Privacy policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the GDPR is Rhodes' Boutique New York. The controller is the person who decides on the purposes and means of processing personal data.

Contact: rhodes.boutique.newyork@gmail.com

1.3 This website uses SSL or TLS encryption for security and to protect the transmission of personal data.

2) Data Collection When Visiting Our Website

When you visit our website for information purposes only, we collect "server log files" transmitted by your browser. This includes the visited website, date/time of access, amount of data sent, browser used, operating system, and IP address. Processing is based on our legitimate interest in site stability pursuant to Art. 6(1)(f) GDPR.

3) Cookies and Shopify Platform

To make your visit attractive, we use cookies (small text files stored on your device). Some are session-based, while others remain to recognize your browser on future visits. Our store is hosted by Shopify Inc., which stores data necessary for the functionality of the storefront and shopping cart.

4) Contacting Us

When contacting us (e.g., via email), personal data is collected solely for the purpose of responding to your inquiry. Your data will be deleted after final processing, provided no statutory storage obligations exist.

5) Data Processing for Order Fulfillment

5.1 Personal data will be passed on to the transport company (e.g., USPS, UPS, FedEx) as part of contract processing.

5.2 Payment data is passed to service providers (e.g., Shopify Payments, PayPal) for payment processing. These providers may conduct credit checks to determine solvency.

6) Rights of the Data Subject

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), and the right to object to processing based on legitimate interests or for direct marketing (Art. 21 GDPR).

7) Duration of Storage

The duration of storage is determined by legal retention periods. After the expiry of the period, the data is routinely deleted if no longer required for the contract.