular personal situation that speak against such processing.

Once we receive your objection, we will cease the relevant data processing unless we can demonstrate compelling legitimate grounds for the continued processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

Where processing is carried out for direct marketing purposes, the use of your personal data for such purposes will cease immediately following your objection.

bottom of page