Privacy Policy
Welcome to Jolly Designs!
With the following privacy policy, we would like to inform you about how we handle your data when you use our website or our online shop www.jolly-designs.de (hereinafter: website). This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our website and within external online presences, such as our social media profiles. For websites of other providers, which are referenced via links, for example, the privacy policies and declarations there apply.
I. Person responsible
Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) is
Jolly Designs GmbH, Hans-Mess-Str. 3, 61440 Oberursel (Taunus), Germany
as operator of the website www.jolly-designs.de. If you have any questions about your data or this privacy policy, or about asserting your rights as a data subject, you can contact us using the contact details below.
II. Encryption
All incoming and outgoing data is transmitted using TLS encryption. The Transport Layer Security (TLS) protocol is a standard technology for secure data transmission over the Internet. You can recognize the encrypted connection when using our website by the fact that your browser's address bar begins with "https://" and the encryption symbol located there. TLS encryption prevents third parties from reading the transmitted data.
III. Collection, processing and use of personal data
“Personal data” within the meaning of the GDPR means any information relating to an identified or identifiable natural person; a natural person is considered identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Your personal data will only be processed in accordance with the provisions of applicable data protection law. Further information on the type, scope, and purpose of the collection, processing, and use of personal data can be found below:
- Types of data processed and purposes of processing when visiting our website
When you visit our website, the web server automatically records log files based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. These log files cannot be assigned to a specific person; this data includes, for example, browser type and version, language, operating system used, referrer URL (the previously visited page), IP address of the requesting computer, access date and time of the server request, and the client's file request (file name and URL). This data is collected solely for the purpose of statistical analysis and for security reasons (e.g., to investigate misuse or fraud) and is stored for a period of 7 days and then deleted. Should longer retention of the data be necessary for evidentiary purposes, it will be exempt from deletion until the respective incident has been finally resolved.
Our website's hosting service provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). All data collected on our website is processed on Shopify's servers; this is done on the basis of a data processing agreement, Art. 28 GDPR. Further information can be found at: https://www.shopify.de/legal/datenschutz .
In principle, you can visit our website without having to enter any personal data.
- Types of data processed and purpose of processing when registering and creating a customer account
You have the option of registering as a customer on our website and setting up a customer account. To do so, you must fill out the form under "Create account" with your first name, last name, email address, password, and date of birth. You can complete your details when you log in to your customer account for the first time. Mandatory fields are marked with [*Required]. Your full contact details will then be automatically transferred to every (subsequent) order. You can view your past orders via your customer account. In addition to the data listed under section 1, inventory data (e.g. name and address), contact details (e.g. email address), and payment details (e.g. bank details, account number, and/or the card used for payment) will be processed. This data will only be processed for the purpose of taking pre-contractual measures or fulfilling the contract in accordance with Art. 6 (1) (b) GDPR. The data stored in the customer account will be deleted after the date of termination, unless it is retained for purposes other than making it available in the customer account or must be retained for legal reasons.
- Use of cookies
We, or third parties commissioned by us, store so-called cookies on the customer's hard drive to make the use of our website more user-friendly and effective. The legal basis for this is Art. 6 (1) (f) GDPR.
A cookie is a small text file that, among other things, is used to collect information about the use of a website. These cookies cannot run programs or transmit viruses to your computer. They do not contain any personal data, cannot be assigned to specific individuals, and, unless otherwise specified, are automatically deleted after one year at the latest. This data is not merged with other data sources.
We use cookies in accordance with legal regulations. If the use of cookies is not absolutely necessary ("essential cookies"), your personal data will only be processed using cookies on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
You can also use our website without cookies. You can deactivate cookies in your browser, restrict them to certain websites, or set the browser to notify you as soon as a cookie is sent. You can also delete cookies from your PC's hard drive at any time.
IV. Data exchange with third parties, involvement of third countries in data processing
- We also collect and store data provided by third parties on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and transmit the relevant data to them.
- If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transmission of data to third parties, this will only occur if
a) if it is necessary to fulfil our (pre)contractual obligations (Art. 6 (1) (b) GDPR),
b) on the basis of your consent (Art. 6 (1) (a) GDPR),
c) due to a legal obligation (Article 6 (1) (c) GDPR) or
Subject to legal or contractual permission, we process or have data processed in a third country only if the specific requirements of Articles 44 et seq. of the GDPR are met in order to ensure the level of data protection. Processing is carried out, for example, on the basis of special guarantees, such as adequacy decisions of the Commission that must be observed with priority or compliance with officially recognized specific contractual obligations ("standard contractual clauses").
V. Disclosure of personal data
Your personal data will be shared if this is necessary to process and fulfill contractual obligations, Art. 6 (1) (b) GDPR. This particularly applies to logistics partners and payment service providers. The sharing of your personal data is limited to the minimum necessary. Our contractual partners may use this data exclusively for order fulfillment.
- The logistics service providers we use, such as DHL and GLS, process inventory data (e.g. name and address) and, if applicable, contact details (e.g. email address)
- The payment service providers we use process, in particular, inventory data (e.g., name and address), contact details (e.g., email, telephone number), and bank and payment details (e.g., account number and/or the card used for payment, payment history). Payment transactions are subject to the terms and conditions and privacy policies of the respective payment service providers, which are available on the respective websites or transaction applications:
a) Mastercard (Mastercard Europe SA, Chaussée de Tervuren 198A, 1410 Waterloo, Belgium, https://www.mastercard.de/de-de/datenschutz.html )
b) American Express (American Express Europe SA, Theodor-Heuss-Allee 112, D-60486 Frankfurt am Main, https://www.americanexpress.com/de-de/firma/legal/datenschutz-center/online-datenschutzerklarung/ )
c) Visa (Visa Europe Services Inc., 1 Sheldon Square, London W2 6TT, GB, https://www.visa.de/USE Conditions/visa-privacy-center.html )
d) Klarna (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, https://www.klarna.com/de/datenschutz )
e) PayPal (PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/de/webapps/mpp/ua/privacy-full )
f) Shop Pay (Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, https://www.shopify.de/legal/datenschutz ).
g) Apple Pay (Apple Inc., Infinite Loop, Cupertino, CA 95014, USA, https://www.apple.com/legal/privacy/de-ww/ )
h) Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, https://policies.google.com/privacy )
In addition, your personal data will be passed on on the basis of Art. 6 (1) (a), (c), (f) GDPR.
VI. Newsletter subscription
- We offer to inform you regularly by email about new products, interesting offers and current price developments. Subscribing to our newsletter is voluntary and takes place via the so-called single opt-in procedure. All you have to do is sign up for the newsletter on our website or during the ordering process. In order to be able to prove your subscription in accordance with legal requirements, the time of registration, confirmation time and the IP address are logged on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. By registering for the newsletter, you consent to the processing of the data provided for the purpose of sending and receiving emails, Art. 6 (1) (a) GDPR. Furthermore, you consent to us collecting and processing data about your usage behavior (opening and clicking on links in the email) in order to be able to tailor the content of the mailings to your needs.
- You can revoke your consent to receive the newsletter at any time and without giving reasons with effect for the future via a link that you will find at the end of each newsletter or by sending an e-mail to info@jolly-designs.com
- We may store unsubscribed email addresses and the data stored as part of the registration log for up to three years based on our legitimate interests before deleting them for the purposes of sending the newsletter in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the previous consent is confirmed at the same time.
- The newsletter is sent via "Klaviyo," an email marketing service provided by Klaviyo, 49 Southwark Bridge Road, London SE1 9HH, England. This service provider is used on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and a contract for data processing pursuant to Art. 28 (3) (1) GDPR. Your data is processed on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR.
The shipping service provider may use the recipients' data in an anonymized form, i.e., without assigning it to a specific user, to optimize or improve its own services, e.g., for the technical optimization of the delivery and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.
Further information on data protection can be found at: https://www.klaviyo.com/legal/privacy/privacy-notice .
VII. Direct marketing
- We also use your email address to advertise our own products that are similar to those you have already purchased, provided you have consented to this, in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time and without giving reasons, with effect for the future, via a link at the end of every promotional email or by sending an email to info@jolly-designs.com.
- Direct mail is also sent via "Klaviyo." Section VI. 4 et seq. applies accordingly.
VII. Use of test seals
You can view our customer reviews on the Reviews.io website using the plugin provided by REVIEWS.io 2020 GmbH c/o Mindspace, Skalitzer Straße 104, 10997 Berlin. The corresponding privacy policy can be found at https://www.reviews.io/legal/user-privacy-policy .
IX. Use of web analysis, remarketing and retargeting tools
Based on your consent pursuant to Art. 6 (1) (a) GDPR, we use various tools or plugins for web analysis, remarketing, and retargeting to optimize our online presence and to create more targeted offers for you. Cookies are used, IP addresses are forwarded, and/or various types of data are collected and evaluated. This includes, for example, the number of website visitors, visit duration, average page load time, and visitor origin.
In detail:
- Google Analytics
We use Google Analytics, a web analysis service provided by Google Ireland Ltd. (“Google”), Google Building Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies, which enable an analysis of user use of the website. The information generated by the cookie about your use of the website (including your IP address) is usually transferred to a Google server in the USA and stored there. On our website, IP anonymization is activated by adding the code “gat._anonymizeIp();”, so that your IP address is shortened by Google within EU member states or in other contracting states to the Agreement on the European Economic Area (so-called IP masking). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on our website activities and to provide other services associated with website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf.
Google offers a web browser extension (add-on) that allows you to prevent Google Analytics from collecting and processing data. The add-on can be downloaded and installed at your own risk at https://tools.google.com/dlpage/gaoptout .
General information about Google Analytics and data protection can be found at: https://www.google.com/policies/privacy .
- Google Ads
We also use conversion tracking as part of Google Ads, an online advertising program from Google Ireland Ltd. (“Google”), Google Building Gordon House, Barrow Street, Dublin 4, Ireland.
If you click on an ad placed by Google, a cookie is set for conversion tracking. The information collected using the conversion cookie is used to create conversion statistics, which we use to determine the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. These cookies expire after 30 days and are not used to personally identify users. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page.
If you do not wish to participate in tracking, you can deactivate the Google Conversion Tracking cookie in your internet browser under user settings and thus object to its use. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout . You will then not be included in the conversion tracking statistics. This may limit the functionality of our website.
For more information about Google Ads Remarketing and Conversion Tracking, please visit https://safety.google/privacy/ads-and-data/ .
- Facebook Custom Audiences
We use remarketing tags from the social network facebook.com, operated by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Facebook"). The "Custom Audiences" feature used is a targeting option for advertisements to build our target audience from Facebook users. When you visit our website, a direct connection is established between your browser and the Facebook server via the remarketing tags. This allows Facebook to associate your visit to our pages with your user account. We can use the information obtained in this way to display Facebook ads.
For more information, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/ .
- Shopify
We also use the statistics and analysis function of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) as part of order processing to analyze our website and its visitors.
For marketing and optimization purposes, the following data, among others, is stored and provided in reports, analyses, and statistics: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the websites or products accessed, the referrer URL (website from which you accessed our website), and information about how you interact with the website is also collected. Cookies or similar technologies are used for this purpose, but only with your consent (Art. 6 (1) (a) GDPR).
You can find more information about Shopify’s data protection at https://www.shopify.com/de/legal/datenschutz .
- Meta Ads
We use Meta Ads on our website, an online advertising program from Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. When you use a meta platform, information about your behavior on the meta platforms is collected and forwarded to us. This includes the number of people, demographic information, interests of the people who interacted with the advertisements or products, etc., and the meta platform on which the advertisement was displayed, for example. Information that could be used to identify the user or to identify contact options is not shared with us.
For further information, please refer to Meta's privacy policy at https://de-de.facebook.com/privacy/policy?subpage=4.subpage.2-AdvertisersAndAudienceNetwork
- Amazon Ads
To increase our visibility within shopping results and on product detail pages, we use Amazon Ads, a service of Amazon Services Europe S.à rl (“Amazon”), 38 avenue John F. Kennedy, L-1855 Luxembourg.
If you click on an ad placed by Amazon, a cookie for conversion tracking is set. The information collected using the conversion cookie is used to create conversion statistics, which we use to determine the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. These cookies expire after 30 days and are not used to personally identify users. If you visit certain pages of our website and the cookie has not yet expired, Amazon and we can recognize that you clicked on the ad, how and where it was displayed to you, and why you were redirected to this page.
If you do not wish to participate in tracking, you can deactivate the Amazon Conversion Tracking cookie in your internet browser settings and thus object to its use. Furthermore, you can prevent Amazon from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by changing your cookie settings at https://www.amazon.de/privacyprefs/retail ; you will then not be included in the conversion tracking statistics.
You can find more information about Amazon Ads at https://www.amazon.de/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ and at https://www.amazon.de/gp/help/customer/display.html?nodeId=G64JFZVFDY66XG9K .
X. Social Media Plugins
Based on your consent within the meaning of Art. 6 (1) (a) GDPR, we use various social media plugins for web analysis, remarketing and retargeting to optimize our online presence and to be able to put together more targeted offers for you.
We use the social plugin of the social network facebook.com. This is operated by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Facebook"). The plug-ins are recognizable by a Facebook logo or are marked with the addition "Facebook Social Plugin." The list and appearance of the Facebook social plug-ins can be viewed here: https://developers.facebook.com/docs/plugins .
If you access a function of this website that contains such a plug-in, a direct connection is established with the Facebook servers. The content of the plug-in is transmitted from Facebook directly to your device, which then integrates it into the website. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plug-in and therefore inform you according to our level of knowledge. By integrating the plug-in, Facebook receives the information that you have accessed the corresponding page of the website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plug-ins, e.g. by sharing our website on Facebook using the “share” button, the corresponding information is transmitted from your device directly to Facebook and stored there. If you are not a Facebook member, it is still possible that Facebook will find out and store your IP address. According to Facebook, only an anonymized IP address is stored in Germany. If you are a Facebook member and do not want Facebook to collect data about you via this online service and link it to your member data stored on Facebook, you must log out of Facebook and delete your cookies before using our online service.
For more information, see Facebook’s privacy policy:
https://www.facebook.com/about/privacy and at
http://www.aboutads.info/choices (US site) or
http://www.youronlinechoices.com (EU site).
The settings are platform-independent, meaning they are applied to all devices, such as desktop computers or mobile devices.
- X (formerly Twitter)
Our online offering may include features and content from the Twitter service, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. These may include, in particular, buttons that allow users to share links to the website. If you are a member of the Twitter platform, Twitter can associate the access to the aforementioned content and features with your profile there.
Twitter's privacy policy: https://twitter.com/de/privacy
In addition, functions and content from the Instagram service may be integrated into our online offering. The provider is Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include content such as images, videos, or text and buttons that users can use to express their appreciation for the content, subscribe to the authors of the content, or subscribe to our posts.
If you are a member of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to your profile there.
More about Instagram's privacy policy at: http://instagram.com/about/legal/privacy/
We also use the Pinterest social media plugin, which is provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. This may include content such as images, videos, or text and buttons that allow users to express their likes of the content, subscribe to the authors of the content, or subscribe to our posts.
If you are a member of the Pinterest platform, Pinterest can assign the access to the above-mentioned content and functions to your profile there. The information about your website usage generated by the plug-in is transmitted to a Pinterest server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Pinterest within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Pinterest server in the USA and shortened there. On our behalf, Pinterest will use this information to evaluate your website activities, to compile reports on this and to provide us with other services associated with website and internet usage.
Pinterest Privacy Policy: https://policy.pinterest.com/de/privacy-policy
- TikTok
Furthermore, functions and content of the TikTok service, offered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380 Ireland, may be integrated into the online offering. This includes, for example, content such as videos and buttons that allow users to express their likes of the content, subscribe to the author of the content, or subscribe to the provider's posts.
If you are a member of the TikTok platform, TikTok can assign the access to the above-mentioned content and functions to your profile there. The information generated by the pixel about your use of this website is transmitted to several TikTok servers, including those in third countries such as the USA, and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by TikTok within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to TikTok's servers in third countries and shortened there. On behalf of the operator of this website, TikTok will use this information to evaluate your activities on the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage.
TikTok offers extensive data protection information at https://www.tiktok.com/legal/privacy-policy?lang=de .
XI. Integration of videos via YouTube
We use videos from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA. Google Ireland Ltd. (“Google”), Google Building Gordon House, Barrow Street, Dublin 4, Ireland is responsible for data processing on YouTube. When you access a page from one of our products that has an embedded video (also available directly via YouTube), a connection is established to the YouTube servers and the content is displayed on the website by sending a message to your browser. The information about your website usage generated by the plug-in is transmitted to a YouTube server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by YouTube within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a YouTube server in the USA and shortened there. On our behalf, YouTube will use this information to evaluate your website activity, compile reports on this activity, and provide us with other services related to website activity and internet usage. According to YouTube, in "extended data protection mode," only data is transmitted to the YouTube server, in particular which of our product pages you visited when watching the video. If you are logged in to YouTube at the same time, this information will also be assigned to your YouTube membership account. You can prevent this by logging out of your membership account before visiting our website.
Further information on YouTube's privacy policy is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/
XII. Use of Google Maps
We use the function for embedding Google Maps on our website from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
This function enables the visual display of geographical information and interactive maps. When you access pages that contain Google Maps, Google also collects, processes, and uses data from visitors to the website. Your data may also be transferred to the USA. The EU Commission has issued an adequacy decision for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore committed to adhering to European data protection principles. Cookies or similar technologies are used with your consent on the basis of Section 25 (1) Sentence 1 TTDSG in conjunction with Article 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Article 6 (1) (a) GDPR.
For more information, please see Google's privacy policy at https://policies.google.com/privacy . There, you can also change your personal settings in the privacy center.
XIII. Your rights
You have the following rights:
- Information
According to Art. 15 GDPR, you have the right at any time to request free information about your personal data stored by us, its origin and recipient, the purpose of the data processing, the planned duration of data storage including a copy of the personal data that is the subject of the processing.
- Correction
Furthermore, according to Art. 16 GDPR, you have the right to have incorrect personal data rectified immediately or incomplete personal data completed at any time.
- Revocation of consent
You have the right to revoke your consent to data processing at any time and with effect for the future, without having to give a reason for revocation, Art. 7 (3) GDPR.
- deletion
Under the conditions of Art. 17 GDPR, you can request the deletion of your personal data. Your right to deletion depends, among other things, on whether the data concerning you is still required by us to fulfill our statutory obligations.
- Restriction of processing
Under the conditions of Art. 18 GDPR, you can request the restriction of the processing of personal data concerning you.
- Data portability
According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to transmit it to another controller, provided that the processing is based on consent and the processing is carried out by automated means.
- Contradiction
According to Art. 21 GDPR, you have the right to object at any time to the creation of user profiles and to the processing of your personal data, provided that the processing is based on Art. 6 (1) (e) or (f) GDPR. Your personal data will no longer be processed unless compelling legitimate grounds outweigh your interests, rights, and freedoms. If your personal data is used for direct marketing purposes, you naturally have the right to object to such processing at any time.
- No automated decision
According to Art. 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you.
- Complaint
According to Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.
XIV. Changes to our privacy policy
We reserve the right to adapt the content of our privacy policy as soon as changes to the data processing we carry out make this necessary. If your cooperation is required (e.g., in the form of consent), we will inform you accordingly. Please also note that the addresses and contact information of our service providers are subject to change, and please check the information before contacting us.
Last updated: May 24, 2024