Privacy policy

Privacy Policy

  1. Information on the Collection of Personal Data and Contact Details of the Controller
    We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.
    We collect your personal data in various ways and for different purposes, including:
  • When you purchase something in our shop, we collect the personal data you provide to us during the purchase and sales process, such as your name, address, and email address.
  • When you visit our website, we also automatically receive the Internet Protocol (IP) address of your computer to provide us with information that helps us learn more about your browser and operating system.
  • Email Marketing (where applicable and as permitted by law): With your permission and provided that it is legal in your jurisdiction, we may send you emails regarding our website, new products and services, and other updates within the legally permissible timeframes. By "permission," we mean the explicit and verifiable consent you have given. Permission to send advertising or marketing emails may occur in any of the following scenarios, which we consider an existing business relationship or inquiry on your part:
    • By entering your email address on our website without indicating that you do not wish to be notified by email.
    • By entering your email address as part of an order attempt. Or you order a product or service from us without indicating that you do not wish to be notified by email.
    • By entering your email address in the context of an abandoned order process without an explicit indication that you do not wish to be notified by email.
    • By entering your email address as part of participating in a competition, event, or survey conducted by us, where we have explicitly informed you that we will send you marketing emails.
    • By subscribing to an email newsletter by filling out a registration form on our website.
    • If you check the box on a contact form, this indicates your agreement to be contacted by email, provided the box is not pre-checked and we have informed you that the nature of the emails will be commercial.
      All marketing emails will include a clear indication that you can decline to receive further marketing emails from us at any time. All marketing emails must prominently feature an unsubscribe button, which you can use to opt out with just one click. Once you unsubscribe, we will no longer send you marketing emails.
      We may use your personal data, including but not limited to your name, address, phone number, email address, and other relevant data, to operate our business model, optimise our websites, develop new products and services, provide information and support, better understand your needs and interests, tailor communication and advertising to you, fulfil contractual obligations, and generally provide you with a high-quality shopping experience. For example, we use your personal data, including your email address, to:
  • Communicate with you, exchange information, and build a lasting business relationship;
  • Tailor the content, products, and services offered to your personal preferences;
  • Provide you with information about us and affiliated third parties;
  • Process, fulfil, and track transactions and inquiries regarding products, services, support, and further information;
  • Verify your eligibility to use our services;
  • Conduct market research and analyses;
  • Measure, analyse, and further develop our products and services, the effectiveness of our websites, as well as our advertising and marketing;
  • Comply fully with legal requirements;
  • Provide targeted advertising, including the use of retargeting technology;
  • Send you marketing materials, such as via email, including our newsletter, and inform you about products and services we believe may be of interest to you;
  • Detect, prevent, and counter fraudulent activities and other prohibited or illegal activities; or
  • Inform you about new services, product announcements, upcoming promotions, and changes to our terms and conditions or privacy policies.
    You can manage your receipt of our marketing and non-transactional emails by clicking on the "unsubscribe" link at the end of our marketing and non-transactional emails. If you no longer wish to receive emails or newsletters from us at any time, you can also unsubscribe by sending an email to contact@miamyles.co.uk or by following the instructions in the email or newsletter.
    1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is getboobee.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
    1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser bar.

  • 2. Data Collection When Visiting Our Website
    When using our website for purely informational purposes, meaning if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

    • The website you visited
    • The date and time of access
    • The amount of data sent in bytes
    • The source/reference from which you accessed the page
    • The browser used
    • The operating system used
    • The IP address used (possibly in anonymised form)
      The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively should concrete indications suggest unlawful use.

    By using our website, you (the visitor) consent to third parties processing your IP address to determine your location for currency conversion. You also agree that this currency will be stored in a session cookie in your browser (a temporary cookie that is automatically removed when you close your browser). We do this to ensure that the selected currency remains consistent while browsing our website so that prices can be converted into your (the visitor’s) local currency.

    3. Cookies
    To make your visit to our website more attractive and enable the use of certain features, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.

    Partially, cookies serve to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies we implement, the processing is carried out in accordance with Article 6(1)(b) GDPR either for the performance of the contract or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

    We may work with advertising partners who help us make our online offerings more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies). If we collaborate with such advertising partners, you will be informed about the use of such cookies and the extent of the information collected in the following paragraphs separately and individually.

    Please note that you can set your browser to notify you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this for the respective browsers at the following links:

    Please note that if you do not accept cookies, the functionality of our website may be limited.

    4. Contacting Us
    In the context of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed, which is the case when it is clear from the circumstances that the matter in question has been conclusively clarified, and provided there are no statutory retention obligations to the contrary.

    5. Data Processing When Opening a Customer Account and for Contract Execution
    In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide us with this data for the execution of a contract or when opening a customer account. Which data is collected is evident from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data you provide for contract execution. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved a legally permissible further use of the data, which we will inform you about below.

  • ChatGPT:
    ChatGPT

    6. Use of Single Sign-On Methods

    Facebook Connect

    On our website, you can create a customer account or register using the "Facebook Connect" social plugin from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), as part of the so-called Single Sign-On technique, provided you have a Facebook profile. The social plugins of "Facebook Connect" on our website are recognizable by the blue button featuring the Facebook logo, labeled "Log in with Facebook," "Connect with Facebook," or "Sign in with Facebook."

    When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly from Facebook to your browser and embedded into the page. Through this embedding, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not logged into Facebook at that moment. This information (including your IP address) is transmitted directly from your browser to a server of Facebook in the USA and stored there. These data processing operations are carried out in accordance with Art. 6 (1) (f) GDPR, based on Facebook's legitimate interest in displaying personalized advertising based on surfing behavior.

    Through the use of the "Facebook Connect" button on our website, you also have the option to log in or register on our website using your Facebook user data. Only if you explicitly consent to the data exchange with Facebook before the login process, based on an appropriate notice, will we receive from Facebook, depending on your privacy settings at Facebook, the general and publicly accessible information stored in your profile. This information includes the user ID, name, profile picture, age, and gender.

    Please note that changes to Facebook's data protection and usage policies may result in the transfer of your profile pictures, user IDs of your friends, and friend lists if these have been marked as "public" in your Facebook privacy settings. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary data, provided that these have been shared by you on Facebook (salutation, first name, last name, address details, country, email address, date of birth). Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your Facebook profile.

    You can revoke the consent granted at any time by sending a message to the responsible party mentioned at the beginning of this statement. Facebook Inc. based in the USA is certified under the US-European Privacy Shield agreement, which ensures compliance with the data protection level applicable in the EU.

    For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and settings options regarding the protection of your privacy, please refer to Facebook's privacy policy: http://www.facebook.com/policy.php.

    If you do not want Facebook to directly associate the data collected through our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with browser add-ons, such as "Adblock Plus" (https://adblockplus.org/de/).

    7. Use of Your Data for Direct Marketing

    Subscription to Our Email Newsletter

    If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter after you have explicitly confirmed that you agree to receive the newsletter. We will send you a confirmation email asking you to confirm by clicking a corresponding link that you wish to receive the newsletter.

    By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you subscribe to the newsletter, we will store the IP address you registered with your Internet Service Provider (ISP) as well as the date and time of the subscription to track any potential misuse of your email address at a later date. The data collected during your newsletter subscription will be used solely for the purpose of advertising through the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further use your data that is legally permitted and about which we inform you in this statement.

    8. Data Processing for Order Fulfillment

    8.1 The personal data we collect will be shared with the transport company responsible for delivery as part of contract fulfillment, as far as this is necessary for the delivery of goods. Your payment data will be passed on to the financial institution responsible for payment processing, as required for the payment transaction. If payment service providers are used, we will explicitly inform you below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

    8.2 In order to fulfill our contractual obligations to our customers, we work with external shipping partners. We share your name and delivery address solely for the purposes of goods delivery, in accordance with Art. 6 (1) (b) GDPR, with a shipping partner selected by us.

    8.3 Use of Payment Service Providers

    Amazon Pay
    If you choose the payment method "Amazon Pay," the payment processing will be carried out through the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we will forward the information you provided during the ordering process, along with the information about your order in accordance with Art. 6 (1) (b) GDPR. The transfer of your data is exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find more information about Amazon Payments' data protection regulations at the following internet address: https://pay.amazon.com/de/help/201751600.

    PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for the payment processing.

    PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be forwarded in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in assessing your creditworthiness to credit agencies. The result of the credit assessment concerning the statistical likelihood of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are involved in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. In calculating the score values, various factors are considered, including, but not limited to, address data. Further data protection information, including details about the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

    You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if necessary for the contractual payment processing.

    SOFORT
    If you choose the payment method "SOFORT," the payment processing will be carried out through the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will forward the information you provided during the ordering process, along with information about your order in accordance with Art. 6 (1) (b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data is exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. More information about SOFORT's data protection regulations can be found at the following internet address: https://www.klarna.com/sofort/datenschutz.

    Stripe
    If you opt for a payment method from the payment service provider Stripe, the payment processing will be carried out through Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we will forward the information you provided during the ordering process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. The transfer of your data is exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd and only to the extent necessary for this purpose. For more information about Stripe's data protection, please visit: https://stripe.com/de/terms.

    Klarna
    In order to offer you the payment methods of Klarna, we may need to pass your personal data in the form of contact and order details to Klarna during the checkout process, so that Klarna can assess whether you are eligible for Klarna’s payment methods and can tailor the payment options to you. Your transmitted personal data will be processed in accordance with Klarna's privacy policy.

    9. Rights of the Data Subject

    9.1 Comprehensive Data Subject Rights

    Under current data protection law, you have comprehensive rights in relation to the processing of your personal data against the data controller, which we outline below:

    • Right of Access under Article 15 GDPR: You have the right to obtain information about the personal data we process about you, including the purposes of processing, the categories of data processed, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned duration of storage or the criteria for determining that duration, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if not collected from you, the existence of automated decision-making including profiling, and any meaningful information about the logic involved, as well as the significance and consequences of such processing for you. Additionally, you have the right to be informed about any guarantees in accordance with Article 46 GDPR regarding the transfer of your data to third countries.

    • Right to Rectification under Article 16 GDPR: You have the right to request the immediate rectification of inaccurate data concerning you and/or the completion of incomplete data stored by us.

    • Right to Erasure under Article 17 GDPR: You have the right to request the erasure of your personal data under the conditions set out in Article 17(1) GDPR. However, this right does not apply if processing is necessary for exercising the right of freedom of expression and information, compliance with a legal obligation, reasons of public interest, or for the establishment, exercise, or defence of legal claims.

    • Right to Restrict Processing under Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data is contested, if you refuse the erasure of your data on unlawful processing grounds and instead request the restriction of processing, if you need your data for the establishment, exercise, or defence of legal claims, or if you have objected to processing on grounds relating to your particular situation while it is being verified whether our legitimate interests override yours.

    • Right to Notification under Article 19 GDPR: If you have exercised your rights to rectification, erasure, or restriction of processing, we are obliged to inform all recipients to whom your personal data has been disclosed of such rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

    • Right to Data Portability under Article 20 GDPR: You have the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of that data to another data controller, where technically feasible.

    • Right to Withdraw Consent under Article 7(3) GDPR: You have the right to withdraw any consent you have given to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will promptly erase the affected data, unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

    • Right to Lodge a Complaint under Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the location of the alleged infringement, without prejudice to any other administrative or judicial remedy.

    9.2 Right to Object

    If we process your personal data based on a legitimate interest, you have the right to object to this processing at any time, for reasons relating to your particular situation, with effect for the future. Should you exercise your right to object, we will cease processing your personal data. Further processing may be retained if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defence of legal claims. If your personal data is processed for the purpose of direct marketing, you have the right to object to the processing of your personal data for such marketing purposes at any time. You may exercise your right to object as described above. If you exercise your right to object, we will cease processing your personal data for direct marketing purposes.

    10. Duration of Storage of Personal Data

    The duration of storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax law retention periods). After the retention period has expired, the corresponding data will be routinely deleted, provided that it is no longer necessary for the performance of the contract or pre-contractual measures and/or we have no legitimate interest in continuing to store it.