Privacy policy

1

Controller

Sakan Distribution GmbH
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main
Germany
Represented by the Managing Director (Geschäftsführer): Gökce Özgür Koc
Email: care@sakanperfumes.com

A data protection officer has not been appointed, as the statutory requirements for a mandatory appointment are not met.

2

Hosting and shop system (Shopify)

Our online shop is operated on the e-commerce platform Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes on our behalf all data arising in connection with the operation of the shop, in particular customer data, order data, payment information and access data. A contract on data processing on our behalf (Art. 28 GDPR) is in place with Shopify.

When you access our website, Shopify automatically collects server log data (IP address, date and time of access, page accessed, browser type, operating system, referrer URL). This processing is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technically error-free presentation, stability and security of our shop. The log data is deleted as soon as it is no longer required for these purposes.

Shopify may also transfer data to servers of its parent company Shopify Inc. in Canada and to the USA. For Canada, an adequacy decision of the European Commission under Art. 45 GDPR is in place. Transfers to the USA are based on the EU-US Data Privacy Framework and, in addition, on standard contractual clauses under Art. 46 (2) lit. c GDPR. Further information: Shopify privacy policy.

3

Orders and customer account

When you place an order with us, we process the data required for the conclusion and performance of the purchase contract: name, address, email address, delivery address, ordered goods, payment method and the details required for payment processing. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract).

If you create a customer account, we also process the data stored there for the administration of your account on the basis of Art. 6 (1) lit. b GDPR. You can have your customer account deleted at any time; to do so, please contact care@sakanperfumes.com.

Storage period: We delete contract and order data after expiry of the statutory retention periods. These are six years for commercial letters (Section 257 of the German Commercial Code, HGB) and eight years for accounting records and invoices (Section 147 of the German Fiscal Code, AO). The periods begin at the end of the calendar year in which the documents were created. Until then, once the contractual purposes have ended, processing is restricted to the fulfilment of these statutory obligations (Art. 6 (1) lit. c GDPR).

4

Shipping and fulfilment

To deliver your order, we pass on your name, your delivery address and, where required for delivery, your email address to the shipping provider DHL Express (DHL Express Germany GmbH, Heinrich-Brüning-Straße 5, 53113 Bonn). The legal basis is Art. 6 (1) lit. b GDPR.

We have commissioned Emirat Handling & Fullfillment GmbH, Siemensstrasse 8, 85221 Dachau, with the storage, packaging and shipping of our goods and the processing of returns. It receives the order and address data required for shipping processing and processes it on our behalf on the basis of a contract on data processing on our behalf (Art. 28 GDPR). The legal basis is Art. 6 (1) lit. b GDPR.

5

Payment service providers

For payment processing, we pass on the data required for this purpose (name, billing address, order amount, where applicable creditworthiness data of the respective provider) to the payment service provider you have selected. The legal basis is Art. 6 (1) lit. b GDPR. The payment service providers are independently responsible for the processing of your payment data; their privacy notices apply in addition.

Credit card via Shopify Payments and Shop Pay: The provider is Shopify International Limited, Dublin, Ireland (see Section 2). With Shop Pay, your payment and address data is stored by Shopify for future purchases if you register for this.

PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. PayPal privacy policy.

Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If a Klarna payment method is selected, Klarna may obtain a credit report to assess your ability to pay; Klarna provides separate information about this. Klarna privacy policy.

6

Contact

If you contact us by email, we process your details in order to handle the enquiry. The legal basis is Art. 6 (1) lit. b GDPR insofar as the enquiry is related to a contract, otherwise Art. 6 (1) lit. f GDPR (legitimate interest in answering enquiries). We delete the correspondence as soon as it is no longer required and no statutory retention obligations prevent this.

7

Newsletter (Klaviyo)

If you sign up for our newsletter, we process your email address in order to send the newsletter. The legal basis is your consent under Art. 6 (1) lit. a GDPR. Registration takes place using the double opt-in procedure: after signing up, you will receive an email with a confirmation link; the registration only becomes effective once it has been confirmed.

The newsletter is sent via the service Klaviyo. The provider is Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo processes your email address and information on your usage behaviour (e.g. open and click rates as well as order information) on our behalf in order to send and evaluate the newsletter. A contract on data processing on our behalf (Art. 28 GDPR) is in place with Klaviyo. The data transfer to the USA is based on the adequacy decision on the EU-US Data Privacy Framework, under which Klaviyo is certified. Further information: Klaviyo privacy policy.

You can unsubscribe from the newsletter at any time via the unsubscribe link at the end of each email or by sending a message to care@sakanperfumes.com. After unsubscribing, we delete your email address from the mailing list; we retain proof of the consent previously given in order to fulfil our accountability obligation (Art. 5 (2) GDPR) until the limitation periods have expired.

8

Cookies and consent

Our shop uses cookies and comparable technologies. We use technically necessary cookies, for example for the shopping cart and the checkout process, on the basis of Section 25 (2) TDDDG and Art. 6 (1) lit. f GDPR; they are required for the operation of the shop.

We only use all non-necessary cookies and technologies, in particular for statistics and marketing purposes, if you have given your prior consent via our consent banner (Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR). You can revoke or adjust your consent at any time with effect for the future by opening the cookie settings again via the corresponding link in the footer of our shop.

9

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool used to integrate measurement tools and other technologies on our website. The Tag Manager itself does not create user profiles and does not store cookies. However, when it is executed, your IP address is transmitted to Google, and transmission to servers of Google LLC in the USA is also possible; this is based on the EU-US Data Privacy Framework.

The Google Tag Manager and the services integrated via it are only executed if you have given your consent via our consent banner. The legal basis is Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future.

Google Analytics 4: The web analytics service Google Analytics 4 is integrated via the Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and comparable technologies to evaluate your use of our shop, such as pages accessed, time spent, device used and approximate origin. IP addresses are not logged by Google Analytics 4, but are only used for rough location determination and then discarded. The legal basis is your consent under Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. The Analytics cookies have a lifetime of up to two years; the usage data is deleted by Google after 14 months. Any transfer to the USA is based on the EU-US Data Privacy Framework. Further information: Google privacy policy.

No further services are currently integrated via the Tag Manager. Should additional services be used in the future, we will provide information about this here.

10

Product reviews (Judge.me)

In our shop, customers can submit product reviews. For this we use the service Judge.me. The provider is Judge.me Ltd., 20-22 Wenlock Road, London N1 7GU, United Kingdom. For the United Kingdom, an adequacy decision of the European Commission under Art. 45 GDPR is in place. A contract on data processing on our behalf (Art. 28 GDPR) is in place with Judge.me.

The data you provide in your review (name or pseudonym, review text, review photos where applicable) as well as your email address and order information are processed in order to verify whether the review is based on a purchase. The review is published in our shop with your name or pseudonym. Reviews marked “Verified purchase” come from customers who have demonstrably purchased the product from us.

After an order, we may ask you by email to submit a review. The legal basis for the publication of your review is your consent under Art. 6 (1) lit. a GDPR; you can request the deletion of your review at any time via care@sakanperfumes.com. Further information: Judge.me privacy policy.

11

Your rights

You are entitled to the following rights vis-à-vis us as the controller:

Access (Art. 15 GDPR): You can request information about whether and which personal data we process about you.

Rectification (Art. 16 GDPR): You can request the rectification of inaccurate data and the completion of incomplete data.

Erasure (Art. 17 GDPR): You can request the erasure of your data, provided no statutory retention obligations prevent this.

Restriction of processing (Art. 18 GDPR): You can request the restriction of processing under the statutory conditions.

Data portability (Art. 20 GDPR): You can request that we provide you with your data in a structured, commonly used and machine-readable format.

Revocation of consent given (Art. 7 (3) GDPR): You can revoke consent you have given at any time with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected.

Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of Art. 6 (1) lit. f GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. You can object to processing for the purpose of direct marketing at any time without giving reasons.

To exercise your rights, an informal message to care@sakanperfumes.com is sufficient.

12

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
datenschutz.hessen.de