Our objective is always to offer you the best possible service and therefore the responsible handling of your personal data is our highest priority.
Controller
ASIA 4 YOU, LLC
Latvių st. 50 – 8, Vilnius 08113, Lithuania
Contact Data Protection Officer
If you have any questions about data protection, please send us an e-mail or contact our Data Protection Officer directly:
ASIA 4 YOU
info@incensesticksonline.com
Your rights to access, rectification, erasure, restriction of processing, data portability, and objection
You have the right at any time to be provided with information about any personal data stored on our servers that is related to you. You also have the right to rectification, apart from the prescribed data storage for business transactions, erasure of your personal data, restriction of processing, transfer of your data and objection to processing.
Please contact info@incensesticksonline.com concerning this.
Postal data
ASIA 4 YOU
Latviu st. 50 – 8, Vilnius 08113, Lithuania
Your Rights
In addition to the right to complain of supervisory authority, you have the following rights under the applicable data protection law. To exercise your rights, please contact us by e-mailing info@incensesticksonline.com.
The right of access. You have the right to request confirmation from us as to whether your personal data is being processed. If this is the case, you have a right of access to information about this personal data. The right of access to information covers in particular information on the purposes of processing, the categories of personal data being processed and the recipients or groups of recipients to whom the personal data have been or are still being disclosed. Please note that the right of access is not an absolute right and that the legitimate interests of other persons may restrict the right of access.
Right to rectification. You have the right to request the correction of your personal data. Taking into account the purposes of the processing, you also have the right to require the completion of incomplete personal data, -even using a supplementary declaration.
Right to erasure (“right to be forgotten”).If the relevant requirements are met, you can request that the personal data relating to you be erased immediately.
Right to the restriction of processing. If the important prerequisites are met, you can request the limit of processing. In this case, the personal data concerned will be marked accordingly and, if necessary, only processed for specific purposes.
Right to data portability. If the relevant requirements are met, you have the right to data portability concerning your personal data that you have provided to us, i.e. the right to receive it in a structured, common and machine-readable format and, if necessary, to transmit this data to another controller without interference from the one to whom the personal data was provided.
The right of objection. In certain circumstances, for reasons arising from your particular situation, you have the right to object to the processing of your personal data. This also applies to associated profiling. You also have the right to object to the processing of your personal data for direct marketing purposes at any time and free of charge. The same applies to the processing of personal data, including profiling, insofar as this is related to direct marketing.
You may revoke your consent at any time with effect for the future via info@incensesticksonline or by written notice to ASIA4YOU, Latviu st. 50 – 8, Vilnius 08113, Lithuania
Right to lodge a complaint
You can contact your local supervisory authority at any time with a complaint. Your competent supervisory authority depends on the federal state in which you live.
Information storage time and deletion
We adhere to the principles of data avoidance and data economy. Therefore, we store your personal data only as long as is necessary to achieve the purposes mentioned here or as required according to the various storage periods determined by the competent legal authorities. Statutory retention periods may arise from the Commercial Code or the Tax Code and generally last 6 to 10 years, or if evidence must be provided during the statutory limitation periods, which are usually three years but can be up to 30 years.
If we no longer need your personal data to comply with contractual or legal obligations, it will be deleted from our systems or made anonymous accordingly, so that identification is not possible.
Visiting our website
When you access our website, information of a general nature is gathered automatically. This information (server log files) includes such data as the type of browser used, the operating system used, the domain name of your Internet service provider, and other similar data. None of the information collected can be traced back to you personally. This information is generated automatically during Internet use and is required for technical reasons so that the requested web content can be correctly displayed. Anonymous data of this kind can be statistically analyzed to improve our website and its underlying technology.
Cookies
As do many other websites, we make use of “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data, for example, IP address, browser used, operating system, about your computer and your connection to the Internet.
Cookies cannot be used to run programs or transfer viruses to your computer. Based on the information contained in the cookies, we can simplify navigation for you and ensure that our website is displayed correctly.
The information we collect will never be forwarded to third parties or linked to your personal data without your consent.
Our website can, of course, be viewed without the use of cookies. Internet browsers usually are configured to accept cookies. You can disable the use of cookies in your browser settings at any time. Please refer to your Internet browser’s Help feature to learn how you can change these settings. Please note that some of our website features may not work if you have disabled the use of cookies.
The cookies used here have different terms, which can be 1 day, 1 week, ½ year or 1 year depending on the above-mentioned purpose.
Registration in the incensesticksonline.com Online Shop
When you register to use our personalised services, we collect some of your personal data, such as your name, address, and contact and communication details like your telephone number and e-mail address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users have the option, for example, to change or delete the data provided during registration at any time, to view order history, to keep an address book or to conveniently subscribe or unsubscribe from the newsletter.
The legal basis of the data processing is Art. 6 (1) lit. b) GDPR, namely to fulfil contractual obligations or to take pre-contractual measures.
The provision of data is obligatory. Without the requirement of the data, we cannot offer you the convenience of a customer account described above.
Ordering using a customer account
If you have opened a customer account with us, you will be asked to log in to your customer account with your e-mail address and password as part of the ordering process. If you have entered your delivery and billing address in your customer account, these addresses will be suggested to you for the current order. Otherwise, you will be asked to provide a billing address, which will then be stored in your customer account and used for future orders. You can also voluntarily provide us with your telephone number so that we can contact you if we have any queries regarding your order or the coordination of the delivery. As part of the ordering process, you always have the option of changing or supplementing your details.
The legal basis of the data processing is Art. 6 (1) lit. b) GDPR, namely to fulfil contractual obligations or to take pre-contractual measures.
The provision of data is obligatory for ordering with a customer account. You do, of course, have the option to order as an unregistered guest.
Ordering without a customer account (guest account)
Of course, you can also use the online shop without an existing customer account. In this case, you enter the information required to process your order within the framework of the respective order. The following information is requested: Title, first and last name, postal address, depending on the choice of payment method, your date of birth, e-mail address and optionally your telephone number.
The legal basis of the order processing is Art. 6 (1) lit. b) GDPR, namely to fulfil contractual obligations or to take pre-contractual measures.
The provision of data is obligatory. Without this data, we cannot process your order. However, this is not linked to other data or purchases.
Use of logistics providers and other service providers
To send your order, ASIA 4 YOU provides your personal data to our suppliers and payment provider Paypal who process this data on behalf of ASIA 4 YOU and in compliance with the necessary security measures exclusively for the purpose of fulfiling the contract.
The service mentioned above providers process your personal data on our behalf and exclusively by our instructions (subcontracting data processing, Art. 28 GDPR).
Measures to prevent fraud and detect misuse
To protect the order process from fraudulent and/or abusive behaviour, we automatically check during the order process whether there are any anomalies in the specific order for the contract.
For this reason, the
1) data for contract processing (e.g. object of purchase, name, postal address, e-mail address, delivery address, a method of payment and bank details) and
2) usage data of the website visits of the incensesticksonline.com online shop (e.g. information about start, end and extent of the visited websites as well as click paths) together with
.coma cookie (i.e. a small text file stored locally in the cache of the web browser) and/or a visitor ID, which may contain anonymous data of the end devices used when visiting the web pages (e.g. the screen resolution or the operating system version) and can be recognized by the end devices used with a certain probability during further visits, with the purpose of processing my user account, the web pages I visit and services that I use on the website under www.incensesticksonline.com, against fraud (e.g. by taking over user accounts, the automated creation of fake user accounts by bots, the use of stolen identities or payment data or incorrect ratings for services), for product optimization and further development or against misuse (e.g. by technical attacks on the IT infrastructure, “man-in-the-middle” attacks, brute force attacks or the use of malware) should be protected on the basis of a legitimate interest pursuant to Art. 6 (1) lit. f) GDPR in conjunction with Recital 47, should be protected.
The recipients of the data are exclusively contractual partners of the incensesticksonline.com Online Shop. In this case, the recipients are Paypal payment providers who were commissioned to store the data.
If there is a suspicion of fraud or misuse, an employee of the incensesticksonline.com Online Shop checks the evaluation and the underlying evidence.
If a contract is rejected, you will be informed and, upon request, the main reasons for the decision will be given to you. You will then have the opportunity to make your standpoint known to info@incensesticksonline.com, after that an employee will review the decision.
Revocation
I can object to the above-mentioned processing according to [Art.] 21 GDPR at any time to the provider using an informal letter to info@incensesticksonline.com. In this case, a case-by-case examination takes place, about which I shall receive information.
Newsletter
On our website www.incensesticksonline.com, you have the option to subscribe to our newsletter. The newsletter informs you personally about news about our current collections, special events and exclusive and individual offers. To be able to send you this information, we require a valid e-mail address (mandatory field). Furthermore, we request additional information that you may optionally provide, such as your title, first and last name or address, so that we can contact you personally or by post. Your data will be used exclusively for sending newsletters by e-mail or by post and will not be passed on to third parties. An exception is data processors, which we use in the context of data processing (dispatch of newsletters and print media) by Art. 28 GDPR data processors. We work together with MailChimp.
The legal basis of data processing is consent by Art. 6 (1) lit. a) GDPR. If you do not wish to provide this information, you will either not receive any news about our current collections, special events or exclusive and individual offers or will not be contacted personally and may not receive any special offers tailored to your data. Subscribers may also be notified by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical matters).
After successful registration for the newsletter, it must be checked that the owner of the e-mail address has made the registration. For this purpose, we apply the “double opt-in” procedure: After registration you will receive a confirmation e-mail asking you to verify your registration by clicking on a confirmation link. In the “double opt-in” procedure, we log the registration, the sending of confirmation e-mail and the receipt of the requested reply. With your consent, we also record your user behaviour within the newsletter. We use this information exclusively in anonymous form to be able to illustrate the success of a newsletter dispatch (for example over the rate of newsletter opening). No personalised user profiles are created in any form under an assignment of your person and/or e-mail address.
You can revoke your consent to the storage of your personal data and their use for the newsletter and postal dispatch at any time. In each newsletter, you will find a link to unsubscribe from the newsletter. You can also contact us at any time using the e-mail address info@incensesticksonline.com and request the deletion of certain data.
Contact form
You can contact ASIA 4 YOU directly using the contact form provided on the website. If you contact us via the contact form, the information you provide, such as title, first and last name, e-mail, subject (option: question about an order, question about an item, information about a return, complaint about an item, customer account, improvements & comments and others) will be stored for the purpose of processing the inquiry and for possible follow-up questions.
The legal basis of data processing is the fulfilment of contractual obligations or pre-contractual measures by Art. 6 (1) lit. b) GDPR,
If you do not provide the required information, we will not be able to process your request to your satisfaction.
Use of Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (hereafter: Google). Google Analytics uses “cookies”, which are text files stored in your computer that enable the analysis of how users use the website. The information generated by the cookie about your usage will generally be transmitted to a Google server in the USA and stored there. However, if IP anonymisation is enabled on this website, your IP address will first be truncated by Google within the member states of the European Union or other countries party to the agreement on the European Economic Area. In exceptional cases only, the complete IP address may be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website to compile reports on the activities of the website and to provide further services relating to the use of the website and the Internet usage vis-à-vis the operator of the website. The IP address that your browser transmits within the scope of Google Analytics will not be associated with any other data held by Google.
You can refuse the storing of cookies by selecting the appropriate settings on your browser software; however, we must point out that in this case, you may not be able to use all the features of this website. Also, you can also prevent Google from collecting the data generated by the cookie about your use of the website (including your IP address) and the processing of this data by Google in the future by downloading and installing the browser plug-in available under the following link: Browser add-on to disable Google Analytics.
The legal basis of the data processing is an overriding interest in accordance with Art. 6 (1) lit. f) GDPR to enable continuous improvement of the website.
In this context, we may also process data in the USA. In these cases the provider is Google LLC, the security of the processing is guaranteed via the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
The provision of the data is voluntary, but without the provision of the data, the website may no longer be fully usable.
Google Ads
Our website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google Ads sets a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If you visit specific pages within our website and the cookie has not yet expired, both Google and ourselves can recognise that you have clicked the advert and have been directed to that page. Each Google Ads advertiser receives a different cookie. Cookies cannot be tracked using the website of an Ads advertiser. The information obtained by the conversion cookie is used to create conversion statistics for the Ads advertisers who have opted for Conversion Tracking. The advertisers can find out the total number of users who clicked on their ad and were directed to the page with a conversion tracking tag. However, they do not receive any information that enables the personal identification of the users.
The provision of the data is voluntary. If you do not wish to participate in tracking, you can refuse to allow the required cookie to be set – for example using browser settings that deactivate all automatic cookie setting, or by setting your browser to block cookies from the “googleleadservices.com” domain.
Please note that if you do not wish measurement data to be recorded, you must not delete opt-out cookies. If you have deleted all cookies in your browser, you must reset the respective opt-out cookie.
The legal basis of the data processing is an overriding interest in accordance with Art. 6 (1) lit. f) GDPR for measuring the success of advertising measures as well as targeted, relevant and localised advertising.
In this context, we may also process data in the USA. In these cases the provider is Google LLC, the security of the processing is guaranteed via the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
The provision of the data is voluntary, but the functions cannot be used in full without the provision of the data.
The use of Google Remarketing
This website uses the remarketing function of Google Inc. The purpose of this feature is to present interest-based ads to website visitors within the Google advertising network. A “cookie” is stored in the visitor’s browser, which makes it possible to recognise the visitor when he or she visits websites that belong to Google’s advertising network. In this way, you can be presented with advertisements related to content previously accessed on sites using the Google remarketing feature.
Google states that it does not collect any personal data from this function. However, if you still wish to decline the use of Google’s remarketing feature, you can always disable it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising through the ad network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
The legal basis of the data processing is an overriding interest in accordance with Art. 6 (1) lit. f) GDPR. for the targeted control of advertising measures
In this context, we may also process data in the USA. In these cases the provider is Google LLC, the security of the processing is guaranteed via the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
If you do not wish to participate in tracking, you can refuse the necessary setting of a cookie – for example using a browser setting that generally deactivates the automatic setting of cookies.
We process personal data within the framework of the use of the social media platform Facebook on the basis of an overriding legitimate interest in accordance with. Art. 6 (1) lit. f) GDPR (with regard to name, e-mail, date of birth and language) and Art. 6 (1) lit. a) GDPR (with regard to further data such as name, e-mail, date of birth and language and surfing behaviour).
We use the following tools for this:
Facebook Connect for voluntary and optional login through your social media account
Facebook Custom Audience and Facebook Pixel (for building remarketing lists, creating target groups and lookalikes, and measuring events to control performance)
In this context, we may also process data in the USA. In these cases, the provider is Facebook Inc., the security of the processing is guaranteed via the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
The provision of the data is only voluntary if you are not logged on to Facebook. However, without providing the data, we cannot offer you the advantages of the tools described above.
Other marketing tools
To offer you relevant advertising and the best possible shopping experience, we collect and process the following additional tools when using our website:
For controlling other tags (from Google Analytics, Ads Remarketing Tag, Optimizely, Facebook Pixel)
Google Tag Manager
For measuring the success of search engines:
Google conversion (via UDG smart Tracking)
For product recommendation on our pages
Epoq
In this context, we may also process data in the USA. The provider in the cases of Google Tag Manager, Google Conversion and GA Audiences is Google LLC, the security of processing is guaranteed via the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
The legal basis of the data processing by means of the various marketing tools is the prevailing interest in accordance with Art. 6 (1) lit. f) GDPR.
The provision of the data is voluntary by removing the cookies using the settings in your browser data. However, without this information, we cannot show you more personalised and relevant advertising.