Privacy Policy

I. General information and legal bases

The following declaration informs you about what kind of personal data is collected for what purpose on this website by us as the responsible body and to what extent this data is made accessible to third parties.

1.Data security engineer

AOSOM IRELAND LIMITED
Unit 605, Jordanstown Road,Greenogue Business Park, Rathcoole, Dublin,D24 P08H

E-Mail: service@aosom.ie

2. Personal information collected

We collect your personal information in order to provide and continually improve our products and services.

Here are the types of personal information we collect:

Information you give us: we receive and store any information you provide in relation to our services. You can choose not to provide certain information but then you might not be able to take advantage of many of our services.

Automatic information: we automatically collect and store certain types of information about your use of our services including your interaction with content and services available through us. Like many websites, we use cookies and other unique identifiers and we obtain certain types of information when your web browser or device accesses our services.

We process personal information for the purposes set out in this Privacy Policy observing legal bases set out in relevant laws and regulations.

3. Legal bases of processing

The processing of personal data requires a legal basis, which we would like to present to you below.

In the case of processing of personal data for which we obtain the consent of the data subject, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also includes processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities as well as in the analysis, optimization and maintenance of the security of our online offer.

II. Log files, hosting

The server statistics automatically store data that the browser transmits to us as part of our legitimate interest in analysis and for security reasons (so-called "logfiles").

These are the following data in detail:

Language and version of the browser software
Operating system used and its interface
Referrer URL (the previously visited page)
Host name of the accessing computer (IP address)
Date and time of the server request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
amount of data transferred
Access status/ HTTP status code.

As a rule, we cannot assign this data to specific persons. This data is not merged with other data sources. The data will also be deleted within 7 days after a statistical evaluation. Data whose further storage is necessary for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.

We use hosting services. These serve the provision of infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this online offer.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

III. Contractual processing

The personal data you provide, such as name, address or e-mail address, will only be used internally to answer your inquiries, process your orders or give you access to certain information.

We may also transfer your personal information to third-party service providers and business partners and your data may therefore also be transmitted to other countries or regions. The jurisdiction in which these global facilities are located may or may not protect personal information to the same standards as in your jurisdiction. There are different risks under different data protection laws. However, this does not change our commitment to comply with this Privacy Policy and to protect your personal information.

IV. Contacting us

When you contact us by e-mail or via the contact form, your details will be stored by us in order to answer your questions.

A transfer to third parties does not take place in principle, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately. Your data will otherwise be deleted if we have processed your request or the purpose of storage has ceased to exist. You can inform yourself at any time about the data stored about you.

If you have any concern about privacy at Aosom, please send an email to our Customer Service (Service@aosom.ie) with a thorough description and we will try to resolve the issue for you. Further, the data security engineer can be contacted with the information provided in previous section (E-Mail: Service@aosom.ie ).

V. Cookies

This site uses cookies. Cookies are small text files that are stored on your computer and through which the entity that sets the cookie receives certain information. They serve to make the Internet offer more user-friendly and effective and/or to make it easier for you to navigate our website.

Of course, you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies or delete cookies that have already been stored. If you do not accept cookies, please note that in this case our offer may not work without errors.

You can find out which function sets cookies on our website below under the individual functions. For more information about cookies and how we use them, please read our Cookies Notice.

VI. Newsletter

If you would like to receive the newsletter offered on our website, we need a valid e-mail address from you, which allows us to verify that you are the owner of the e-mail address provided or that the owner agrees to receive the newsletter.

After providing the e-mail address, we will send you a confirmation e-mail to the specified address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to sending the newsletter will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter.

We only send newsletters with your consent or legal permission.

Your personal data will not be passed on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. A link to cancel the newsletter can be found at the end of each newsletter. If the users have only registered for the newsletter and cancelled this registration, their personal data will be deleted.

We work with a shipping service provider. According to its own information, the shipping service provider can use this data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for statistical purposes to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass them on to third parties.

Use of Mailchimp as an email sending platform

Mailchimp is a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the Email marketing service provider can be viewed here: https://mailchimp.com/legal/privacy/.

Use of Amazon SES as an email sending platform

We use Amazon SES (Amazon Web Services, Inc. or its affiliates) as an email sending platform, we can send timely notifications to customers about their interactions with products and services. You can view the AWS Privacy Policy here: Data Privacy - Amazon Web Services (AWS)

VII. Registration

Our website offers a registration option for a customer account. The personal data entered during registration will be transmitted to the controller. The data is stored exclusively for the purpose of internal use with us.

When registering, the IP address of the user as well as the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass it on.

The registration of the data is required for the provision of content or services. Registered persons have the possibility to have the stored data deleted or changed at any time. The data subject receives information about the personal data stored about him or her at any time.

You can also register with us with your respective social network login (from Facebook Inc. and Google Inc., see IX. below) by disclosing the data stored in your respective social network profile to us. Your registration will then take place automatically with your profile information on Facebook or Google+. These include, among others: Your name and email address. The use of this function is subject to the privacy policy and terms of use of the respective social network provider.

VIII. Comments and contributions

On our website you can create public comments and other posts and ratings. If you make a comment, it will be displayed in the corresponding post or a rating on the product with the username you have provided, and if necessary the date and time visible to everyone. Any e-mail address provided will not be published. If you send a comment, we store your IP address internally in addition to the data you have provided. This is due to the fact that we may be liable for the publication of illegal content and are therefore interested in the identity of the author.

IX. Disclosure of data to third parties

We pass on data to third parties if this is necessary for the fulfilment of the contract (e.g. with payment service providers) and / or we are legally obliged to do so in individual cases.

This includes our delivery service providers, payment service providers, tax service providers, data centers, data storage facilities, customer service providers, advertising and marketing service providers and other business partners. These third parties may process your personal information on behalf of Aosom for one or more of the purposes of this Privacy Policy. We are committed to ensuring that the sharing of personal information necessary for providing services to you is solely legitimate, legal, necessary, specific, and explicit purposes. We will conduct due diligence and have contracts in place to ensure that third-party service providers comply with applicable privacy laws in your jurisdiction. There may be occasions that third-party service providers have their sub-processors.

Use of PayPal as a payment method

If you select a payment with the online payment service provider PayPal as part of your order process, your contact details will be transmitted to PayPal by the triggered order. PayPal is offered by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes on the function of an online payment service provider and a trustee and offers buyer protection services.

The personal data transmitted to PayPal are data that are necessary for order processing, as well as data related to the order.

This transmission is necessary for the processing of your order with the payment method selected by you, in particular to confirm your identity, to administer your payment and the customer relationship.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies. This transmission is used to check the identity and creditworthiness of the order you have placed. Which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal can be found in the data protection declaration of PayPal under https://www.paypal.com/ie/webapps/mpp/ua/legalhub-full.

Use of Ayden as a payment service provider

If you choose to pay with the online payment service provider Adyen during the order process, your contact details will be transmitted to Adyen with the triggered order. Adyen is offered by Ayden NV 109 North Bridge Road #10-22 Funan. Singapore 179097. Adyen provides online services and acts as a payment gateway and payment service provider.

The personal data transmitted to Ayden is data necessary for order processing, this transmission is necessary to process your order using the payment method you have chosen, in particular to confirm your identity.

Personal data transferred to Ayden will be transferred by Ayden to credit bureaus in accordance with the payment method selected through Ayden. This transmission is used to check the identity and reputation of orders placed by you. Which credit agencies are involved by Ayden and what data is generally collected, processed, stored and passed on, please see Ayden's Privacy Statement here: Privacy policy - Adyen.

Other service providers

In some cases, we use external service providers within the scope of our legitimate interests with regard to the analysis, optimization and economic operation of the online offer. This always presupposes that the third-party providers of this content perceive the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the presentation of this content. Third parties may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information similar to the log files. Below we list our service providers.

If your data is to be used for other purposes, we will inform you in advance and only use the data if you have expressly given your consent to this in advance.

1. Google

As part of our legitimate interests in the analysis, optimization and economic operation of our online offer, we use the services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google").

a. Google Analytics

This website uses Google Analytics as a web analytics service. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.

We would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses of Google in member states within the European Union or in other contracting states of the Agreement on the European Economic Area are shortened before the transfer in order to exclude a direct personal reference. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the provider, Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options for the protection of your privacy can be found in Google's privacy policy under https://policies.google.com/privacy?hl=en and especially for Google Analytics under https://policies.google.com/technologies/partner-sites?hl=en and under https://support.google.com/analytics/answer/6004245?hl=en

By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

The collection and storage of data by Google can be objected to for the respective device at any time with effect for the future in connection with the use here.

You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set which prevents the future collection of your data when you visit this website with this device: Disable Google Analytics

Attention: If you delete your cookies, this means that the deactivation cookie will also be deleted and must be stored by you again.

b. Google AdWords and Conversion Tracking

This website uses "Google Adwords" and conversion tracking as part of Google Adwords. When you click on an ad placed by Google, so-called "cookies", text files that are stored on your computer, are set. The cookies lose their validity after 30 days and are not used for personal identification. This allows Google and we to recognize that the user clicked on the ad and was redirected to this page. The conversion cookies are used to create conversion statistics for AdWords customers. These customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. Personal identification is also not possible for these customers. You can object to the use by deactivating the Google tracking cookie in your Internet browser. You will then not be included in the conversion tracking statistics. Further information about Google's privacy policy can be found at the following Internet address: https://policies.google.com/privacy?hl=en.

c.Use of the remarketing or "similar target groups" function of Google Inc.

The provider uses the remarketing or "similar target groups" function of Google Inc. ("Google") on the website. By means of this function, the provider can target the visitors of the website with advertising by placing personalized, interest-based advertising ads for visitors to the provider's website when they visit other websites in the Google Display Network. To carry out the analysis of website use, which forms the basis for the creation of interest-based advertisements, Google uses so-called cookies. For this purpose, Google stores a small file with a sequence of numbers in the browsers of visitors to the website. This number is used to record visits to the website as well as anonymous data about the use of the website. There is no storage of personal data of visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas. You can permanently deactivate the use of cookies by Google by following the following link and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. Alternatively, you can deactivate the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative under http://www.networkadvertising.org/choices/ and implementing the further information on the opt-out mentioned there. Further information on Google Remarketing and Google's privacy policy can be found at: https://policies.google.com/technologies/ads?hl=en.

d. Google Sign-In

On our website, you can log in to create a customer account or to register as part of the so-called single sign-on technology if you have a Google+ profile.

When using this registration, we receive from Google+, depending on your personal privacy settings at Google+, the general and publicly accessible information stored in your profile. This information includes the user ID, name, profile picture, age and gender. The data transmitted by Google+ will be stored and processed by us for the creation of a user account with the necessary data, if these have been approved by you at Google+. Conversely, data may be transmitted from us to your Google+ profile, which may be information about your surfing or purchasing behavior. When using it, you will also be informed about the exchange of your data at Google+, and you will also be given the opportunity to expressly consent to access to your Google+ user data, as well as to consent to the publication of information and activities in your Google+ profile. This consent can be revoked at any time by sending a message to the contact option described below.

The purpose and scope of the data collection and the further processing and use of the data by Google+ as well as your rights in this regard and setting options for the protection of your privacy can be found in the data protection information of Google+: https://policies.google.com/privacy?hl=en

The terms of use for the use of "Google+ Sign-In" or "Register with Google" can be viewed here: https://policies.google.com/terms?hl=en

If you do not want Google+ to associate the data collected via our website directly with your Google+ profile, you must log out of Google+ before visiting our website. You can also completely prevent the loading of Google+ plugins with add-ons for your browser.

2. Facebook

As part of our legitimate interests in the analysis, optimization and economic operation of our online offer, we use services of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

Facebook Connect

Facebook Connect is an offer of Facebook, Inc. The use of Facebook Connect is subject to Facebook's Privacy Policy and Terms of Service. When using Facebook Connect, Facebook profile data and public data on Facebook from your Facebook profile are transmitted to our website. Conversely, data from our website can also be transferred to your Facebook profile. Your transmitted data will be stored and processed by us for the purpose of registration on our website.

By registering on our website via Facebook Connect, you agree to the transfer of profile data from your Facebook profile to us and the transfer of data for our use to Facebook.

3. Criteo

Our website contain third-party advertisements provided by Criteo SA, 32 Rue Blanche, 75009 Paris, France. The purpose of the service is to draw our users' attention to further content that is thematically related to the content read by the respective user. The content displayed is only controlled and delivered by Criteo in terms of content and technology. If the user has not opted out (see below), the selection of displayed advertisements will also be made on the basis of the content that the user has viewed on the website in question now and in the recent past. According to Criteo, it only collects anonymous data.

Aosom also publishes advertisements on third-party websites and e-mails from third parties via Criteo in order to address former Aosom customers. In this case, the person of the customer is not identified, but only the customer is recognized pseudonymously. This is done across different devices of the customer by means of an encrypted (non-decryptable) e-mail address. The storage period of the cookie is 180 days. Further information: https://www.criteo.com/de/privacy/how-criteo-services-work-across-environments/

Criteo, as the responsible body, informs about the collection and use of usage and other data in its data protection regulations at https://www.criteo.com/de/privacy.

X. Rights of the data subject

You have a right to information about the personal data we hold about you. According to the statutory provisions, you also have a right to correction of incorrect data, blocking, data portability and deletion of your personal data. To do so, send us an e-mail with the subject "Data Protection".

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you violates the statutory provisions.

If you have given your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation.

You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against the processing for direct marketing purposes.

Our business changes constantly and our Privacy Policy will change also. You should check our website frequently to see recent changes. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you and your account. We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of customer information collected in the past without the consent of affected customers.

XI. Storage period of personal data

We store personal data for the duration of the respective statutory retention period. After expiry of the period, the data will be routinely deleted, unless there is a need for the initiation or fulfilment of the contract. If the data of the users are not deleted because they are necessary for other and legally permissible purposes, their processing will be restricted. Accordingly, the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be stored for commercial or tax reasons.

XII. Safety Information

We make every effort to process your personal data by taking all technical and organizational possibilities in such a way that the provisions of the data protection laws are complied with and thus to protect this data. Our website or the communication via our website with us is encrypted via HTTPS.