Privacy Policy
Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data includes all data that can personally identify you.
1.2 The controller for data processing on this website under the General Data Protection Regulation (GDPR) is Mayfair London. The entity responsible for processing personal data is the natural or legal person who determines, alone or jointly with others, the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser bar.
2) Data Collection When Visiting Our Website
When using our website purely for informational purposes, meaning you do not register or otherwise provide information, we collect only the data that your browser transmits to our server (so-called "server log files"). When accessing our website, we collect the following data necessary to display the website:
-
The visited website
-
Date and time of access
-
Amount of transmitted data in bytes
-
Source/reference from which you accessed the page
-
Used browser
-
Used operating system
-
Used IP address (if applicable, in anonymized form)
Processing is carried out according to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used otherwise. However, we reserve the right to check server log files later if there are specific indications of illegal use.
3) Cookies
To make visiting our website attractive and enable certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted at the end of the browser session (session cookies). Other cookies remain on your device, allowing us or our partner companies (third-party cookies) to recognize your browser upon your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data and IP address values. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.
Some cookies help simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for later visits). If personal data is processed by individual cookies implemented by us, processing occurs under Art. 6(1)(b) GDPR for contract execution or Art. 6(1)(f) GDPR to optimize the website and ensure a user-friendly and efficient site visit.
You can configure your browser to inform you about cookie settings and decide on a case-by-case basis whether to accept them or exclude them for specific cases or entirely. Please note that disabling cookies may limit the functionality of our website.
4) Contacting Us
When you contact us (e.g., via a contact form or email), personal data is collected. The specific data collected depends on the contact form. This data is stored and used solely for responding to your request or for related administrative tasks. The legal basis for processing is our legitimate interest in responding to your request under Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, additional legal basis is Art. 6(1)(b) GDPR. Your data is deleted after final processing unless legal retention obligations prevent deletion.
5) Data Processing for Account Creation and Contract Execution
Under Art. 6(1)(b) GDPR, personal data is collected and processed if you provide it for contract execution or account creation. The specific data required is evident from the respective input forms. Deleting your customer account is possible at any time by sending a message to the responsible party. After the contract is fully executed or your account is deleted, your data is locked for tax and commercial law retention periods and deleted after expiration unless you have explicitly consented to further use or legally permitted further use is reserved.
6) Use of Your Data for Direct Marketing
6.1 Subscription to our Email Newsletter
If you subscribe to our email newsletter, we regularly send information about our offers. The only required information for sending the newsletter is your email address. Any additional data is voluntary and used to address you personally. We use the so-called double opt-in procedure, meaning we only send a newsletter if you explicitly confirm your subscription. After confirming, you consent to processing your personal data under Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter.
6.2 Sending Email Newsletters to Existing Customers
If you provided your email address when purchasing goods or services, we reserve the right to send offers for similar products or services. This processing is based on our legitimate interest in personalized direct marketing (Art. 6(1)(f) GDPR). You can object to this use at any time without incurring costs other than the transmission costs at basic rates.
7) Data Processing for Order Processing
To fulfill our contractual obligations, we share necessary personal data with the shipping company for delivery and with financial institutions for payment processing under Art. 6(1)(b) GDPR.
8) Use of Social Media Plugins
We use Facebook, Google+, and Instagram plugins in compliance with GDPR. These plugins are embedded as links to prevent automatic data transfer. Clicking the plugin redirects you to the provider's website.
9) Online Marketing and Web Analytics
We use Google Analytics and other marketing tools to analyze visitor behavior and optimize marketing strategies. Users can opt-out via browser settings or dedicated tools.
10) Retargeting & Remarketing
We use Facebook Pixel and Google AdWords Remarketing to display interest-based ads. Users can disable such tracking via browser settings.
11) Rights of Data Subjects
Under GDPR, you have the right to:
-
Access information about your personal data (Art. 15 GDPR)
-
Rectify inaccurate data (Art. 16 GDPR)
-
Request data erasure (Art. 17 GDPR)
-
Restrict processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Withdraw consent (Art. 7(3) GDPR)
-
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
12) Data Retention Period
Personal data is stored according to legal retention periods. After expiration, data is routinely deleted unless required for contract fulfillment or further legitimate interest.
13) Right to Object
If we process your personal data based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time for reasons arising from your particular situation.
If you object, we will stop processing your data unless we demonstrate compelling legitimate reasons that override your interests or if the processing serves legal claims.
14) Duration of Personal Data Storage
The storage period for personal data depends on the respective statutory retention period (e.g., commercial and tax law). After expiration, the data is routinely deleted unless needed for contract fulfillment or further legitimate interest.