Privacy policy
# Privacy Policy
**isla world GmbH / islaberlin.com**
## 1. Who We Are
The data controller responsible for this website is:
isla world GmbH
hello@islaberlin.com
If you have any questions about how we handle your personal data, please reach out to us at hello@islaberlin.com.
---
## 2. What Data We Collect and Why
We collect personal data only where we have a lawful basis to do so. Below is an overview of the data we collect, the purpose, and the legal basis under GDPR.
| Data | Purpose | Legal Basis |
|---|---|---|
| Name, email, address, payment info | Processing and fulfilling your order | Art. 6(1)(b) GDPR - contract |
| Email address | Internal marketing and newsletters (if opted in) | Art. 6(1)(a) GDPR - consent |
| IP address, browser data | Website analytics and performance | Art. 6(1)(f) GDPR - legitimate interest |
| Cookies (functional) | Improving website usability | Art. 6(1)(f) GDPR - legitimate interest |
| Cookies (marketing/analytics) | Understanding website usage | Art. 6(1)(a) GDPR - consent |
We do not collect more data than is necessary for the stated purposes.
---
## 3. Cookies
We use cookies on this website. Cookies are small text files stored on your device.
**Essential cookies** are necessary for the website to function and cannot be switched off.
**Analytics and marketing cookies** are only set with your explicit consent. You can manage or withdraw your cookie preferences at any time via our cookie settings banner.
---
## 4. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to analyse how visitors use our site. The data generated (including your anonymised IP address) is transmitted to and stored by Google. We have enabled IP anonymisation on this website, meaning your IP address is truncated before transmission.
We only activate Google Analytics with your prior consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via our cookie settings.
You can also prevent Google from collecting and processing your data by downloading and installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
**Note on international data transfers:** Google may transfer data to servers in the United States. Such transfers are governed by Google's Standard Contractual Clauses in accordance with Art. 46 GDPR.
---
## 5. Marketing Communications
If you have given us your consent, we may use your email address to send you information about our products, events, and other news from isla world GmbH.
You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email, or by contacting us at hello@islaberlin.com.
Withdrawing your consent does not affect the lawfulness of processing that took place before the withdrawal.
---
## 6. Sharing Your Data
We do not sell your personal data. We only share your data with third parties in the following circumstances:
- **Service providers** (e.g. payment processors, shipping partners) who process data on our behalf and are contractually bound to protect it
- **Legal obligations** where we are required to disclose data by law or a competent authority
We require all third parties to handle your data securely and in accordance with applicable data protection laws.
---
## 7. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes it was collected:
- **Order data:** retained for 10 years in accordance with German commercial law (HGB)
- **Marketing data:** until you withdraw your consent
- **Analytics data:** as configured in Google Analytics (default: 14 months)
---
## 8. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- **Right of access** - you can request a copy of the data we hold about you
- **Right to rectification** - you can ask us to correct inaccurate data
- **Right to erasure** - you can ask us to delete your data ("right to be forgotten"), subject to legal retention obligations
- **Right to restriction** - you can ask us to limit how we use your data
- **Right to data portability** - you can request your data in a machine-readable format
- **Right to object** - you can object to processing based on legitimate interests or for direct marketing purposes
- **Right to withdraw consent** - where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at hello@islaberlin.com. We will respond within 30 days.
---
## 9. Right to Lodge a Complaint
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the competent supervisory authority. In Berlin, this is:
**Berliner Beauftragte für Datenschutz und Informationsfreiheit**
Friedrichstr. 219
10969 Berlin
Website: https://www.datenschutz-berlin.de
---
## 10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website uses SSL/TLS encryption for all data transmission.
---
## 11. Changes to This Policy
We may update this privacy policy from time to time. The current version will always be available on this page, with the date of the last update shown at the top.
---
*isla world GmbH - hello@islaberlin.com*
