Privacy Policy

At Gi by Giselle, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit and use our website (www.giselleeffting.com) and purchase our products. By accessing or using our services, you consent to the data practices described in this policy.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Giselle Effting Via Pisana 152 Florence, Italy 50143 Email: g@giselleeffting.com

2. Information We Collect

We collect various types of information to provide and improve our services to you:

  • Personal Data You Provide Directly:

    • Contact Information: Name, email address, postal address, phone number (when you make a purchase, create an account, sign up for our newsletter, or contact us).

    • Payment Information: Details required for processing payments (e.g., credit card numbers, billing address). Please note: We do not directly store full payment card details on our servers; this information is securely processed by our third-party payment processor, Stripe.

    • Order Details: Information related to your purchases, including product preferences and order history.

    • Communications: Any information you provide when you communicate with us via email, chat, or other channels.

  • Automatically Collected Data (Usage Data):

    • Technical Information: IP address, browser type and version, time zone setting, operating system and platform.

    • Browse Information: Details about your visits to our website, including the pages you view, navigation paths, search queries, and interactions with website elements.

  • Cookies and Tracking Technologies: We use cookies and similar tracking technologies (like pixels and web beacons) to track activity on our website and hold certain information. For more details, please see our "Cookies" section below.

3. How We Use Your Information

We use the collected information for various purposes, primarily to fulfill our contractual obligations and improve your experience:

  • To Process and Fulfill Your Orders: Including processing payments, shipping products, and providing order confirmations.

  • To Provide Customer Support: Responding to your inquiries, requests, and troubleshooting issues.

  • To Manage Your Account: If you create one, for streamlined shopping and order tracking.

  • To Improve Our Website and Services: Analyzing usage patterns, identifying popular products, and enhancing user experience.

  • For Marketing Purposes: With your consent, sending you newsletters, promotional offers, and information about new products or services. You can opt out at any time.

  • For Security and Fraud Prevention: Protecting our website, customers, and business from fraudulent transactions and unauthorized access.

  • To Comply with Legal Obligations: Meeting legal, regulatory, or tax requirements.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), our legal bases for processing your personal data include:

  • Performance of a Contract: Processing your order and providing the services you've requested.

  • Legitimate Interests: Operating and improving our business, preventing fraud, and marketing our products (where your interests and fundamental rights do not override ours).

  • Consent: When you opt-in for marketing communications or certain non-essential cookies. You have the right to withdraw consent at any time.

  • Legal Obligation: When we are required to process data to comply with a legal or regulatory duty.

5. Sharing Your Information

We may share your personal data with the following categories of third parties, strictly when necessary for the purposes outlined above:

  • Service Providers: Third-party companies that perform services on our behalf, such as:

    • Payment Processors: Stripe securely handles your payment transactions. They receive necessary payment details to process your purchase.

    • Shipping Carriers: DHL (and potentially local postal services) to deliver your orders.

    • Website Hosting and IT Support: Providers that help us operate our website.

    • Marketing and Analytics Providers: Tools that help us understand website usage and manage marketing campaigns (e.g., Google Analytics, email marketing platforms).

  • Legal and Regulatory Authorities: When required by law or to protect our rights, property, or safety.

  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

We ensure that all third parties are committed to data protection and only process your data according to our instructions and applicable laws.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, order information is typically kept for several years to comply with tax and warranty obligations.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction, or alteration. These measures include data encryption, secure servers, and strict access controls. While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Your Data Protection Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

  • The Right to Access: Request a copy of the personal data we hold about you.

  • The Right to Rectification: Request correction of inaccurate or incomplete data.

  • The Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions.

  • The Right to Restrict Processing: Request restriction of processing your data under certain conditions.

  • The Right to Data Portability: Request transfer of your data to another organization or directly to you, under certain conditions.

  • The Right to Object to Processing: Object to the processing of your personal data, especially for direct marketing.

  • The Right to Withdraw Consent: Withdraw your consent at any time where consent was the legal basis for processing.

  • The Right to Lodge a Complaint: If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local supervisory authority (e.g., Garante per la protezione dei dati personali in Italy).

To exercise any of these rights, please contact us at g@giselleeffting.com.

9. Cookies

Our website uses cookies to improve your Browse experience. Cookies are small text files placed on your device. We use:

  • Strictly Necessary Cookies: Essential for the website to function (e.g., managing your shopping cart).

  • Analytical/Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).

  • Functional Cookies: Enable enhanced functionality and personalization (e.g., remembering your preferences).

  • Targeting/Advertising Cookies: Used to deliver relevant advertisements to you.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. International Data Transfers

As we operate globally and use international service providers, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), which may not have the same data protection laws as your home country. When we transfer your data outside the EEA, we ensure appropriate safeguards are in place (e.g., standard contractual clauses approved by the European Commission) to protect your privacy.

11. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child without parental consent, we will take steps to remove that information from our servers.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of the policy. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: g@giselleeffting.com Postal Address: Giselle Effting, Via Pisana 152, Florence, Italy 50143