The controller responsible for data processing is:
EcomGalaxy Limited
Unit 2a, 17/F, Glenealy Tower
No. 1 Glenealy, Central
Hong Kong
Represented by Managing Director Sarah Jane Marquez
Commercial Register: Hong Kong Companies Registry
Registration Number (BRN): 75581522-000-08-23-6
Phone: +49 1714933303
Email: info@tastyritual.de
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.
1. Access Data and Hosting
You may visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which may include, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider. This information is referred to as access data and is used to document the access.
This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves to protect our legitimate interests, which prevail within the scope of a balancing of interests, in the correct presentation of our offer pursuant to Art. 6 (1) sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to our website.
2. Data Collection and Use for Contract Processing, Contacting Us, and Opening a Customer Account
We collect personal data when you voluntarily provide it to us as part of your order or when contacting us, for example via contact form or email. Mandatory fields are marked as such, as we require this data in order to process the contract or handle your request. Without providing this information, you will not be able to complete the order or send your inquiry.
The data collected can be seen from the respective input forms. We use the data you provide pursuant to Art. 6 (1) sentence 1 lit. b GDPR for contract processing and to handle your inquiries.
If you have given your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of creating the customer account.
After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiry of the retention periods required under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope in a manner permitted by law and about which we inform you in this privacy policy.
You may delete your customer account at any time. This can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.
3. Data Sharing
For the fulfilment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Depending on which payment service provider you select during the ordering process, we pass on the payment data collected for payment processing to the credit institution commissioned with the payment and, where applicable, to payment service providers commissioned by us or to the selected payment service.
In some cases, the selected payment service providers collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider during the ordering process using your access data. The privacy policy of the respective payment service provider applies in this regard.
We use a shipping service provider based in a country outside the European Union. Personal data is transferred to this company only to the extent necessary for the fulfilment of the contract.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle shipping on our behalf, such as in dropshipping transactions.
4. Email Newsletter
Email Advertising with Newsletter Registration
If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you in order to regularly send you our email newsletter based on your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time. This can be done either by sending a message to the contact option described below or via the unsubscribe link provided in the newsletter.
After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope in a manner permitted by law and about which we inform you in this privacy policy.
5. Social Media
Our Online Presence on Facebook and Instagram
Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We use these platforms to provide information about our products and current special promotions.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. User profiles are created from this data using pseudonyms. These profiles may be used, for example, to display advertisements within and outside the platforms that are likely to correspond to your interests.
For this purpose, cookies are usually placed on your device. These cookies store visitor behavior and user interests. This serves to protect our legitimate interests, which prevail within the scope of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties pursuant to Art. 6 (1) lit. f GDPR.
If you are asked by the respective social media platform operators to give consent to data processing, for example by using a checkbox, the legal basis for the data processing is Art. 6 (1) lit. a GDPR.
Where the aforementioned social media platforms have their headquarters in the USA, the following applies: Data transfer takes place either on the basis of the EU-US Data Privacy Framework, based on the adequacy decision of the European Commission dated July 10, 2023, or — for providers without DPF certification — on the basis of the Standard Contractual Clauses issued by the European Commission, Implementing Decision (EU) 2021/914. A current DPF certificate of the respective provider can be viewed at: https://www.dataprivacyframework.gov/list
Historical note: The EU-US Privacy Shield, which was declared invalid by the Court of Justice of the European Union in its judgment of July 16, 2020, case C-311/18 “Schrems II”, has been replaced by the DPF successor decision dated July 10, 2023.
Facebook: https://www.facebook.com/about/privacy/
Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can view there. Further information on data processing when visiting a Facebook fan page, including information on Insights data, can also be found there.
Instagram: https://help.instagram.com/519522125107875
Google: https://business.safety.google/intl/en/privacy/
Opt-Out Options:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
6. Contact Options and Your Rights
As a data subject, you have the following rights:
Pursuant to Art. 15 GDPR, you have the right to request information about the personal data we process about you within the scope specified therein.
Pursuant to Art. 16 GDPR, you have the right to request the immediate correction of inaccurate personal data or the completion of personal data stored by us.
Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required:
to exercise the right to freedom of expression and information;
to fulfil a legal obligation;
for reasons of public interest; or
to assert, exercise, or defend legal claims.
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if:
you contest the accuracy of the data;
the processing is unlawful, but you oppose its deletion;
we no longer need the data, but you require it to assert, exercise, or defend legal claims; or
you have objected to the processing pursuant to Art. 21 GDPR.
Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller.
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters.
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, withdraw consent you have given, or object to a specific use of data, please contact us directly using the contact details provided in our legal notice.
Right to Object
If we process personal data as explained above in order to protect our legitimate interests, which prevail within the scope of a balancing of interests, you may object to this processing with effect for the future.
If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are reasons arising from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.