Privacy Policy of the Littleloft Online Shop
Controller of Personal Data
Littleloft Chamerstrasse 172, 6300 Zug, Switzerland
Email address: info@littleloft.uk
Your Rights
You have the right to make the following requests:
Access to your personal data and receipt of a copy thereof (Art. 15 GDPR),
Rectification of your data (Art. 16 GDPR),
Erasure of your data (Art. 17 GDPR),
Restriction of processing (Art. 18 GDPR),
Data portability to another controller (Art. 20 GDPR).
In addition, you have the right, at any time, to:
Object to the processing of your personal data for reasons arising from your particular situation, where the processing is based on legitimate interests (Art. 21(1) GDPR);
Object to the processing of your data for direct marketing purposes, including profiling (Art. 21(2) GDPR).
If you wish to exercise your rights, please contact us by email: info@littleloft.uk.
If you believe that your data is being processed unlawfully, you may lodge a complaint with the competent data protection authority.
Processing of Personal Data
Below you will find a detailed description of the processing of your personal data depending on your actions:
1. Placing an order in the online shop
Purpose: Processing of your order.
Legal basis: Necessity for the performance of a contract (Art. 6(1)(b) GDPR); compliance with legal obligations (Art. 6(1)(c) GDPR).
Retention period: For the duration of the contract and to comply with legal obligations (e.g. statutory tax retention periods).
Consequences of non-provision: It will not be possible to place an order.
2. Setting up an account
Purpose: Creation and management of a user account.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Retention period: Until the account is deleted.
Consequences of non-provision: It will not be possible to create an account and use its functions.
3. Getting in touch
Purpose: Handling your enquiries.
Legal basis: Performance of a contract or legitimate interest (Art. 6(1)(b) and (f) GDPR).
Retention period: For the duration of the communication or until any claims are asserted.
Consequences of non-provision: It will not be possible to respond to your enquiry.
4. Marketing and analytics
Purpose: Displaying personalised advertising and improving the website.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
Retention period: Until the cookies are deleted or your consent is withdrawn.
Cookies and External Services
The online shop uses cookies for the following purposes:
Statistics: Analysis of user behaviour.
Marketing: Displaying relevant advertising.
You can disable cookies at any time via your browser settings. Further information can be found on your browser’s help pages.
External service providers that process personal data:
Hosting providers
Technical service providers
Payment processors
Marketing and analytics tools
Security of Your Data
We employ technical and organisational measures to ensure the security of your personal data, including SSL encryption.
Final Provisions
This Privacy Policy may be amended to meet legal or business requirements. Changes take effect upon publication on the website.
