Privacy Statement Grandado

Grandado respects your privacy and takes your online safety seriously. In order to provide you with the best products, efficient customer service, and timely updates, we record a variety of information from your visit to our site.To better protect your privacy, we provide the notice below explaining our online information practices and the choices you can make about the way your information is collected and used. When you use any of our Services (as defined below) or send e-mails to us, you are communicating with us electronically. We will communicate with you electronically in a variety of ways, such as by e-mail, text, in-app push notices or by posting e-mail messages or communications on the website or through the other services. For contractual purposes, you agree that all agreements, notices, disclosures and other communications that we provide you electronically satisfy any legal requirement that such communications be in writing, unless mandatory applicable laws specifically require a different form of communication.

Grandado's Privacy Policy

Thank you for accessing the website, mobile applications, devices and other software (collectively, the "Site") of Grandado (all references to "us" and "our" refer to Grandado).

We respect your privacy and want you to know about the Privacy Policy policies we have in place to protect your personal information.

This Privacy Policy applies to all of our services, tools and products (including via mobile devices, mobile applications or mobile-optimized websites) (collectively, the "Services").

If you have any questions regarding the processing of your personal information, please contact us at the above address or by e-mail at privacy@grandado.com

This Privacy Policy explains:

1. How does Grandado collect information about me?

We collect information from Site users in several different ways, with the goal of providing an efficient, meaningful, and customized shopping experience. For example, we can use your personal information to:

We use your personal information to to prevent and detect fraud and abuse in order to protect the security of our customers. We may also use scoring methods to assess and manage credit risks.;

We use your information as otherwise disclosed or permitted by law.

We collect personal information in the following ways:

We collect information directly from you:

Registration and Ordering: In order to use certain parts of this Site or order products, all customers must fill out an online registration form with personal information, including but not limited to, your name, gender, shipping and billing address(es), phone number, email address, and financial information, like your credit card number. In addition, we may ask for your country of residence and/or your organization's country of operation, so that we can comply with applicable laws and regulations. This information is used for billing, order processing and internal marketing as well as to communicate with you about your order and our Site.

Email Addresses: Several locations on the Site allow you to enter your email address for purposes including but not limited to: registering for free promotional notices, requesting notification when new brands or product styles arrive, or signing up for our email newsletter. In addition, any participation in promotional contests organized by Grandado is completely voluntary and requires disclosure of contact information needed to notify winners and award prizes. We may post the names and cities of contest winners on our Site.

Phone Number: Several locations on the Site allow you to enter your phone number for purposes including but not limited to: registering for free promotional notices or requesting notification when new brands or product styles arrive. We store your e-mail address and telephone number until you request that we delete it.

Product Reviews: We ask for an email address and location along with the submission of all product reviews. Your email address will be kept private, but your location will be visible to other users. All other personal information that you choose to submit as part of the review will be available to other visitors to the Site.

We use cookies and other tracking technologies to automatically collect information from you:

Log Files:

The data is stored in log files order to identify malfunctions and for security reasons (e.g. to investigate attempted attacks) and then deleted. Log files, the further storage of which is necessary for evidence purposes, are excluded from deletion until final clarification of the respective incident and may be passed on to investigating authorities in individual cases.

On Grandado.com we use GrowthBook soft tools. GrowthBook provides a suite of products that allows us to ideate, discuss, test, analyze, and learn from experiments we run on our products. It is a modular platform used for either Feature Flags, Experiment Analysis, or both. Grandado uses GrowthBook generally for A/B testing. A/B testing is a user-experience research methodology that consists of a randomized experiment that usually involves two variants (A and B), although the concept can be extended to multiple variants of the same variable. It includes the application of statistical hypothesis testing or "two-sample hypothesis testing" as used in the field of statistics. A/B testing is a way to compare multiple versions of a single variable, for example by testing a subject's response to variant A against variant B, and determining which of the variants is more effective.

Grandado integrates GrowthBook code and then uses the tools within the applicable GrowthBook Service to define metrics and set up feature flags and experiments as needed. Any user IDs, passwords, and other access credentials (such as API tokens) for the GrowthBook Service are kept strictly confidential and not shared with any unauthorized person. GrowthBook has a policy of only the absolute minimum of data required to provide services. All of Grandado users' data stays local to Grandado infrastructure. To see detailed information please refer to the GrowthBook Security page and Privacy Policy.

2. How does Grandado use my personal information?

Internal Use: We use your personal information to process your order and provide you with customer service. We may use your personal information internally to collect general information about visitors to this Site, improve Site content and layout, improve our outreach, and market our Services.

Communication with You: We will use your personal information to communicate with you about your orders and our Site. All customers must provide an email address to allow communication with Grandado regarding orders placed. We may send you a confirmation email after you register with us as well as service related announcements as necessary (for example, temporary suspension of service for maintenance.) You may also submit your email address or phone number to request notification when we receive a new brand, product style or product, or to sign up for our email newsletter and special offers. You can unsubscribe or opt out of future emails at any time (see the section of “What choices doe I have about Grandado's collection of my information?” below for more details).

Customer reviews. We are interested in constantly improving our services, so customer feedback is extremely important to us. If you use our services or place an order on Grandado, we may ask you to leave a review by sending an appropriate email. Sending those emails is not intended for remarketing or any advertisement but consists of our legitimate interest under GDPR of receiving customer feedback. We may share your feedback with one of our service providers. We will only do this if you have provided feedback via the link in the appropriate email. If you do not wish to receive mailing asking for your feedback, you can always unsubscribe by sending an appropriate message to data@grandado.com

3.1. How are cookies and other technologies used to collect information?

Cookies are small pieces of information that your Internet browser stores as text files on your computer's hard drive. Most browsers accept cookies by default, but setting your browser to reject cookies or remove them from your hard drive will prevent you from using parts of this Site. For instance, if you block or otherwise reject our cookies, you will not be able to add products to your shopping cart, proceed to checkout or use any of our Services that require you to sign in. The Site uses cookies to:

On this Site and some unaffiliated sites, we display interest-based advertising using information you make available to us when you interact with our Site, content or Services. Interest-based ads, also sometimes referred to as personalized or targeted ads, are displayed to you based on information from activities such as purchasing on the Site, visiting sites that contain our content or ads, interacting with our tools or using our payment services. In particular, the following technologies are used: the third party tools such as Google Analytics and other tracking / marketing applications are used by Grandado.

Like other online ad networks, we use cookies, web beacons (also known as action tags or single-pixel gifs), and other technologies, which enable us to learn about what ads you see, what ads you click, and other actions you take on our Sites and other sites. This allows us to provide you with more useful and relevant ads.

We do not associate your interaction with unaffiliated sites with your identity in providing you with interest-based ads.

We do not provide any personal information to advertisers or to third party sites that display our interest-based ads. However, advertisers and other third-parties (including the ad networks, ad-serving companies, and other service providers they may use) may assume that users who interact with or click on a personalized ad or content are part of the group that the ad or content is directed towards (for example, users in a particular geographical area or users who bought or browsed for classical music). Also, some third-parties may provide us information about you (such as demographic information or sites where you have been shown ads) from online sources that we may use to provide you more relevant and useful advertising.

Third party advertisers or advertising companies working on their behalf sometimes use technology to serve the advertisements that appear on our Site directly to your browser. They automatically receive your IP address when this happens. They may also use cookies to measure the effectiveness of their advertisements and to personalize advertising content. We do not have access to or control over cookies or other features that advertisers and third party sites may use, and the information practices of these advertisers and third party websites are not covered by our Privacy Policy. Please contact them directly for more information about their privacy practices.

3.2. Cookies that we use:

Firebase by Google

We use the Firebase service from Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to derive application behavioural analytics. We use that information to see how users interact with our website and app.

Firebase is part of the Google Cloud Platform and offers numerous services for developers. A list can be found here.

Some Firebase services process personal data. In most cases, the personal data is limited to so-called “instance IDs”, which are provided with a time stamp. These “Instance IDs” assigned by Firebase are unique and thus allow the linking of different events or processes. This data does not represent personally identifiable information for us, nor do we make any efforts to personalize it subsequently. We process these aggregated data to analyze and optimize usage behaviour, for example by evaluating crash reports.

Currently, we use the following Firebase services:

Google Analytics for Firebase: Google Analytics uses the data to provide analytics and attribution information. The precise information collected can vary by the device and environment.

You can find more information via this link and on Google's partner policy. Google Analytics retains ID-associated data for 60 days, and retains aggregate reporting and campaign data without automatic expiration, unless the Firebase customer changes their retention preference in their Analytics settings or deletes their project.For Analytics for Firebase, Google uses not only the "Instance ID" described above, but also the advertising ID of the end device.

You can restrict the use of the advertising ID in the device settings of your mobile device. For Android: Settings > Google > Ads > Reset Ad ID For iOS: Settings > Privacy > Advertising > No ad tracking

Firebase Dynamic Links: Dynamic Links uses device specs on iOS to open newly-installed apps to a specific page or context. Dynamic Links only stores device specs temporarily, to provide the service.

Firebase Cloud Messaging: Firebase Cloud Messaging is used to transmit push messages or so-called in-app messages (messages that are only displayed within the respective app). A pseudonymized push reference is assigned to the mobile device, which serves as a target for the push messages or in-app messages. The push messages can be deactivated and reactivated at any time in the settings of the mobile device. Firebase Cloud Messaging uses Instance IDs to determine which devices to deliver messages to. Firebase retains Instance IDs until the Firebase customer makes an API call to delete the ID. After the call, data is removed from live and backup systems within 180 days.

Firebase Realtime Database: Firebase Realtime Database is a hosting and backend service provided by Google Inc.

Purpose: Providing of hosting & backend infrastructure for our apps

Place of processing: United States - Privacy Policy. Privacy Shield participant.

Firebase Cloud Firestore: Firebase Cloud Firestore is a hosting and backend service provided by Google LLC.

Purpose: Providing of hosting & backend infrastructure for our apps

Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service.

Place of processing: United States - Privacy Policy. Privacy Shield participant.

Firebase will use this information on our behalf for the above mentioned reasons.

The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation

Trengo

Trengo Chat: To communicate with you on our website through a chat function, we use Trengo chat.

Read Trengo's privacy statement to learn how they handle the data they collect.

Activecampaign

We offer you the option to subscribe to a newsletter on our website. Your personal data is collected while registering for the subscription. You will first receive a confirmation email in order to ensure that you wish to subscribe to the newsletter with your email address. Only once you have clicked on the activation link contained in this email will you be included in our email mailing list and receive the newsletter. The newsletter subscription is recorded for documentation purposes (IP address, date and time). You have the option at any time to unsubscribe from the newsletter by sending us a corresponding message. In particular, you may also use the link at the end of each newsletter in order to unsubscribe. The legal basis is provided by Art. 6 (1) a) GDPR.

To dispatch the newsletter, we use the newsletter service ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, USA. This service provider only processes the data on our behalf and at our instruction in accordance with Art. 28 GDPR.

Active Campaign is certified according to the "EU-US Privacy Shield". The "Privacy-Shield" is an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA.

For more information, please refer to Active Campaign's privacy policy

Link to Privacy Shield certification

We can also use Active Campaign to analyse our newsletter campaigns. When you open an email sent with Active Campaign, a file contained in the email (called a web beacon) connects to Active Campaign's servers. This allows us to determine whether you have opened a newsletter message and which links have been clicked on.

In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of our newsletter campaigns.

The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

The evaluation of the click behaviour of our newsletter recipients is in our legitimate interest in a target group-oriented design of our offer. The legal basis is Art. 6 para. 1 lit f DSGVO.

If you do not wish to receive an analysis from Active Campaign, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Unfortunately it is not possible to send the newsletter without such an analysis.

Twitter pixel

The Twitter pixel is an analytics tool that allows Twitter to learn whether you've interacted with certain web or email content. This helps Twitter measure and improve our services and personalize your experience.

The Twitter pixel is used to measure ad performance, track conversions, and create tailored audiences.

Details about Twitter's policies for conversion tracking and tailored audiences can be found here

YouTube

What is YouTube?

On YouTube, users can watch, rate, comment or upload videos for free. Over the past few years, YouTube has become one of the most important social media channels worldwide.

What data is stored by YouTube?

As soon as you visit one of our pages with an integrated YouTube, YouTube places at least one cookie that stores your IP address and our URL. If you are logged into your YouTube account, by using cookies YouTube can usually associate your interactions on our website with your profile. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your Internet provider.

Additional data can include contact details, potential ratings, shared content via social media or YouTube videos you added to your favourites.

If you are not logged in to a Google or YouTube account, Google stores data with a unique identifier linked to your device, browser or app. Thereby, e.g. your preferred language setting is maintained. However, many interaction data cannot be saved since less cookies are set.

Hotjar (analytics cookie)

We use Hotjar to better understand the needs of our visitors and to improve the usability and user experience of our website. Hotjar uses statistics on screen size, device type, browser type, language and the countries from which the website is visited.

Hotjar uses this data to create a click heatmap and a scroll heatmap. These heatmaps show what our visitors click on and how far they scroll on our pages. We can also see how long users stay on the page and how our site is navigated.

This way we can optimize the website and ensure that you can find important information quickly. All data is collected anonymously: Hotjar and Tinybots have no access to your personal data in any way. We will also never use the data to identify individual visitors or to link data from other data sources. Read more about Hotjar's cookie policy here

Hotjar only stores data in the European Union. Read more about Hotjar's GDPR compliance here

You can opt out (opt-out) from the creation of a profile, the storage of data by Hotjar regarding the use of our site and the use of tracking cookies by Hotjar by using this opt-out link

TikTok Pixel

Within our online offers, the so called "TikTok pixel" of the social network TikTok, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"), is used.

On the one hand, the TikTok pixel enables TikTok to determine you as a visitor of our online offers as a target group for the presentation of ads (so called "TikTok-Ads").

Accordingly, we use the TikTok pixel to display the TikTok-Ads placed by us only to those TikTok users who have also shown an interest in our online offers or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to TikTok (so-called "custom audiences").

With the help of the TikTok pixel, we also want to ensure that our TikTok-Ads match the potential interest of users and are not annoying. The TikTok Pixels also help us track the effectiveness of TikTok-Ads for statistical and market research purposes by showing us whether users are redirected to our website after clicking on a TikTok ad (so called "conversion").

Privacy policy of TikTok:

The processing of data by TikTok is carried out within the framework of the TikTok data use policy. Accordingly, general information on the presentation of TikTok ads, in the TikTok data usage policy. For specific information and details about the TikTok pixel and its functionality, see the TikTok help area

Basis:

The use of the TikTok pixel as well as the storage of "conversion cookies" is based on Art. 6 Abs. 1 lit. a DSGVO.

Contract data processing contract:

For the processing of data for which TikTok acts as a commissioned data processor, we have concluded a commissioned data processing agreement with TikTok, in which we oblige TikTok to protect the data of our customers and not to pass them on to third parties.

Criteo

The owner employs the CRITEO Tool, of CRITEO S.A., 32 Rue Blanche, 75009 Paris, for statistic analysis of visits to its website, and for individual, interest based advertising (CRITEO Dynamic Retargeting and CRITEO Sponsored Products), which may involve creation of pseudonymous user profiles from the user data linked with the content requested.

CRITEO uses cookies, web beacons (tracking pixels) and/or similar techniques that send information on usage of the owner's website to a CRITEO server in France or another country for storage and analysis. CRITEO will use this information only on the owner's behalf and for the aforementioned purposes.

User data will be processed pseudonymously, i.e. there will be no data processed and stored that allow identification of individual users, and IP addresses will be truncated. Processing will be done on the basis of an online ID only. Online IDs or email addresses sent to CRITEO will be encrypted as hash value (checksum) and be stored as a string of characters that will not allow reverse identification.

For further information on CRITEO Dynamic Retargeting and CRITEO Sponsored Products for CRITEO privacy policy

You may dissent from future retrieving, processing and use of your data by CRITEO. For relating information and opt-out details go to CRITEO privacy policy under https://www.criteo.com/privacy/

You may further avoid future retrieving, processing and use of your data from CRITEO web beacons by loading and installing a web browser plugin available at https://adblockplus.org/

Awin

This cookie records purchase data. With this information it is possible to fairly compensate our partner sites for their contribution to our sales.

Name: Awin Lifetime: This cookie is stored for a maximum of 30 days. Distribution: Awin shares anonymous data with third parties.

Privacy Policy

Google Analytics

Google Analytics collects information about the use of our webshop. This information shows us how you landed on our website and how long your visit lasts. Based on this, we can give you personal recommendations and help you find the right product.

Name: Utma, UTMB, UTMC, UTMV and UTMZ

Lifetime: the cookies are stored for a maximum of 2 years.

Distribution: Google does not share anonymous data with third parties.

Privacy Policy

Google AdWords

Conversion Tracking helps us to see how effectively ad clicks contribute to valuable customer activity on our website such as: purchases, sign ups and form submissions.

It tracks conversions after an ad interaction from the drop-down menu for Search, Shopping, Video and Display Campaigns.

Privacy Policy

Microsoft Ads | Bing

UET is used to track our customers behaviour after clicking on our ad. Universal Event Tracking (UET) is a powerful tool that records what customers do on our website. By placing a UET tag, Microsoft Advertising collects data that helps us track conversion goals and audiences with remarketing lists.

URL Tracking allows us to find out how people landed on our website by adding tracking parameters in Microsoft Advertising and using a third-party tracking tool or service to analyze the data. When an ad is showed, the tracking parameters are dynamically added to our landing page URL. This landing page URL is captured on our web server and a third-party tracking tool, such as Google Analytics, can interpret the data.

Privacy Policy

Yahoo

Dot is Yahoo's universal tracking tag.

We use Dot tags to communicate website and app events when we want to track performance and optimize our Yahoo search, native and display campaigns. Dot tags also allow us to use retargeting and advanced audience targeting for various Yahoo channels.

With one pixel, we can manage multiple purposes, such as creating new audiences for retargeting and tracking website conversions, mobile app installs and in-app user behaviour.

Privacy Policy

Facebook Conversion Tracking Pixel

Grandado may use Facebook Advertising, Facebook Pixel Re-Marketing and communications. This tool allows Grandado to understand and display ads and make them more relevant to you.

The collected data remains anonymous and Grandado cannot see the personal data of an individual user.

However, the collected data is stored and processed by Facebook. Facebook may associate the data with your Facebook account and use the data for their own advertising purposes (in accordance with Facebook's data use policy).

Facebook has ultimate control over the information collected through Facebook Advertising, Facebook Pixel Re-Marketing and communications. You can opt out of the use of cookies by Facebook and Facebook Pixel Re-Marketing via the settings on your Facebook account.

4. Does Grandado ever give out my personal information?

We sell merchandise, not information: We do not sell, rent, trade, or license your personal or financial information. We will only disclose your personal or financial information in the following specific situations:

Third-party service providers: Like most online retailers, we sometimes use third-party service providers to perform specific functions on our behalf. Any information disclosed to them is solely to help in their provision of service and such services will only be performed under a valid legal contract in writiing, clearly defining the scope and nature of processing. For example, we provide your name, shipping address, email and phone number to partners such as DHL and UPS in order to guarantee delivery of your orders, and we may use relevant customer information in order to monitor the quality of the third party's service. Similarly, we must provide your credit card number to financial services organizations such as credit card processors and issuers in order to process payments. We protect all submissions of your credit card number for authorization with state-of-the-art data encryption. (More on this below in the “How does Grandado secure information collected about me?” section.)

All our website credit card financial transactions are handled through our payment services providers Checkout.com, and AirWallex.

We use payment service providers and payment methods integrated on this Website

You can review Checkout.com's privacy policy at https://www.checkout.com/legal/privacy-policy.

You can review AirWallex's privacy policy at https://www.airwallex.com/terms/privacy-policy#scope-of-policy.

We will share information with our payment service providers only to the extent necessary for the purposes of processing payments you make via our website, refunding such payments, and dealing with complaints and queries relating to such payments and refunds. We will neither store any debit/credit card details of users nor pass any debit/credit card details to third parties.

Also, on this site the the following payment methods and payment service providers are available

iDEAL

iDEAL is a Netherlands-based payment method that allows customers to complete transactions online using their bank credentials. All major Dutch banks are members of Currence, the scheme that operates iDEAL. iDEAL redirects customers to their online banking environment to authenticate a payment using a second factor of authentication and there is immediate notification about the success or failure of a payment. The exact customer experience depends on their bank. https://www.ideal.nl/en/ideal-privacy-cookiestatement

Klarna

In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna can be found here https://www.klarna.com/international/privacy-policy/. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.

PayPal

We have integrated PayPal components on this website. The personal data transmitted to PayPal usually includes your first name, surname, address, email address, IP address, telephone number, mobile phone number, or other data necessary to process payment. Personal data related to the respective order is also necessary to process the purchase agreement. The transmission of data is intended for payment processing and fraud prevention purposes. We will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. Under certain circumstances, the personal data exchanged between PayPal and us is transmitted by PayPal to credit agencies. The purpose of this transmission is to verify your identity and creditworthiness. PayPal may also disclose the personal data to affiliated companies and service providers or subcontractors, provided this is necessary to fulfill contractual obligations or the data will be processed on behalf of PayPal. PayPal is used in the interest of proper, easy payment processing. This constitutes a legitimate interest as defined by Article 6 Paragraph 1(f) GDPR. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full. PayPal’s privacy policy details can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Giropay

Service provider: giropay GmbH, An der Welle 4, 60322 Frankfurt, Germany; Website: https://www.giropay.de; Privacy Policy: https://www.giropay.de/rechtliches/datenschutzerklaerung/.

Apple Pay

The payment service provider is Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. The Apple privacy policy can be found at: https://www.apple.com/legal/privacy/en-ww/.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google’s privacy policy here: https://policies.google.com/privacy.

American Express

Service provider: American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany; Website: https://www.mastercard.co.uk; Privacy Policy: https://www.americanexpress.com/uk/company/legal/privacy-centre/?inav=gb_legalfooter_privacy.

Mastercard

Service provider: Mastercard Europe SA, ChaussГ©e de Tervuren 198A, B-1410 Waterloo, Belgium; Website: https://www.mastercard.co.uk; Privacy Policy: https://www.mastercard.co.uk/en-gb/about-mastercard/what-we-do/privacy.html.

Visa

Service provider: Visa Europe Services Inc., Zweigniederlassung London, 1 Sheldon Square, London W2 6TT, UK; Website: https://www.visa.co.uk/; Privacy Policy: https://www.visa.co.uk/legal/global-privacy-notice.html.

Legal requirement to disclose information or to protect ourselves, our customers or others: We may be required to disclose personal information if subpoenaed, served with a court order or requested by law-enforcement officials conducting investigations, or if we are otherwise required by law to disclose such information. We will also release personal information when necessary to protect our legal rights or enforce our Terms of Use and other agreements. For example, we may share information to reduce the risk of fraud, or to prevent fraud by users who attempt fraud or other illegal activity on our Site. We reserve the right to report to law enforcement agencies any activities that we in good faith believe to be unlawful.

Merger and/or sale of assets: We do not normally sell, trade or rent personal information to other companies in the course of our business. However, it is possible that we might acquire, merge with or be acquired by another company, or that we might dispose of some or all of our assets, in which case your personal information could be disclosed to another company, subject to the Privacy Policy in effect.

We may share personal information for other reasons we may describe to you from time to time, as permitted by law. Non-personally identifiable information: We may share information that does not identify you or any user, such as the number of daily visitors to a particular page, or the size of an order placed on a certain date, with third parties such as advertising partners.

5. How does Grandado secure information collected about me?

This Site incorporates physical, electronic, and administrative procedures to safeguard the confidentiality of your personal information, such as:

Safeguarding all financial transactions done through this Site with Secure Sockets Layer ("SSL") encryption;

Granting only employees who are providing a specific service access to your personal information;

Working only with third-party service providers who we believe adequately secure all computer hardware;

While our business is designed with safeguarding your personal information in mind, please remember that 100% security does not presently exist anywhere, online.

6. What choices do I have about Grandado's collection of my information?

You can always choose not to provide information, even though it might be needed to make a purchase or to take advantage of certain features on the Site.

You can choose to:

To correct or update your personal information, log in to My Accounts and submit a request through the online Customer Service

To unsubscribe from emails you receive from Grandado, follow the unsubscribe link at the bottom of the email and select the option appropriate for you. Alternatively, you may log into "My Account" and select the option appropriate to you.

To block the cookies on your computer the Help feature on most browsers and devices will tell you how to prevent your browser or device from accepting new cookies, how to have the browser notify you when you receive a new cookie or how to disable cookies altogether. Because cookies allow you to take advantage of some essential service on the Site, we recommend that you leave them turned on. For instance, if you block or otherwise reject our cookies, you will not be able to add items to your shopping cart or proceed to checkout, or use any of our Services that require you to sign in.

7. How long do we keep your personal Information?

We keep your personal information to enable your continued use of our Services, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Policy, as may be required by law such as for tax and accounting purposes, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevancy of products and content we recommend.

If you are a visitor from the European Union, please refer to "Visitors from the European Union?" as follows for more information.

8. Visitors from the European Union?

This section of the Privacy Policy applies only if you use our Site or Services covered by this Privacy Policy from a country that is a Member State of the European Union, and supplements the information in this Privacy Policy.

What legal rights exist in the processing of personal information? You can contact us at any time at our e-mail address mentioned in section 1 or by post if you wish to assert your rights. As a registered customer, you can also make settings in the 'My account' section (e.g. to change your data or the settings for receiving e-mails)

You are entitled to the following rights, subject to the applicable legal requirements and limits:

Right to information and disclosure: You have the right to request information and receive confirmation about whether we process your personal information. You have the right to be provided with clear and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy.

Correction and erasure rights: You have the right to have your personal information corrected if it is incorrect or incomplete. At your request, we will delete your personal information if any of the so-called “right to be forgotten” conditions set forth in the GDPR applies, or if any similar conditions are met under equivalent local laws or regulations. It may be impossible to completely delete your information without some residual information because of backups.

Limitation of processing: You have the right to ask us to stop using your personal information where we are doing so under legitimate interests, unless it is needed for dealing with legal claims or we have other compelling legitimate reasons that override your rights.

Data portability: If data processing is based on a contract or consent, you may request that we transmit the data you have provided to us in a structured, common and machine-readable format. If technically feasible, you may also request that the data be transferred to a third party.

Objection to direct marketing: You can object to the processing of your personal information for advertising or direct marketing purposes at any time. Where you object to processing for advertising or direct marketing purposes, the personal information shall no longer be processed for such purposes.

Revocation of consent: If you have given us your consent to the processing of your data, you can revoke it at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected.

Right of appeal to the supervisory authority: You have the right to submit a complaint to a data protection authority. You can, for example, contact the data protection authority responsible for your place of residence or federal state.

You can correct your personal information and exercise your privacy preferences by submitting a request at data@grandado.com

Please include your name, address, and/or email address when you contact us. We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of your personal information and whether you have an account with us.

Our legal basis for processing:

We process your contact information, registration and ordering details with your consent; We process log data based on our legitimate interest in the elimination of disturbances and the security of our website; We may process personal information to comply with our legal obligations; We will only transfer your personal information to our vendors who perform services on our behalf, if this is necessary to fulfill the contract, if we have a justified interest in the transfer or if you have consented to this.

Whenever we transfer personal information to countries outside of the European Economic Area in the course of sharing information, we will transfer that information in accordance with this Privacy Policy and as permitted by the applicable laws on data protection.

Requests should be submitted by contacting us through our Data Protection Officer at data@grandado.com

You may designate an authorized agent to exercise any rights available to you on your behalf.

Your authorized agent should submit proof that they have been authorized to act on your behalf.

We will not discriminate against you for exercising any of your CCPA rights described here.

We do not sell your personal information.

The following categories of personal information are disclosed for the following business purposes:

9. Are children allowed to use Grandado?

We respect minor's privacy. We do not knowingly or intentionally collect personal information from minors under age 18. Elsewhere on this Site, you have represented and warranted that you are either 18 years of age or are using the Site with the supervision of a parent or guardian.

If you are under the age of 18, please do not submit any personal information to us, and rely on a parent or guardian to assist you when using the Site.

If a minor has provided us with personal data without the consent of a parent or guardian, the parent or guardian must contact data@grandado.com to have the data removed.

10. Where can I find updates to this notice?

To keep you informed of what information we collect, use, and disclose, we will post any changes or updates to this Privacy Policy on this Site and encourage you to review this Privacy Policy from time to time. Please contact us with any questions about the Privacy Policy.

11. Language

If there is any conflict between the English version and another language version of this Privacy Policy, the English version shall prevail.