Privacy policy

1) Information About the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. This policy informs you about the handling of your personal data when using our website. Personal data includes all information that can personally identify you.

1.2 The party responsible for data processing on this website under the General Data Protection Regulation (GDPR) is Veloure and Vibe, reachable via [insert email/contact address]. The responsible entity is the individual or legal entity that determines the purposes and means of processing personal data.

1.3 For security and protection of the transmission of personal data and other confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. A secure connection can be recognized by the “https://” prefix and the lock symbol in your browser address bar.

2) Data Collection When Visiting Our Website

When you visit our site without registering or submitting information, we only collect data that your browser transmits to our server (server log files). These are necessary for technically displaying the site:

  • Website visited

  • Date and time of access

  • Data volume transferred in bytes

  • Source/referral from which you came

  • Browser used

  • Operating system used

  • IP address (anonymized if applicable)

Processing is based on our legitimate interest in improving the stability and functionality of our site (Art. 6 para. 1 lit. f GDPR). Data is not shared or used otherwise unless there is reason to suspect unlawful use.

3) Cookies

To make our site more user-friendly, we use cookies—small text files stored on your device. Some are deleted after you close your browser (session cookies), while others remain for future visits (persistent cookies).

Persistent cookies allow us and our partners to recognize your browser and collect certain user data such as IP address, browser type, and location.

Cookies may also store settings like items in your cart. If personal data is processed through cookies, this is based on Art. 6 para. 1 lit. b (contract fulfillment) or Art. 6 para. 1 lit. f (our legitimate interest in optimal site functionality).

You can adjust your browser settings to notify you of cookies and decide case-by-case whether to accept them. For browser-specific settings, refer to these links:

Please note that disabling cookies may affect website functionality.

4) Contacting Us

When contacting us (e.g., via form or email), we collect personal data as shown in the form. This data is used exclusively to respond to your request and is processed under Art. 6 para. 1 lit. f GDPR. If contact is made to enter into a contract, Art. 6 para. 1 lit. b GDPR applies.

Data is deleted once the matter is resolved and no legal retention applies.

5) Data Processing for Account Creation and Contract Execution

When you provide personal data to open an account or place an order, we collect and process that data per Art. 6 para. 1 lit. b GDPR. You may delete your account at any time by contacting us.

Once a transaction is completed, your data is locked from further use and deleted after the applicable legal retention periods unless you consent to further use or we are legally allowed to retain it.

6) Use of Your Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we send regular promotional emails. Only your email is required. Additional data is optional.

We use the double opt-in method: You will only receive emails after confirming via a link in a follow-up email.

This is based on your consent (Art. 6 para. 1 lit. a GDPR). You may unsubscribe at any time, and your data will be deleted from the mailing list unless you opt in to further use.

6.2 Newsletter to Existing Customers

If you provide your email during purchase, we may send emails about similar products. This is based on our legitimate interest in direct marketing (Art. 6 para. 1 lit. f GDPR). You can object to this use at any time.

7) Order Processing

7.1 We share your personal data with the delivery company and, if applicable, the payment provider, only as necessary to fulfill your order (Art. 6 para. 1 lit. b GDPR).

7.2 Payment Providers

  • PayPal: Payments through PayPal are processed via PayPal (Europe) S.a.r.l. et Cie, Luxembourg. They may run credit checks per Art. 6 para. 1 lit. f GDPR. Full details: PayPal Privacy Policy

  • SOFORT (Klarna): Payments via SOFORT are processed by SOFORT GmbH, part of Klarna Group. More info: SOFORT Privacy Policy

8) Review Reminders

If you consent, we may use your email once to remind you to leave a review (Art. 6 para. 1 lit. a GDPR). You may revoke this consent at any time.

9) Social Media Plugins (Shariff Method)

We use social plugins (e.g., Facebook, Google+, Instagram) only via external links (Shariff solution). No data is transferred until you click the link. These platforms are certified under the EU-U.S. Privacy Shield:

10) Online Marketing

10.1 DoubleClick by Google: For ad performance and frequency capping. Data processing is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR). Details: DoubleClick Privacy

10.2 Google Ads Conversion Tracking: Tracks ad effectiveness via cookies. You can opt out via browser settings or Google Settings.

11) Analytics

Google Analytics (Universal): Used with anonymized IPs for performance analysis. Opt-out via Browser Plugin. Google is Privacy Shield certified.

12) Retargeting and Remarketing

We use:

  • Facebook Pixel: To track ad effectiveness. Requires consent under Art. 6 para. 1 lit. a GDPR. Info: Facebook Privacy

  • Google AdWords Remarketing: For interest-based advertising across websites. Learn more: Google Ads Privacy

13) Data Subject Rights

You have the right to:

  • Access data (Art. 15 GDPR)

  • Rectify data (Art. 16 GDPR)

  • Erase data (Art. 17 GDPR)

  • Restrict processing (Art. 18 GDPR)

  • Be informed (Art. 19 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7 para. 3 GDPR)

  • Lodge a complaint (Art. 77 GDPR)

Right to Object (Art. 21 GDPR):
You can object to data processing based on our legitimate interest at any time. If we process your data for direct marketing, you can opt out at any time.

14) Data Retention

Data is retained as required by law (e.g., tax or commercial regulations) and deleted once no longer needed unless legitimate interest allows further retention.