top of page

Privacy Policy

1. Responsible Party
Responsible for data processing on this website:
Cemrea Bridal Artistry
Owner: Rukiye Cemre Birtek
Sole proprietorship (small business)
Bahnhofstraße 9, 56414 Wallmerod, Germany
Email: info@cemrea.com
Phone: +49 152 0313 6064

Data Protection Officer
Our company is not legally required to appoint a data protection officer.
No data protection officer has therefore been appointed.

2. Collection and Processing of Personal Data
We process personal data, including: name, address, email address, phone number, IP address, payment information.
During the ordering process, we collect the following personal data: name, address, email address, phone number, and payment information. These data are used solely for order processing, invoicing, product delivery, and communication with you.

Purpose of Processing:

  • Order processing and invoicing (Art. 6(1)(b) GDPR)

  • Customer service and communication

  • Product shipping

  • Marketing (only with consent, Art. 6(1)(a) GDPR)

  • Website analysis for optimization (legitimate interest, Art. 6(1)(f) GDPR)

Legal Basis: Contract fulfillment, consent, legitimate interest

Payment Information – Payment methods: credit card, PayPal, Apple Pay, bank transfer (IBAN). Payment data are not stored on our website and are transmitted securely via the payment providers (PCI-DSS compliant).

3. Member Accounts
Our website allows the creation of a personal user account via the Wix platform.

During registration and use of a member account, personal data such as name, email address, username, and technical access data are processed.

The processing of this data is for providing the user account, managing memberships, and communicating with registered users.

Additionally, technical data such as IP address and access times may be processed to ensure website security and prevent abuse.

Processing of personal data is based on Article 6(1)(b) GDPR for contract fulfillment and Article 6(1)(f) GDPR due to our legitimate interest in a secure and functional website.

Data is stored only as long as the user account is active or legal retention obligations exist.

Users can request deletion of their account or access to stored personal data at any time.

Processing is carried out via the Wix platform, which acts as a data processor under Article 28 GDPR.

Wix as Platform Provider:
This website is operated via the Wix platform, provided by Wix.com Ltd.
Personal data may be processed on Wix servers when using member functions. Wix acts as a data processor under Article 28 GDPR.

Inactive User Accounts:
Accounts inactive for more than 24 months will be automatically deleted unless legal retention obligations exist.

4. E-Commerce & Payment Providers

4.1 Processing of Customer and Contract Data
We process personal data you provide when placing orders on our website, including name, address, email address, phone number, and payment information.
Purpose: Order processing, invoicing, shipping, and customer service
Legal Basis: Contract fulfillment (Art. 6(1)(b) GDPR)

Marketing Note: Sending promotional emails or newsletters requires your explicit consent (Double Opt-In). For existing customers, advertising without consent is only permitted according to §7(3) UWG.

Retention Periods:
Order and invoice data are retained for 10 years in accordance with statutory regulations (§257 HGB, §147 AO).

​

Supplementary Information on Website Usage Analysis (Wix Analytics)

In addition to the analysis and tracking tools mentioned above, we also use the integrated analytics features of the website platform we use, namely Wix Analytics.

We collect pseudonymized usage data such as:

  • Pages visited

  • Time spent on each page

  • Clicks and navigation within the website

  • Device type, browser, operating system, and anonymized IP address
    These data do not allow direct identification and are used to optimize the website, improve content, and enhance user experience.
    Legal basis: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

In this context, pseudonymized usage data is collected, in particular:

pages accessed
time spent on individual pages
click behavior and navigation within the website
technical information such as device type, browser, operating system, and anonymized IP address

This data does not allow any direct conclusions to be drawn about your identity and is used exclusively to understand user behavior, technically optimize our website, improve content, and make our services more user friendly.

The processing is carried out:

on the basis of your consent pursuant to Article 6 paragraph 1 a GDPR, insofar as consent has been obtained via the cookie consent banner
alternatively on the basis of our legitimate interest pursuant to Article 6 paragraph 1 f GDPR in the secure, stable, and efficient optimization of our online offering

This data is collected only if you have consented to the use of analytics cookies. You may revoke or adjust your consent at any time via the cookie settings on our website.

​

4.2 Data Transfer upon Contract Conclusion for Online Shops
Upon concluding a purchase through our online shop, required data is transmitted to service providers involved in order processing and shipping (e.g., shipping companies, payment providers).
Purpose: Fulfillment of the purchase contract and delivery of goods
Legal Basis: Contract fulfillment (Art. 6(1)(b) GDPR)

4.3 Third-Party Payment Services
We offer various payment services for processing your payments, e.g., PayPal, credit card, Apple Pay, bank transfer (IBAN).
Your payment data is not stored on our website but securely transmitted to the payment providers.
Purpose: Payment processing
Legal Basis: Contract fulfillment (Art. 6(1)(b) GDPR)
Note: You cannot prevent transmission of data to these providers if you use the offered payment methods.

5. Cookies, Tracking & Analysis
We use cookies, Google Analytics, Facebook Pixel, consent management tools (Consentik), social media plugins (Instagram, Pinterest), Google Web Fonts, Google Maps, reCAPTCHA, Amazon Web Services (AWS), and Google Cloud CDN for website functionality, analysis, optimization, and marketing.

We use Wix tools for website functionality, analysis, optimization, and marketing/customer interactions.
Our website uses cookies to analyze website usage and improve the user experience.
We use the Consentik cookie consent tool to manage user consent for processing personal data within the framework of cookies and tracking.

Purpose: Consent (Art. 6(1)(a) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)
We do not use the following cookie consent tools: Osano, Cookie Notice & Compliance, Complianz, Pixelmate, GDPR Legal Cookie by Shopify, CCM19, Real Cookie Banner, CookieFirst. Only Consentik is used. Server log files are additionally stored for technical security, and the contact form is used for processing inquiries.

Our website uses tracking and analysis tools (Google Analytics, Facebook Pixel, Pinterest Tag, TikTok, etc.) only after explicit user consent.
Consent is managed via the Consentik cookie consent tool.
Users can change or revoke consent at any time via the cookie banner.
Google Analytics is configured with IP anonymization ('anonymize_ip': true).

5.1 Cookies & Consent
Purpose: Website usage analysis, marketing, personalization
Consent (Art. 6(1)(a) GDPR) is obtained for tracking and marketing cookies. Legitimate interest (Art. 6(1)(f) GDPR) applies to strictly necessary and functional cookies.

Opt-Out: Users can reject or adjust cookies via the Consentik cookie manager
Further information on cookies: allaboutcookies.org
Do-Not-Track: Our website does not respond to browser "Do Not Track" signals

Note: The Consentik cookie tool also manages personal data processing for member accounts. Users can revoke consent for data storage at any time via the cookie manager.

Additionally, our website uses the Wix Consentik cookie tool to manage user consent for processing personal data in cookies and tracking:

  • Users can accept, reject, or adjust cookies at any time via the cookie banner or the "Manage Cookies" button (bottom right).

  • The banner is displayed on all website pages.

  • Consent storage duration: User choice is remembered in the browser for 7 days.

  • Banner options: Accept, Decline & Preferences (categories: Essential, Functional, Analytics, Advertising).

  • Re-open button: Users can reopen the cookie banner at any time to change preferences.

  • Delay before showing banner: 0 seconds (appears immediately on page load).

  • Blocking user interaction until consent: (only available with Premium plan; otherwise not applicable).

  • By starting a chat, you consent to our Privacy Policy (GDPR compliant).

6. Analytics, Advertising, and Plugin Tools

6.1 Analytics and Advertising Tools
Our website uses third-party analytics and advertising tools, including:

  • Google Analytics – website usage analysis

  • Google Ads – displaying ads on external platforms

  • Facebook Pixel – measuring and optimizing campaigns

  • Pinterest Tag – website analysis, content optimization, personalized advertising

Purpose: Analyze user behavior, optimize website, marketing measures, personalized advertising
Legal Basis: Your consent according to Art. 6(1)(a) GDPR

Opt-Out / Revocation: Users can decline these tools at any time via cookie banner or browser settings

Further info and opt-out links:

IP anonymization note: Google Analytics anonymizes IP addresses automatically (IP-masking). Full IP addresses are not stored or shared.

6.1.1 Google Merchant & Google Ads
Product information is transmitted to Google Merchant Center to display products in Google Shopping.
For personalized ads via Google Ads, data on user activity (e.g., visited products) may be sent to Google.
Processing occurs only after user consent via the cookie consent tool.
Opt-Out / Revocation: Users can disable personalized advertising via their Google account or at https://www.google.com/settings/ads/.

6.2 Plugins & Tools

  • Google Fonts: Optimal display of website fonts. IP addresses may be transmitted. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Info: https://developers.google.com/fonts/faq

  • Google Maps: Display of geographic locations. IP may be transmitted. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Info: https://www.google.com/intl/en_us/help/terms_maps/

  • Google reCAPTCHA: Protection from abuse/spam. IP and technical data may be transmitted. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Info: https://www.google.com/recaptcha/about/

  • Wix Tools (Chat, Forms, Marketing): Functionality, marketing & customer interaction. IP and technical data may be processed. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Info: https://www.wix.com/privacy

  • Hosting & Delivery (AWS & Google Cloud CDN): IP may be transmitted. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). Info: AWS: https://aws.amazon.com/privacy/, Google Cloud: https://cloud.google.com/terms/cloud-privacy-notice

  • We use Chaty to provide live chat and messaging services.
    This widget may process your name, email (if provided), message content, IP address, browser information, site usage data, and notification permissions.
    If you use WhatsApp or Messenger through the widget, your data may be shared with WhatsApp/Facebook for messaging purposes.
    Legal basis: All data is processed in accordance with the EU General Data Protection Regulation (GDPR) and German Data Protection Act (BDSG).

Other third-party scripts (e.g., Google Tag Manager) may run on page load. Personal data like IP addresses may be transmitted. Legitimate interest applies. Opt-out possible via Consentik.

Chaty Live Chat Widget

  • We use Chaty to provide live chat and messaging services on our website. Chat messages may be forwarded to third-party platforms such as WhatsApp, Messenger, or Telegram. Chaty itself does not store messages or personal data on its servers. All data you provide is processed by these third-party platforms according to their respective privacy policies.

Purpose: To communicate with users, respond to inquiries, and provide customer support.
Legal basis: GDPR compliance and legitimate interest (Art. 6(1)(f) GDPR).

User rights: Users have the right to access, correct, or request deletion of their personal data processed through these services.

​

Our website may use browser notifications. If you allow notifications, the following data may be processed: IP address, browser information, interaction time, and possibly your email.
Purpose: To send relevant updates or messages.
Legal basis: Consent (Art. 6(1)(a) GDPR). 

​

Wix Multilingual / Multilingual Features

Our website uses the Wix Multilingual app to display content according to the visitor's preferred language. In this process, technical data such as IP addresses may be processed by Wix servers for purely technical purposes. The collected data is used solely for the operation of the website and to improve the user experience.​

​

6.3 Data Security / SSL Encryption
All data transmissions are encrypted via SSL/TLS (https:// and lock symbol).

6.4 Social Media Integration
Instagram & Pinterest elements (buttons, feeds) may transmit IP addresses to providers.
Purpose: Content display, interaction. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Users can refuse transmission by disabling cookies or not using these elements.
Pinterest Tag: collects user activity for analytics and personalized ads, only after consent.

On mobile devices, Instagram/Pinterest may also transmit IP/activity data.
Other social plugins (TikTok, LinkedIn, etc.) may also transmit personal data. Consent can be controlled via the cookie banner.

6.5 Blog Comments
Blog comments may store: name/pseudonym, email, IP, timestamp. Stored for display, spam prevention, legal protection. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
Comments may be reviewed before publishing or deleted if they violate laws or terms.

7. Data Sharing
Data is only shared with:

  • Shipping service providers

  • Tax advisors / authorities (legal obligations, Art. 6(1)(c) GDPR)

  • Payment providers (payment processing)

  • Third-party marketing/analytics (only with consent)

No sharing without legal obligation or user consent.

8. Rights of Data Subjects
Rights:

  • Access

  • Correction

  • Deletion (if no legal retention)

  • Restriction of processing

  • Data portability

  • Object to processing

Exercising Rights:

  • Withdrawal of Consent: Anytime, e.g., email to info@cemrea.com. Processing will stop unless legal retention applies.

  • Objection under Art. 21 GDPR: e.g., direct marketing, profiling.

  • Complaint to Supervisory Authority:

Practical implementation:

  • Cookies: adjust or refuse via Consentik

  • Newsletter: unsubscribe link in every email or info@cemrea.com

  • Blog comments: deletion or changes via contact

9. Data Retention
Personal data stored only as needed or required by law.
Invoices and tax documents retained for 10 years (§257 HGB, §147 AO).

Messages, chat histories, and notification data are securely stored on servers within the EU and retained only as long as necessary to respond to inquiries or fulfill legal obligations.

10. Automated Decision Making
No automated decisions or profiling are performed.

11. Newsletter & Direct Marketing
Sent only with consent (Double Opt-In).
Withdrawal anytime via email link or info@cemrea.com.
Existing customers without consent: only under §7(3) UWG.

12. Social Media Integration
Instagram & Pinterest may transmit data. Purpose: interaction, content display. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

13. International Data Transfer
Data may be processed outside the EU (e.g., USA, Canada).
Legal basis: adequate safeguards (e.g., standard contractual clauses).

14. AI / Automated Email Systems
No AI is currently used for customer inquiries. Automatic order confirmation emails via Wix do not count as AI.

15. Changes to Privacy Policy
We reserve the right to update the privacy policy anytime.
Changes published on the website. Using the site after changes constitutes acceptance.

16. Contact
Questions or exercising rights: info@cemrea.com

bottom of page