Privacy Policy

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 We are glad you are visiting our website and thank you for your interest. Below you will find information about how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The party responsible for data processing on this website under the General Data Protection Regulation (GDPR) is Margaret's Calgary. The responsible party is the person or entity that determines the purposes and means of processing personal data, either alone or together with others.

1.3 For security reasons, and to protect the transmission of personal data and other confidential content (such as orders or inquiries sent to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

In addition, no automated decision-making or profiling takes place that produces legal effects or similarly significantly affects you, within the meaning of Art. 22 GDPR.

DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website purely for informational purposes — that is, without registering or otherwise providing us with information — we only collect the data your browser automatically sends to our server (so-called "server log files"). When you access our website, we collect the following technically necessary data to display the site:

  • The page visited
  • Date and time of access
  • Amount of data transferred, in bytes
  • The referring source/page from which you accessed our site
  • Browser used
  • Operating system used
  • IP address (anonymized where applicable)

This processing takes place in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used for any other purpose. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

COOKIES

To make your visit to our website more pleasant and to enable certain features, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted automatically once you close your browser (session cookies). Others remain on your device and allow us, or our partners (third-party cookies), to recognize your browser on a later visit (persistent cookies).

Cookies may collect and process certain user information, such as browser data, location data, and IP addresses. Persistent cookies are automatically deleted after a set period, which varies by cookie.

Some cookies make certain functions easier, such as remembering items in your shopping cart between visits. Where personal data is processed through such cookies, this occurs under Art. 6(1)(b) GDPR for the performance of a contract, or under Art. 6(1)(f) GDPR to safeguard our legitimate interest in offering the best possible website functionality and a pleasant customer experience.

We may work with advertising partners to make our online offering more relevant to you. In that case, cookies from these partner companies may also be placed on your device when you visit our website (third-party cookies). Where we work with such advertising partners, you will find detailed information about the cookies used and the data collected in the relevant sections below.

You can set your browser to notify you about cookies, decide individually whether to accept them, or block cookies altogether or for specific cases. Every browser handles cookie settings differently — please consult your browser's help menu for instructions:

  • Internet Explorer: Manage Cookies
  • Firefox: Allow and Block Cookies
  • Chrome: Cookie Settings
  • Safari: Manage Cookies
  • Opera: Cookie Preferences

On your first visit to our website, we will ask for your consent via a cookie banner for any cookies that are not strictly necessary for the website's operation. You may change your preferences at any time.

Please note that if you decline cookies, some website functionality may be limited.

CONTACTING US

When you contact us (for example, via a contact form or by email), we collect personal data. The specific data collected through a contact form is indicated on the relevant form itself. This data is used solely to respond to your inquiry or to reach out to you, and for related administrative handling.

The legal basis for this processing is our legitimate interest in responding to your inquiry, under Art. 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract, the additional legal basis of Art. 6(1)(b) GDPR applies. Your data will be deleted once your inquiry has been fully resolved, unless statutory retention obligations require otherwise.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

Under Art. 6(1)(b) GDPR, we continue to collect and process personal data that you provide to us for the purpose of executing a contract or opening a customer account. The specific data collected is indicated on the relevant input forms.

You may delete your customer account at any time by notifying the responsible party named above. We store and use the data you provide for the purpose of processing the contract. Once the contract has been fully performed, or your customer account deleted, your data will be restricted from further use and deleted after the statutory retention periods under tax and commercial law expire, unless you have expressly consented to further use, or we are otherwise legally entitled to use your data, as explained below.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only information required to receive the newsletter is your email address; providing any additional information is optional and is used to personalize the newsletter content.

We use a double opt-in procedure for our newsletter. This means we will only send you newsletter emails once you have explicitly confirmed your wish to subscribe. After signing up, you will receive a confirmation email asking you to confirm your subscription via a link.

By clicking the confirmation link, you consent to the use of your personal data under Art. 6(1)(a) GDPR. When you sign up, we store the IP address assigned to you by your internet provider, together with the date and time of registration, to help us detect any potential misuse of your email address.

The data collected during newsletter sign-up is used exclusively for sending the newsletter. You can unsubscribe at any time via the link in the newsletter, or by contacting the responsible party named above. Upon unsubscribing, your email address will be promptly removed from our distribution list, unless you have expressly consented to further use, or we are otherwise legally entitled to use your data, as explained in this statement.

6.2 Email Newsletter for Existing Customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services by email. No separate consent is required for this; the processing is based solely on our legitimate interest in personalized direct marketing under Art. 6(1)(f) GDPR.

If you have previously objected to this use of your email address, we will not send you marketing emails. You may object at any time by notifying the responsible party named above. The only cost to you is the standard transmission cost. Once we receive your objection, we will immediately stop using your email address for advertising purposes.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1

Personal data we collect will be shared with the shipping company responsible for delivery, to the extent necessary to deliver the goods. Your payment details will be forwarded to the relevant financial institution as part of payment processing, where required. Where payment service providers are used, we inform you explicitly below. The legal basis for this data transfer is Art. 6(1)(b) GDPR.

7.2 Use of Payment Service Providers

PayPal For payments made via PayPal, credit card through PayPal, direct debit through PayPal, or — where offered — "purchase on account" or "installment payment" through PayPal, your payment data will be shared with PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") for payment processing purposes. This transfer takes place under Art. 6(1)(b) GDPR and only to the extent necessary for processing the payment.

PayPal may carry out a creditworthiness check for certain payment methods, such as credit card, direct debit, or installment payment through PayPal. For this purpose, your payment data may be shared with credit reference agencies, as permitted under Art. 6(1)(f) GDPR, based on PayPal's legitimate interest in assessing your ability to pay.

The results of this check, expressed as probability values (score values), are used by PayPal to decide whether to offer the relevant payment method. These scores are calculated using a recognized statistical method that takes address data into account. For further details, please see PayPal's own privacy policy.

You may object to this processing at any time by contacting PayPal directly. PayPal, however, remains entitled to process your personal data where necessary for the contractual processing of payments.

SOFORT If you choose "SOFORT" as your payment method, payment will be processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"), part of the Klarna Group (Klarna Bank AB, Sveavägen 46, 11134 Stockholm, Sweden). Information provided during checkout, along with your order details, will be shared with SOFORT as necessary for payment processing, under Art. 6(1)(b) GDPR.

For more information on SOFORT's data protection practices, please see SOFORT's privacy policy.

8) CONTACT FOR REVIEW REMINDERS

(Our own review reminder — not sent through a third-party review system)

With your explicit consent under Art. 6(1)(a) GDPR, given during or after your order, we may use your email address once to remind you to leave a review of your order through the review system we use. You may withdraw your consent at any time by contacting the responsible party.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins (Shariff Solution)

Additional customs clearance costs and/or import duties, where applicable, are not included in the price and are the customer's responsibility.

Our website uses social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To better protect your data, these buttons are not embedded as full plugins but simply as an HTML link. This means that visiting a page on our website that contains such a button does not create any connection to Facebook's servers. Only when you actively click the button does a new browser window open, loading the Facebook page, where you can then interact with the plugin (after logging in, if required).

For details on the purpose and scope of data collection, as well as further processing by Facebook and your rights and settings for protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/policy.php

9.2 Google+ Plugins (Shariff Solution)

Our website uses social plugins ("plugins") from the Google+ social network, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To better protect your data, these buttons are not embedded as full plugins but simply as an HTML link. This means that visiting a page on our website that contains such a button does not create any connection to Google+ servers. Only when you actively click the button does a new browser window open, loading the Google+ page, where you can then interact with the plugin (after logging in, if required).

For details on the purpose and scope of data collection, as well as further processing by Google and your rights and settings for protecting your privacy, please see Google's privacy policy at https://www.google.com/intl/en/policies/privacy/

9.3 Instagram Plugin (Shariff Solution)

Our website uses social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To better protect your data, these buttons are not embedded as full plugins but simply as an HTML link. This means that visiting a page on our website that contains such a button does not create any connection to Instagram's servers. Only when you actively click the button does a new browser window open, loading the Instagram page, where you can then interact with the plugin (after logging in, if required).

For details on the purpose and scope of data collection, as well as further processing by Instagram and your rights and settings for protecting your privacy, please see Instagram's privacy policy at https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to show users relevant ads, improve campaign performance reports, and avoid showing the same ad repeatedly. Using a cookie ID, Google can track which ads are shown in which browser and prevent duplicate display. This processing is based on our legitimate interest in effective marketing of our website under Art. 6(1)(f) GDPR.

DoubleClick can also track conversions related to ad requests — for example, if a user sees a DoubleClick ad and later visits the advertiser's website to make a purchase, this conversion is recorded. DoubleClick cookies do not contain personal information.

Because of the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no influence over the scope and further use of the data Google collects through this tool. To the best of our knowledge: by embedding DoubleClick, Google learns that you have visited the relevant part of our website or clicked on an ad. If you are logged into a Google service, Google may link this visit to your account. Even without a Google account or login, it is possible that Google collects and stores your IP address.

If you do not wish to participate in this tracking, you can disable conversion-tracking cookies by configuring your browser to block cookies from the domain www.googleadservices.com, via https://www.google.de/settings/ads. Note that this setting is deleted if you clear your cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to review and adjust your cookie preferences. You can also set your browser to notify you when cookies are placed and decide individually whether to accept or reject them. Declining cookies may limit some website functionality.

For more information on DoubleClick by Google's privacy practices, see: https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking

This website uses the "Google AdWords" advertising program, including conversion tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our offerings on external websites through advertisements ("Google Ads"). This allows us to measure the success of individual advertising campaigns. Our goal is to show you ads relevant to your interests, make our website more appealing, and achieve a fair calculation of advertising costs.

A conversion-tracking cookie is placed when a user clicks an ad served through Google AdWords. Cookies are small text files stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If a user visits certain pages on our website while the cookie is still valid, both Google and we can see that the user clicked the ad and was redirected here. Every AdWords customer receives a different cookie, so cookies cannot be tracked across different customers' websites. The information gathered via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted into conversion tracking. Customers see the total number of users who clicked their ad and were redirected to a page carrying a conversion-tracking tag, but they receive no information that would allow them to identify individual users.

If you do not wish to participate in tracking, you can block Google's conversion-tracking cookie through your browser settings. This will exclude you from the conversion statistics. We use Google AdWords based on our legitimate interest in targeted advertising, under Art. 6(1)(f) GDPR.

For more information on Google's privacy practices, see: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad personalization by adjusting your browser settings, or by installing the browser plug-in available at: https://www.google.com/settings/ads/plugin?hl=en

Please note that some website features may be limited or unavailable if cookies are disabled.

WEB ANALYTICS SERVICES — Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies" — text files stored on your device — that allow analysis of how you use our website. The information generated by the cookie about your use of this website (including your truncated IP address) is generally transferred to and stored on a Google server in the USA.

This website uses Google Analytics with the "_anonymizeIp()" extension, which anonymizes your IP address by truncating it, preventing direct identification. With this extension active, Google shortens your IP address within EU member states or other countries in the European Economic Area before transmission. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. In such cases, processing takes place under Art. 6(1)(f) GDPR, based on our legitimate interest in statistically analyzing user behavior for optimization and marketing purposes.

On our behalf, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide us with further related services. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can prevent cookies from being stored by adjusting your browser settings; note that in this case you may not be able to use all features of this website. You can also prevent Google from collecting and processing data generated by the cookie related to your website use (including your IP address) by downloading and installing the browser plug-in available here: Google Analytics Opt-out Browser Add-on.

Alternatively, on mobile devices or in-browser, you can click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website going forward (this opt-out cookie only works in this browser, for this domain, and must be reset if you clear your cookies): Google Analytics Opt-out.

This website also uses Google Analytics for cross-device analysis of visitor flows, using a User ID. On your first visit, you are assigned a unique, persistent, anonymized ID used across your devices, allowing interaction data from different devices and sessions to be linked to one user. The User ID contains no personal data and is not transmitted to Google as such.

You may object to data collection via the User ID at any time, with future effect, by disabling Google Analytics on all the systems you use (e.g. a different browser or mobile device), for example via the browser plug-in above, or via the opt-out cookie link above.

For more information on Universal Analytics, please see Google's documentation.

RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING — Facebook Custom Audiences via Pixel

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, this allows us to track user behavior after a visit to, or click on, a Facebook ad. This helps us evaluate the effectiveness of Facebook ads for statistical and market-research purposes, and can help optimize future advertising.

The data collected is anonymous to us and does not allow us to identify individual users. Facebook, however, stores and processes this data in a way that may allow it to be linked to individual user profiles, and Facebook may use this data for its own advertising purposes, in accordance with Facebook's Data Use Policy.

You can allow Facebook and its partners to show ads on and off Facebook; a cookie may be placed on your device for this purpose. This processing only takes place with your explicit consent, under Art. 6(1)(a) GDPR.

Consent to use of the Facebook Pixel may only be given by users aged 13 or older. If you are younger, please ask a parent or guardian for permission.

You can prevent cookies from being stored on your device by adjusting your browser settings so no new cookies are stored, or by deleting existing cookies. Disabling all cookies, however, may mean some features of our website no longer work correctly. You can also opt out of cookies from third-party advertisers such as Facebook via the Digital Advertising Alliance's website.

Google AdWords Remarketing

Our website uses Google AdWords remarketing features, allowing us to advertise on Google's search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in your browser that automatically enables interest-based advertising, based on the pages you have visited, using a pseudonymous cookie ID. This processing is based on our legitimate interest in effectively marketing our website, under Art. 6(1)(f) GDPR.

Further processing only takes place if you have agreed to link your web and app browsing history with your Google account, and to use information from your Google account to personalize the ads shown to you. If you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to build and define audience lists for cross-device remarketing. Your personal data is temporarily linked with Google Analytics data for this purpose.

You can permanently disable ad-personalization cookies by installing the browser plug-in available via Google's Ad Settings, or by visiting the Digital Advertising Alliance's website at www.aboutads.info to review and adjust settings. You can also configure your browser to notify you when cookies are set and decide individually whether to accept or decline them. Declining cookies may limit some website functionality.

For more on advertising and Google's privacy practices, see Google's advertising privacy policy.

RIGHTS OF THE DATA SUBJECT

13.1 Applicable data protection law grants you a number of important rights regarding the processing of your personal data, summarized below:

  • Right of Access (Art. 15 GDPR): You may request confirmation of whether we process your personal data, and information about the purposes of processing, the categories of data processed, the recipients or categories of recipients, the planned storage period (or the criteria used to determine it), your rights to correction, erasure, restriction, and objection, your right to complain to a supervisory authority, the origin of your data if not collected directly from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved, and your right to be informed of safeguards under Art. 46 GDPR when data is transferred to third countries.
  • Right to Rectification (Art. 16 GDPR): You may request immediate correction of inaccurate data, and completion of incomplete data we hold about you.
  • Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data where the conditions of Art. 17(1) GDPR are met. This right does not apply where processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
  • Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict processing of your data, for example while the accuracy of the data is being verified, if you have objected to processing, if you need the data to establish, exercise, or defend legal claims, or while it is being determined whether our legitimate interests override yours.
  • Right to Notification (Art. 19 GDPR): If you have exercised your rights to rectification, erasure, or restriction, we must notify all recipients to whom your data was disclosed, unless this proves impossible or requires disproportionate effort. You may ask to be informed of these recipients.
  • Right to Data Portability (Art. 20 GDPR): You may obtain the personal data you provided to us in a structured, commonly used, machine-readable format, or request that we transfer it directly to another controller, where technically feasible.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You may withdraw your consent to processing at any time, with future effect. Upon withdrawal, we will promptly delete the affected data unless another legal basis for processing applies. Withdrawal does not affect the lawfulness of processing carried out based on consent before the withdrawal.
  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe our processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or the location of the alleged infringement.

13.2 Right to Object

Where we process your personal data based on our legitimate interest, you have the right to object at any time, for reasons arising from your particular situation.

If you exercise this right, we will stop processing the affected data — unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless processing is necessary to establish, exercise, or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time. In that case, we will immediately stop processing your data for direct marketing purposes.

RETENTION PERIOD OF PERSONAL DATA

The retention period for personal data is determined by the applicable statutory retention obligations (for example, under commercial and tax law). Once the relevant retention period has expired, the corresponding data is routinely deleted, unless it is still needed to perform a contract, to conclude a contract, or because we retain a legitimate interest in continued storage.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of the rights described above, please email us at info@margaretscalgary.com.