Privacy Policy

PRIVACY POLICY

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide you with information regarding the processing of your personal data when using our website. Personal data includes any information that can be used to identify you personally.

1.2 The data controller responsible for processing personal data on this website, under the General Data Protection Regulation (GDPR), is Chic Toronto. The data controller is the individual or legal entity that, alone or together with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" string and the lock icon in the browser bar.

COLLECTION OF DATA WHEN YOU VISIT OUR WEBSITE

When you visit our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect the data your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, anonymized)

Processing occurs in accordance with Art. 6 (1) (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or use of the data. However, we reserve the right to review server log files if there are concrete indications of unlawful use.

COOKIES

To make visiting our website more enjoyable and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after your browser session ends (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser upon your next visit (persistent cookies).

When cookies are set, they collect and process certain user information, such as browser and location data, or IP address values. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. Some cookies serve to simplify the order process by storing settings (e.g., remembering the contents of a virtual shopping cart for your next visit). If personal data is processed by individual cookies implemented by us, processing occurs under Art. 6 (1) (b) GDPR for contract execution or under Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective browsing experience.

We may work with advertising partners to make our website more interesting to you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your device when you visit our website. If we collaborate with such advertising partners, you will be informed separately and individually about the use of such cookies and the scope of the collected information in the following sections.

Please note that you can configure your browser to inform you about the setting of cookies and decide individually whether to accept them, or exclude cookie acceptance for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how to adjust your cookie settings. Below are links for the respective browsers:

Please note that rejecting cookies may limit the functionality of our website.

CONTACT

When you contact us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form is visible from the respective form. This data is stored and used exclusively to respond to your inquiry or to contact you and manage the associated technical processes. The legal basis for processing the data is our legitimate interest in responding to your request under Art. 6 (1) (f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after the final processing of your request if it is clear that the matter has been resolved and there are no legal retention obligations.

PROCESSING DATA FOR OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

Under Art. 6 (1) (b) GDPR, personal data will be collected and processed if you provide it to us to execute a contract or open a customer account. The data collected is visible from the respective input forms. You can delete your customer account at any time by sending a message to the data controller. We store and use the data you provide for contract processing. After complete execution of the contract or deletion of your account, your data will be locked in compliance with retention periods under tax and commercial laws and deleted after these periods unless you have expressly consented to further use of your data or we reserve the right to further use your data as permitted by law, about which we inform you below.

9.3 Twitter Plugins with Shariff Solution

Our website uses social plugins ("plugins") from the social network Twitter, operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). To better protect your data when visiting our website, these buttons are not directly integrated as plugins but are instead embedded using an HTML link. This type of integration ensures that no connection to Twitter's servers is established when you visit a page on our site that contains such buttons. Only when you click on the button will a new browser window open, directing you to Twitter's page, where you can interact with the plugins (if needed, after logging in).

Twitter Inc., based in the USA, is certified under the EU-US Privacy Shield Agreement, which ensures compliance with the data protection level applicable in the EU. For information regarding the purpose and scope of Twitter’s data collection, the further processing and use of data, and your rights in this regard, please refer to Twitter's privacy policy:
https://twitter.com/privacy

9.4 Pinterest Plugins with Shariff Solution

Our website uses social plugins ("plugins") from the social network Pinterest, operated by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA ("Pinterest"). To better protect your data when visiting our website, these buttons are not directly integrated as plugins but are instead embedded using an HTML link. This ensures that no connection to Pinterest's servers is established when you visit a page on our site containing these buttons. Only when you click on the button will a new browser window open, directing you to Pinterest's page, where you can interact with the plugins (if needed, after logging in).

For more information on Pinterest's data collection, processing, and use, and your rights in this regard, please review Pinterest's privacy policy:
https://policy.pinterest.com/en/privacy-policy

10. Online Marketing

10.1 Use of Google AdWords Conversion Tracking

This website uses Google AdWords, an online advertising program by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Within the scope of Google AdWords, we use the conversion tracking feature. If you click on an ad placed by Google, a conversion tracking cookie will be set on your device. These cookies expire after 30 days and do not contain personal data, so they cannot be used to identify you personally.

If you visit certain pages of this website and the cookie has not yet expired, both we and Google can detect that you clicked on the ad and were redirected to this page. Each Google AdWords client receives a different cookie, which means that cookies cannot be tracked across the websites of multiple AdWords clients.

The information collected via the conversion cookie is used to create conversion statistics for AdWords clients who have opted for conversion tracking. These clients can see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you wish to disable the tracking function for Google AdWords, you can deactivate the Google conversion tracking cookie through your browser settings. For more information on Google's privacy policy, please visit:
https://www.google.com/policies/privacy/

11. Web Analytics Services

11.1 Google (Universal) Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," small text files stored on your device that allow an analysis of your website usage. The information generated by the cookie about your use of this website (including the anonymized IP address) is transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the "anonymizeIp()" extension, which ensures that the IP address is anonymized by shortening it, preventing it from being directly linked to an individual. Using this extension, Google shortens your IP address within member states of the European Union or other contracting states to the Agreement on the European Economic Area before transmitting it.

On behalf of the operator of this website, Google will use this information to analyze your use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet usage. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by adjusting your browser settings accordingly. However, please note that if you do this, you may not be able to use all the features of this website fully. You can also prevent Google from collecting and processing data generated by the cookie about your website usage (including your IP address) by downloading and installing the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=en

More information on how Google Analytics handles user data can be found in Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en

12. Rights of the Data Subject

12.1 Applicable Data Protection Rights

As a data subject, you have the following rights:

  • Right of Access (Art. 15 GDPR): The right to obtain confirmation about whether we process your personal data and, if so, detailed information about it.
  • Right to Rectification (Art. 16 GDPR): The right to have inaccurate or incomplete data corrected.
  • Right to Erasure (Art. 17 GDPR): The right to request the deletion of your personal data under specific conditions.
  • Right to Restrict Processing (Art. 18 GDPR): The right to request limitations on how your data is processed.
  • Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, machine-readable format and to transmit it to another controller.
  • Right to Object (Art. 21 GDPR): The right to object to the processing of your data based on legitimate interests, direct marketing, or statistical purposes.

If you believe your rights have been violated, you also have the right to lodge a complaint with a supervisory authority, particularly in your place of residence, workplace, or the location of the alleged infringement.

13. Duration of Personal Data Storage

The duration of personal data storage is determined by the respective legal retention periods. Once these periods expire, the data will be deleted unless it is still necessary for contract performance, the initiation of a contract, or another legally valid reason.