Privacy Policy

Privacy Policy

This policy explains how North & Muse (referred to as "we" or "the Entrepreneur") collects, uses, and protects your personal data when you use our website.

1. Data Controller and Security

  • Data Controller: The entity responsible for the data processing described here is Brandt & Belle.

  • Security: We use SSL/TLS encryption (indicated by "https://" and the lock symbol in your browser) to ensure the security and confidentiality of all data transmitted between your browser and our website, including orders and inquiries.

2. Data Collected When You Visit Our Website

When you visit our site for informational purposes only (without logging in or making a purchase), your browser automatically transmits technical data ("server log files") to our server. This data is necessary for the website to function correctly.

Data Collected Purpose & Legal Basis
Visited website, Date/Time, Data volume, Referring link (Source) Necessary for website stability and functionality.
Browser, Operating System Necessary for display and technical compatibility.
IP Address Collected and anonymized to protect your identity while serving the site.

Legal Basis: This processing is based on our legitimate interest (Art. 6(1) lit. f GDPR) in maintaining a functional and stable website.

3. Cookies

We use small text files called cookies, stored on your device, to enhance your website experience.

  • Function: Some cookies (session cookies) expire when you close your browser; others remain to recognize your browser on future visits (persistent cookies).

  • Legal Basis: Data processed by cookies is based on either:

    • Contract Execution (Art. 6(1) lit. b GDPR) for functional aspects related to your order.

    • Legitimate Interest (Art. 6(1) lit. f GDPR) for optimal website functionality.

  • Control: You can adjust your browser settings to accept or reject cookies. However, disabling cookies may limit website functionality.

4. Communication and Contact

When you contact us (via form or email), we collect the data you provide solely to respond to your inquiry and for related technical administration.

  • Legal Basis: Legitimate Interest (Art. 6(1) lit. f GDPR) in responding to your communication. If your inquiry is related to placing an order, Contract Execution (Art. 6(1) lit. b GDPR) also applies.

  • Data Retention: Your data is deleted once your inquiry is fully processed, unless legal obligations require longer storage.

5. Customer Account and Contract Execution

We collect personal data when you create a customer account or place an order to fulfill the contract.

  • Legal Basis: Contract Execution (Art. 6(1) lit. b GDPR).

  • Account Deletion: You can request account deletion at any time. After deletion or contract completion, your data is restricted and deleted after mandatory retention periods (unless consent for further use is given).

6. Direct Marketing (Newsletter)

6.1 Email Newsletter Subscription

We use the Double Opt-in procedure for newsletters: we send a confirmation email, and you must click the link to confirm your subscription.

  • Legal Basis: Your explicit Consent (Art. 6(1) lit. a GDPR).

  • Unsubscribe: You can unsubscribe at any time via the link in the newsletter or by contacting us.

6.2 Newsletter for Existing Customers

If you provided your email during a purchase, we may send you promotions for similar products or services.

  • Legal Basis: Our Legitimate Interest (Art. 6(1) lit. f GDPR) in personalized marketing.

  • Objection: You may object to this use at any time by contacting us.

7. Data Processing for Order Handling

7.1 Shipping and Payment

To fulfill your order, we share necessary personal data with:

  • Shipping Companies: For product delivery.

  • Payment Providers: To process your payment.

7.2 Payment Service Providers (Legal Basis: Contract Execution Art. 6(1) lit. b GDPR)

  • PayPal (including credit card, direct debit, purchase on account): Your payment data is transferred to PayPal (Europe) S.à r.l. et Cie, S.C.A. PayPal may perform credit checks.

  • SOFORT (Klarna Group): Transaction processed by SOFORT GmbH.

8. Marketing and Tracking Technologies

We use various third-party services for advertising, analytics, and service optimization.

Service Purpose Legal Basis Control Options
Google Analytics Website analysis, reporting, and optimization (including IP anonymization). Legitimate Interest (Art. 6(1) lit. f GDPR). Browser plugin (opt-out) or opt-out link on our website (see original document for links).
Google AdWords Conversion Tracking Measures ad effectiveness (conversion statistics) after a click. Legitimate Interest (Art. 6(1) lit. f GDPR). Deactivate conversion tracking cookie in your browser settings.
DoubleClick by Google Serves relevant ads and prevents repeated ad display. Legitimate Interest (Art. 6(1) lit. f GDPR). Deactivate cookies for www.googleadservices.com or use general ad settings.
Facebook Custom Audience (Pixel) Tracks user behavior after viewing Facebook ads for effectiveness measurement and optimization. Explicit Consent (Art. 6(1) lit. a GDPR). Adjust browser settings or use the Digital Advertising Alliance opt-out.
Google AdWords Remarketing Displays interest-based advertising on Google and third-party sites based on your browsing history. Legitimate Interest (Art. 6(1) lit. f GDPR). Adjust Google ad settings.

9. Social Media Plugins (Shariff Solution)

We use the Shariff solution for Facebook, Google+, and Instagram buttons. This protects your data because the buttons are embedded as simple HTML links. No data is transmitted to social media providers unless you actively click on the button.

10. Your Rights

The General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data:

  • Right of Access: You have the right to request information about the data we process about you.

  • Right to Rectification: You can request the correction of inaccurate or incomplete personal data.

  • Right to Erasure ('Right to be forgotten'): You can request the deletion of your personal data, provided there are no legal storage obligations.

  • Right to Restriction of Processing: You can request that we restrict the processing of your data under certain conditions.

  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

  • Right to Object: You can object to the processing of your data based on legitimate interest or direct marketing.

  • Right to Withdraw Consent: Where processing is based on your consent, you can withdraw this consent at any time with future effect.

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

For any questions regarding your personal data or to exercise your rights, please contact us at: Support@north-muse.com.