Privacy policy

Privacy Policy

Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Arvenora, Email: info@arvenora.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser’s address bar.

  1. Data collection when visiting our website

When using our website for informational purposes only, i.e., when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website:

  • Visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

  1. Hosting

Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of Shopify’s aforementioned services, data may also be transferred for further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. For the transfer of data to Shopify Inc. in Canada, the appropriate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify’s data protection can be found at the following website: https://www.shopify.com/legal/privacy

Any further processing on servers other than those mentioned above of Shopify will only take place within the scope specified below.

  1. Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).

When cookies are set, they collect and process certain user information such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can find the duration of storage for the respective cookies in the cookie settings overview of your web browser.

Some cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR for the execution of the contract, in accordance with Art. 6 (1) lit. a GDPR in the event of consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.

Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla.org/kb/cookies-accepten-en-weigeren Chrome: https://support.google.com/chrome/answer/95647?hl=nl Safari: https://support.apple.com/guide/safari/sfri11471/mac Opera: https://help.opera.com/latest/web-preferences/#cookies

Please note that not accepting cookies may limit the functionality of our website.

  1. Contacting us

When contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective form. This data is used exclusively for the purpose of responding to your inquiry or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been fully processed, provided that there are no statutory retention obligations that require further storage.

  1. Data processing when opening a customer account and for contract execution

In accordance with Art. 6 (1) lit. b GDPR, personal data is further collected and processed if you provide it to us for the execution of a contract or when opening a customer account. The data collected is evident from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the address of the controller mentioned above. We store and use the data you provide for contract execution. After the contract has been fully executed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods, unless you have expressly consented to further use of your data or we have reserved the right to further data use as permitted by law.

  1. Use of customer data for direct marketing

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm your subscription by clicking a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 (1) lit. a GDPR. When registering for the newsletter, we store your IP address as registered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace possible misuse of your email address at a later time. The data collected when registering for the newsletter will be used exclusively for promotional purposes through the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or unless we reserve the right to use your data for other purposes permitted by law and as explained in this statement.

7.2 Sending email newsletters to existing customers

If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those you have already purchased, by email. According to Section 7 (3) of the German Unfair Competition Act (UWG), we do not require separate consent from you for this. The data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing pursuant to Art. 6 (1) lit. f GDPR.

If you initially objected to the use of your email address for this purpose, you will not receive any emails from us. You have the right to object to the use of your email address for this marketing purpose at any time in the future by sending a message to the controller mentioned above. Only transmission costs according to the basic rates apply for this. Upon receipt of your objection, the use of your email address for marketing purposes will be immediately stopped.

  1. Data processing for order handling

8.1 To process your order, we work together with the following service providers, who support us in full or in part in the execution of concluded contracts. Personal data is transmitted to these service providers according to the information below.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of contract fulfillment, to the extent that this is necessary for the delivery of the goods. Your payment data will be passed on to the authorized credit institution as part of payment processing, if this is necessary for payment processing. If we use payment service providers, we will explicitly inform you of this below. The legal basis for the transfer of the data is Art. 6 (1) lit. b GDPR.

8.2 To fulfill our contractual obligations towards our customers, we cooperate with external shipping partners. We pass on your name and delivery address, and your telephone number if necessary, exclusively for the purpose of delivering goods in accordance with Art. 6 (1) lit. b GDPR to a shipping partner selected by us.

8.3 Use of payment service providers (payment services)

Apple Pay If you choose the "Apple Pay" payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing will be carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code you previously set and verify it using the "Face ID" or "Touch ID" function of your device.

For payment processing, the data you provide during the ordering process, along with order information, is encrypted and transmitted to Apple. Apple re-encrypts the data with a developer-specific key before forwarding it to the payment service provider of the stored card in Apple Pay. This encryption ensures that only the website where the purchase was made has access to the payment data. Once the payment is complete, Apple sends the device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.

If personal data is processed in the described transmissions, the processing is done solely for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Apple stores anonymized transaction data, such as estimated purchase amount, approximate date and time, and whether the transaction was successfully completed. Due to anonymization, no personal reference is possible. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made via Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings by going to "Wallet & Apple Pay" and turning off "Allow Payments on Mac."

For more information about privacy with Apple Pay, visit: https://support.apple.com/HT203027

Google Pay If you choose the "Google Pay" payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment will be processed via the "Google Pay" application on your mobile device running Android 4.4 ("KitKat") or higher with NFC functionality by charging a payment card stored in Google Pay or a verified payment system (e.g., PayPal).

To authorize a payment over €25 via Google Pay, your mobile device must be unlocked using a previously set authentication method (e.g., face recognition, password, fingerprint, or pattern).

For payment processing, the data you provide during the order process, along with order information, is transmitted to Google. Google then forwards your stored payment information in Google Pay in the form of a one-time transaction number to the originating website, verifying the payment. This transaction number does not contain actual payment details but is created and transmitted as a one-time numerical token. In all Google Pay transactions, Google acts only as an intermediary. The actual transaction is processed solely between the user and the original website through the selected payment method in Google Pay.

If personal data is processed in the described transmissions, the processing is done solely for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction performed through Google Pay. This includes the date, time, transaction amount, location, and merchant description, a description of the purchased items or services, photos added by you to the transaction, names and emails of the seller and buyer or sender and recipient, the payment method used, your reason for the transaction, and any offers linked to the transaction.

According to Google, this processing is carried out solely in accordance with Art. 6 (1) lit. f GDPR, based on its legitimate interest in proper accounting, verifying transaction data, and optimizing and maintaining Google Pay.

Google also reserves the right to combine processed transaction data with other information collected and stored through other Google services.

Google Pay terms of use can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl

For privacy information regarding Google Pay, visit: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl

PayPal When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—"Purchase on Account" or "Installment Payment" via PayPal, your payment data will be passed on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for the purpose of payment processing. The data transfer is carried out in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the payment process.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—"Purchase on Account" or "Installment Payment" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 (1) lit. f GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. The result of the credit check is used by PayPal to decide whether the respective payment method is made available. The credit check may include probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical method. Address data may also be included in the calculation of score values.

Further information on data protection, including the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full

You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Shopify Payments We use the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through Shopify Payments, payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we transmit the information you provided during the ordering process along with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) lit. b GDPR. The transfer of your data is solely for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary.

More information about the privacy policy of Shopify Payments is available at: https://www.shopify.com/legal/privacy

Privacy information for Stripe Payments Europe Ltd. can be found here: https://stripe.com/privacy

  1. Online Marketing

10.1 Facebook Pixel for creating custom audiences with advanced matching (with cookie consent tool)

Within our online offering, we use the so-called "Facebook Pixel" from the social network Facebook in the mode of extended data matching, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").

Based on your explicit consent, when a user clicks on a Facebook advertisement placed by us, the URL of our linked page is provided with a Facebook Pixel parameter. This URL parameter is stored in the user's browser via a cookie set by our linked site. In addition, specific customer data such as the email address, collected on our website linked to the Facebook ad during actions such as purchases, registrations, or sign-ups, is recorded (advanced matching). This cookie is read by the Facebook Pixel, allowing the data, including customer-specific data, to be transmitted to Facebook.

Using the Facebook Pixel with advanced matching enables Facebook to precisely determine the visitors of our online offering as a target group for displaying ads ("Facebook Ads"). We therefore use the Facebook Pixel with advanced matching to display our Facebook Ads only to those Facebook users who have shown interest in our online offering or who exhibit specific characteristics (e.g., interest in certain topics or products determined by visited websites), which we transmit to Facebook as "Custom Audiences."

We also use the Facebook Pixel with advanced matching to ensure our Facebook Ads correspond to the users’ potential interests and are not perceived as annoying. This allows us to further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad ("conversion").

Compared to the standard version of the Facebook Pixel, the advanced matching feature helps us better measure the effectiveness of our ad campaigns by tracking more attributed conversions.

All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policy: https://www.facebook.com/about/privacy/

The data may enable Facebook and its partners to display ads both on and off Facebook.

These processing operations only take place if explicit consent is granted pursuant to Art. 6 (1) lit. a GDPR. Consent for the use of the Facebook Pixel may only be given by users who are at least 16 years old. If you are younger, please ask your parent or legal guardian for permission.

The information generated by Facebook is generally transmitted to a Facebook server and stored there, which may also involve transmission to Facebook Inc. servers in the USA. You can withdraw your consent at any time with effect for the future by removing the checkmark for the Facebook Pixel in the "Cookie Consent Tool" on our website.

10.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking service operated by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our attractive offers with the help of advertising on external websites (so-called Google Ads). We can determine how successful the individual advertising measures are by analyzing the data from the advertising campaigns. Our goal is to show you ads that are of interest to you, to make our website more appealing to you, and to ensure a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google ad. Cookies are small text files stored on your device. These cookies usually expire after 30 days and are not intended to identify you personally. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers.

The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted into conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users.

If you do not want to participate in tracking, you can block the use of the Google Conversion Tracking cookie by setting your browser to disable cookies from the domain "googleadservices.com." You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f GDPR. In the context of using Google Ads, it may also lead to personal data being transferred to Google LLC servers in the USA.

You can find more information about Google’s privacy policy at: https://www.google.com/policies/privacy/

You can permanently disable cookies for Google Ads Conversion Tracking by downloading and installing the browser plugin available via the following link: https://www.google.com/settings/ads/plugin?hl

Please note that certain functions of this website may not work properly or only to a limited extent if you disable the use of cookies.

Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" on the website or follow the alternative opt-out options described above.

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, which allows us to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is based on our legitimate interest in the optimal promotion of our website pursuant to Art. 6 (1) lit. f GDPR.

Further data processing will only occur if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google while visiting our website, Google will use your data along with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form audiences.

When using Google Ads Remarketing, personal data may also be transmitted to Google LLC servers in the USA.

You can permanently disable cookies for ad personalization by downloading and installing the browser plug-in from Google: https://www.google.com/settings/ads/onweb/

Further information on Google Ads Remarketing and Google’s privacy policy can be found here: https://www.google.com/policies/technologies/ads/

Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" on our website or use the opt-out options described above.

  1. Tools and Miscellaneous

Cookie Consent Tool based on Usercentrics technology

This website uses a cookie consent tool with technology provided by Usercentrics to obtain valid user consent for cookies that require consent and cookie-based applications.

By embedding the corresponding JavaScript code, a banner is displayed to users when they access the page, allowing them to give consent for certain cookies and/or cookie-based applications by ticking a checkbox. The tool blocks the setting of all cookies that require consent until the user grants the respective permission. This ensures that such cookies are only set on the user’s device if consent is given.

In order to clearly assign page views to individual users and to record, log, and store the consent settings given by a user for the duration of the session, the cookie consent tool collects certain user information (including the IP address) when visiting our website. This information is transmitted to the servers of Usercentrics and stored there.

This data processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in obtaining legally compliant, user-specific, and user-friendly cookie consent, and thus in legally compliant website design.

Another legal basis for the described data processing is Art. 6 (1) lit. c GDPR. As the controller, we are legally obligated to make the use of technically non-essential cookies dependent on the user's consent.

We have concluded a data processing agreement with Usercentrics, under which we oblige Usercentrics to protect the data of visitors to our website and not to disclose it to third parties.

For more information about Usercentrics’ data usage, please refer to the Usercentrics privacy policy at https://usercentrics.com/privacy-policy/

  1. Rights of the Data Subject

13.1 The applicable data protection law grants you the following rights with respect to the processing of your personal data by the controller (Arvenora):

Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about the personal data we process about you, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria for determining that period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected by us, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and intended consequences of such processing, and your right to be informed about the safeguards pursuant to Art. 46 GDPR when your data is transferred to third countries.

Right to rectification pursuant to Art. 16 GDPR: You have the right to have incorrect personal data corrected and/or incomplete personal data completed without undue delay.

Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data where the conditions of Art. 17(1) GDPR are met. This right does not apply in particular where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data as long as the accuracy of your data contested by you is being verified, if you oppose the erasure of your data due to unlawful processing and instead request the restriction of their use, if you need the data for the establishment, exercise or defense of legal claims after we no longer need the data for its original purpose, or if you have objected on grounds relating to your particular situation pending the verification of whether our legitimate grounds override yours.

Right to notification pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data have been disclosed of such rectification or erasure or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where technically feasible.

Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw your consent at any time with future effect. In the event of withdrawal, we will immediately delete the affected data unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data is in breach of the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

  1. Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and—if applicable—also based on the statutory retention periods (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 (1) lit. a GDPR, this data is stored until the data subject revokes their consent.

If there are statutory retention periods for data that is processed in the context of legal or similar obligations based on Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part in further storage.

When processing personal data based on Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in this privacy notice for specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed. 

CONTACT DETAILS:

Company Name: Arvenora
Address: 86-90 Paul Street, EC2A 4NE London, United Kingdom
Chamber of Commerce Number: 16344410
Email: info@arvenora.com
Phone Number: +31616070247