Privacy policy
Data Protection Statement
1) Information on the collection of personal data and contact details of the controller
1.1 Thank you for visiting our website. Below we inform you about how your personal data is handled when using our site. Personal data is any information that can be used to identify you personally.
1.2 The controller responsible for data processing on this website is Calm Carat. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (as defined by the EU General Data Protection Regulation — GDPR).
1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or inquiries). You can recognize an encrypted connection by the browser address bar starting with "https://" and by the padlock icon.
2) Data collection when visiting our website
When you use our site for informational purposes only (without registering or sending us any information), we only collect the data your browser transmits to our server (the "server log files"). This data is necessary to display the site and ensure its stability. The data collected is as follows:
- Page visited
- Date and time of access
- Amount of data transferred (in bytes)
- Page from which you accessed (referrer)
- Browser used
- Operating system used
- IP address used (possibly anonymized)
The processing of this data is based on our legitimate interest in improving the stability and functionality of the site, in accordance with Article 6(1)(f) of the GDPR. No further transfer or use of the data takes place, except in cases of concrete evidence of unlawful use, in which case the logs may be reviewed later.
3) Cookies
To make our website appealing and enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted at the end of the session (session cookies), while others remain stored to recognize your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser, location, or IP address.
Persistent cookies are automatically deleted after the defined period, which varies depending on the cookie. Some cookies simplify the ordering process (for example, by keeping products in the cart). If cookies process personal data, the processing is based on Article 6(1)(b) of the GDPR (performance of the contract) or Article 6(1)(f) (legitimate interest in optimal site functionality and an efficient user experience).
We may work with advertising partners who also store cookies on your device when you visit our site (third-party cookies). Where applicable, we will inform you in this policy of their use and scope.
You can set your browser to notify you when cookies are installed and decide individually whether to accept them. How you configure this varies by browser; check its help menu. Here are some helpful links:
- Internet Explorer
- Firefox
- Chrome
- Safari
- Opera
If you refuse cookies, some site functions may not be available.
4) Contact
When you contact us (for example, via a form or an email), we collect your personal data. The data collected is indicated in the corresponding form. We use this data exclusively to respond to your request and manage the associated technical aspects. The legal basis for this processing is our legitimate interest in responding (Article 6(1)(f) of the GDPR). If your contact is aimed at concluding a contract, the legal basis will also be Article 6(1)(b). Once the matter is resolved and in the absence of legal retention obligations, your data will be deleted.
5) Creation of customer accounts and performance of contracts
When you provide us with personal data to conclude a contract or create a customer account, we process it in accordance with Article 6(1)(b) of the GDPR. The required data is indicated in the forms. You can request the deletion of your account at any time by writing to the controller's address mentioned above. Once the contract is performed or the account is deleted, the data will be blocked for tax and commercial reasons and deleted upon expiration of those periods, unless you consent to further use or the law permits it.
6) Use of data for direct marketing purposes
6.1 Newsletter subscription
If you subscribe to our newsletter, we will regularly send you offers. We only need your email address; the other data is optional and is used to personalize the message. We use the "double opt-in" method, meaning you will receive a confirmation email, and only after clicking the link will we begin sending you the newsletter.
By activating the link, you consent to the processing of your data in accordance with Article 6(1)(a) of the GDPR. We record the IP address and time of registration to prevent misuse. You can cancel your subscription at any time via the link in the newsletter or by writing to us at support@calmcarat.co. As soon as you do, we will remove your address from our list, unless you consent to another use or the law permits it.
6.2 Sending newsletters to existing customers
If you provided us with your email address during a purchase, we may send you offers for similar products by email without requiring additional consent. This is based on our legitimate interest in personalized direct marketing, in accordance with Article 6(1)(f) of the GDPR. You can object to this at any time by writing to us.