Privacy Policy

Anna’s Corner

1. General information & data controller

We appreciate your visit to Anna’s Corner and your interest in our online store. Protecting your personal data is important to us. This Privacy Policy explains how we collect, use, and protect your information when you visit or shop on our website.

Personal data refers to any information that can be used to identify you personally.

Data controller under the General Data Protection Regulation (GDPR):
Anna’s Corner
Email: info@annas-corner.com

The data controller is the individual or legal entity that determines the purposes and means of processing personal data.

Our website uses SSL/TLS encryption to ensure secure transmission of data. You can recognize an encrypted connection by “https://” in the address bar and the lock icon in your browser.

2. Data collection when visiting our website

When you visit our website for informational purposes only (without registering or placing an order), we collect only the data that your browser automatically transmits to our server. These are known as server log files.

Collected data may include:

  • Visited pages on our website

  • Date and time of access

  • Amount of data transmitted

  • Referring website or source

  • Browser type and version

  • Operating system

  • IP address (in anonymized form where possible)

This data is processed based on our legitimate interest in ensuring the stability and security of our website (Art. 6(1)(f) GDPR). We do not combine this data with other data sources. We reserve the right to review log files if there are indications of unlawful use.

3. Cookies

Our website uses cookies to improve usability and provide certain functions. Cookies are small text files stored on your device.

We use:

  • Session cookies, which are deleted after you close your browser

  • Persistent cookies, which remain on your device for a defined period

Cookies may collect information such as browser data, location data, or IP addresses. Some cookies help remember your preferences or shopping cart contents.

If cookies process personal data, this is done either:

  • To fulfill contractual obligations (Art. 6(1)(b) GDPR), or

  • Based on our legitimate interest in a functional and user-friendly website (Art. 6(1)(f) GDPR)

You can manage cookie settings in your browser at any time. Please note that disabling cookies may limit website functionality.

4. Contacting us

When you contact us via email or a contact form, we collect the data you provide (such as name and email address). This data is used solely to respond to your inquiry.

The legal basis for processing is our legitimate interest in responding to requests (Art. 6(1)(f) GDPR). If contact is related to a contract, processing is based on Art. 6(1)(b) GDPR.

Your data will be deleted once your request has been fully processed, unless legal retention obligations apply.

5. Customer accounts & contract processing

When you place an order or create a customer account, we process your personal data to fulfill the contract (Art. 6(1)(b) GDPR). Required data is indicated in the respective forms.

You may request deletion of your customer account at any time by contacting info@annas-corner.com.

After completion of the contract or account deletion, your data will be stored only as required by legal retention obligations and deleted afterward.

6. Email newsletters & direct marketing

Newsletter subscription

If you subscribe to our newsletter, we will send you updates and offers. The only mandatory information is your email address.

We use a double opt-in process. After subscribing, you will receive a confirmation email to verify your subscription.

Legal basis: your consent (Art. 6(1)(a) GDPR).
You may unsubscribe at any time via the link in the newsletter or by emailing us.

Emails to existing customers

If you provided your email during a purchase, we may send you offers related to similar products. This is based on our legitimate interest in direct marketing (Art. 6(1)(f) GDPR).

You may object to this use at any time.

7. Order & payment processing

To process your order, we share necessary data with shipping providers and payment services.

PayPal

If you pay via PayPal, your payment details are transferred to:
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

Processing is carried out under Art. 6(1)(b) GDPR. PayPal may conduct credit checks in accordance with their privacy policy.

PayPal Privacy Policy: https://www.paypal.com/privacy

8. Review reminders

If you consent, we may send a one-time email reminding you to leave a review. Legal basis: Art. 6(1)(a) GDPR.
You may withdraw consent at any time.

9. Social media plugins (Shariff solution)

Our website uses social media links (Facebook, Instagram) via a privacy-friendly Shariff solution. No direct data transfer occurs unless you actively click a social media button.

Once clicked, the respective platform’s privacy policy applies.

10. Online marketing & advertising

We may use online advertising tools such as Google Ads and remarketing services. These tools use cookies to display relevant advertisements.

Processing is based on our legitimate interest in effective marketing (Art. 6(1)(f) GDPR).
You can manage ad preferences via your browser or Google settings.

11. Web analytics (Google Analytics)

We use Google Analytics with IP anonymization to analyze website usage. Data is processed based on our legitimate interest in website optimization (Art. 6(1)(f) GDPR).

You can prevent tracking by adjusting browser settings or using Google’s opt-out tools.

12. Retargeting & remarketing

We may use remarketing services such as Facebook Pixel and Google Remarketing, only with your explicit consent (Art. 6(1)(a) GDPR).

You can withdraw consent or disable cookies at any time.

13. Your rights under GDPR

You have the right to:

  • Access your data (Art. 15 GDPR)

  • Rectify inaccurate data (Art. 16 GDPR)

  • Request deletion (Art. 17 GDPR)

  • Restrict processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7(3) GDPR)

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

14. Right to object

You may object to the processing of your personal data at any time if processing is based on legitimate interests. If you object to direct marketing, your data will no longer be used for that purpose.

15. Data retention period

Personal data is stored only as long as necessary to fulfill contractual or legal obligations. Once retention periods expire, data is securely deleted unless further lawful processing is required.