Data Protection Declaration

1) Information about the collection of personal data and the contact
details of the data controller

1.1 Thank you for visiting our website. Below, we provide information about how we handle your personal data
when you use our site. Personal data is any data that can be used to identify you personally.

1.2 The data controller responsible for this website is Olivia & Charlotte Sydney. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (as defined by the EU General Data Protection Regulation — GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or enquiries). You can recognise an encrypted connection by the browser address
bar starting with "https://" and by the padlock icon.

2) Data collected when you visit our website

When you use our website purely for informational purposes (i.e. without registering or otherwise providing us with information), we only collect the data that your browser transmits to our server (so-called "server log files"). This data is necessary to display the website and ensure its stability. The following data is collected:
• Page visited
• Date and time of access
• Amount of data transferred (in bytes)
• Page from which you accessed our site (referrer)
• Browser used
• Operating system used
• IP address used (possibly anonymised)
The processing of this data is based on our legitimate interest in improving the stability and functionality of our
website, in accordance with Article 6(1)(f) GDPR. This data is not passed on or used for any further purpose,
unless there are concrete indications of unlawful use, in which case the log files may be reviewed at a later date.

3) Cookies

To make our website appealing and to enable the use of certain functions, we use cookies (small text files stored your device). Some cookies are deleted at the end of your browsing session (session cookies), while others remain stored to recognise your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser, location or IP address.
Persistent cookies are automatically deleted after a set period, which varies depending on the cookie. Some cookies simplify the ordering process (for example, by remembering the items in your shopping cart). Where cookies process personal data, this processing is based on Article 6(1)(b) GDPR (performance of a contract) or
on Article 6(1)(f) GDPR (legitimate interest in optimal website functionality and an efficient user experience).
We may work with advertising partners who also store cookies on your device when you visit our website (third-party cookies). Where this is the case, we will inform you of their use and scope in this policy.
You can configure your browser settings to be notified when cookies are set, and to decide individually whether
to accept them. How this is done depends on your browser — please refer to its help menu. Here are some useful links:
• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera
If you decline cookies, certain functions of our website may not be available.

4) Contact

When you contact us (for example, via a contact form or email), we collect your personal data. The data collected is specified in the relevant form. We use this data solely to respond to your enquiry and to manage any related technical matters. The legal basis for this processing is our legitimate interest in responding to enquiries
(Article 6(1)(f) GDPR). If your enquiry relates to entering into a contract, the legal basis is also Article 6(1)(b)
GDPR. Once your enquiry has been resolved and no legal retention obligations apply, your data will be deleted.

5) Creation of customer accounts and performance of contracts

When you provide us with personal data in order to enter into a contract or create a customer account, we process this data in accordance with Article 6(1)(b) GDPR. The data required is indicated on the relevant forms.
You may request the deletion of your account at any time by writing to the controller's address given above.
Once a contract has been completed or an account deleted, your data will be blocked for tax and commercial purposes and will be deleted once those retention periods have expired, unless you have consented to further use
or the law permits otherwise.

6) Use of data for direct marketing

6.1 Newsletter subscription
If you subscribe to our newsletter, we will regularly send you offers. We only require your email address; any other details are optional and are used to personalise the message. We use the "double opt-in" method, meaning
you will receive a confirmation email and we will only begin sending you the newsletter once you have clicked the link it contains.
By activating the link, you give your consent to the processing of your data in accordance with Article 6(1)(a) GDPR. We record your IP address and the time of registration to prevent misuse. You may unsubscribe at any
time using the link in the newsletter or by writing to us at oliviaandcharlottesupport@gmail.com. Once you do so, we will delete
your address from our list, unless you have consented to further use or the law permits otherwise.
6.2 Sending newsletters to existing customers
If you provided us with your email address when making a purchase, we may email you offers for similar products without requiring separate consent. This is based on our legitimate interest in personalised direct marketing, in accordance with Article 6(1)(f) GDPR. You may object to this at any time by writing to us.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

Olivia & Charlotte Sydney, Australia Email: oliviaandcharlottesupport@gmail.com