Privacy Policy
Privacy Policy
1. Information About the Collection of Personal Data and Contact Details
1.1
Thank you for visiting the website of Sienna Clothing. Protecting your personal information is important to us. This Privacy Policy explains how we collect, use, and safeguard your personal data when you access or use our website.
Personal data refers to any information that can be used to identify an individual directly or indirectly.
1.2
The entity responsible for the processing of personal data in accordance with the General Data Protection Regulation (GDPR) is:
Sienna Clothing
Email: info@sienna-clothing.com
The responsible party determines how and why personal data is processed either independently or together with others.
1.3
For security reasons and to protect sensitive data transmissions, such as orders or inquiries, this website uses SSL or TLS encryption. You can recognize a secure connection when the browser address begins with “https://” and a lock symbol appears in the browser bar.
No automated decision-making or profiling takes place on our website that would have legal or similarly significant effects on users in accordance with Art. 22 GDPR.
2. Data Collection When Visiting Our Website
When you visit our website for informational purposes only (without creating an account, placing an order, or submitting information), we automatically collect certain data that your browser transmits to our server. These are known as server log files.
The following information may be collected:
-
The webpage accessed
-
Date and time of access
-
Amount of data transmitted
-
Referring website (referrer)
-
Browser type and version
-
Operating system used
-
IP address (may be anonymized)
This information is processed based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in maintaining the stability, functionality, and security of our website.
This data is not used to personally identify visitors and will not be combined with other data sources unless there are indications of unlawful activity.
3. Cookies
Our website uses cookies to improve the browsing experience and enable certain features. Cookies are small text files stored on your device.
There are different types of cookies used:
Session Cookies
These cookies are temporary and are automatically deleted when you close your browser.
Persistent Cookies
These remain stored on your device for a longer period and allow our website to recognize your browser when you return.
Cookies may collect technical information such as:
-
Browser settings
-
Location information
-
IP address
Some cookies are necessary to enable certain website functions such as saving items in a shopping cart.
Where personal data is processed through cookies, the processing occurs under:
-
Art. 6(1)(b) GDPR for contract execution
-
Art. 6(1)(f) GDPR for legitimate interest in improving website functionality
We may also work with advertising partners, which means that third-party cookies may be stored on your device when visiting our website.
You can control cookie settings at any time through your browser. Most browsers allow you to:
-
View stored cookies
-
Delete cookies
-
Block cookies entirely
-
Allow cookies only for specific websites
Please note that disabling cookies may limit certain website functions.
When visiting our website for the first time, you will be asked to consent to the use of cookies that are not strictly necessary.
4. Contacting Us
If you contact us through our website (for example via email or a contact form), personal data will be collected.
The information collected depends on the form fields used but may include:
-
Name
-
Email address
-
Message content
This information is used solely for:
-
Responding to your inquiry
-
Providing customer support
-
Managing related technical administration
Processing is carried out based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in responding to inquiries.
If your message relates to a purchase or potential contract, processing may also occur under Art. 6(1)(b) GDPR.
Your information will be deleted once the request has been resolved unless legal retention requirements apply.
5. Data Processing When Opening a Customer Account or Placing an Order
When you create an account or place an order on our website, we collect personal data necessary for order processing.
This may include:
-
Name
-
Billing and shipping address
-
Email address
-
Payment details
The exact data collected can be seen in the relevant input forms.
Data processing takes place under Art. 6(1)(b) GDPR for the purpose of fulfilling contractual obligations.
Customers may request deletion of their account at any time by contacting us at info@sienna-clothing.com.
After a contract has been completed or an account deleted, data will be stored only as long as required by legal obligations such as tax or commercial retention laws.
6. Use of Data for Direct Marketing
6.1 Newsletter Subscription
If you subscribe to our newsletter, we will send you updates, promotions, and product information from Sienna Clothing.
Only your email address is required. Any additional information is optional and may be used to personalize communication.
We use a double opt-in system, meaning:
-
You sign up for the newsletter
-
You confirm your subscription through a verification email
This ensures that the email owner consented to receive newsletters.
Processing is based on Art. 6(1)(a) GDPR (consent).
You can unsubscribe at any time using the unsubscribe link included in every email or by contacting us at info@sienna-clothing.com.
6.2 Email Marketing for Existing Customers
If you purchase products from us and provide your email address, we may send you promotional offers related to similar products.
This is based on our legitimate interest in direct marketing under Art. 6(1)(f) GDPR.
You can opt out of receiving marketing emails at any time by contacting us at info@sienna-clothing.com or clicking the unsubscribe link in the email.
7. Data Processing for Order Fulfillment
To complete your order, certain personal data may be shared with service providers involved in the process.
These may include:
-
Shipping companies responsible for delivering your order
-
Payment service providers handling transactions
Data sharing occurs only when necessary to fulfill contractual obligations under Art. 6(1)(b) GDPR.
8. Payment Service Providers
PayPal
If you select PayPal as your payment method, your payment data will be transmitted to:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
PayPal may perform fraud prevention checks or credit assessments where required.
For more information, please review the PayPal Privacy Policy.
9. Social Media Plugins
Our website may include links or integrations with social media platforms such as:
-
Facebook
-
Instagram
To enhance privacy protection, these integrations are implemented in a way that prevents automatic connections to social media servers when visiting our website.
A connection is only established when you actively click on a social media link.
Further details regarding data collection and processing can be found in the respective privacy policies of those platforms.
10. Online Marketing and Analytics
To improve our marketing efforts and website performance, we may use analytics or advertising tools such as:
-
Google Analytics
-
Google Ads
-
Facebook Pixel
These tools may use cookies to analyze website usage and measure advertising performance.
The information collected may include:
-
Pages visited
-
Time spent on the site
-
Interactions with advertisements
Where required, these technologies are only activated after receiving your consent in accordance with Art. 6(1)(a) GDPR.
Users can disable tracking technologies at any time through browser settings or advertising preferences.
11. Data Subject Rights
Under GDPR regulations, you have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR)
You may request confirmation of whether your personal data is being processed and access to that data.
Right to Rectification (Art. 16 GDPR)
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17 GDPR)
You may request deletion of your personal data where legally permitted.
Right to Restriction of Processing (Art. 18 GDPR)
You may request limitations on how your data is processed.
Right to Data Portability (Art. 20 GDPR)
You may request your data in a structured, machine-readable format.
Right to Withdraw Consent (Art. 7(3) GDPR)
You may withdraw previously given consent at any time.
Right to Lodge a Complaint (Art. 77 GDPR)
You may file a complaint with a data protection authority if you believe your data is being processed unlawfully.
12. Right to Object
If personal data is processed based on legitimate interests under Art. 6(1)(f) GDPR, you may object to this processing at any time for reasons related to your situation.
If your data is processed for direct marketing, you have the right to object at any time and your data will no longer be used for marketing purposes.
13. Data Retention
Personal data is stored only for as long as necessary to fulfill contractual or legal obligations.
Once the applicable retention periods have expired, personal data will be deleted unless further storage is required for legitimate business purposes.
Contact
If you have questions about this Privacy Policy or about how your data is handled, please contact us:
Sienna Clothing
Email: info@sienna-clothing.com