Privacy Policy

DATA PROTECTION DECLARATION

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 Introduction

We appreciate your visit to our website and thank you for your interest. Below, we explain how your personal data is handled when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2 Controller Information

The controller responsible for data processing on this website, as defined under the General Data Protection Regulation (GDPR), is Avena Muse. The controller is the individual or legal entity that determines the purposes and methods of processing personal data, either independently or in collaboration with others.

1.3 Data Security and Encryption

To ensure the security of your personal data and the confidentiality of information such as orders or inquiries, our website uses SSL or TLS encryption. You can identify an encrypted connection by the "https://" prefix and the padlock icon in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you visit our website purely for informational purposes, without registering or providing information to us, we collect only what your browser automatically transmits ("server log files"). This includes:

  • The webpage visited

  • Date and time of access

  • Amount of data transmitted

  • The source/referrer

  • Browser type and version

  • Operating system used

  • IP address (anonymized when possible)

This data is processed under Art. 6 para. 1 lit. f GDPR based on our legitimate interest in ensuring website stability and functionality.

3) COOKIES

We use cookies to enhance the functionality and user experience of our website. Cookies may be session-based (deleted after the session) or persistent (stored for future use).

Cookies may process information such as browser type, location data, and anonymized IP addresses.

Processing occurs based on:

  • Art. 6 para. 1 lit. b GDPR – for contract-related purposes

  • Art. 6 para. 1 lit. f GDPR – for legitimate interests in functionality and user-friendly optimization

You can manage cookies through your browser settings, but disabling them may limit website features.

4) MAKING CONTACT

When you contact us (via form or email), we collect the personal data you provide. This data is used solely to respond to your inquiry.

Legal basis:

  • Art. 6 para. 1 lit. f GDPR – legitimate interest in responding

  • Art. 6 para. 1 lit. b GDPR – when related to contract initiation

Your data is deleted once your inquiry is resolved unless retention is legally required.

5) DATA PROCESSING FOR CUSTOMER ACCOUNTS & CONTRACT PROCESSING

Personal data provided for order processing or customer account creation is processed under Art. 6 para. 1 lit. b GDPR.

You may request deletion of your customer account at any time.
After contract completion or account deletion, data is retained only as required by tax or commercial laws.

6) USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Newsletter Registration

If you subscribe, we will send you updates and offers. Only your email address is required.
A double opt-in process is used to confirm consent under Art. 6 para. 1 lit. a GDPR.

You may unsubscribe at any time.

6.2 Email Newsletters to Existing Customers

If you previously purchased from us, we may send you information on similar products under Art. 6 para. 1 lit. f GDPR, unless you object.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1 Sharing Data for Contract Fulfillment

Data necessary for delivery or payment processing is shared with carriers and payment service providers under Art. 6 para. 1 lit. b GDPR.

7.2 Payment Service Providers

Shopify Payments / Stripe
Payments by credit card, Apple Pay, Google Pay, and Shop Pay are processed via Shopify Payments and Stripe.
Data is shared only as necessary for payment completion.

8) REVIEW REMINDER

With explicit consent (Art. 6 para. 1 lit. a GDPR), we may send a one-time request to review your purchase. You may withdraw consent anytime.

9) SOCIAL MEDIA PLUGINS (Shariff Solution)

Plugins for Facebook, Google+, and Instagram are integrated as HTML links to protect your data.
No automatic data transmission occurs until you click the plugin.

All relevant providers are certified under the EU-U.S. Privacy Shield.

10) ONLINE MARKETING

10.1 DoubleClick by Google

Used for ad performance tracking and optimization under Art. 6 para. 1 lit. f GDPR.

10.2 Google AdWords Conversion Tracking

Used to measure campaign success and conversions.

Opt-out options are available via browser settings or Google tools.

11) WEB ANALYSIS (Google Analytics)

We use Google Analytics with IP anonymization to analyze website usage under Art. 6 para. 1 lit. f GDPR.

You may opt out via:

  • Browser plugin

  • Opt-out cookie

Cross-device tracking is done via anonymized user ID.

12) RETARGETING / REMARKETING

Facebook Pixel

Used for ad performance and personalization with explicit consent (Art. 6 para. 1 lit. a GDPR).

Google AdWords Remarketing

Used to display interest-based ads across platforms.

Opt-out options are available via Google Ads settings and browser tools.

13) RIGHTS OF THE DATA SUBJECT

You have the following rights under GDPR:

  • Right to access

  • Right to rectification

  • Right to erasure

  • Right to restrict processing

  • Right to notification

  • Right to data portability

  • Right to withdraw consent

  • Right to lodge a complaint

  • Right to object (including to direct marketing)

14) DURATION OF PERSONAL DATA STORAGE

Data retention follows statutory periods. Once expired, data is deleted unless required for contract fulfillment or legitimate interest.

Contact Information

Email: support@avenamuse.com
Support Hours: Available 24/5