Privacy policy

INTRODUCTION

We take your privacy very seriously and are committed to protecting it. We believe you should easily know what personal data we collect and use. We also believe you should understand your rights with respect to your personal data.

This privacy policy ("Privacy Policy") explains our policies and practices regarding how we collect, use, and disclose the personal data that we collect through our digital platforms, including this website.  We recommend that you read this Privacy Policy carefully as it provides important information about your personal data. You can print the complete text of this Privacy Policy and may contact us if you have any questions about this Privacy Policy.

SECTION 1 - WHO WE ARE

"German Valdivia" refers to German Valdivia and its affiliates.

"Shopify" refers to Shopify Inc., Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify Commerce Singapore Pte. Ltd. and Shopify International Limited. 

This Privacy Policy summarizes how German Valdivia, collects, manages and uses your data. In certain instances, Shopify may also collect, manage or use some of your data if you utilize Shopify hosted services such as Shopify Pay or Shopify Arrive in conjunction with your use of the German Valdivia website. Shopify's own privacy policy ("Shopify Privacy Policy") details the nature of personal data collected from you by Shopify and how it is managed on their end. Shopify's Privacy Policy may be accessed here. 

At times in this Privacy Policy we use the words "we", "us" and "our". These pronouns refer to both German Valdivia and Shopify, collectively, as there are instances where your data is controlled by either party. Any data controlled by Shopify shall also be subject to Shopify's Privacy Policy, linked above.

SECTION 2 - INFORMATION WE COLLECT

Personal data is information relating to an identified or identifiable natural person. When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address, email address, phone number, and location. We may collect personal data either directly from you or indirectly through our website, electronic forms, mobile applications, or interactions with social media platforms (collectively, "Digital Platforms").

 

We do not collect personal information from individuals under the age of 18 years old. By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. 

2.1 Information you provide directly to us

You may provide us with information under the following circumstances: (1) when you create an account online or interact with us in person; (2) when you subscribe to our newsletter; (3) when you use our Digital Platforms; (4) when you purchase products or services on our Digital Platforms or in person; (5) when you interact with us in person, including during in-home fittings; (6) when you participate in any of our events.

The information you provide us may include: (1) your full name and identity, including first name, last name, gender and image; (2) your contact details including your postal address, email address, and phone numbers; (3) your personal status (including any titles); (4) your purchases and repairs, including purchase history and order details; (5) your preferences such as sizing or color; (6) certain payment information including billing information, payment type or method, charge or credit card numbers; and (7) other information you may provide by filling out forms or by contacting us.

We will inform you when your information is required to process your request, to respond to any of your inquiries or to provide you with our products and services. If you opt not to provide us this information, then it may delay or prevent us from processing your request, responding to your inquiry and providing products or services to you.

To ensure accuracy of your data, we encourage you to update your information in case of any changes. We encourage you to update your information from time to time, and we may request that you do so.

We advise that your only provide the data requested or necessary for processing an inquiry with German Valdivia. We ask that you not provide information relating to your racial or ethnic origin, political opinions, religious or philosophical believes, data concerning health, sex life or sexual orientation. 

We do not provide our services or products directly to, nor collect personal data of, persons below the age of 18. We ask you not to provide us with personal data of persons under 18 years of age.

 

2.2 Information you provide indirectly to us

We may collect information when you use our Digital Platforms, such as your IP address or other browsing information such as browser, operating system, device model, through cookies or similar technologies placed onto your device. Some cookies are required for the proper functioning of our Digital Platforms and other are used for analytics purposes which help us provide personalized and customized services in addition to a better digital experience. For more information about cookies and to know how you can edit your preferences, please reader our Cookie Policy.

We may also collect information about you from third parties, such as a spouse or personal shopper who contacts us on your behalf or from your friends who provide us with your information in order to invite you to events you may be interested in. 

If you provide personal data to us about someone else, you must ensure that you are entitled to disclose that information to us and that, without us taking any further steps required by data protection laws, we may collect, use and disclose such information for the purposes described in this Privacy Policy. For example, you should ensure the individual concerned is aware of the various matters detailed in this Privacy Policy. The individual must also provide the consents set out in this Privacy Policy in respect of how we will deal with their personal information.

SECTION 3 - WHY WE COLLECT YOUR DATA AND HOW WE USE IT 

We collect and use your personal data based on one or many of the following legal basis: (1) we have obtained your prior consent and you have not exercised your right to withdraw your consent at any time, such as email newsletters; (2) the processing is necessary in connection with any contract between German Valdivia and you, such as the processing of an online purchase; (3) we have a legitimate interest in carrying out the processing of your data and that legitimate interest is not overridden by your interests, fundamental rights, or freedoms; (4) we have to process your personal data to comply with applicable laws and regulations.

Depending on the specific context, we may use your personal data in order to:

1. provide you with the products or services you requested;
2. conduct checks to identify you and verify your identity;
3. send you marketing communications - with your prior consent (see section “Marketing Communications”);
4. provide you after-sale services;
5. respond to your queries, requests and suggestions;
6. manage the events you registered and/or participated in;
7. detect any fraudulent or illegal activity, including to secure your transactions by detecting and preventing fraud against you and German Valdivia;
8. protect you, employees and other individuals in our stores as well as our property;
9. manage the stock of certain types of rare products to allow a fair allocation of the products we sell;
10. monitor and improve our Digital Platforms;
11. conduct statistical analysis;
12. improve our products and services;
13. use automated decision making in processing your personal information for some services and products, subject to your right to request a manual review of any automated decision;
14. provide information to regulatory bodies when legally required.

German Valdivia is not engaged in the sale of your personal data to any third-parties. Shopify is also not engaged in the sale of your personal data to any third-parties.

SECTION 4 - MARKETING COMMUNICATIONS 

With your express prior consent (usually obtained by ticking a specific box in a form), you may receive information concerning offers, services, products or events sent by German Valdivia and/or by other German Valdivia  group companies. In such a case, you also accept that your contact information is shared with other German Valdivia  group companies for this purpose. 

We rely on your consent to process the personal data you provide to us for this purpose. Therefore, if you no longer wish to receive such information, you can withdraw your consent at any time.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products and/or services in the future, or if there are changes in the law, regulation, or the structure of our business.

SECTION 5 - HOW LONG WE KEEP YOUR PERSONAL DATA

Your personal data is processed for the period necessary for the purposes for which they have been collected, to comply with legal and regulatory obligations and for the duration of any period necessary to establish, exercise or defend any legal rights.

In order to determine the most appropriate retention periods for your personal data, we have specifically considered the amount, nature and sensitivity of your personal data, the reasons for which we collected your personal data, the service you deserve and expect from us together with the applicable legal requirements. For example:

- With regard to our prospects (potential customers): your data is stored for three years from your last action and then deleted or archived to comply with legal retention obligations;

- With regard to our customers: your data is stored for the duration of our commercial relationship and for up to ten years and then deleted or archived to comply with legal retention obligations;

-With regard to the cookies used on Digital Platforms: they are stored for up to 24 months from the moment they were installed on your device.

 SECTION 6 - HOW DO WE DISCLOSE AND TRANSFER YOUR PERSONAL DATA 

We disclose your personal data to German Valdivia employees or contractors that need to have access to your personal data and are authorized to process them in order to achieve the aforementioned purposes and who are committed to confidentiality. Third-party providers will only receive information necessary to allow them to perform the services they provide to you on our behalf.

We may disclose your personal data to German Valdivia group companies, in charge of customer relationship, retail, e-commerce, communication, internal audit and IT management for the purposes set out in this Privacy Policy and to provide you with a consistent level of service across all German Valdivia group companies. This may include providing you with the products and services that you have requested, improving the services provided and – with your consent – sending you marketing communication concerning offers, services, products or events. Again, you may withdraw your consent at any time.

For the specific purpose of combating payment fraud, your personal data is communicated to Shopify in order to process your order and to fight against online payment methods fraud attempts. As part of our legitimate interest to fight against fraud with payment methods, both German Valdivia and Shopify, acting as data controllers, can transmit your financial information to an external service provider with a fraud detection tool in order to authenticate a payment. Such service provider is committed to confidentiality.

We may also disclose personal data to third-party providers acting on behalf of German Valdivia and approved by German Valdivia. All such processing is based on our prior instructions set out in a binding contract that is compliant with the requirements of applicable law. Such disclosures are made for different purposes including: (1) IT development and support; (2) Hosting and carrying out marketing and business studies and marketing campaigns; (3) Verifying your information, authenticating payments and processing orders and payments, to third parties that provide credit reporting, payment or order fulfilment services; (4) delivery services. These providers are committed to confidentiality and are not permitted to use your personal data for any other purposes. We also require them to use appropriate security measures to protect your personal data in accordance with applicable law.

We may be required by the binding requirements of an applicable law, or for the purposes of responding to legal proceedings or other lawful requests to disclose your personal data to authorities or third parties.

We may also disclose or otherwise process your personal data, in accordance with applicable law, to defend our legitimate interests (for example, in civil or criminal legal proceedings). For example, we may disclose such personal data as necessary to identify, contact or bring legal action against a person or entity who may be violating our Terms and Conditions of Sale and Use, or who may be causing injury to, or interfering with, other users of our Digital Platforms.

In the event that German Valdivia or German Valdivia group companies, or all or part of its or their assets, are acquired by a third party, your personal data may be included in the transferred assets.

SECTION 7 - HOW WE PROTECT YOUR PERSONAL DATA

 

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. 

All your personal data is strictly confidential and will only be accessible, on a need-to-know basis, to duly authorized personnel of German Valdivia and third-party providers acting on our behalf with appropriate technical and organizational security safeguards.

German Valdivia has implemented security measures to protect your personal data against unauthorized access and use. We follow appropriate security procedures in the storage and disclosure of your personal data so as to prevent unauthorized access by third parties and to prevent your data from being accidentally lost. We limit those who access your personal data to those who have a genuine business need to access it. Those who do access your data will be subject to a duty of confidentiality towards German Valdivia.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

We also require those parties to whom we transfer your personal data to comply with the same. However, unfortunately, the transmission of information via the internet is not completely secure in all instances.  We cannot ensure the security of your personal data transmitted by you to us via the internet. Any such transmission is at your own risk and you acknowledge and agree that we shall not be responsible for any unauthorized use, distribution, damage or destruction of your Information, except to the extent we are required to accept such responsibility under the law. Once we have received your personal data, we will use the security measures referenced above.

If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

 

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify’s Terms of Service or the Shopify Privacy Policy.

SECTION 8 - WHAT RIGHTS DO YOU HAVE ON YOUR PERSONAL DATA?

In accordance with the applicable data protection laws, you can, at any time, request access, rectification, erasure and portability of your personal data or restrict and object to the processing of your personal data. A summary of these rights is provided below:

 

Your right to be informed: the right to be informed means anyone processing your personal data must make clear what they are processing, why, and who else the data may be passed to.

Your right of access: the right to be provided with a copy of your personal data.

Your right to rectification: the right to require us to correct any mistakes in your data or to complete your information.

Your right to be forgotten: the right to require us to delete your personal data, such as when your personal data is no longer required for the purposes it was collected for, you withdrawn your consent, or the personal data has been unlawfully processed.

Your right to restriction of processing: the right to require us to restrict processing of your personal data — in certain circumstances, for example if you contest the accuracy of the data.

Your right to data portability: the right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party — in certain situations.

Your right to object to processing: the right to object at any time to your personal data being processed for direct marketing and, in certain other situations, to our continued processing of your personal information such as any data processing carried out for the purpose of our legitimate interests.

 

Your right to object to automated decision making and profiling: You have the right to not be subject to a decision based solely on automated processing.

You may at any time decide to withdraw your consent to the processing of your personal data. If your consent is withdrawn, it does not prevent us from processing your personal data based on other legal bases if any, such as fulfilling your orders and storing your order data as required by applicable law. 

If you no longer wish to receive our marketing/promotional information, we remind you that you may withdraw your consent to direct marketing at any time directly from the unsubscribe link included in each electronic marketing message we send to you. If you do so, we will promptly update our databases, and will take all reasonable steps to meet your request at the earliest possible opportunity, but we may continue to contact you to the extent necessary for the purposes of any products or services you have requested.

You also have the right to lodge a complaint with your local data protection authority in case of alleged infringement of the data protection rules applicable to you. To exercise any of those rights, please contact us using the contact information below.

Please note that upon exercising any of the rights listed above, you will be requested to let us know what right you want to exercise and provide information (copy of an identity card, passport or other legally recognized identity) for identification purposes in order to process your request and protect you against fraudulent requests from third parties.

[For California Residents] What are your rights under California Civil Code Sections 1798.83-1798.84?

California Civil Code sections 1798.83-1798.84 give California residents the right to ask us for a notice describing what categories of personal customer information we share with third parties or corporate affiliates for their direct marketing purposes. That notice will identify the categories of information shared and will include a list of the third parties and affiliates with which it was shared, along with their names and address. If you are California resident and would like a copy of this notice, please submit a written request to: privacy@germanvaldivia.com.

SECTION 9 - CONTACTING US 

In issues relating to your account, to withdraw your consent, to ask general questions or to lodge a complaint, please contact our Customer Service:

- By email: info@germanvaldivia.com

- By phone: 646.907.9996

- By mail: PO Box 1046, New York, NY 10150

In issues specifically related to marketing emails, we remind you that you can, at any time, directly unsubscribe through the “unsubscribe” link in any electronic marketing messages we sent to you.

If you have any questions or concerns about our Privacy Policy or data processing, you may contact our Data Protection Officer at: privacy@germanvaldivia.com.

SECTION 10 - CHANGES TO THIS PRIVACY POLICY 

This Privacy Policy reflects our current practices, and is subject to change and update from time to time. When we post changes to this Privacy Policy we will modify the "Effective Date" at the top of this Privacy Policy to indicate when such changes have come into effect.

If we change this Privacy Policy in a material way, we will inform you through a notice advising of such change at the beginning of this Privacy Policy and on the German Valdivia website homepage.

 

Cookies Policy

A cookie is a small text file stored on your computer, tablet or mobile phone that makes it possible to save and track data about your use of the website. German Valdivia uses cookies to identify you or store your product selection in your basket, for example. Cookies are managed by your Internet browser.

By continuing to use the German Valdivia website, you consent to our cookie settings and agree that you understand the terms of our cookies policy. You can edit your preferences at any time by going to the "Managing your cookie preferences" section.

Cookies Used

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.

Shopify places the following cookies listed below onto our storefront when you visit the store. These cookies are necessary for the functioning of the store:

Strictly Necessary Cookies:

Name	Function	Duration
_ab	Used in connection with access to admin.	2y
_secure_session_id	Used in connection with navigation through a storefront.	24h
_shopify_country	Used in connection with checkout.	session
_shopify_m	Used for managing customer privacy settings.	1y
_shopify_tm	Used for managing customer privacy settings.	30min
_shopify_tw	Used for managing customer privacy settings.	2w
_storefront_u	Used to facilitate updating customer account information.	1min
_tracking_consent	Tracking preferences.	1y
c	Used in connection with checkout.	1y
cart	Used in connection with shopping cart.	2w
cart_currency	Used in connection with shopping cart.	2w
cart_sig	Used in connection with checkout.	2w
cart_ts	Used in connection with checkout.	2w
cart_ver	Used in connection with shopping cart.	2w
checkout	Used in connection with checkout.	4w
checkout_token	Used in connection with checkout.	1y
dynamic_checkout_shown_on_cart	Used in connection with checkout.	30min
hide_shopify_pay_for_checkout	Used in connection with checkout.	session
keep_alive	Used in connection with buyer localization.	2w
master_device_id	Used in connection with merchant login.	2y
previous_step	Used in connection with checkout.	1y
remember_me	Used in connection with checkout.	1y
secure_customer_sig	Used in connection with customer login.	20y
shopify_pay	Used in connection with checkout.	1y
shopify_pay_redirect	Used in connection with checkout.	30 minutes, 3w or 1y depending on value
storefront_digest	Used in connection with customer login.	2y
tracked_start_checkout	Used in connection with checkout.	1y
checkout_one_experiment	Used in connection with checkout.	session

 

Shopify and our third-party service providers such as Google or Facebook place the following cookies listed below on our store for reporting and analytics, these cookies are optional and preferences may be set using the preference tool in the set up tab on our website.

 Optional Reporting and Analytics Cookies:

Managing Cookie Preferences

You can easily disable and/or delete cookies from your computer, tablet or mobile phone by clicking on the “set up” button of the website banner, and selecting your preferred option(s) in the “Manage Consent Preferences” section. Alternatively, you can also manage cookies in your browsers as described below.

We recommend that you do not disable cookies strictly necessary for the website to function. These cookies are described as "strictly necessary" in the table of listing out our cookies below.  Disabling "strictly necessary" cookies would prevent you from ordering online and enjoying the services of the German Valdivia website.

In order to manage cookies to best suit your needs, please bear in mind the purpose of cookies when setting your browser. Please find below instructions about managing and disabling cookies, depending on your browser:

Internet Explorer
Go to Tools menu, then Internet Options.
Click on Confidentiality, then click on Advanced.
In the Cookies window, select your preferences.

Google Chrome
Click the Chrome menu, the upper right button.
Select Settings then click on Show advanced settings.
In the Privacy section, click the Content settings button.
Select your preferred option(s) in the Cookies section.

Firefox
Go to Tools then Options menu.
Click on the Privacy settings.
Select Use custom settings for history.
Select your preferred option(s) on the Accept cookies from sites section.

Safari
Click on Safari, then Preferences.
Click on the Privacy tab.
Go to Block cookies and select your preferred option(s).