Privacy Policy

1. Controller and Contact

The controller responsible for data processing on this website pursuant to Art. 4(7) DSGVO (Datenschutz-Grundverordnung, General Data Protection Regulation) is:

2. General Principles

We take the protection of your personal data seriously. We process personal data in accordance with the DSGVO, the BDSG (Bundesdatenschutzgesetz, Federal Data Protection Act), and the TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz, Telecommunications Telemedia Data Protection Act).

Personal data is only collected to the extent technically necessary. Your data will never be sold to third parties.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.

When you visit our website, Vercel processes your IP address, the requested URL, browser type, and access timestamps. This is necessary for delivering the website and constitutes a legitimate interest pursuant to Art. 6(1)(f) DSGVO.

Vercel is a US-based company. Data transfers to the United States are covered by the EU-U.S. Data Privacy Framework (DPF). Vercel has certified its compliance under the DPF. You can verify this at: dataprivacyframework.gov

For details, see Vercel's privacy policy: vercel.com/legal/privacy-policy

4. Server Log Files

The hosting provider automatically collects and stores information in server log files. Your browser transmits this data automatically. This includes:

• Browser type and version
• Operating system
• Referrer URL (previously visited page)
• IP address of the requesting device
• Date and time of the request

This data is not combined with other data sources. Processing is based on Art. 6(1)(f) DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website.

5. Cookies

This website uses only technically necessary cookies. These are required for the basic functionality of the website.

Technically necessary cookies are stored on the basis of Art. 6(1)(f) DSGVO and § 25(2) TTDSG. The website operator has a legitimate interest in storing these cookies to provide a technically error-free and optimized website.

We do not use analytics cookies, advertising cookies, or tracking cookies. No cookie consent banner is required because we do not set cookies that require consent under § 25(1) TTDSG.

6. Newsletter

You can subscribe to our newsletter by entering your email address. We use the double opt-in procedure: after registration, you will receive an email asking you to confirm your subscription. This prevents unauthorized signups.

The legal basis for processing your email address is your consent pursuant to Art. 6(1)(a) DSGVO.

We use Beehiiv Inc. as our newsletter service provider. Beehiiv is based in the United States. Data transfers to the US are covered by the EU-U.S. Data Privacy Framework. For details, see Beehiiv's privacy policy: beehiiv.com/privacy

You can withdraw your consent and unsubscribe at any time. Every newsletter contains an unsubscribe link. You can also email us directly at contact@prettypicked.com to unsubscribe.

Your email address will be stored for as long as you are subscribed. After unsubscribing, your data will be deleted unless retention is required for legal reasons.

7. Google Fonts (Local)

This website uses fonts provided by Google LLC ("Google Fonts"). These fonts are loaded locally from our own server. No connection to Google servers is established when you visit our website. No data is transmitted to Google through the use of these fonts.

8. Affiliate Links

This website contains affiliate links to Etsy (Etsy Inc., 117 Adams Street, Brooklyn, NY 11201, USA). When you click on an affiliate link and make a purchase, we receive a commission from Etsy at no additional cost to you.

Clicking an affiliate link will redirect you to the Etsy website. Etsy may set cookies on your device and process your data according to their own privacy policy. We have no control over this data processing. For details, see Etsy's privacy policy: etsy.com/legal/privacy

The use of affiliate links is based on our legitimate interest in financing this website pursuant to Art. 6(1)(f) DSGVO.

9. Contact by Email or Form

When you contact us by email or through a contact form, the data you provide (email address, name if given, message content) will be stored for the purpose of processing your inquiry.

The legal basis is Art. 6(1)(f) DSGVO (legitimate interest in responding to your inquiry) or Art. 6(1)(b) DSGVO if your inquiry relates to a contractual relationship.

We will delete this data once your inquiry has been fully resolved, unless legal retention obligations apply.

10. Your Rights under DSGVO

You have the following rights regarding your personal data:

• Right of access (Art. 15 DSGVO): You may request information about whether and which personal data we process.
• Right to rectification (Art. 16 DSGVO): You may request correction of inaccurate data.
• Right to erasure (Art. 17 DSGVO): You may request deletion of your data, subject to legal retention obligations.
• Right to restriction of processing (Art. 18 DSGVO): You may request that we restrict the processing of your data.
• Right to data portability (Art. 20 DSGVO): You may request your data in a structured, machine-readable format.
• Right to object (Art. 21 DSGVO): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent (Art. 7(3) DSGVO): You may withdraw any previously given consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, email us at contact@prettypicked.com.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 DSGVO. The competent authority for our business is:

12. Data Security

This website uses TLS/SSL encryption for security reasons. You can recognize an encrypted connection by the lock icon in your browser address bar and the "https://" prefix.

When TLS/SSL encryption is active, the data you transmit to us cannot be read by third parties.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes take effect upon publication on this page. The "last updated" date at the top reflects the most recent revision.