Privacy policy

Information on the processing of privacy (protection of personal data)

sexy-peach.com

Protecting your privacy is just as important to us as it is to you. Therefore, we do everything we can to ensure that your data is as safe as possible with us and that you retain control over the processing of data about you. Below, we inform you in detail about our processing of your data and your rights. Furthermore, if you have any questions or suggestions about data protection, our data protection officer is available to you as a contact person.

Personal data is information that refers to an identified or identifiable person. This mainly includes information that allows conclusions to be drawn about your identity, such as your name, telephone number, address or e-mail address. Data that we collect, for example during a visit to our website and which cannot be associated with you personally, does not fall under the definition of personal data.

You can print or save this privacy policy using your browser's standard functionality.

1. Contact person and data controller

The contact person and person responsible for processing your personal data when visiting this website, in accordance with the General Data Protection Regulation (GDPR) of the European Union, are:

Italian Monster Company Pte Ltd

60 Paya Lebar Road #07-54

Singapore 409051

Telephone: +65 86475308

(hereinafter "we" or "us")

If you have any questions regarding data protection in relation to our online services or the use of our website, you can also contact our data protection officer at assistance@sexy-peach.com at any time.

2. Account and Payment Information

2.1 User Accounts

We create a password-protected direct access to the customer account for all customers who register accordingly. Here you can view data relating to your completed, open and about to be shipped orders, or correct or modify the data you have stored.

The legal basis for the aforementioned data processing is Article 6 (1) letter b GDPR.

2.2 Payment Data

We offer you these payment methods, Paypal, Stripe, Credit and Debit Card and others that we will add later. We process your payment data to manage payments. Depending on the payment method you choose, we provide your payment data to the credit institution commissioned with the payment and to possible payment service providers commissioned by us.

The legal basis of the data processing mentioned above is art. 6 par. 1 lit. b of the GDPR.

2.3 Payment management

PayPal

When paying via PayPal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") in the context of payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on invoice" via PayPal. The result of the credit check regarding the statistical probability of insolvency is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Regarding the inclusion of score values in the credit check result, these are based on a scientifically recognized mathematical-statistical method. The data used to calculate the score values includes, among other things, address data.

The legal basis for the processing of the above-mentioned data is Article 6 (1) letter b GDPR.

Further information on data protection, including the information agencies used, can be found in PayPal's privacy policy.

Stripe

When paying via Stripe, your payment data will be transmitted to Stripe as part of the payment processing. Stripe reserves the right to carry out a credit check for the payment methods credit card via Stripe, direct debit via Stripe or, if offered, "purchase on invoice" via Stripe. The result of the credit check regarding the statistical probability of insolvency is used by Stripe for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Regarding the inclusion of score values in the credit check result, these are based on a scientifically recognized mathematical-statistical method. The data used to calculate the score values includes, among other things, address data.

The legal basis for the processing of the above-mentioned data is Article 6 (1) letter b GDPR.

Further information on data protection, including the information agencies used, can be found in Stripe's privacy policy.

2.4 Credit check (Klama)

If you choose to pay by invoice or Paylater/Ratenkauf, your creditworthiness will be checked based on mathematical-statistical procedures. For this purpose, we transmit your personal data (including name and address) and data relating to your order (including IP address) to Klarna Bank AB (publ) with its head office at Sveavägen 46, 111 34 Stockholm, Sweden, in accordance with the provisions of the GDPR.

For identification and credit verification purposes, Klarna or partner companies commissioned by Klarna pass on your personal data to commercial information agencies (information agencies). From these they receive information and, if applicable, creditworthiness information on the basis of mathematical-statistical procedures, the calculation of which includes, among other things, address data. The information received on the statistical probability of a missed payment is used for a balanced decision on which payment method (purchase by invoice, payment by installments or direct debit) we can offer you. If you have problems verifying your address, have a negative credit check, or have any outstanding receivables from previous business relationships, we may not be able to offer you invoice, installment payment, and direct debit payment methods. The credit check may include probability values (score values) which are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes, among other things, address data. For further information on this and the reporting agencies used, please see Klarna AB's privacy policy.

The legal basis for the above-mentioned data processing is Article 6 (1) letter f GDPR, our legitimate interest in avoiding bad debt and abuse by third parties.

3. Customer service

3.1 Contact us by email

You have the option to contact us via assistance@sexy-peach.com. In this context, we process not only your contact data, but also the content of your messages and communications with us. We only process the above-mentioned data to communicate with you.

The legal basis for the processing of the above-mentioned data is art. 6 paragraph 1 letter b of the GDPR.

3.2 Contact us via WhatsApp

You have the possibility to contact us via WhatsApp on +39 375 6284914. In this context, we process not only your contact details, but also the content of your messages and communications with us. We only process the above-mentioned data to communicate with you.

The legal basis for the processing of the above-mentioned data is art. 6 paragraph 1 letter b of the GDPR.

4. Newsletters, product recommendations and customer surveys

4.1 Newsletters

You have the option of subscribing to our newsletter, in which you will regularly receive free information about our assortment or our partner companies and we will be able to inform you about exclusive offers.

To subscribe to our newsletter we use the so-called double confirmation procedure, i.e. we will only send you the newsletter by e-mail after you have confirmed that you wish to receive our newsletter by clicking on a link in our notification e-mail. If you confirm your wish to receive the newsletter, we store your email address, the time of registration and the IP address used for registration until you decide to unsubscribe from the newsletter. The storage serves exclusively for the purpose of sending you the newsletter and being able to prove your subscription. The legal basis of the data processing mentioned above is your consent pursuant to Art. 6 par. 1 lit. to GDPR.

4.2 Product recommendations

If you place an order with us, we will also use your email address to send you product recommendations about products that may interest you or that match the product you purchased. The legal basis for this is Art. 6 par. 1 letter f GDPR in connection with § 7 para. 3 of the UWG, justified by our interest in providing you with personalized offers.

4.3 Customer Surveys

If you place an order with us, we will also use your email address to send you customer satisfaction surveys. Survey responses are collected pseudonymously (anonymous for customer surveys). We will use survey results to improve our products and service. The legal basis for this is Art. 6 par. 1 letter f of the GDPR, justified by our legitimate interest in constantly improving our service.

4.4 Possibility of opposition

You can unsubscribe at any time from receiving advertising emails, such as newsletters, product recommendations, customer and satisfaction surveys (hereinafter "advertising emails"). An appropriate unsubscribe link can be found in each advertising email. Alternatively, simply send a notice to the contact information above or in the email.

4.5 Services used

We use Google technologies in our advertising emails

which allow you to measure interactions (for example, email opening, links clicked). We use this data in pseudonymous form for general statistical evaluations and to optimize and develop our content and communication with our customers. This is done through the use of small images embedded in messages (called pixels). The data is collected exclusively in pseudonymous form, so the IDs are not linked to your further personal information and it is not possible to directly identify the person.

The legal basis for the previous data processing is Art. 6 par. 1 letter f GDPR. This data processing is based on our legitimate interests. We want to optimize and develop our content and communication with our customers.

If you do not wish to have usage behavior analyzed, you can unsubscribe from advertising emails as described above or deactivate images in your email program. Further information can be found in the instructions for Microsoft Outlook and Mozilla Thunderbird or on google. We want to share the most relevant content possible for our customers through our advertising emails and better understand what readers really care about. The interaction data is stored pseudonymously for 30 days and is then completely anonymized.

4.5.1 SurveyMonkey

We use the technical services of SurveyMonkey Inc., San Mateo, One Curiosity Way, San Mateo, California 94403, USA ("SurveyMonkey") to conduct surveys for our customers.

The legal basis for the above-mentioned data processing is Article 6 (1) letter f of the GDPR, which is based on our legitimate interest in conducting surveys to our customers in a modern way.

In the event that personal data is transferred to the United States, we have concluded standard contractual clauses with SurveyMonkey in accordance with Article 46 (2) (c) GDPR. For further information, please refer to section 12 ("Transfer of data to third countries") of our privacy policy.

For more information, see SurveyMonkey's privacy policy.

5. Contests, gift vouchers and loyalty program (cashback)

5.1 Competitions

If you decide to participate in competitions organized by us, we will usually ask you to provide us with your name and email address.

We process the above-mentioned data in order to be able to inform you in the event of a win and to ensure that each participant only enters the competition once. In some cases, additional information may be required to participate in the competitions (such as your date of birth). In these cases, you will be informed immediately about the information needed for the competition.

We also use your data for market and opinion research. Of course, we only use them anonymously for statistical purposes. Your survey responses will not be disclosed or published to third parties. We do not store our survey responses together with your email address or other personal data.

You can object to the use of your data for market and opinion research at any time, completely or for certain actions, without this incurring costs other than the transmission costs according to the basic tariffs. A communication in text form to the above-mentioned contacts (e.g. e-mail, fax, letter) is sufficient for this.

The legal basis of the aforementioned processing is art. 6 par. 1 lit. b of the GDPR.

5.2 Cashback program

By creating a user account, you automatically participate in our cashback program.

Therefore, in addition to your e-mail address and name, we also process data about your purchases made (purchase and order data, e.g. date, product, product number, quantity, price).

The data collected is necessary for the execution of our cashback program.

You will be able to check all the movements relating to the cashback earned and used on the summary page of your account.

By processing your purchase data, we can credit you with the resulting cashback and save it to your account. You will find more details about our cashback program policy in our terms and conditions.

The legal basis for the above-mentioned processing is Article 6 (1) (b) of the GDPR.

6. Device and access data and creation of log files

Every time you use our website, we collect data that your browser automatically transmits to enable you to visit the website. These include in particular:

Domain name or IP address of the end device making the request

Client file request (file name and URL)

http response code

Date and duration of the visit

Address of the website visited and the website making the request

The data processing is necessary to enable the visit of the website and to ensure the long-term functionality and security of our systems. Furthermore, the above-mentioned data is temporarily stored in internal log files to create statistical information about the use of our website, to further develop our website in relation to the usage habits of our visitors (for example, if the percentage of mobile devices with which the pages are viewed) and generally manage our website.

The legal basis for the processing of the above-mentioned data is Art. 6 par. 1 lit. b of the GDPR.

7. Use of cookies and similar technologies

This website uses cookies and similar technologies (collectively "tools"), whether provided by us or by third parties.

Cookies are small text files stored by your browser on your device. Cookies are not used to run programs or upload viruses to your computer. They enable comfortable browsing on the Internet: If you visit the website again, the stored cookie is transmitted to the web server. For example, the products you have placed in your shopping cart are stored, so you can continue shopping conveniently from where you left off. Similar technologies include in particular web storage (local/session storage), fingerprints, tags or pixels. Most browsers are set to accept cookies and similar technologies by default. However, you can usually change your browser settings to reject cookies or similar technologies or save them only with your permission. If you reject cookies or similar technologies, some of our services may not work properly for you.

7.1 Legal basis and revocation

Legal basis

We use tools necessary for the operation of the website on the basis of our legitimate interest in accordance with Art. 6 paragraph 1 letter f of the GDPR, in order to allow you more convenient and personalized use of our website and to make its use as efficient as possible. In certain cases, these tools may also be necessary to fulfill a contract or to carry out pre-contractual measures, in which case the processing takes place pursuant to art. 6 paragraph 1 letter b of the GDPR.

We only use optional cookies and similar technologies for marketing and analysis purposes if you have given us your consent for data processing in accordance with Art. 6 paragraph 1 letter a of the GDPR and, if applicable, for the transmission of data to third countries pursuant to art. 49 paragraph 1 letter a of the GDPR via our consent banner. The risks associated with data transmission to third countries are set out in section 12 ("Data transmission to third countries"). Access to and storage of information on the end device is based on the laws implementing the ePrivacy Directive of EU member countries, in Germany pursuant to Article 25 (1) of the TTDSG.

Obtaining your consent

When you make a decision in the consent banner, a cookie is set that records your acceptance or rejection. This technically necessary cookie is set on the basis of art. 6 paragraph 1 letter f of the GDPR to document your consent. Accessing and storing information on the end device is absolutely necessary in these cases and is based on the implementing laws of the ePrivacy Directive of the EU member countries, in Germany pursuant to Article 25 (2) of the TTDSG. If you delete your cookies, we will ask for your consent again when you visit the site in the future.

Withdraw your consent or change your choice

You can revoke the consent given at any time or change the selection of tools on the browser you use.

7.2 Required Tools

We use some tools to enable the basic functions of our website ("necessary tools"). Without these tools we could not provide our service. Therefore, the necessary tools are used without consent due to our legitimate interests pursuant to Art. 6 paragraph 1 sentence 1 letter. f DSGVO or to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 paragraph 1 sentence 1 letter. b DSGVO.

Own cookies

We use our own necessary cookies, in particular

· for login authentication,

· for load distribution,

· to save your language settings,

· to report that you have been shown information on our website, so that it is not shown again during your next visit to the website.

To improve our website, we use various technologies to improve our website, analyze user behavior and process related data. The data collected may include in particular the IP address of the end device, the date and time of access, the identification number of a cookie, the identifier of the mobile device and technical information about the browser and operating system. However, the collected data is only stored pseudonymously, so that no immediate conclusions can be drawn about individuals.

In the next section, we want to explain these technologies and the vendors used in more detail.

Which technically necessary tools do we use?

The following tools are absolutely necessary for using our service for technical reasons. They ensure that our service works securely and as desired by you.

Google Tag Manager

Our website uses Google Tag Manager, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users in the European Economic Area and Switzerland and by Google LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA for all other users. The Tag Manager is used to manage tracking tools and other services, called website tags. A tag is an element that is inserted into the source code of our website to collect, for example, default usage data. The Google Tag Manager activates other tags that may collect data. In part, the data is stored on a Google server in the USA. If a deactivation is carried out at the domain or cookie level, this remains valid for all tracking tags implemented with Google Tag Manager.

The Google Tag Manager works without the use of cookies.

The legal basis for the use of Google Tag Manager is art. 6 par. 1 lit. f GDPR, justified by our interest in efficient management of the tools we use.

In part, the data is processed on a Google server in the USA. In the event that personal data is transferred to the USA or to other third countries, we have concluded standard contractual clauses with Google in accordance with Art. 46 par. 2 lit. c GDPR. Further information is available in section 12 ("Data transfer to third countries").

More information can be found in Google's information on Tag Manager.

7.3 Which analysis and marketing cookies do we use?

We also use tools for analytics and advertising purposes (“marketing tools”). Some of the access data generated when using our website is used for interest-based advertising. By analyzing and processing this access data, we are able to show you personalized advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on other websites of other providers.

In the next section, we will explain these technologies and the vendors used in more detail. The data collected may include in particular:

· The IP address of the device;

· The identification number of a cookie;

· The mobile device identifier (device ID);

· Referrer-URL (previously visited page);

· Pages visited (date, time, URL, title, time spent);

· Downloaded files;

· Links clicked to access other websites;

· Possible achievement of certain objectives (conversions);

· Technical information: operating system; browser type, version and language; type, brand, model and resolution of the device;

· Approximate location (country and possibly city).

However, the collected data is stored exclusively in pseudonymous form, so that no direct conclusions about individuals can be drawn.

Google Ads

Our website uses the "Google Ads" service, offered to users in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to other users by Google LLC 1600 Amphitheater Parkway Mountain View, CA 94043, USA (collectively "Google").

With Google Ads, the actions of our customers defined by us (such as clicks on an ad, page visits, downloads) are recorded and analyzed via "Google Ads Conversion Tracking". We use "Google Ads Remarketing" to show you personalized advertising messages for our products on Google partner websites. Both services use cookies and similar technologies.

The data collected in this context may be transferred to a server in the USA and stored there by Google for analysis. In the event that personal data is transferred to the United States, we have entered into standard contractual clauses with Google.

If you use a Google Account, depending on your Google Account settings, Google may associate your web browser and app history with your Google Account and use information from your Google Account to personalize ads. If you do not want this association with your Google account, you must log out of Google before accessing our website.

If you have not consented to the use of Google Ads, Google will only show general advertising that has not been selected based on the information collected about you on this website. In addition to revoking your consent, you also have the option to deactivate personalized advertising in the Google advertising settings.

We have entered into an order processing contract with Google Ireland Limited for the use of Google Ads. In the event that personal data is transferred to the United States by Google Ireland Limited, Google Ireland Limited and Google LLC have entered into standard contractual clauses (Implementing Decision (EU) 2021/914, form 3) pursuant to Article 46, paragraph 2, letter c of the GDPR. Furthermore, for the transmission of your data to third countries, we also require your explicit consent pursuant to Article 49, paragraph 1, letter a of the GDPR.

Google sets the following cookies:

· "_gcl_au" for 90 days

· "_gcl_aw" for 90 days

Further information can be found in Google's data usage notices and privacy policy.

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). According to Google, the data protection officer is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze and improve user behavior on our website. Google will process the information collected to evaluate your use of the website, compile reports on website activity for website owners and provide other services relating to the use of the website and Internet use. The data collected in this context may be transferred by Google to a server in the USA for analysis and storage.

We have adopted the following data protection settings in Google Analytics:

IP address anonymization (shortening the IP address before analysis, so that the user's identity cannot be traced)

Advertising feature disabled (including GA audience remarketing)

Personalized ads disabled

Cross-site tracking disabled (Google Signals)

Data sharing disabled with other Google products and services

The following data is processed by Google Analytics:

Anonymized IP address;

Referring URL (previously visited page);

Pages visited (date, time, URL, title, duration);

Downloaded files;

Links clicked to other websites;

Any objectives achieved (conversions);

Technical information: operating system; browser type, version and language; type, brand, model and resolution of the device;

Approximate location (country and, if available, city, based on the anonymized IP address).

Google Analytics uses the following cookies for the indicated purpose with the relevant storage duration:

· “ _ga ” for 2 years and “ _gid ” for 24 hours (both to recognize and distinguish website users via a user ID);

· " _gat " for 1 minute (to reduce requests to Google servers);

· possibly "IDE" for 13 months (third-party cookies to recognize and distinguish website users via a user ID, to collect information on interaction with advertising and to personalize advertising).

For more information, please see Google's privacy policy.

Google Optimize

Google Optimize is used in conjunction with Google Analytics. This means that Google Optimize uses the same cookies as Google Analytics. This is a testing tool that helps us improve our website for you. The contact person for all questions is once again Google. For more detailed information on privacy, see the section on Google Analytics.

Microsoft Advertising (formerly Bing Ads)

Our website uses Microsoft Advertising, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft uses cookies and similar technologies to present advertisements that are relevant to you. The use of these technologies allows Microsoft and its partner sites to show ads based on previous visits to our website or other websites on the Internet. The data collected in this context may be transferred to a server in the USA and stored there for processing by Microsoft.

You can prevent the collection of data generated by cookies and relating to your use of the website by Microsoft, as well as the processing of this data by Microsoft, by deactivating personalized ads on the Microsoft objection page. Please note that in this case, after deleting all cookies from your browser or subsequent use of another browser and/or profile, you will need to express your objection again.

Further information can be found in Microsoft's data protection provisions.

We have entered into a data processing agreement with Microsoft.

8. YouTube with advanced data protection

This website embeds YouTube videos. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in advanced data protection mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they watch the video. However, enhanced data protection mode does not necessarily exclude data sharing with YouTube partners. For example, YouTube establishes a connection with the Google DoubleClick network, regardless of whether you watch a video or not.

Once you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can avoid this by logging out of your YouTube account.

Furthermore, after starting a YouTube video, various cookies or similar recognition technologies (e.g. device fingerprinting) may be stored on your device. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability for users and prevent fraud.

Further data processing may be triggered after starting a YouTube video, over which we have no control.

The use of YouTube is in the interest of the functionality of our website, the presentation of essential product information to our customers and an attractive presentation of our online offers. This constitutes a legitimate interest pursuant to art. 6 par. 1 lit. f GDPR.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=en.

9. Online presences on social networks

We maintain online presences on social networks to communicate, among other things, with customers and interested parties and inform them about our products and services.

User data is usually processed by the relevant social networks for market research and advertising purposes. In this way, usage profiles can be created based on user interests. To this end, cookies and other identifiers are stored on users' computers. On the basis of these usage profiles, for example, advertisements are published within social networks, but also on third-party websites.

As part of the operation of our online presences, we may have access to information such as statistics on the use of our online presences provided by social networks. These statistics are aggregated and may contain demographic information and data about interaction with our online presences and content disseminated. Details and links to social network data that we can access as online presence operators are shown in the list below.

The legal basis for data processing is Art. 6 par. 1 letter f GDPR, based on our legitimate interest in effectively informing users and communicating with them, or Art. 6 par. 1 letter b GDPR, to stay in contact with our customers and inform them, as well as to carry out pre-contractual measures with future customers and interested parties.

The legal basis for the data processing carried out by social networks under their responsibility is set out in the privacy policies of the respective social network. At the following links you will find further information on the respective data processing and your objection options.

Please note that data protection requests can best be submitted to the respective social network provider, as only these providers have access to the data and can take appropriate measures directly. Below is a list of information about the social networks on which we have online presences.

Facebook (USA and Canada: Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; all other countries: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Management of the Facebook page under joint responsibility on the basis of a joint processing agreement (data controller page insights supplement)

Information about the Page Insights data processed and contact information in case of data protection requests: https://www.facebook.com/legal/terms/information_about_page_insights_data

Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.

Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

Opt-Out: https://www.google.com/settings/ads.

Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)

Opt-Out: https://twitter.com/personalization.

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)

Management of the LinkedIn company page under joint responsibility on the basis of a joint processing agreement (Page Insights Joint Controller supplement)

Information about the Page Insights data processed and contact details in case of data protection requests: https://legal.linkedin.com/pages-joint-controller-addendum

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)

10. Amazon Marketplace

We also offer our products on the Amazon Marketplace. We inform you that we have no control over the conditions of use of the marketplaces and the services offered by them, as well as only limited control over their data processing. Please therefore carefully check what data you provide to us via Amazon. We cannot assume any responsibility for the behavior of the marketplace operators and other users or third parties who may collaborate with the marketplace operators or use their services. Usually, from the marketplaces we only receive the data necessary for shipping the purchased product.

To find out the purpose and extent of data collection and the subsequent processing and use of data by the marketplaces, as well as your related privacy protection options and rights, please consult the privacy policies of the respective marketplaces.

Amazon is operated by Amazon.com, Inc., 2021 Seventh Ave, Seattle, Washington 98121, USA ("Amazon"). For more information, see Amazon's privacy policy.

11. Recipients of the data

The disclosure of the data collected by us takes place only if this is necessary for the fulfillment of the contract or for the provision of the technical functionality of the website, or if there is another legal basis for the data disclosure.

In principle, we process your data ourselves. However, we also sometimes use external services. In addition to the service providers mentioned in this privacy policy, these may include in particular data centers that store our website and our databases, IT service providers that maintain our systems and consultancy companies. If we transfer data to service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are bound by our contractual orders, have appropriate technical and organizational measures to protect the rights of data subjects and are regularly monitored by us.

Additionally, a disclosure may occur in connection with law enforcement requests, court orders and legal proceedings if necessary to pursue or enforce legal rights.

If sexy-peach.com commissions third parties to collect, process and use data in the context of order processing in accordance with Art. 28 of the GDPR, this occurs exclusively in compliance with the legal provisions on data protection.

Shipping service providers and logistics companies

To deliver your orders, we work with external shipping companies (e.g. DHL). These service providers receive the data necessary for the execution of the contract from us, so that your orders arrive safely and you can track the shipment via the tracking code. This data includes your name, your email address and, if you have provided it to us, also your telephone number. The data is used exclusively for the execution of the shipping or logistics order. The legal basis is Article 6 (1) (b) GDPR. You can remove your phone number from your customer account at any time.

12. Transfer of data to third countries

As explained in this privacy policy, we use services whose provider is partly located in third countries (outside the European Union or the European Economic Area) or processes personal data in such countries, i.e. countries whose level of data protection data does not correspond to that of the European Union. If this is the case and the European Commission has not issued an adequacy decision (Article 45 of the GDPR) for these countries, we have taken appropriate measures to ensure an adequate level of data protection for any data transfers. These include, among others, the European Union's standard contractual clauses or internal binding data protection rules.

If this is not possible, we base the data transfer on exceptions to the art. 49 of the GDPR, in particular your explicit consent or the necessity of the transfer for the execution of the contract or for the implementation of pre-contractual measures.

If a transfer to third countries is envisaged and there are no adequacy decisions or adequate safeguards in place, it is possible and there is a risk that third country authorities (e.g. secret services) may access the transmitted data for collection and analysis and that the exercise of your rights cannot be guaranteed. You will also be informed of this when your consent is requested via the cookie banner.

13. Shelf life

In principle, we store personal data only for as long as necessary to fulfill the contractual or legal obligations for which we collected the data. Thereafter, we delete the data immediately, unless we need the data until the legal limitation period has expired for evidentiary purposes for civil claims or for legal retention obligations.

For testing purposes, we must keep the contract data for a further three years starting from the end of the year in which the business relationship with you ends. Any requests prescribe no earlier than this moment, according to the legal limitation period.

Even after this period, we must partially retain your data for accounting reasons. We are obliged to do so for legal documentation reasons which may arise from the Commercial Code, the Tax Code, the Banking Code, the Anti-Money Laundering Code and the Securities Code. The terms prescribed for the retention of documents range from two to ten years.

14. Your rights

In accordance with the respective legal provisions, you have the following data protection rights:

Right of access (Article 15 GDPR, § 34 BDSG)

Right to erasure (Article 17 GDPR, § 35 BDSG)

Right to rectification (Article 16 GDPR, § 34 BDSG)

Right to limit processing (Article 18 of the GDPR)

Right to data portability (Article 20 of the GDPR)

Right to withdraw consent (Article 7(3) of the GDPR)

Right to object to certain data processing (Article 21 of the GDPR)

To exercise your rights described above, you can contact the contact details indicated in the "Data controller and contacts" section at any time.

Furthermore, you have the right to lodge a complaint with the supervisory authority responsible for us. In Singapore, where our registered office is located. Alternatively, you can contact the data protection authority in your residence, who will forward your request to the competent authority.

15. Data Security

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from transmission risks and unauthorized access by third parties. These measures are adapted from time to time to the current state of technology. To protect the personal data you provide to us on our website, we use Transport Security Protocol (TLS) which encrypts the information you enter.

16. Changes to the privacy statement

We update this privacy statement periodically, for example when we adapt our website or when legal regulations change.