Privacy Policy

PRIVACY POLICY

Privacy Policy for Cutey Cute

The protection of personal data is a high priority for our company and when using our website. Generally, it is possible to use our website Cutey Cute without providing any personal data. We only process personal data of users when it is necessary to provide a fully functional website or to deliver our services.

Personal data is processed only with the user’s consent, except in cases where prior consent cannot be obtained due to technical reasons, and data processing is permitted by law. On our website Cutey Cute, we present various products for users to browse and explore. Users can also purchase the displayed goods through our integrated shop software. The processing of personal data in this context is explained in detail below.

1. Legal Basis

We process personal data under the following legal bases:

• Consent: If we obtain the user’s consent for processing, it is based on Art. 6(1)(a) of the GDPR.
• Contractual necessity: If personal data processing is necessary for fulfilling a contract with the user or for pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.
• Legal obligations: If processing is necessary for complying with legal obligations, it is based on Art. 6(1)(c) GDPR.
• Legitimate interest: If processing is required for our legitimate interests or those of a third party, provided that user rights and freedoms are not overridden, we process the data under Art. 6(1)(f) GDPR.

Data is deleted or blocked when the purpose for which it was stored is no longer applicable unless legal storage obligations require retention.

2. Controller

The data controller for processing personal data in accordance with the GDPR and other national data protection laws is:

• Company Name
• Address
• Managing Director: Name
• Website: Cutey Cute
• Email: MAIL

3. Operation of Online Shop

Our website includes an online shop where you can order goods. During the order process, customers provide personal data necessary for processing the order, including:

• Name
• Address (billing and shipping)
• Payment information
• Email address

This data is required for fulfilling your order and shipping the goods. The legal basis for this is the contract you enter into with us (Art. 6(1)(b) GDPR). We also share your data with third parties, such as delivery services (e.g., DHL) and payment service providers (e.g., PayPal, Klarna).

The data will be deleted once the order is processed. More details on your rights can be found at the end of this privacy policy.

4. Newsletter

You can subscribe to our free newsletter. During the signup process, we collect your email address. The legal basis for processing your email is your consent (Art. 6(1)(a) GDPR). If you have purchased goods from us, we may use your email for sending newsletters about similar products (Art. 7(3) UWG). You can unsubscribe at any time via a link provided in each newsletter.

5. Contact Form and Email Contact

We offer a contact form for inquiries. If you use it, the data you enter (e.g., name, address, email) will be transmitted to us. Alternatively, you can contact us via email. Your data will be used exclusively for responding to your inquiry or for processing a contractual request (Art. 6(1)(b) GDPR) and will be deleted after the conversation is completed.

6. Website and Log Files

When you visit our website, our system automatically collects general information, including:

• Browser type and version
• The URL accessed
• Referring websites
• User's IP address

This data is stored in log files and is necessary for the functioning of our website (Art. 6(1)(f) GDPR). The data will be deleted after 7 days unless it is necessary for security purposes.

7. Cookies

Our website uses cookies. These are text files stored on your device to enable a smooth shopping experience. You will be informed about the use of cookies when you first visit our website, and cookies can be managed or disabled through your browser settings.

Cookies are used to ensure the proper functioning of the website (Art. 6(1)(f) GDPR). If you disable cookies, some features of the website may not work correctly.

For further details about your rights and how to exercise them, please refer to the final section of this privacy policy.

8. Use of Social Media Plugins

Use of Social Plugins for Instagram

Our website uses Instagram plugins operated by Instagram Inc. (601 Willow Road, Menlo Park, CA, 94025, USA). These plugins are identifiable by the Instagram button, typically labeled "Instagram" and accompanied by a white camera icon on a colorful (yellow, red, purple) background.

The plugins are only activated when you click the corresponding buttons. If these buttons are grayed out, the plugins are inactive. You have the option to activate the plugins either temporarily or permanently.

The plugins establish a direct connection between your browser and Instagram servers only after activation. We have no influence over the nature and scope of the data the plugin sends to Instagram servers. For more information about the Instagram plugin, visit: http://instagram.com/about/legal/privacy/.

The plugin informs Instagram that you, as a user, have visited our website. There is a possibility that your IP address will be stored. If you are logged into your Instagram account while visiting our website, this information may be linked to your account.

1. Right to Restrict Processing

9. Rights of the Data Subject

If your personal data is processed, you have the following rights:

A. Right to Information

You can request confirmation from the controller as to whether personal data concerning you is being processed. If such processing occurs, you can request information from the controller about the following:

(a) The purposes of processing personal data; (b) The categories of personal data being processed; (c) The recipients or categories of recipients to whom the data concerning you has been or will be disclosed; (d) The planned duration of storage or, if not possible, the criteria for determining the storage duration; (e) The existence of the right to rectification or erasure of personal data, the right to restriction of processing by the controller, or the right to object to such processing; (f) The existence of a right to lodge a complaint with a supervisory authority; (g) All available information about the source of the data if the personal data was not collected from the data subject; (h) The existence of automated decision-making including profiling under Art. 22(1) and (4) GDPR, and – at least in such cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information on whether your personal data is being transferred to a third country or an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

B. Right to Rectification

You have the right to request rectification and/or completion of inaccurate or incomplete personal data concerning you. The controller must make the rectification promptly.

You can request the restriction of processing your personal data under the following conditions:

(a) If you contest the accuracy of the personal data for a period enabling the controller to verify the accuracy of the data; (b) The processing is unlawful, and you oppose the deletion of the personal data and instead request the restriction of its use; (c) The controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims; (d) If you have objected to the processing under Art. 21(1) GDPR and it is not yet determined whether the legitimate grounds of the controller override your reasons.

If processing is restricted, the data may only be processed – aside from storage – with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another person or for reasons of significant public interest of the Union or a member state. If processing is restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.

C. Right to Erasure

You can request the immediate erasure of your personal data, and the controller is obligated to erase it promptly if one of the following reasons applies:

(a) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed. (b) You withdraw your consent on which the processing is based under Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing. (c) You object to the processing under Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object under Art. 21(2) GDPR. (d) The personal data has been unlawfully processed. (e) The erasure of personal data is necessary to comply with a legal obligation under Union or member state law to which the controller is subject. (f) The personal data was collected in relation to services offered by the information society under Art. 8(1) GDPR.

Exceptions

The right to erasure does not exist if processing is necessary:

(a) To exercise the right of free expression and information; (b) To fulfill a legal obligation requiring processing under Union or member state law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller; (c) For reasons of public interest in the area of public health under Art. 9(2)(h) and (i) and Art. 9(3) GDPR; (d) For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes under Art. 89(1) GDPR, insofar as the right mentioned under (a) is likely to make impossible or seriously impair the achievement of the objectives of such processing; or (e) For the establishment, exercise, or defense of legal claims.

E. Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to notify all recipients to whom the personal data has been disclosed of such rectification, erasure, or restriction of processing unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.

F. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that:

G. Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. The controller shall cease processing the personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

If the personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes, including profiling related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.

You also have the right to exercise your objection rights in connection with the use of information society services – notwithstanding Directive 2002/58/EC – through automated procedures using technical specifications.

H. Right to Withdraw Consent

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

I. Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar manner. This does not apply if the decision:

(a) Is necessary for the conclusion or performance of a contract between you and the controller; (b) Is based on Union or member state laws to which the controller is subject, and these laws provide for suitable measures to safeguard your rights and freedoms as well as your legitimate interests; or (c) Is based on your explicit consent.

However, such decisions must not be based on special categories of personal data under Art. 9(1) GDPR unless Art. 9(2)(a) or (g) GDPR applies and appropriate measures to protect rights and freedoms as well as legitimate interests are in place.

For cases mentioned in (a) and (c), the controller will implement appropriate measures to safeguard rights and freedoms and your legitimate interests, including at least the right to obtain human intervention by the controller, to express your point of view, and to contest the decision.

J. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, your workplace, or the place of the alleged infringement, if you believe that the processing of personal data concerning you is in violation of the GDPR. The supervisory authority where the complaint is lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.