Privacy Policy

Data Protection Statement

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 Thank you for visiting our website. Below we inform you about the handling of your personal data when using our website. Personal data refers to any information that can be used to personally identify you.

1.2 The data controller responsible for data processing on this website is Nora Boutique California . The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (as defined by the EU General Data Protection Regulation — GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential content (such as orders or inquiries). You can recognize an encrypted connection by the “https://” in the browser’s address bar and the lock icon.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only (without registering or submitting information), we collect only the data that your browser transmits to our server (so-called “server log files”). This data is technically necessary to display the website and ensure its stability and security. The following data is collected:

  • Visited page

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Referring page (source of access)

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

The processing of this data is based on our legitimate interest in improving the stability and functionality of our website in accordance with Article 6(1)(f) of the GDPR. The data will not be transferred or used for any other purpose unless there are concrete indications of unlawful use, in which case the server log files may be reviewed retrospectively.

3) Cookies

To make our website more attractive and to enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted after the browser session ends (session cookies), while others remain on your device to recognize your browser on future visits (persistent cookies). These cookies may collect personal data such as browser information, location data, or IP address.

Persistent cookies are automatically deleted after a defined period, which may vary depending on the cookie. Some cookies simplify the ordering process (for example, by saving items in the shopping cart).

If cookies process personal data, this processing is carried out in accordance with Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) of the GDPR (legitimate interest in providing an optimal website experience).

We may work with advertising partners who may also store cookies on your device when you visit our website (third-party cookies). If applicable, we will inform you about their use and scope in this policy.

You can configure your browser to inform you about the use of cookies and decide individually whether to accept or reject them. Browser settings vary depending on the browser; please refer to your browser’s help menu. Useful links include:

  • Internet Explorer

  • Firefox

  • Chrome

  • Safari

  • Opera

If you reject cookies, some website functions may not be fully available.

4) Contact

When you contact us (for example, via a contact form or email), personal data is collected. The specific data collected can be seen in the respective contact form. We use this data exclusively to respond to your inquiry and to manage the technical aspects related to it.

The legal basis for processing this data is our legitimate interest in responding to inquiries pursuant to Article 6(1)(f) of the GDPR. If the contact is aimed at concluding a contract, the additional legal basis is Article 6(1)(b) of the GDPR. Once your request has been fully processed and there are no statutory retention obligations, your data will be deleted.

5) Customer Accounts and Contract Performance

When you provide personal data for the purpose of concluding a contract or creating a customer account, this data is processed in accordance with Article 6(1)(b) of the GDPR. The required data can be found in the respective input forms.

You may request the deletion of your customer account at any time by contacting us at the address of the data controller. Once the contract has been fully processed or the customer account has been deleted, your data will be restricted for further use due to tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use or such use is permitted by law.

6) Use of Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will regularly send you promotional offers. Only your email address is required; additional information is optional and used to personalize the newsletter.

We use the “double opt-in” procedure, meaning you will receive a confirmation email and will only receive the newsletter after clicking the confirmation link.

By activating the confirmation link, you give your consent to the processing of your data pursuant to Article 6(1)(a) of the GDPR. We store the IP address and the time of registration to prevent misuse.

You may unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter or by contacting us at:
contact@noraboutiquecalifornia.com

Once you unsubscribe, your email address will be removed from our mailing list unless you have expressly consented to further use or such use is permitted by law.

6.2 Newsletter for Existing Customers

If you provided your email address when purchasing products from us, we may send you emails with offers for similar products without requiring additional consent. This is based on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) of the GDPR.

You may object to this use of your email address at any time by contacting us.