Privacy policy

You have the right at any time to:

• Access to personal data held about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with future effect (Art. 7(3) GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR). Our competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), datenschutz-hamburg.de

For enquiries, write to news@bonjourben.shop

Our website is hosted on a server operated by Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany). Visits generate technical data in server log files (IP address, date/time, URL requested, user agent). This data is automatically deleted after 30 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website).

When you buy from our shop, we process the following data to perform the contract (Art. 6(1)(b) GDPR):

• Name, address, email and, where applicable, phone number
• Order details (products, quantities, prices)
• Payment details — processed directly by the payment provider, not stored by us
• IP address for fraud prevention

This data is retained for as long as necessary to fulfil the contract and thereafter for statutory retention periods (6 to 10 years under the German Commercial Code/Tax Code).

You can create a customer account in our shop. We process your email address, name and address for this purpose. Legal basis: Art. 6(1)(b) GDPR. You can request deletion of your account at any time by emailing the address above.

We use the following payment providers, each acting as an independent controller:

• PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) — Privacy policy
• Klarna (Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden) — Privacy policy
• Airwallex (Airwallex (UK) Limited or the relevant EU branch) — Privacy policy

The data transferred depends on the payment method selected. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

For delivery, we transfer your name and delivery address to the relevant shipping provider (e.g. DHL Paket GmbH). Legal basis: Art. 6(1)(b) GDPR.

If you subscribe to our newsletter, we process your email address and, where applicable, your name to send regular information about our products.

Newsletter delivery: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany. Servers and data processing are located exclusively in Germany. We have concluded a data processing agreement with rapidmail pursuant to Art. 28 GDPR.

Registration uses a double opt-in procedure. Legal basis: Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time using the link at the end of each email or by emailing us.

More information: rapidmail.de/datenschutz.

Our website uses cookies — small text files stored on your device.

• Strictly necessary cookies (session, cart, login) — legal basis: Art. 6(1)(f) GDPR and section 25(2)(2) TTDSG (necessary to provide the service).
• Analytics and marketing cookies (Google Analytics, Meta Pixel) — legal basis: Art. 6(1)(a) GDPR in conjunction with section 25(1) TTDSG (consent). These cookies are only set with your active consent through our consent banner.

You can change your cookie preferences at any time through the consent banner.

With your consent, we use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies and processes data about your use of our website (anonymised IP address, pages visited, time spent and device information) for statistical analysis.

Data is transferred to the USA; Google is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR. More: policies.google.com/privacy.

With your consent, we use the Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). It enables conversion tracking and remarketing through Facebook and Instagram.

Data may be transferred to Meta in the USA; Meta is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR. More: facebook.com/privacy/policy.

Personal data is retained only for as long as required for its purpose or by law. Order data is subject to commercial and tax retention periods of 6 to 10 years.

Diese Seite nutzt aus Gründen der Sicherheit eine SSL/TLS-Verschlüsselung. Eine verschlüsselte Verbindung erkennen Sie am Schloss-Symbol in Ihrer Browserzeile und am „https://” in der Adresszeile.