Privacy Policy – Hana Tea House

Privacy Policy

PRIVACY POLICY

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract.

 

You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.


“Personal data” is any information relating to an identified or identifiable natural person.

 

Server log files

You can use our websites without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request.

The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

Customer account

When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.

Collection, processing, and transfer of personal data in orders

When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfillment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of Article 6(1) b) GDPR and is required for the fulfillment of a contract with you. Your data is transferred here for example to the shipping companies and drop shipping providers, payment service providers, service providers for handling the order and IT service providers that you have selected. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.

Payment service providers

We are using Stripe. 

All Stripe transaction are covered by the Stripe Policies. You can find this at: https://support.stripe.com/search?q=privacy%20policy 

Usage of cookies

Our website uses cookies. Cookies are small text files which are saved in a user’s internet browser or by the user’s internet browser on their computer system. When a user calls up a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic character string which allows the browser to be clearly identified when the website is called up again.

What information do we collect from you?


Technical information
We collect the IP address of your computer, the request from the client (browser) to our web server as well as its response and the website from which you are visiting us. We also store the date and time of the request, information about the browser type and version of your operating system and the Internet service provider you are using.
 

Cookies
We use session cookies on our website, i.e. small text files that are temporarily stored on your computer and saved by your browser, e.g. for login or more convenient use of our website. After the end of the web session (at the latest when the browser is closed) these cookies are deleted again.
 

Usage profiles
We use tracking services and cookies, so-called third-party cookies, to process user profiles under a pseudonym. Such a usage profile contains information about the behavior of a visitor to websites. It is not possible to draw any direct conclusions about you. You can object to the creation of the user profiles at any time. You can deactivate the storage and use of cookies in your browser settings. Your cookies are deleted at the end of your Internet session.

 

How and for what are your data collected and processed?

We collect technical information automatically when you visit our website. Otherwise, we collect personal data only on the basis of your entries on our website (e.g. in the contact form) or through the use of cookies.
We need this data to operate and administer the website, to detect misuse and to rectify faults. In addition, to improve our offer on the website and to create pseudonymous user profiles, which we use for advertising and market research purposes - provided you do not object to this.
In some cases, we also use other service providers who support us as contract processors to the extent permitted by law.

 

Analysis Advertising

The data processing described subsequently in this section, especially the setting of cookies, will be carried out on the basis of art. 6 (1) lit. f GDPR due to our largely justified interest:

  • in the needs-based and target-oriented design of our website, for example, with tools for analysis and statistics

  • in addressing the website visitors in a targeted manner using interest-based advertisement, e.g. using conversion tracking

You have the right to veto this processing of your personal data according to art. 6 (1) lit. f GDPR, for reasons relating to your personal situation.

Use of Google Analytics

Our website uses the web analysis service Google Analytics by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The processing of data serves to analyse this website and its visitors. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services to the website operator relating to website and internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google. Google Analytics uses cookies, which make it possible to analyse your use of the website. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymisation is activated on this website. Google uses this to shorten your IP address beforehand within Member States of the European Union or in other signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Your data may be transmitted to the USA. Following the US-EU Data Protection Agreement, Google has become “Privacy Shield“ certified and is therefore obliged to observe European data protection laws.  You can prevent collection of the data (including your IP address) generated by the cookies and related to your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=en]. You can set an opt-out cookie to prevent collection by Google Analytics across devices. Opt-out cookies prevent the future collection of your data when you visit this website. You need to opt-out on all systems and devices in use for this to work comprehensively. If you click here, the opt-out cookie is set: Disable Google Analytics. You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/analytics/terms/gb.html and at https://policies.google.com/?hl=en.

 

Do you want to change your cookie settings?

We offer you the possibility to adjust your cookie settings at any time. Click here if you want to reverse your decision.

Rights of persons affected and storage duration

 

Duration of storage

After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.

Rights of the affected person

If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.

 

Contact us at any time. Our contact details can be found in our imprint.

You can contact our data protection officers directly at: info@hanateahouse.com

Right to complain to the regulatory authority

You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.

 

Right to object

If the data processing outlined here is based on our legitimate interests in accordance with Article 6(1)f) GDPR, you have the right for reasons arising from your particular situation to object at any time to the processing of your data with future effect.

If the objection is successful, we will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests or rights and freedoms, or the processing is intended for the assertion, exercise or defence of legal claims.

If personal data is being processed for the purposes of direct advertising, you can object to this at any time by notifying us. If the objection is successful, we will no longer process the personal data for the purposes of direct advertising.