Privacy Policy

01 DATA CONTROLLER

The controller responsible for the processing of personal data through this website is:

The House of Nocturne e.U., Owner: Maryna Tverdokhlib, Panoramaweg 38, 8570 Voitsberg, Austria

Email: office@the-house-of-nocturne.com · Phone: +43 664 99780045

02 PERSONAL DATA WE PROCESS

Depending on how you use our website, we may process information including: name; billing and shipping address; email address; telephone number; order and transaction information; products purchased; payment-related information; customer account information; communications with us; IP address; browser and device information; website usage and interaction data; cookie and consent preferences.

We only process personal data where there is an appropriate legal basis under applicable data protection law.

03 ORDERS AND CONTRACT PERFORMANCE

When you place an order, we process the information necessary to process and fulfil your purchase.

This may include your name, contact details, billing and shipping address, order details and payment-related information.

The processing is necessary for the performance of our contract with you and to take steps at your request before entering into a contract in accordance with Article 6(1)(b) GDPR.

Certain information may also be retained where necessary to comply with our legal obligations, including accounting and tax requirements, pursuant to Article 6(1)(c) GDPR.

04 SHOPIFY

Our online store is operated using Shopify.

Shopify provides the technical infrastructure required to operate our online store and may process personal data in connection with your use of the website, checkout, orders and other Shopify services.

Depending on the services and settings used, Shopify may process information such as your IP address, device and browser information, contact information, order information and interactions with our store.

Shopify may process personal data outside the European Economic Area. Where required, appropriate safeguards for international data transfers are used in accordance with applicable data protection law.

05 PAYMENTS

Payments are processed through the payment methods available at checkout.

Depending on availability and the payment method selected, payment services may include: Shopify Payments, Visa, Mastercard, Apple Pay, Google Pay, Shop Pay, PayPal, and Klarna (if available at checkout).

Information required to process your payment may be transmitted to the relevant payment service provider.

We do not receive or store your complete payment card details where payment information is processed directly by the payment provider.

Payment processing is necessary for the performance of your purchase contract pursuant to Article 6(1)(b) GDPR.

06 SHIPPING AND ORDER FULFILMENT

To process and deliver your order, we may provide the information necessary for delivery to shipping and logistics providers, including: Austrian Post, GLS, and DPD.

Depending on the carrier and delivery service, this may include your name, shipping address, email address, telephone number and information necessary to identify and deliver your shipment.

This processing is necessary to fulfil your order pursuant to Article 6(1)(b) GDPR.

07 CUSTOMER ACCOUNTS

If customer accounts are available on our website and you choose to create one, we process the information necessary to create and manage your account.

This may include your name, email address, addresses, order history and account-related information.

08 CONTACTING US

If you contact us by email, contact form or another communication channel, we process the information you provide in order to respond to your enquiry.

Depending on the nature of your request, the legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or potential purchase, or Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries and providing customer service.

09 NEWSLETTER AND EMAIL MARKETING

If you subscribe to our newsletter or otherwise provide valid consent to receive marketing communications, we may use your email address and related information to send you news, product launches, offers and other marketing communications.

We use Shopify Email for email marketing.

The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, the relevant provisions of Austrian telecommunications law.

You may withdraw your consent at any time by using the unsubscribe link contained in our marketing emails or by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10 COOKIES AND CONSENT MANAGEMENT

Our website uses cookies and similar technologies.

Some cookies are technically necessary for the website and online store to function, for example to maintain the shopping cart, provide checkout functionality, remember privacy choices and maintain website security.

Other cookies and similar technologies may be used for analytics, advertising, embedded content or marketing purposes.

Where consent is legally required, these technologies will only be activated after you have provided your consent through our cookie consent settings. You can change or withdraw your consent at any time through the Cookie Settings available on our website. Disabling certain cookies may affect some website functionality.

11 META PIXEL AND META ADVERTISING

With your consent, we use technologies provided by Meta Platforms, including the Meta Pixel and Meta Conversions API, to measure the effectiveness of our advertising, understand interactions with our website and optimise our advertising campaigns.

Depending on the technologies used and your consent choices, information relating to your interaction with our website may be processed and transmitted to Meta. This may include: pages and products viewed; products added to cart; checkout activity; purchases and other website events; browser and device information; IP address; cookie or similar identifiers.

We use this information to measure conversions, understand the effectiveness of our advertising and optimise the delivery of our advertisements. The legal basis for processing requiring consent is Article 6(1)(a) GDPR.

Meta advertising technologies requiring consent will only be activated after the relevant consent has been provided. You may change or withdraw your consent at any time through our Cookie Settings.

12 SOCIAL MEDIA AND INSTAGRAM FEED

Our website contains links to our social media profiles and displays content from our Instagram account through an embedded Instagram feed or social media integration.

When embedded social media content is displayed, Meta or the provider of the integration may process information such as your IP address, browser and device information and information about your interaction with the embedded content.

Where displaying embedded social media content involves technologies that require your consent, the content and associated technologies will only be activated after the relevant consent has been provided. If you follow a link from our website to Instagram or another social media platform, the relevant platform processes personal data according to its own privacy policy.

You may change or withdraw your consent at any time through our Cookie Settings.

13 FRAUD PREVENTION AND WEBSITE SECURITY

We may process certain technical, transaction and device information where necessary to protect our website, customers and business against fraud, abuse, unauthorised access and other security threats.

Where applicable, this processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR in maintaining the security and integrity of our online store and transactions.

14 RECIPIENTS OF PERSONAL DATA

Where necessary for the purposes described in this Privacy Policy, personal data may be shared with service providers such as: e-commerce and hosting providers; payment providers; banks and financial institutions; shipping and logistics providers; IT and website service providers; email and communication providers; analytics providers; advertising and marketing providers; social media and embedded-content providers; accounting and tax service providers; professional advisers; public authorities where required by law.

We only share personal data where there is an appropriate legal basis and where the disclosure is necessary for the relevant purpose.

15 INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside Austria or the European Economic Area.

Where personal data is transferred internationally, we rely on an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard, where required.

16 DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected and for as long as required by applicable legal retention obligations.

Order, accounting and transaction information may be retained for the periods required under Austrian tax and commercial law.

Other personal data is deleted or anonymised when it is no longer required for the relevant purpose, unless continued storage is required or permitted by law.

17 YOUR RIGHTS

Subject to the requirements of applicable law, you have the right to: request access to your personal data; request correction of inaccurate personal data; request deletion of your personal data; request restriction of processing; object to certain processing; receive certain personal data in a portable format; withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact: office@the-house-of-nocturne.com. We may request appropriate information to verify your identity before processing certain requests.

18 RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Austria, the competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

19 CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy where necessary to reflect changes to our website, services, technologies, legal requirements or data-processing practices.

The current version will always be available on this page.

20 CONTACT

For questions about this Privacy Policy or the processing of your personal data, please contact:

The House of Nocturne e.U.
Panoramaweg 38, 8570 Voitsberg, Austria

Email: office@the-house-of-nocturne.com · Phone: +43 664 99780045