Privacy Policy

The controller responsible for data processing is:
Chi Nature FZ-LLC, Compass Building, Al Hulaila Industrial Zone – Free Zone, Ras Al Khaimah, United Arab Emirates

Email: info@chinature.shop

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Every time you access a webpage, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transmitted, and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring a trouble-free operation of the website as well as improving our offer. This serves to safeguard our legitimate interests in a correct presentation of our offer in accordance with Art. 6(1)(f) GDPR.

Hosting

The services for hosting and displaying the website are partly provided by our service providers within the framework of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected via forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

2. Data Processing for Contract Handling and for Contacting Us

2.1 Data Processing for Contract Handling

For the purpose of fulfilling the contract (including inquiries and processing of any existing warranty and performance disruption claims as well as any statutory update obligations) in accordance with Art. 6(1)(b) GDPR, we collect personal data when you voluntarily provide it to us in the context of your order. Mandatory fields are marked as such because we absolutely require the data for contract processing and without it we cannot send your order. Which data is collected can be seen in the respective input forms.

Further information on the processing of your data, especially regarding transmission to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods in accordance with Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data for purposes permitted by law and about which we inform you in this policy.

2.2 Customer Account

If you have given your consent in accordance with Art. 6(1)(a) GDPR by deciding to open a customer account, we will use your data for this purpose and for storing your data for future orders on our website. You may delete your customer account at any time either by sending a message to the contact options described in this privacy policy or via a corresponding function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data or unless we are entitled to further data use that is permitted by law and about which we inform you in this privacy policy.

2.3 Contacting Us

As part of customer communication, we collect personal data in accordance with Art. 6(1)(b) GDPR when you voluntarily provide it to us when contacting us (e.g. via contact form, live chat tool, or email). Mandatory fields are marked as such because we absolutely need this data to process your request. Which data is collected can be seen in the respective input forms. After your request has been fully processed, your data will be deleted unless you have expressly consented to further use of your data or unless we reserve the right to further data use that is permitted by law and about which we inform you in this privacy policy.

3. Data Processing for Shipping Handling

To fulfil the contract in accordance with Art. 6(1)(b) GDPR, we transmit your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

4. Data Processing for Payment Handling

We work with the following partners for payment processing in our online shop: technical service providers, financial institutions, payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we transmit the data necessary for processing the payment transaction to our technical service providers, who act for us as processors, or to the commissioned financial institutions or to the selected payment service provider, insofar as this is required for payment handling. This serves to fulfil the contract in accordance with Art. 6(1)(b) GDPR. In some cases, payment service providers collect the data required for payment processing themselves, e.g. on their own website or via an integrated technical solution in the order process. The privacy policy of the respective payment service provider applies in this regard.
If you have questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact options provided in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes

Where applicable, we transmit additional data to our service providers, who use it together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g. invoicing, handling contested payments, supporting accounting). This serves to safeguard our legitimate interests in accordance with Art. 6(1)(f) GDPR in protecting against fraud and ensuring efficient payment management.

5. Cookies and Other Technologies

General Information

To make your visit to our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).

Protection of Privacy for Devices
When using our online offer, we use technologies that are absolutely necessary to provide the expressly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require your consent in this case.

For non-essential functions, storing information on your device or accessing information already stored on your device requires your consent. We inform you that if you do not grant consent, parts of the website may not be fully usable. Any consents you have given remain valid until you adjust or reset the corresponding settings on your device.

Subsequent Data Processing via Cookies and Other Technologies

We use technologies that are strictly necessary for using certain functions of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g. the contents of the shopping cart). This serves our legitimate interests in an optimized presentation of our offer in accordance with Art. 6(1)(f) GDPR.

We also use technologies to fulfil legal obligations (e.g. to prove consent to the processing of personal data) as well as for web analytics and online marketing. Further information, including the respective legal basis, can be found in the following sections of this privacy policy.

Cookie Settings

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have given your consent to the use of technologies in accordance with Art. 6(1)(a) GDPR, you may revoke your consent at any time by sending a message to the contact details described in this privacy policy.

6. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless stated otherwise for the individual technologies, processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Once the purpose no longer applies and our use of the technology ends, the data collected in this context will be deleted. You may revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section “Cookies and Other Technologies.” Further information, including the basis of our cooperation with the individual providers, can be found within the descriptions of the respective technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact us via the contact options described in this privacy policy.

6.1 Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise stated for the individual technologies, the data processing takes place on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in the Google Privacy Policy.

Our service providers are located and/or use servers located in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located and/or use servers located in countries outside the EU and the EEA. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the European Commission’s standard contractual clauses.

Google Analytics

For website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU for deriving location data, then immediately deleted before traffic is forwarded to other Google servers for processing. The data processing is based on an agreement on data processing with Google.

If you do not give us consent in accordance with Art. 6(1)(a) GDPR to use Google Analytics, no cookies will be stored on or read from your device. The data processing described above will not take place. To close gaps in web analytics due to behavior and conversion modeling, pings containing data (user agent, info on your consent behavior, screen resolution, IP address) are sent to Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. It enables interest-based advertising using a pseudonymous cookie ID based on your usage of our website. Data processing beyond this only takes place if you have activated the “personalized advertising” setting in your Google account. If you are logged into your Google account during your visit to our website, Google uses your data together with Google Analytics data to create and define target groups for cross-device remarketing.

To analyze the website and track events, we measure your usage behavior via Google Ads Conversion Tracking after you arrived on our website via a Google Ads advertisement. Cookies may be used for this purpose, and data may be collected (IP address, time of visit, device and browser information, and data about your usage of our website based on defined events such as visiting a webpage or subscribing to a newsletter), from which user profiles based on pseudonyms can be created.

If you do not give us consent under Art. 6(1)(a) GDPR to use Google Ads, no cookies will be stored or read on your device. The data processing described above does not take place. To close analytic gaps through modeling, pings with data (user agent, consent behavior, screen resolution, IP address, page URL, ad click information in URL parameters) are sent to Google. Your IP address is used to derive the IP country.

6.2 Use of Facebook Services

Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) as well as on other platforms. We define the parameters of each advertising campaign. Facebook (by Meta) is responsible for the specific implementation, especially the decision about placing ads to specific users. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. Further processing by Meta Platforms Ireland is not part of this agreement.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

• In accordance with Art. 15 GDPR, the right to obtain information about your personal data processed by us in the scope defined therein;
• In accordance with Art. 16 GDPR, the right to demand immediate correction of incorrect or completion of incomplete personal data stored with us;
• In accordance with Art. 17 GDPR, the right to request deletion of your personal data stored with us, unless further processing is necessary:
  • to exercise the right of freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest, or
  • for the establishment, exercise, or defense of legal claims;
• In accordance with Art. 18 GDPR, the right to request restriction of processing of your personal data, provided that:
  • you contest the accuracy of the data;
  • the processing is unlawful, but you refuse deletion;
  • we no longer need the data, but you require it for legal claims; or
  • you have lodged an objection under Art. 21 GDPR;
• In accordance with Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format, or to request the transmission to another controller;
• In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You may usually contact the supervisory authority of your habitual residence, workplace, or our company headquarters.

7.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or revoke granted consent or object to a specific data use, please contact us directly using the contact details provided in our imprint.