The controller responsible for the processing of personal data on this website is:
Nawal Elkhawaga GmbH
Europa-Allee 2
60327 Frankfurt am Main
Germany
Email: contact@nawastudio.co
We take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect when you visit our website, place an order, contact us, or otherwise use our services, and how we process and protect this information.
Personal data means any information relating to an identified or identifiable natural person, such as your name, address, email address, telephone number or IP address.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
When you access our website, certain technical information may automatically be transmitted by your browser to our web server or hosting provider.
This may include:
This information is processed to ensure the proper functioning, security and stability of our website.
The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in providing a secure and functional website.
If our website allows you to create a customer account, we process the information you provide when registering and using your account.
This may include your name, email address, billing and shipping addresses, telephone number and order history.
The processing is carried out to provide and manage your customer account and facilitate future orders.
The legal basis is Article 6(1)(b) GDPR.
You may request the deletion of your customer account at any time, subject to any information that we are legally required to retain.
When you place an order through our online shop, we process the personal information necessary to process and fulfil your order.
This may include:
This information is necessary to process your purchase, arrange payment and delivery, handle returns or complaints and provide customer service.
The legal basis for this processing is Article 6(1)(b) GDPR.
Information that must be retained for tax, accounting or other legal purposes may also be processed pursuant to Article 6(1)(c) GDPR.
When you make a payment, the information necessary to process the transaction may be transmitted to the payment service provider selected during checkout.
Depending on the payment method, this may include your name, billing information, payment amount, transaction information and other information required by the payment provider.
Payment providers process certain information under their own responsibility and in accordance with their respective privacy policies.
We do not necessarily receive or store your complete credit or debit card details.
The legal basis for processing payment information required to complete your purchase is Article 6(1)(b) GDPR.
To fulfil and deliver your order, we may provide the necessary personal information to the shipping, courier or logistics company responsible for your delivery.
The information transmitted may include:
By placing an order, you agree that your email address and telephone number may be shared with the shipping provider for the purpose of delivering your order.
Your contact details may be used by the shipping provider to provide tracking information, send delivery notifications, arrange delivery or contact you if necessary in connection with your shipment.
The legal basis for processing information necessary for delivery is Article 6(1)(b) GDPR. Where processing is based on our legitimate interests, Article 6(1)(f) GDPR applies.
If you contact us by email, telephone, contact form or another communication method, we process the information you provide in order to respond to your enquiry.
This may include your name, email address, telephone number and the content of your message.
If your enquiry concerns an existing or potential contract, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest in communicating with customers and website visitors pursuant to Article 6(1)(f) GDPR.
Our website uses cookies and, where applicable, similar technologies.
Cookies are small files stored on your device that enable certain website functions.
Some cookies are technically necessary for the operation of the website and online shop. These may be used, for example, to maintain your shopping cart, remember your session or provide security functions.
Other cookies may be used for analytics, advertising, marketing or other optional purposes.
Where your consent is legally required, such cookies and technologies will only be activated after you have given your consent.
You can manage or withdraw your consent at any time through the cookie settings provided on our website.
The legal basis for processing based on your consent is Article 6(1)(a) GDPR. Processing of technically necessary information may be based on Article 6(1)(f) GDPR or other applicable legal provisions.
We may use external service providers to operate our website and online shop.
These may include providers of:
Personal data is only shared to the extent necessary for the relevant service.
Where a service provider processes personal data on our behalf, appropriate contractual arrangements are made in accordance with applicable data protection requirements.
Where applicable, our website may use analytics and marketing technologies to understand how visitors use our website and to measure or improve our advertising.
Such technologies may process information including your IP address, browser information, device information, pages visited and interactions with our website.
Where required by law, analytics and marketing technologies are only activated after you have given your consent.
You may withdraw your consent at any time through our cookie settings.
The legal basis for consent-based processing is Article 6(1)(a) GDPR.
If you subscribe to our newsletter or expressly agree to receive marketing communications, we may use your email address and other information provided during registration to send you news, offers and information about our products.
Where required, we use your information for email marketing only with your consent.
The legal basis is Article 6(1)(a) GDPR.
You can withdraw your consent and unsubscribe from marketing emails at any time, for example by using the unsubscribe link contained in the relevant email.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
We retain personal data only for as long as necessary for the purposes for which it was collected.
Certain information relating to orders, invoices, payments and business transactions may need to be retained for longer periods in order to comply with German tax, commercial, accounting or other statutory retention requirements.
Once the applicable retention period has expired and the information is no longer required for another lawful purpose, it will be deleted or anonymised as appropriate.
Some of the service providers used on our website may process personal data outside Germany or the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, we take appropriate measures where required to ensure an adequate level of data protection.
Depending on the circumstances, these measures may include an adequacy decision by the European Commission, appropriate safeguards or the European Commission’s Standard Contractual Clauses.
Under the GDPR, you have various rights regarding your personal data, subject to the applicable legal requirements.
These may include:
To exercise your rights, please contact us using the contact details provided above.
Where we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Our security measures are reviewed and adapted where appropriate in accordance with technological developments and the risks associated with the processing.
We may update this Privacy Policy where necessary, for example when we introduce new services, change the technologies used on our website or when legal requirements change.
The version published on this website is the current version.
