privacy policy

1. Person responsible

Responsible for data processing on this website is:
 HiBali Jewelry and Accessories Shop
 Owner: Sanja Beretta
 Wölberstieg 1
20457 Hamburg
 E-Mail: join@hibali.de
 Phone: 015754792106

2. Collection and storage of personal data and the nature and purpose of their use

When you visit our website, the following data is collected:

  • Order data : To process orders, we collect personal data such as name, address, email address, telephone number and payment information.

  • Use of the website : When you visit our website, our servers automatically store information that your browser transmits, such as the IP address, the date and time of access, the name and URL of the file accessed, the website from which access is made, and the type of browser used.

3. Legal basis for data processing

We process your personal data in accordance with the applicable data protection regulations:

  • Art. 6 (1) (b) GDPR: to fulfill a contract or to take pre-contractual measures.

  • Art. 6 (1) (f) GDPR: to protect our legitimate interests, e.g. the security of our website.

4. Transfer of data

Your personal data will only be passed on to third parties if this is necessary to process the contract:

  • Payment providers : We use PayPal, Klarna and credit card providers to process payments. They receive the data necessary to process the payment.

  • Shipping service provider : We work with DHL to ship your orders. Your shipping information (name, address) is sent to DHL.

5. Tracking tools and cookies

Our website does not currently use tracking tools. In the future we will use the following tracking tools:

  • Facebook Pixel : For evaluating advertising measures on Facebook.

  • Google Analytics : To analyze the use of our website and to improve our offering.

  • TikTok Pixel : To measure the effectiveness of our advertising measures on TikTok.

You can object to the use of tracking tools at any time or make the appropriate settings in your browser.

6. Storage period

We only store your personal data for as long as it is necessary to fulfil the contractual purposes or legal requirements.

7. Rights of the data subject

You have the right:

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR;

  • to request the immediate rectification of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;

  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless statutory retention periods prevent this;

  • to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR;

  • to object to the processing of your personal data in accordance with Art. 21 GDPR.

8. Changes to the Privacy Policy

We reserve the right to adapt this privacy policy if necessary to take into account changes in the legal situation or our services.