Privacy Policy

Statement on Data Protection

1) Information on the collection of personal data and contact details of the data controller

1.1 Thank you for visiting our website. Below, we inform you about the processing of your personal data when using our website. Personal data means all information that allows you to be personally identified.

1.2 The data controller for this website is Margaret & Sarah Co. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (as defined by the EU General Data Protection Regulation — GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or inquiries). You can recognize an encrypted connection by the address bar beginning with "https://" and the padlock icon.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only (without registering or sending us information), we collect only the data your browser transmits to our server (so-called server log files). These are necessary to display the website and ensure its stability. The following data is collected:

Page visited

Date and time of access

Amount of data transferred (in bytes)

Page from which you accessed the site (referrer)

Browser used

Operating system used

IP address used (possibly anonymized)

The processing of this data is based on our legitimate interest in improving the stability and functionality of the website, in accordance with Article 6(1)(f) GDPR. No transfer or further use of the data takes place unless there are specific indications of unlawful use, in which case the logs may be reviewed subsequently.

3) Cookies

To make our website attractive and enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted at the end of the session (session

cookies), while others remain stored to recognize your browser on future visits (persistent cookies). These cookies may collect personal data such as the browser, location, or IP address.

Persistent cookies are automatically deleted after the defined period, which varies depending on the cookie. Some cookies simplify the ordering process (for example, by saving products in the shopping cart). If cookies process personal data, the processing is based on Article 6(1)(b) GDPR (performance of the contract) or Article 6(1)(f) GDPR (legitimate interest in optimal functionality of the website and an effective user experience).

We may work with advertising partners who also store cookies on your device when you visit our website (third-party cookies). If so, we will inform you in this policy about their use and scope.

You can configure your browser to be notified about the installation of cookies and decide individually whether to accept them. The configuration method varies depending on the browser; please consult its help menu. Here are some useful links:

Internet Explorer

Firefox

Chrome

Safari

Opera

If you reject cookies, certain website functions may not be available.

4) Contact

When you contact us (for example, through a form or email), we collect your personal data. The data collected is indicated in the relevant form. We use this data exclusively to respond to your inquiry and manage related technical matters. The legal basis for this processing is our legitimate interest in responding (Article 6(1)(f) GDPR). If your contact is for the purpose of entering into a contract, the legal basis will also be Article 6(1)(b) GDPR. Once the matter has been resolved and there are no legal retention obligations, your data will be deleted.

5) Creation of Customer Accounts and Performance of Contracts

When you provide us with personal data to enter into a contract or create a customer account, we process it pursuant to Article 6(1)(b) GDPR. The required data is indicated in the forms. You may request deletion of your account at any time by writing to the address of the data controller mentioned above. Once the contract has been completed or the account has been deleted, the data will be blocked for tax and commercial reasons and deleted once those periods have expired, unless you consent to further use or the law permits it.

6) Use of Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will regularly send you offers. We only need your email

address; other information is optional and is used to personalize the message. We use the double opt-in method, meaning you will receive a confirmation email and we will only start sending you the newsletter after you click the link.

By activating the link, you consent to the processing of your data pursuant to Article 6(1)(a) GDPR. We record the IP address and time of registration to prevent misuse. You can unsubscribe at any time using the link in the newsletter or by writing to info@margaretandsarah.com. Once you do so, we will remove your address from our list unless you consent to another use or the law permits it.

6.2 Sending Newsletters to Existing Customers

If you provided us with your email address when making a purchase, we may send you offers for similar products by email without requiring additional consent. This is based on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) GDPR. You may object at any time by contacting us.