Privacy Policy
ILVI GmbH Grafenberger Allee 293 40237 Düsseldorf/Germany (“we”, “us”, or “Ilvi”), operates the website ilvi.de (“Website”).
In context of the Website, İlvi is the controller of your personal data within the meaning of Art. 4 No. 7 of the EU General Data Protection Regulation 2016/679 (“GDPR”) and as such your direct point of contact related to data protection. You can reach us at any time using the following contact options:
Postal: Grafenberger Allee 293 40237 Düsseldorf/Germany
Via email: ilvi@ilvi.de
WHAT PERSONAL DATA DO WE COLLECT ABOUT YOU?
1. TECHNICAL DATA
When visiting our Website, we collect technical data, which your browser transfers automatically (in particular your IP-Address, time of access, requested websites/data, referrer URL, operating system and product and version information of the browser used) (“Technical Data”).
2.REGISTRATION DATA FOR YOUR USER ACCOUNT
By creating an Ilvi account; we collect some personal data which you provide to us, such as your name and email address (“Account Data”). You also have the option to save your telephone numbers and addresses as well as payment details for faster checkout and review your past orders and deliveries.
3.ORDER DATA
By placing an order on our Website, we collect some personal data which you provide to us, such as your name, email address, telephone number and shipping and billing addresses. Furthermore, we collect your order number, details of the purchased goods (e.g. item title, size, color, purchase price, etc.), payment method, notifications and communications regarding purchases (e.g., withdrawal notices, complaints, and notifications to customer service), delivery and payment status, return status, details of service providers involved in the execution of the contract (e.g. tracking numbers of our nominated couriers such as DHL(“Order Data”).
4.PAYMENT DATA WHEN PLACING AN ORDER
We offer you different common payment methods in e-commerce, in particular Paytr, Shopify Payments, Stripe, Paypal, Mastercard, Visa, American Express. For the execution of payments, we collect the payment data provided by you. We receive further payment data from external payment service providers and credit agencies with whom we cooperate for the execution of payments and for credit checks. We only pass on data to our payment service providers that is necessary for payment processing and for the performance of the contract concluded.
Payment data include for example:
Preferred payment method
IBAN and BIC or account number and bank code
Credit/debit card data
Creditworthiness data
(“Payment Data”).
Payment Data also includes other information that occurs in direct connection with payment processing and creditworthiness checks. This concerns for example, information that external payment service provider such as Iyzico use to identify you and/or your respective user account.
Creditworthiness data consists of so-called score values that we obtain about you from external credit agencies. Creditworthiness data contains information about a person's estimated economic capacity and willingness to perform. This helps us to avoid payment defaults that occur when customers cannot meet their payment obligations on time or at all. At the same time, taking creditworthiness data into account when selecting payment methods is intended to prevent us from offering our customers payment methods that cannot be offered to you and to prevent our customers from entering into payment obligations that you yourself cannot meet. Creditworthiness data is usually determined by so-called credit agencies. These agencies use various data to calculate a so-called score value, which takes into account, among other things, existing payment obligations and any previous payment defaults. Score values are statistically based estimates of a person's future risk of default and are presented as a numerical value, such as a percentage. We have only limited influence on the data processing of external credit agencies (e.g. when we provide credit agencies with information about unfulfilled payment obligations).
5.SHOPPING INTEREST DATA
We may use your personal information provided in the checkout, meaning information about what types of products you prefer, sizes, colors and brands, and purchasing behavior for our internal marketing and demographic studies (“Shopping Data”).
6.DATA FOR OUR NEWSLETTER
When you register to our newsletter, we collect your email address, name, general location and your Technical Data. By subscribing to our newsletter, you will receive email alerts for new products, collections, features, sample sales, special offers, contests, events of interest, and promotions.
For what purposes do we process your personal data?
1. We process your Technical Data solely for the purpose to provide the Website to you, to ensure the security and functionality of the Website, as well as for the evaluation of the use of the website (Art. 6 (1) lit. f GDPR).
2. We process Account Data solely in order to provide access to your personal user account and hence to perform the respective account agreement concluded with you (Art. 6 (1) lit. b GDPR) or for protecting our justified interests in providing our web shop to you in accordance with Art. 6 para 1 lit. f) GDPR. Optional data that you can provide when registering without ordering goods are processed based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Once you order goods and your Order Data will be connected with your Account Data we process this personal data in order to fulfill and perform your order (Art. 6 (1) lit. b GDPR)
3. We process Order Data in order to execute, perform and fulfill your order pursuant to Art. 6 (1) lit. b GDPR. Order Data is especially necessary for us to be able to ship your order. Additionally, the processing is necessary to protect our legitimate interest in investigating the loss of goods in transit (Art. 6 (1) lit. f GDPR).
4. We process Payment Data in order to execute, perform and fulfill your order pursuant to Art. 6 (1) lit. b GDPR. Moreover, we process Payment Data and perform creditworthiness checks in order to prevent fraud and to avoid payment defaults. Basis for the performance of creditworthiness checks is also Art. 6 (1) lit. b GDPR, as it is necessary for the performance of prerequisite pre-contractual measures. Otherwise, this processing of your data is carried out on the basis of our legitimate interest in avoiding payment defaults, detecting and preventing fraud and solving crimes (Art. 6 (1) lit. f GDPR).
5. We process your Shopping Data for the improvement of our site design, the extension of our range of products, to better meet our visitors’ needs and for our internal marketing and demographic studies that helps us to understand your shopping behavior and improve our entire offer based on your individual needs. The legal basis is either our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, or, where shopping data is used for profiling and offering you specific goods and services, your express prior consent pursuant to Art. 6 (1) lit. a GDPR.
6. We process your email address, your name you provide when registering for our newsletter, and your general location for the purpose of sending you information about latest and interesting offers and on the basis of your previously given consent (Art. 6 (1) lit. a GDPR). With your consent, we may include tracking pixels and similar technologies in our newsletters that enables us to track if you have opened a newsletter and how you interacted with its content.
Use of Cookies and Similar Technologies
1. We may also collect information about your use of our website through the use of so called cookies. These are small text files stored on your device and store certain settings and data for the exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user's device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the computer or device of the respective user. Cookies help us to improve our website and to provide you with a better service tailored to your needs. They allow us to recognize your computer when you return to our website and thereby:
- store information about your preferred activities on the website and thereby tailor our website to your individual interests. This includes, for example, contents of your shopping cart, and advertisements that match your personal interests.
- to speed up the processing of your request.
2. We use the cookies listed in the table below. Some of these cookies are technically necessary for the website to function and therefore cannot be disabled in your systems. Other, which are not technically necessary, are placed and used only on the basis of your express consent. Should you consent to the placing/use of a cookie from a third party (see cookie owner section below), the data collected by the cookie will be shared with this third party. If the respective third party is located outside the European Economic Area, your consent does also include the transfer to this country, in particular the US. Please note that these countries will not provide for a data protection level comparable to the standard in the EU and, for instance, local authorities may request access to the data without restrictions or court approval and you as a data subject may not be notified of such access or have a right to object.
3. You can at any time withdraw a given consent in our cookie banner.
Our Website
If you visit our Website, the following cookies may be placed on your device.
COOKIES NECESSARY FOR THE FUNCTIONING OF THE STORE:
Name
Function
Duration
_ab
Used in connection with access to admin.
2y
_secure_session_id
Used to track a user's session through the multi-step checkout process and keep their order, payment and shipping details connected.
24h
_shopify_country
For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.
session
_shopify_m
Used for managing customer privacy settings.
1y
_shopify_tm
Used for managing customer privacy settings.
30min
_shopify_tw
Used for managing customer privacy settings.
2w
_storefront_u
Used to facilitate updating customer account information.
1min
_tracking_consent
Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.
1y
c
Used in connection with checkout.
1y
cart
Used in connection with shopping cart.
2w
cart_currency
Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.
2w
cart_sig
A hash of the contents of a cart. This is used to verify the integrity of the cart and to ensure performance of some cart operations.
2w
cart_ts
Used in connection with checkout.
2w
cart_ver
Used in connection with shopping cart.
2w
checkout
Used in connection with checkout.
4w
checkout_token
Used in connection with checkout.
1y
dynamic_checkout_shown_on_cart
Used in connection with checkout.
30min
hide_shopify_pay_for_checkout
Used in connection with checkout.
session
keep_alive
Used in connection with buyer localization.
2w
master_device_id
Used in connection with merchant login.
2y
previous_step
Used in connection with checkout.
1y
remember_me
Used in connection with checkout.
1y
secure_customer_sig
Used to identify a user after they sign into a shop as a customer so they do not need to log in again.
20y
shopify_pay
Used in connection with checkout.
1y
shopify_pay_redirect
Used in connection with checkout.
1 hour, 3w or 1y depending on value
storefront_digest
Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.
2y
tracked_start_checkout
Used in connection with checkout.
1y
checkout_one_experiment
Used in connection with checkout.
session
checkout_session_lookup
Used in connection with checkout.
3w
checkout_session_token_<<id>>
Used in connection with checkout.
3w
REPORTING AND ANALYTICS
Name
Function
Duration
_landing_page
Track landing pages.
2w
_orig_referrer
Track landing pages.
2w
_s
Shopify analytics.
30min
_shopify_d
Shopify analytics.
session
_shopify_fs
Shopify analytics.
30min
_shopify_s
Shopify analytics.
30min
_shopify_sa_p
Shopify analytics relating to marketing & referrals.
30min
_shopify_sa_t
Shopify analytics relating to marketing & referrals.
30min
_shopify_y
Shopify analytics.
1y
_y
Shopify analytics.
1y
_shopify_evids
Shopify analytics.
session
_shopify_ga
Shopify and Google Analytics.
session
SHOPIFY’S WEBSITES
If you visit Shopify’s websites, the following Shopify cookies may be placed:
COOKIES NECESSARY FOR THE FUNCTIONING OF THE SITES
Name
Function
Duration
_Brochure_session
Used in connection with browsing through site.
-
checkout
Used in connection with Pay checkout on shop.app.
3w
signed_in
Used in connection with Shop login.
1y
user
Used in connection with Shop login.
1y
REPORTING AND ANALYTICS
Name
Function
_landing_page
Tracks landing pages.
_orig_referrer
Tracks landing pages.
_s
Shopify analytics.
_session_id
Shopify analytics
_shopify_s
Shopify analytics.
_shopify_sa_t
Shopify analytics relating to marketing & referrals.
_shopify_uniq
Shopify analytics.
_shopify_y
Shopify analytics.
_y
Shopify analytics.
*_assignment
Shopify analytics
ab_test_*
Shopify analytics.
cart_sig
Shopify analytics.
ki_r
Shopify analytics.
ki_t
Shopify analytics.
Additionally, we use pixels and tags from the following third parties, which may in turn place cookies:
COOKIES NECESSARY FOR THE FUNCTIONING OF THE SITES
Third Party
Description
Privacy Policy
Cloudflare
Shopify uses Cloudflare Network as a Service for edge routing.
https://www.cloudflare.com/privacypolicy/
REPORTING & ANALYTICS
Third Party
Description
Privacy Policy
Alexa Metrics
We use Alexa Metrics to help measure how users interact with our websites.
https://www.alexa.com/help/privacy
Bizible
We use Bizible to help measure how users interact with our websites.
https://documents.marketo.com/legal/privacy/
Bugsnag
We use Bugsnag to help us troubleshoot and fix issues with our websites.
https://docs.bugsnag.com/legal/privacy-policy/
Chartbeat
We use Chartbeat to help measure how users interact with our websites.
https://chartbeat.com/privacy/
Crazy Egg
We use Crazy Egg to help measure how users interact with our websites.
https://www.crazyegg.com/privacy
Datadog RUM
We use Datadog RUM to help measure how users interact with our websites.
https://www.datadoghq.com/legal/privacy/
DC Analytics
We use DC Analytics to help measure how users interact with our websites.
https://dcanalytics.dcmn.com/privacy-policy
Facebook Pixel
We use Facebook Pixel to help measure how users interact with our websites.
https://www.facebook.com/privacy/explanation
Fullstory
We use Fullstory to help measure how users interact with our websites.
https://www.fullstory.com/legal/privacy/
Google Analytics
We use Google Analytics to help measure how users interact with our websites.
https://policies.google.com/privacy
Google Tag Manager
We use Google Tag Manager to help manage analytics vendors.
https://policies.google.com/privacy
Hotjar
We use Hotjar to help measure how users interact with our websites.
https://www.hotjar.com/legal/policies/privacy
iSpot
We use iSpot to help measure how users interact with our websites.
https://www.ispot.tv/terms-of-service
KissInsights
We use KissInsights to help measure how users interact with our websites.
https://signin.kissmetrics.com/privacy/
LinkedIn Insight Tag
We use LinkedIn Insight Tag to help measure how users interact with our websites.
https://www.linkedin.com/legal/privacy-policy
New Relic
We use New Relic to help measure how users interact with our websites.
https://newrelic.com/termsandconditions/privacy
Optimizely
We use Optimizely to help us test improvements or changes to our websites.
https://www.optimizely.com/privacy/
Pinterest Analytics
We use Pinterest Analytics to help measure how users interact with our websites.
https://policy.pinterest.com/privacy-policy
Segment
We use Segment to help measure how users interact with our websites.
https://segment.com/legal/privacy/
Snapchat
We use Snapchat to help measure how users interact with our websites.
https://snap.com/privacy/privacy-policy
Speedcurve Lux
We use Speedcurve Lux to help measure how users interact with our websites.
https://speedcurve.com/terms/
Taboola
We use Taboola to help measure how users interact with our websites.
https://www.taboola.com/policies/privacy-policy
Tealium
We use Tealium to help manage analytics vendors.
https://tealium.com/privacy/
TikTok
We use TikTok to help measure how users interact with our websites.
https://www.tiktok.com/legal/privacy-policy?lang=en
Twitter
We use Twitter to help measure how users interact with our websites.
https://twitter.com/en/privacy
Yelp Audience Platform
We use Yelp to help measure how users interact with our websites.
https://terms.yelp.com/privacy/en_us/20200101_en_us/
ADVERTISING
Third Party
Description
Privacy Policy
Microsoft Advertising
We use Microsoft Advertising to deliver targeted advertisements to individuals who visit our websites.
https://privacy.microsoft.com/en-ca/privacystatement
Drift
We use Drift to help us with conversational marketing to customers while they visit our websites.
https://www.drift.com/privacy-policy/
Facebook Custom Audiences
We use Facebook Custom Audiences to deliver targeted advertisements to individuals who visit our websites.
https://www.facebook.com/policy.php
Google
We use Google Ads to deliver targeted advertisements to individuals who visit our websites.
https://policies.google.com/privacy
Hubspot
We use Hubspot to manage our relationships with our customers.
https://legal.hubspot.com/privacy-policy
Intercom
We use Intercom to manage our relationships with our customers.
https://www.intercom.com/terms-and-policies#privacy
Marketo
We use Marketo to manage our relationships with our customers.
https://documents.marketo.com/legal/privacy/
Outbrain
We use Outbrain to deliver targeted advertisements to individuals who visit our websites.
https://www.outbrain.com/privacy
Quora
We use Quora to deliver targeted advertisements to individuals who visit our websites.
https://www.quora.com/about/privacy
Reddit
We use Reddit Ads to deliver targeted advertisements to individuals who visit our websites.
https://www.reddit.com/help/privacypolicy
SourceKnowledge
We use SourceKnowledge to deliver targeted advertisements to individuals who visit our websites.
http://www.sourceknowledge.com/privacy
Yahoo Japan Ads
We use Yahoo Japan Ads to deliver targeted advertisements to individuals who visit our websites.
https://about.yahoo.co.jp/common/terms/
SOCIAL MEDIA & CONTENT
Third Party
Description
Privacy Policy
Disqus
We use Disqus to provide commenting capabilities on posts on our websites.
https://help.disqus.com/terms-and-policies/disqus-privacy-policy
Facebook Connect
We use Facebook Connect to allow visitors to our website to interact with and share content via Facebook’s social media platform.
https://www.facebook.com/policy.php
Gravatar
We use Gravatar to allow visitors to our websites to create avatars.
https://en.gravatar.com/site/privacy
Twitter
We use Twitter to allow visitors to our website to interact with and share content via Twitter’s social media platform.
https://twitter.com/en/privacy
Wistia
We use Wistia to display video content.
https://wistia.com/privacy
4. Additional information for Google Analytics:
Upon your consent, the Website will use the functions of the web analysis service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies. The information generated by the cookies about your use of this website is usually transferred to a Google server in the US and stored there. On our behalf, Google will use this information to evaluate your use of the Website, to compile reports on the Website activities and to provide further services to us in connection with the use of the Website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do so you may not be able to use the full functionality of this Website. You can also prevent the collection of data generated by the cookie and related to your use of the Website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Google Plugin;
You can find more information about Google Analytics at Google Analytics Terms of Services and at Google Analytics Privacy Policy.
5. Additional information for Facebook Pixel (Conversion Tracking):
Upon your consent, the Website will use the conversion tracking function offered by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. By using the “Facebook pixel” on our Website, we can track the conversion rate of our advertisement on Facebook or other websites. The Facebook pixel will establish a direct connection between your device and a Facebook server in the US and enable Facebook to track that you have visited our Website or clicked on an ad banner. Facebook can link this information to your Facebook account, if you have one, but even if you do not have a Facebook account, it may still be possible for Facebook to match your online behavior to your IP address or other identifiers. You can withdraw your consent either via our cookie control panel or by using the following link: Facebook Settings (only for users logged in). Further information regarding Facebook’s use of personal data can be found at: Facebook Privacy Policy.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
1.Technical, Order and Payment Data is only passed on to our service providers, in particular our hosting providers or other technical service providers in connection with the provision of the website. If these service providers are located outside the EU, we take appropriate measures to provide guarantees that the recipient complies with the requirements of data protection law. You can request further information on these measures taken at any time using the contact details above.
We may also share your order-related personal data with our partners such as our nominated couriers, distribution facilities (e.g. our warehouse in Germany) and our payment providers. The data sharing is necessary to perform and fulfill the contract concluded with you (Art. 6 (1) lit. b GDPR).
Contact details and relevant privacy policies of our partners can be found here:
Shopify Inc, Ottawa, Ontario (Canada) Privacy Policy
Klaviyo Inc, Boston (USA) Privacy Policy
Iyzico, Istanbul (TR) Privacy Policy
Ficommerce E-commerce Solutions, Istanbul (TR) & Dorsten, Germany Privacy Policy
2. Otherwise, we will only disclose your personal data to third parties when you have given your consent to the disclosure or when we are entitled or obliged to disclose data on the grounds of statutory provisions and/or official or court orders. This may involve, in particular, the disclosure of information for the purposes of law enforcement, the prevention of danger or the enforcement of intellectual property rights.
3. Except as stated above, we do not intend to transfer your personal data to a third country outside the EEA or international organizations. If we transfer personal data to a recipient outside the EEA, we will ensure either that the respective country provides for an adequate level of data protection or we implement additional measures to ensure that the recipient complies with data protection standards comparable to those in the EU. You can request further information on these additional measures by contacting us under the contact lines provided above.
When Do We Delete Your Personal Data?
Technical Data is regularly deleted or aggregated immediately after leaving the website.
Your Order, Payment, Shopping and Account Data is generally deleted as soon as it is no longer required for the performance of the contract or for the provision of your user account, unless there is another legitimate purpose justifying the ongoing storage (in particular the fulfillment of commercial or tax retention obligations). In this case we will restrict access to the relevant data and delete it after expiration of the retention period.
The newsletter data will be stored as long as you have subscribed to the newsletter.
Which Rights Do You Have?
You have the right to request information about the data we have stored about you in accordance with Art. 15 GDPR, to request the rectification of inaccurate data in accordance with Art. 16 GDPR and to request the erasure of data in accordance with Art. 17 GDPR or the restriction of data processing in accordance with Art. 18 GDPR. Under the conditions of Art. 20 GDPR, you may also request the transmission of personal data to you or a third party.
Furthermore, in accordance with Art. 21 GDPR, you have the right to object to the processing of your data, provided that the reason for the objection arises from your particular situation and it concerns data that we process to protect one of our interests worthy of protection or if it concerns the use of your data for direct marketing.
Furthermore, you have a right to lodge a complaint with a competent supervisory authority pursuant to Article 77 GDPR if you consider that we are not processing your personal data in accordance with applicable law.
If you have given us consent to process your personal data, you can withdraw this consent at any time without providing reasons and with effect for the future at the email address provided above under the contact details. Additionally, at all times, we will offer you the opportunity to unsubscribe out of any service or update to which you have subscribed, if you change your mind. Any email, in particular newsletter emails, we send you will contain an easy automated unsubscribe link so that you can opt-out of that particular service and easily exercise your right to withdraw your consent to the sending of the newsletter and any other services or updates to which you have subscribed.
Should you wish to change your cookie selection, you may change your settings at any time by accessing the cookie settings under the following link: Cookie Preferences