Velara Forged

Signed in as:

filler@godaddy.com

Account

Privacy Policy - VELARA FORGED

1. Introduction & Controller Information

Thank you for your interest in our website.

This notice explains how we handle your personal data—any data that identifies you personally.

The controller under the GDPR is responsible for determining how your data is processed.

Controller: Darren Green Tel: +44 (0)330 043 9876 Email: info@velaraforged.co.uk

2. Data Collection on Our Website

When you visit our site without registering or sending information, we collect only the data your browser sends to our server (“server log files”): visited site, access date/time, data volume, referrer, browser and OS used, and (if applicable) anonymised IP address. Processing is based on Article 6(1)(f) GDPR for website stability and functionality.

We do not share this data unless illegal activity is suspected.

For security, our website uses SSL/TLS encryption, indicated by “https://” and a lock symbol in your browser.

3. Hosting & Content Delivery

Our website is hosted on servers within the EU by a provider bound by a data processing agreement, ensuring your data’s protection and preventing unauthorised sharing.

4. Cookies

We use cookies to improve your experience and enable certain functions. Session cookies are deleted when you close your browser; persistent cookies remain longer for saved settings.

You can view cookie durations in your browser’s settings.

If cookies process personal data, processing is based on Article 6(1)(b) GDPR (contract), Article 6(1)(a) GDPR (consent), or Article 6(1)(f) GDPR (legitimate interests). You can adjust your browser to allow or block cookies.

Blocking cookies may limit website functionality.

5. Contact Us

When contacting us (e.g., via contact form or email), personal data is processed solely for managing and responding to your enquiry and only as necessary.

The legal basis is our legitimate interest in handling your request, as set forth in Article 6(1)(f) GDPR. If your query pertains to a contract, Article 6(1)(b) GDPR additionally applies. Data is deleted when the matter is resolved and no statutory retention obligations exist.

6. Data Processing When Opening a Customer Account

In accordance with Article 6(1)(b) GDPR, personal data is collected and processed as necessary when you provide it during account registration.

The required data fields are listed in the relevant form on our website.

Your customer account may be deleted at any time by contacting the controller at the above address.

Following account deletion, your data will be removed provided all related contracts are fulfilled, there are no overriding statutory retention requirements, and no legitimate reasons remain for further storage.

7. Use of Customer Data for Direct Marketing

7.1 Signing up for Our Email Newsletter

Upon subscribing to our email newsletter, you will regularly receive updates on our offers.

The mandatory information required for newsletter delivery is your email address; supplying additional details is voluntary and allows for personalised communication.

We employ a double opt-in process, ensuring newsletters are only sent after you expressly confirm your consent via a verification link sent to your email.

By activating this link, you provide consent for the use of your personal data as outlined in Article 6(1)(a) GDPR. We record your IP address and the date/time of registration for security reasons, enabling us to investigate potential misuse of your email. Data collected will be used solely for newsletter delivery.

You may unsubscribe at any time via the link in the newsletter or by contacting the responsible person named above.

Upon unsubscribing, your email address will be promptly deleted from our distribution list unless you have given additional consent for further use or law permits extended usage, about which we will inform you separately.

7.2 Sending the Email Newsletter to Existing Customers

If you have supplied your email when purchasing goods or services, we may send you information on similar goods or services via email without separate consent, per § 7 para. 3 UWG. Data processing relies on our legitimate interest in personalised direct marketing (Article 6(1)(f) GDPR). If you objected to this usage initially, you would not receive such emails.

You may object to the use of your email for these promotional purposes at any time, with effect for the future, by notifying the responsible person indicated above. Only standard transmission costs apply.

Once your objection is received, use of your email address for advertising ceases immediately.

7.3 Email Newsletters

Our email newsletters are distributed by our marketing team.

Based on our legitimate interest in efficient and user-friendly newsletter marketing, data provided for newsletter registration is shared with this provider as per Article 6(1)(f) GDPR, allowing them to dispatch the newsletter on our behalf.

With your express consent under Article 6(1)(a) GDPR, the provider also performs statistical evaluation of newsletter campaign success through web beacons or tracking pixels that measure open rates and specific interactions. Device-related information (such as access times, IP address, browser type, and operating system) is collected and analysed but not merged with other datasets.

Consent for newsletter tracking may be withdrawn at any time with future effect.

A data processing agreement is in place with the provider to protect site visitor data and preclude unauthorised third-party sharing.

8. Data Processing for Order Processing

8.1 Contract Execution

Where necessary for the execution of the contract for delivery and payment purposes, personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Article 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact details provided by you when ordering in order to inform you personally within the framework of our legal information obligations pursuant to Article 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of informing you of updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the following information.

8.2 Disclosure of Personal Data to Shipping Service Providers

We will pass on your email address and/or telephone number to our preferred provider in accordance with Article 6(1)(a) GDPR before delivery of the goods for the purpose of coordinating a delivery date or delivery announcement, provided that you have given your express consent to this during the ordering process.

Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Article 6(1)(b) GDPR.

The transfer will only take place to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or the delivery announcement.

Consent can be revoked at any time with effect for the future via the above-mentioned controller or the provider.

8.3 Use of Payment Service Providers

· PayPal Online payment methods are available from PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from the provider for which you make advance payments, your payment data provided during the order process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order in accordance with Article 6(1)(b) GDPR will be passed on to the provider. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, email address, telephone number, if applicable, data for an alternative means of payment) during the order process.

To safeguard our legitimate interest in determining your solvency in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Article 6(1)(f) GDPR. On the basis of the personal data you provide as well as other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.

The credit report can contain probability values (“score values”). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.

9. Web Analysis Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

Google (Universal) Analytics is used exclusively without the use of cookies; instead, the local memory of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables analysis of your use of the website. For this purpose, certain user information is processed via the ID, including your IP address, which is shortened by Google to exclude direct personal reference.

The information is transmitted to Google’s servers and processed there.

Transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website activity and internet usage.

The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. Data collected in the context of the use of Google (Universal) Analytics will be stored for a period of two months and then deleted.

All processing described above, including the storage of information on the end device used in the form of the ID, will only take place if you have given us your express consent in accordance with Article 6(1)(a) GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with effect for the future.

To exercise your withdrawal, you can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, within browsers on mobile devices, you can revoke your consent by clicking on the opt-out link provided on our website to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will have to click on this link again).

We have concluded a data processing agreement with Google that ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at:

· https://business.safety.google/intl/en/privacy/

· https://policies.google.com/privacy?hl=en&gl=en

· https://policies.google.com/technologies/partner-sites

Google (Universal) Analytics uses the special “demographic characteristics” function and can use it to compile statistics about the age, gender and interests of site visitors. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after two months.

Google Signals, as an extension to Google (Universal) Analytics, may be used to generate cross-device reports. If you have activated personalised ads and have linked your devices to your Google account, Google may, subject to your consent, analyse your usage behaviour across devices and create database models, including for cross-device conversions.

We do not receive any personal data from Google, only statistics. If you want to stop cross-device analytics, you can turn off Ads Personalised in your Google Account settings.

For more information, visit:

· https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en https://support.google.com/analytics/answer/7532985?hl=en

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10. Retargeting/Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the “Meta Pixel” service of Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”).

If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter with the help of “Meta Pixel”.

This URL parameter is then entered into the user’s browser after being forwarded by a cookie that our linked site sets itself.

This enables Meta to determine the visitors of our online offer as the target group for the display of advertisements (“ads”).

We use the service to display Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Meta (“Custom Audiences”).

he “Meta Pixel” can also be used to track whether users were redirected to our website after clicking on an advertisement and what actions they take there (“conversion tracking”).

The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Article 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.

11. Site Functionalities

11.1 - Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the captcha window, the provider uses "Google Fonts", i.e. fonts downloaded by Google from the Internet. There is no processing of further information than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality.

The service checks whether an input is made by a natural person or abusively through machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. In order to ensure that an action is carried out by a human and not by an automated bot, the Provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit and transmits them to the Provider's servers for evaluation.

Cookies can be used here, i.e. small text files that are stored in the browser of the end device.

If the processing described above is based on cookies, they will only be set if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual personal responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on Google's privacy policy can be found here:

https://policies.google.com › privacy

12. Tools and Miscellaneous

12.1 - Quickbooks

To handle the accounting, we use the service of the cloud-based accounting software of the following provider: Intuit Quickbooks

The provider processes incoming and outgoing invoices and, if necessary, also the bank transactions of our company in order to automatically enter invoices, match them to the transactions and create financial accounting from them in a semi-automated process.

If personal data is also processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions in accordance with Art. 6 (1) (f) GDPR.

12.2 Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when the page is accessed in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking the box.

By using the tool, all cookies/services requiring consent are only loaded if the respective user gives corresponding consent by ticking the box. This ensures that such cookies are only placed on the user's respective end device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences.

Personal user data is not processed in this process.

If, in an individual case, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13. Rights of the data subject

13.1 The applicable data protection law grants you the following rights of data subjects (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis mentioned for the respective conditions for exercising:

· Right of access pursuant to Art. 15 GDPR;

· Right to rectification pursuant to Art. 16 GDPR;

· Right to erasure in accordance with Art. 17 GDPR;

· Right to restriction of processing in accordance with Art. 18 GDPR;

· Right to information pursuant to Art. 19 GDPR;

· Right to data portability in accordance with Art. 20 GDPR;

· Right to revoke consent given in accordance with Art. 7 (3) GDPR;

· Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 Right to object

If, as part of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds arising from your particular situation.

If you make use of your right to object, we will stop processing the data concerned. however, we reserve the right to further processing if we can prove compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. you can exercise the objection as described above.

If you make use of your right to object, we will stop processing the data concerned for direct marketing purposes.

14. Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal transaction or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer necessary for the performance or initiation of a contract and/or there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, Exercising or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this Statement about specific processing situations, stored personal data will also be deleted when it is no longer necessary for the purposes for which it was collected or statutory retention obligations exist.

13.2 Right to object

If you make use of your right to object, we will stop processing the data concerned for direct marketing purposes.

14. Duration of storage of personal data

When processing personal data on the basis of explicit consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

Privacy Policy for Velara Forged

This website uses cookies.