Privacy Policy

Privacy Policy
Data controller:
AISHENUR LTD
71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM
grantiacollection@gmail.com
We are delighted with your interest in our online store. Protecting your privacy is very important to us. Below, we provide you with detailed information on how your data is processed.

1. ACCESS DATA AND HOSTING
You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This access data is evaluated solely for the purpose of ensuring the trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests in the correct presentation of our offer, which are predominant in the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 lit. f GDPR. All access data is deleted no later than seven days after your visit to the site has ended.

HOSTING
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise stated in this data protection declaration, all access data and all data collected in the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.
Our service providers are located and/or use servers in the USA and other countries outside the EU and the EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the standard data protection clauses of the European Commission.

2. DATA PROCESSING FOR CONTRACT MANAGEMENT AND CONTACT
2.1 DATA PROCESSING FOR CONTRACT MANAGEMENT
We collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because we need the data in these cases to process the contract and we cannot send the order without it. Which data is collected can be seen from the respective input forms.
Further information on data processing, particularly the transfer of data to our service providers for order, payment, and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this declaration.

2.2 CUSTOMER ACCOUNT
We collect personal data if you voluntarily provide it to us when opening a customer account. Mandatory fields are marked as such because we need the data in these cases to open your customer account and you cannot complete the account opening without it. Which data is collected can be seen from the respective input forms. We use the data you provide for the purpose of processing the contract and processing your inquiries pursuant to Art. 6(1) sentence 1 lit. b GDPR. You can delete your customer account at any time by sending a message to the contact option described in this data protection declaration or by using a function provided for this purpose in the customer account. After your customer account has been deleted, your data will be deleted unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this declaration.

2.3 CONTACT
As part of customer communication, we collect personal data to process your inquiries if you voluntarily provide it to us when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we need the data in these cases to process your contact and you cannot complete the communication without it. Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this declaration.

3. DATA PROCESSING FOR SHIPPING PURPOSES
To fulfill the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods.
The same applies to the transfer of data to our manufacturers or wholesalers if they take over the dispatch for us (drop shipping). These are considered shipping service providers within the meaning of this data protection declaration.

4. DATA PROCESSING FOR PAYMENT PROCESSING
When processing payments in our online store, we work with the following partners: technical service providers, banks, payment service providers.
4.1 DATA PROCESSING FOR TRANSACTION PROCESSING
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers working on our behalf or to the commissioned credit institution or the selected payment service provider, insofar as this is necessary for processing the payment. This serves to fulfill the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their website or through a technical integration in the order process. In this respect, the data protection declaration of the respective payment service provider applies.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

4.2 DATA PROCESSING FOR FRAUD PREVENTION AND PAYMENT OPTIMIZATION
We may pass on additional data to our service providers, who act as processors on our behalf, for fraud prevention and payment optimization purposes, along with the data necessary for processing the payment. This serves to protect our legitimate interests in fraud prevention and efficient payment management, which are predominant in the context of a balancing of interests, pursuant to Art. 6(1) sentence 1 lit. f GDPR.

4.3 IDENTITY AND CREDIT CHECK WHEN SELECTING KLARNA PAYMENT SERVICES
If you decide to use Klarna's payment services, we ask for your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to transmit the data necessary for processing the payment and an identity and credit check to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In Germany, the credit agencies listed in Klarna's data protection declaration [https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy] may be used for identity and credit checks. Klarna uses the information obtained on the statistical probability of a payment default to make a balanced decision about the establishment, implementation, or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact option described in this data protection declaration. As a result, we may no longer be able to offer you certain payment options. You can also revoke your consent to this use of personal data at any time by contacting Klarna.

5. EMAIL ADVERTISING
5.1 REGISTERED EMAIL NEWSLETTER
If you subscribe to our newsletter, we use the data necessary for this or provided by you separately to regularly send you our email newsletter based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to the further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this declaration.

5.2 NEWSLETTER DISTRIBUTION
The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.
Our service providers are based in the USA and/or use servers in the USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on the standard data protection clauses of the European Commission.

6. COOKIES AND OTHER TECHNOLOGIES
GENERAL INFORMATION
To make visiting our website attractive and to enable the use of certain functions, we use technologies, including cookies, on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).
We use technologies that are essential for the use of certain functions of our website (e.g., shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information, and information about your use of our website (e.g., information about the contents of the shopping cart). Within the scope of a balancing of interests, this serves the predominant legitimate interests in an optimized presentation of our offer pursuant to Art. 6(1) sentence 1 lit. f GDPR.
We also use technologies to comply with the legal obligations to which we are subject (e.g., to be able to prove your consent to the processing of your personal data) as well as for web analysis and online marketing. Further information, including the respective legal basis for