Privacy Policy

We are pleased that you are visiting our website and thank you for your interest. The protection of your privacy when using our website is very important to us, so please take note of the following information on the handling of your personal data:

Responsible person and contact

The responsible data processing body within the meaning of the UK`s Data Protection Act 2018 and the General Data Protection Regulation ("GDPR") is:

Bluebell Emporium (Sole Trader)

www.bluebellemporium.com

E-mail: bluebellemporium@yahoo.com

In order to assert your rights, report data protection incidents as well as for suggestions and complaints regarding the processing of your personal data as well as for revoking your consent, we recommend that you contact us.

Scope of application

This privacy policy applies to our website, which is accessible under the domain www.bluebellemporium.com ("Website"). It does not apply to internet offers (from us or third party service providers) which are merely referred to by a link on the Website.

Personal data

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics. These special characteristics are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. This includes information such as your first and last name, your address and e-mail address, your telephone number or your birthday.

Usage data

Every time you access our website, for technical reasons your IP address and other usage data (such as date and time of access, name of the page accessed, volume of data transferred and the requesting provider) may be collected and processed on our server. This is necessary in order to carry out the communication process with our website that you have requested.

Log data (server log files/log files)

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• IP address and, if applicable, host name of the requesting computer,

• Date and time of access,

• name and URL of the file accessed,

• website from which the access was made (referrer URL),

• browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

This data is not merged with other data sources, in particular other personal data of the user.

Data processing and legal basis

In principle, it is possible to visit our website without providing personal data.

The following informs you about the legal basis of us processing your data and unless the legal basis is not specifically mentioned, the following applies:

Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.

Contract – This is where we process your information to fulfil a contractual arrangement we have made with you.

Answering your business enquiries – This is where we process your information to reply to your messages, e-mails, posts, calls, etc.

Legitimate Interests - This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way.  Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm.

Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime.

Vital interests – This is where we process your information for communications about security, privacy and performance improvements of our services. Or for establishing, exercising or defending our legal rights.

We collect, process and use your personal data on our website as follows:

Online Shop

When you place an order in our online shop, we store the following information in order to fulfil the contract concluded between you and Bluebell Emporium or to carry out pre-contractual measures.

a) Order without setting up a customer account

When placing an order in the online shop, all data necessary for execution and processing are requested by means of mandatory fields: Your full name, your e-mail address, your address (billing address and, if applicable, different delivery address). Your data will only be used to process your order.

b) Customer account / registration

It is also possible for you to register for your purchase at Bluebell Emporium. For this purpose, you can choose a password together with your e-mail address, both of which will enable you to log in more easily without having to enter your data again when you make a purchase at a later date. Bluebell Emporium stores the data you enter to set up a customer account through which your orders are recorded, executed and processed. Bluebell Emporium will hold your data for further orders as long as you maintain your registration. You have the right to access, correct or delete your registration data at any time.

Contact Forms

If you contact Bluebell Emporium via a contact form on the Bluebell Emporium website, the data you provide will be stored so that your message can be forwarded to the correct contact person. This is done in accordance with Article 6 lit. b) GDPR to process your request. Your data provided via a contact form will not be used for any other purposes, in particular not for advertising.

Disclosure and deletion of personal data

Visiting the Bluebell Emporium website

The data stored during the mere visit of the Bluebell Emporium website will not be passed on to third parties.

Online shop

Your personal data will only be passed on to third parties within the scope of the online shop if it is necessary for the purpose of processing the contract, for accounting purposes or for the collection of the payment (Paypal, Apple Pay, Klarna, Clearpay & Wix Payments). For the operation and optimisation of our website and our services and for the processing of contracts, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products, to whom we pass on the data required for the fulfilment of the task (e.g. name, address).

Contact form

Only if your enquiry or comment concerns a different Bluebell Emporium than the one whose contact form you have used, will your message and the associated data be transmitted to the correct contact person within the company. The data you have entered in an Bluebell Emporium online contact form will not be passed on to other third parties unless you are specifically informed of this.

Market Research

All your data collected on the Bluebell Emporium website for the purpose of market research will be used exclusively for Bluebell Emporium internal purposes and will not be passed on to third parties. They will be deleted when their knowledge is no longer necessary for market research.

Transfer to authorities and other public bodies

Your data will only be disclosed to third parties outside the Bluebell Emporium if the responsible public authority or governmental institution orders the disclosure in an individual case, in which case Bluebell Emporium is obliged to do so.

Retention of data

Your personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Please note that due to legal retention periods, we may be obliged to store certain data for the duration of the legally prescribed period. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

General technical organisational measures

Bluebell Emporium has taken a variety of security measures to protect personal information to an appropriate extent and adequately. All information held by Bluebell Emporium is protected by physical, technical and procedural measures that limit access to the information to specifically authorised persons in accordance with this Privacy Policy.

The Bluebell Emporium website is behind a software firewall to prevent access from other networks connected to the Internet. In addition, only employees who need the information to perform a specific job are granted access to personally identifiable information. These employees are trained in security and privacy practices and treat your information confidentially.

Secure data transmission

The transmission of your personal information during an order transaction in the online shop is encrypted using industry standard Secure Socket Layer ("SSL") technology, (SSL encryption version 3).

Credit card information

Any credit card information you provide will not be stored by Bluebell Emporium, but will be encrypted and collected directly from the payment service provider (Paypal) via hypertext transfer protocol secure ("https").

Passwords

You should never disclose your password for accessing our customer portal to any third party and you should change it regularly. If you want to leave your customer account in the online shop, you should press the logout and close your browser to prevent anyone from gaining unauthorised access to it.

Data transfer to third countries

If we use service providers in third countries, we take additional measures to ensure an adequate level of data protection for the transfer of personal data and thus ensure that the transfer is generally permissible and that the special requirements for a transfer to a third country are met (e.g. by concluding standard contracts and additional guarantees, supplementary technical and organisational measures such as encryption or anonymisation).

Your rights

Of course, you have rights with regard to the collection of your data, which we are pleased to inform you of herewith. If you would like to make use of one of the following free rights, a simple message to us will suffice. For your own protection, we reserve the right, in the case of an existing enquiry, to obtain further information necessary to confirm your identity and, if identification is not possible, to refuse to process the enquiry.

a) Right to information

You have the right to request information and/or copies of the personal data stored about you.

b) Right to rectification

You have the right to request that personal data relating to you be corrected and/or completed without delay.

c) Right to object to processing

You have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing.

d) Right to deletion

You have the right to request the erasure of your personal data stored by us, unless the exercise of the right to freedom of expression and information, the processing is necessary for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

e) Right to information

Where you have exercised the right to rectification, erasure or restriction of processing, we will notify all recipients to whom personal data relating to you has been disclosed of such rectification or erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.

f) Right to data portability

You have the right to have personal data that you have provided to us handed over to you or to a third party in a structured, common and machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

g) Right of objection

Insofar as your personal data are processed on the basis of legitimate interests, you have the right to object to the processing at any time.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

h) Right to withdraw consent

You have the right to cancel your consent to the collection of data at any time with effect for the future. The data collected until the cancellation becomes legally effective will remain unaffected. Please understand that the implementation of your cancellation may take a little time for technical reasons and that you may still receive messages from us in the meantime.

i) Right to complain to a supervisory authority

If the processing of your personal data violates data protection law or if your data protection rights have otherwise been violated in any way, you may complain to the supervisory authority.

You can also exercise your rights of rectification and deletion most quickly, easily and conveniently by logging into your customer account and directly editing or deleting your data stored there.

j) Automated decision making including profiling

You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you.

Use of data for advertising purposes on the basis of consent granted

In order to inform you exclusively about invitations, events and offers, we process your data (surname, first name, address, e-mail address) on the basis of the consent you have given us. Your rights  remain unaffected and you have the option to object to the processing informally at any time.

Use of data for advertising purposes based on our legitimate interest

For our own advertising purposes, we reserve the right to store your first name and surname, your postal address and - insofar as we have received this additional information from you as part of the contractual relationship in summarised lists and to use this information to send you interesting offers and information about our products. The processing of your data for this purpose is based on our legitimate interest in promoting our products and services. We assume that you are also generally interested in such purely postal advertising, otherwise you can object to the storage and use of your data for this purpose at any time without giving reasons with effect for the future by contactingus. We will delete your data for postal advertising immediately in the event of objection, unless there is another legal basis for the processing or there are legal, statutory or contractual retention periods or further storage is necessary for the assertion, exercise or defence of legal claims.

Children Data

Our Service is not intended for children and we do not knowingly collect data relating to children.

The Supervisory Authority

The Information Commissioner’s Office (ICO) in the UK is the for us relevant authority in matters of data protection. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Economic Analyses and Market Research

In order to run our business economically, to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, enquiries, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, metadata, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the online offer. The analyses are carried out for the purposes of business management evaluations, marketing and market research.

In doing so, we may take into account the profiles of registered users with details, for example, of their purchasing transactions. The analyses serve us to increase user-friendliness, to optimise our offer and business efficiency and are not disclosed externally, unless they are anonymous analyses with summarised values.

If these analyses or profiles are personal, they will be deleted or made anonymous upon termination by the user, otherwise after two years from conclusion of the contract. In all other respects, the macroeconomic analyses and general trend determinations are prepared anonymously wherever possible.

Integration Of Services And Contents Of Third Parties

We use within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer, we use content or services offered by third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus required for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources.

Online presences in social media

We maintain online presences in FaceBook and Instagram on the basis of our legitimate interests and in order to communicate with customers, interested parties and users who are active there. Unless otherwise stated in this policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

Social Media Functions and Widgets

Within our online offer, functions and widgets of FaceBook and Instagram are integrated. When you click on or use any of those functions and widgets, your browser establishes a direct connection to FaceBook and Instagram . The function or widget then transmits log data to FaceBook and Instagram . This log data may contain your IP address, the address of the visited websites, type and settings of the browser, date and time of the request, your usage of FaceBook and Instagram ,as well as cookies. Those may also include the display of our post, the link to our profile, the possibility to interact with the posts and functions, as well as to measure users reach (so-called conversion measurement).

Hosting and Content Delivery Networks (CDN)

This website is hosted by an external service provider (Wix). The personal data collected on this website is stored on Wix's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website.

Wix is used for the purpose of fulfilling the contract with our potential and existing visitors and users and in the interest of a secure, fast and efficient provision of our online offer by a professional provider.

Wix will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us using the details provided.