1) Information on the collection of personal data and contact information for the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is any data with which you can be identified.

1.2 The person responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:
OFFICE 3906, 39TH THE CTR 99 QUEEN'S RD CENTRAL CENTRAL HONG KONG
Email: info@vivoila.com
The personal data controller for the processing of personal data is the natural or legal person who, alone or together with others, decides on the purposes and means for the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in the browser bar.

---

2) Data collection when you visit our website

If you use our website for informational purposes only, we only collect data that your browser transmits to our server (“server log files”), including:

• Our visited website

• Date and time of access

• Amount of data sent in bytes

• Source/reference from which you came

• Web browser used

• Operating system used

• IP address used (if necessary, anonymized)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

---

3) Cookies

To make visiting our website attractive and to enable certain functions, we use cookies. These are small text files stored on your device. Some cookies are deleted after the browser session ends (session cookies); others remain stored (persistent cookies).

If personal data is processed via cookies, processing is carried out under Art. 6 (1) (b) GDPR for contract execution or Art. 6 (1) (f) GDPR for legitimate interests.

You can configure your browser to notify you about cookies and decide individually whether to accept them. If cookies are disabled, website functionality may be limited.

---

4) Contact us

When contacting us (e.g. via contact form or email), personal data is collected solely for the purpose of processing your request. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR if the contact relates to a contract.

---

5) Data processing when opening a customer account and for contract processing

Personal data is processed under Art. 6 (1) (b) GDPR for contract execution or account creation. Customer accounts can be deleted at any time by contacting the responsible party at the address above.

---

6) Use of your data for direct marketing

6.1 Newsletter subscription

We use the double opt-in procedure. Consent is based on Art. 6 (1) (a) GDPR. You may unsubscribe at any time.

6.2 Newsletter to existing customers

We may send product-related offers under Art. 6 (1) (f) GDPR. You may object at any time.

---

7) Data processing for order processing

7.1 Personal data is shared with delivery and payment providers as required for contract fulfillment under Art. 6 (1) (b) GDPR.

7.2 Payment service providers
(PayPal, SOFORT / Klarna)
Processing is carried out in accordance with GDPR and respective provider privacy policies.

---

8) Review reminders

With your consent under Art. 6 (1) (a) GDPR, we may send a one-time review reminder. Consent can be withdrawn at any time.

---

9) Use of social media plugins (Shariff solution)

Facebook, Google+, and Instagram plugins are integrated as HTML links to enhance data protection. Data processing follows the respective platform privacy policies.

---

10) Online marketing

Use of DoubleClick, Google Ads, and remarketing is based on Art. 6 (1) (f) GDPR. You may opt out via browser settings or provider tools.

---

11) Web analytics services

Google (Universal) Analytics is used with IP anonymization. Data processing is based on Art. 6 (1) (f) GDPR. Opt-out options are available.

---

12) Retargeting / remarketing

Facebook Pixel and Google remarketing tools are used only with explicit consent under Art. 6 (1) (a) GDPR.

---

13) Rights of the data subject

You have rights under GDPR Articles 15–20, including access, rectification, erasure, restriction, portability, withdrawal of consent, and the right to lodge a complaint.

13.2 Right to object

You may object at any time to processing based on legitimate interests or for direct marketing purposes.

---

14) Duration of storage of personal data

Personal data is stored only for the legally required retention period and deleted thereafter unless continued storage is legally permitted.

---

15) Klarna data protection declaration

Personal data may be shared with Klarna during checkout to enable payment options, in accordance with Klarna’s privacy policy.