Privacy Policy
Data Protection Declaration
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 Thank you for visiting our website. Below, we inform you about the handling of your personal data when using our site. Personal data includes any data that allows you to be personally identified.
1.2 The data controller for this website is Lily & Chloe. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (as defined by the EU General Data Protection Regulation — GDPR).
1.3 This website uses SSL or TLS encryption to safeguard the transmission of personal data and other confidential details (such as orders or inquiries). You can recognize an encrypted connection by the browser's address bar starting with "https://" and the lock icon.
2) Data Collection When Visiting Our Website
When using our website for informational purposes only (without registering or otherwise submitting information to us), we solely collect the data your browser transmits to our server (known as "server log files"). These are necessary to display the website and ensure its stability. The following data is collected:
Page visited
Date and time of access
Amount of data transferred (in bytes)
Referring page (source/link from which you reached the site)
Browser used
Operating system used
IP address used (potentially anonymized)
Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way, unless concrete indications point to unlawful use, in which case the server log files may be reviewed retrospectively.
3) Cookies
To make our website appealing and enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted after the end of your browser session (session cookies), while others remain stored on your device to recognize your browser on your next visit (persistent cookies). These cookies may collect personal data such as browser type, location, or IP address.
Persistent cookies are automatically deleted after a specified duration, which varies depending on the cookie. Certain cookies simplify the ordering process (for instance, by remembering items in your virtual shopping cart). If personal data is processed by individual cookies implemented by us, processing takes place in accordance with Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in the best possible functionality of the website and customer-friendly design).
We may partner with advertising networks that also place cookies on your device when you visit our website (third-party cookies). If this is the case, you will be informed about their use and scope within this policy.
You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or reject them entirely. Browser management settings vary; refer to your browser’s help menu for details:
Internet Explorer
Firefox
Chrome
Safari
Opera
Please note that disabling cookies may limit the functionality of our website.
4) Contacting Us
When you contact us (e.g., via contact form or email), personal data is collected. The data collected is indicated on the respective form. These details are used exclusively to process and answer your request and for technical administration. The legal basis for processing this data is our legitimate interest in answering your request pursuant to Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR. Your data will be deleted once your request has been fully resolved, provided no statutory retention obligations apply.
5) Customer Account Registration and Contract Execution
Pursuant to Art. 6(1)(b) GDPR, personal data is collected and processed when you provide it to execute a contract or open a customer account. The mandatory fields are clearly marked in the input forms. You can delete your customer account at any time by sending a message to the controller's stated contact address. Upon completion of the contract or deletion of your account, your data will be blocked with respect to tax and commercial retention periods and deleted upon expiration of these periods, unless you have expressly consented to further use or continued storage is permitted by law.
6) Use of Data for Direct Marketing
6.1 Newsletter Subscription
If you subscribe to our email newsletter, we will regularly send you product offers. Your email address is the only mandatory detail; any additional fields are voluntary and used solely to address you personally. We utilize the double opt-in procedure, meaning you will receive a confirmation email and will only be subscribed after clicking the activation link.
By activating the confirmation link, you grant consent to process your data under Art. 6(1)(a) GDPR. We record your IP address and the registration timestamp to prevent potential abuse. You may unsubscribe at any time via the link provided in the newsletter or by sending a notice to info@lilyandchloe.com. Upon doing so, your email address will be removed from our mailing list, unless you have explicitly consented to further use or legal permissions apply.
6.2 Direct Mail to Existing Customers
If you provided your email address when purchasing products, we reserve the right to email you regular offers for similar goods from our range without requiring additional consent. This is based on our legitimate interest in personalized direct advertising under Art. 6(1)(f) GDPR. You can object to this use of your email address at any time by contacting us.
