Privacy Policy
PRIVACY POLICY
1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We’re pleased that you’re visiting our website and thank you for your interest. Below, we’ll explain how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.
1.2 The controller responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is Rudelle Montreal. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser’s address bar.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
When you use our website for informational purposes only—meaning you don’t register or otherwise provide us with information—we collect only the data your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you arrived at the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
This processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to review server log files retrospectively if there are specific indications of illegal use.
3) COOKIES
To make visiting our website more appealing and to enable certain features, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies we use are deleted after your browser session ends—when you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process specific user information, such as browser and location data and IP address values, to an individual extent. Persistent cookies are automatically deleted after a set period, which varies depending on the cookie.
In some cases, cookies help simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is processed through specific cookies we implement, this is done under Article 6(1)(b) GDPR for contract performance or Article 6(1)(f) GDPR to safeguard our legitimate interests in optimizing website functionality and providing a user-friendly, effective experience.
We may work with advertising partners to make our online offerings more interesting for you. In such cases, cookies from these partners (third-party cookies) are also stored on your device when you visit our website. If we collaborate with such partners, you’ll be informed individually and separately about the use of these cookies and the scope of data collected in the sections below.
Please note that you can configure your browser to notify you about cookie settings, allowing you to decide whether to accept them individually or block them for specific cases or entirely. Each browser manages cookie settings differently, as explained in its help menu. You can find instructions for adjusting cookie settings in the following browsers:
- Internet Explorer: https://support.microsoft.com/en-ca/help/17442/windows-internet-explorer-delete-manage-cookies
Note that rejecting cookies may limit the functionality of our website.
4) CONTACTING US
When you contact us (e.g., via contact form or email), we collect personal data. The specific data collected through a contact form is visible on the form itself. This data is stored and used solely to respond to your request or for contact purposes and related technical administration. The legal basis for processing this data is our legitimate interest in addressing your request, per Article 6(1)(f) GDPR. If your contact aims to conclude a contract, the additional legal basis is Article 6(1)(b) GDPR. Your data will be deleted after your request is fully resolved, unless legal retention obligations apply.
5) DATA PROCESSING FOR OPENING A CUSTOMER ACCOUNT AND CONTRACT FULFILLMENT
Under Article 6(1)(b) GDPR, personal data is collected and processed if you provide it to us for contract fulfillment or when opening a customer account. The specific data collected is indicated in the respective input forms. You can delete your customer account at any time by sending a message to info@ruddelle.com. We store and use the data you provide for contract processing. After the contract is fully executed or your account is deleted, your data will be restricted with regard to tax and commercial retention periods and deleted after those periods expire, unless you’ve explicitly consented to further use or we’ve reserved a legally permitted further use, as outlined below.
6) USE OF YOUR DATA FOR DIRECT MARKETING
6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we’ll regularly send you information about our offers. The only required information for this is your email address. Any additional data you provide is voluntary and used to address you personally. We use the double opt-in process for newsletter subscriptions. This means we’ll only send you newsletters after you’ve explicitly confirmed your consent by clicking a link in a confirmation email we send you.
By activating the confirmation link, you consent to the use of your personal data under Article 6(1)(a) GDPR. When you subscribe, we store your IP address (as provided by your internet service provider), along with the date and time of subscription, to track any potential misuse of your email address later. The data collected during newsletter subscription is used solely for promotional purposes via the newsletter. You can unsubscribe at any time using the link provided in the newsletter or by notifying us at info@ruddelle.com. Once you unsubscribe, your email address will be promptly removed from our newsletter list, unless you’ve consented to further use or we reserve legally permitted further use, as noted in this policy.
6.2 Email Newsletter for Existing Customers
If you’ve provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range via email. We don’t need separate consent for this under Article 6(1)(f) GDPR, based on our legitimate interest in personalized direct marketing. If you initially objected to this use, we won’t send emails. You can object to this use of your email address at any time by notifying us at info@ruddelle.com, incurring only basic transmission costs. Upon receiving your objection, we’ll stop using your email for marketing purposes immediately.
7) DATA PROCESSING FOR ORDER FULFILLMENT
7.1 We share the personal data we collect with the transport company tasked with delivery, as necessary for delivering your order. For payment processing, we share your payment data with the designated financial institution, if required. If payment service providers are used, we’ll specify this below. The legal basis for this data sharing is Article 6(1)(b) GDPR.
7.2 Use of Payment Service Providers
- PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—"purchase on account" or "installment payment" via PayPal, we share your payment data with PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") for payment processing. This sharing occurs under Article 6(1)(b) GDPR, only as necessary for payment processing. PayPal may conduct a credit check for certain payment methods (e.g., credit card, direct debit, purchase on account, or installment payment), sharing your payment data with credit agencies based on PayPal’s legitimate interest under Article 6(1)(f) GDPR to assess payment reliability. The credit check result, including probability scores based on a scientifically recognized mathematical-statistical method (e.g., using address data), helps PayPal decide whether to offer the payment method. For more details, including the credit agencies used, see PayPal’s privacy policy: https://www.paypal.com/ca/webapps/mpp/ua/privacy-full. You can object to this processing by contacting PayPal, though PayPal may still process your data if required for contractual payment processing.
- SOFORT: If you choose "SOFORT" as a payment method, payment processing is handled by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany ("SOFORT"), part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). We share your order-related information with SOFORT under Article 6(1)(b) GDPR, solely for payment processing purposes. More details on SOFORT’s privacy policy: https://www.klarna.com/sofort/datenschutz (in German; English version may vary).
8) CONTACT FOR RATING REMINDERS
We use your email address for a one-time reminder to submit a review of your order via our rating system, provided you’ve given explicit consent during or after your order under Article 6(1)(a) GDPR. You can withdraw this consent at any time by notifying us at info@ruddelle.com.
9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
9.1 Facebook Plugins with Shariff Solution
Special additional customs clearance fees and/or import duties are not included in the price and are the customer’s responsibility.
Our website uses social plugins ("plugins") from Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). To enhance data protection, these buttons are integrated as HTML links rather than full plugins, ensuring no connection to Facebook servers is made when you visit a page with these buttons. Clicking a button opens a new browser window to Facebook, where you can interact with plugins (possibly after logging in). Facebook Inc. is certified under the US-EU Privacy Shield, ensuring EU data protection compliance. See Facebook’s privacy policy for details: https://www.facebook.com/policy.php.
9.2 Google+ Plugins with Shariff Solution
Our website uses social plugins from Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). These buttons are integrated as HTML links, preventing immediate server connections until clicked. Clicking opens a new window to Google+, where interaction is possible after login. Google LLC is Privacy Shield certified. See Google’s privacy policy: https://policies.google.com/privacy.
9.3 Instagram Plugin with Shariff Solution
Our website uses social plugins from Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"). Integrated as HTML links, these buttons connect to Instagram only when clicked, opening a new window for interaction. Instagram LLC is Privacy Shield certified. See Instagram’s privacy policy: https://help.instagram.com/155833707900388/.
10) ONLINE MARKETING
10.1 DoubleClick by Google
This website uses DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. DoubleClick uses cookies to serve relevant ads, improve campaign reports, and prevent repeated ad displays, based on our legitimate interest under Article 6(1)(f) GDPR. Google tracks ad views via cookie IDs and captures conversions (e.g., purchases after ad clicks). Your browser connects directly to Google’s servers, and we can’t control the data Google collects. You can disable tracking by blocking cookies from www.googleadservices.com or adjusting settings at https://www.google.com/settings/ads or www.aboutads.info. Google is Privacy Shield certified. More info: https://policies.google.com/privacy.
10.2 Google AdWords Conversion Tracking
We use Google AdWords with conversion tracking from Google LLC to promote our offers via ads on external sites, assessing campaign success under Article 6(1)(f) GDPR. Clicking an ad sets a 30-day cookie, allowing us and Google to track visits without personal identification. You can disable this via browser settings or the plugin at https://www.google.com/settings/ads/plugin?hl=en. Google is Privacy Shield certified. More info: https://policies.google.com/privacy.
11) WEB ANALYTICS SERVICES
Google (Universal) Analytics
This website uses Google Analytics by Google LLC with the "_anonymizeIp()" extension, anonymizing IP addresses within the EU/EEA under Article 6(1)(f) GDPR for statistical analysis. Data is typically sent to Google’s US servers, where full IPs are rarely transmitted and then shortened. You can block cookies or use the opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=en, or click here to set an opt-out cookie: Google Analytics Disable. Analytics also tracks cross-device usage via an anonymized User-ID, which you can disable across devices. Google is Privacy Shield certified. More info: https://support.google.com/analytics/answer/2838718?hl=en.
12) RETARGETING / REMARKETING / REFERRAL ADVERTISING
Facebook Custom Audience via Pixel
With your explicit consent under Article 6(1)(a) GDPR, we use the Facebook Pixel to track user behavior after ad interactions, optimizing ads for users over 13. Data is anonymous to us but linked to your Facebook profile by Facebook. You can disable cookies or opt out at https://www.aboutads.info/choices/. Facebook is Privacy Shield certified.
Google AdWords Remarketing
We use Google AdWords Remarketing to advertise across Google and third-party sites, setting cookies under Article 6(1)(f) GDPR. Additional processing occurs if you’ve linked your Google account, enabling cross-device targeting. Opt out via https://www.google.com/settings/ads/onweb/ or www.aboutads.info. Google is Privacy Shield certified. More info: https://policies.google.com/technologies/ads.
13) RIGHTS OF THE DATA SUBJECT
13.1 Under applicable data protection law, you have extensive rights regarding your personal data processing:
- Right of Access (Art. 15 GDPR): Details on processed data, purposes, recipients, storage duration, and more.
- Right to Rectification (Art. 16 GDPR): Correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17 GDPR): Deletion unless processing is necessary for legal or public interest reasons.
- Right to Restriction (Art. 18 GDPR): Restriction under specific conditions, e.g., while accuracy is verified.
- Right to Notification (Art. 19 GDPR): Updates to recipients about corrections or restrictions.
- Right to Data Portability (Art. 20 GDPR): Receive or transfer your data in a usable format.
- Right to Withdraw Consent (Art. 7(3) GDPR): Revoke consent without affecting prior processing.
- Right to Complain (Art. 77 GDPR): Lodge a complaint with a supervisory authority.
13.2 Right to Object
If we process your data based on our overriding legitimate interest, you may object for reasons related to your situation. We’ll stop processing unless compelling legitimate grounds override your rights or it’s for legal claims. For direct marketing, you can object anytime, and we’ll cease processing for that purpose. Contact us at info@ruddelle.com to exercise this right.
14) DURATION OF PERSONAL DATA STORAGE
Storage duration is based on legal retention periods (e.g., tax and commercial laws). After these periods, data is routinely deleted unless needed for contract fulfillment or initiation, or we have a legitimate interest in continued storage.