Data Protection Declaration

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1

Thank you for visiting our website. Below, we inform you about the processing of your personal data when using our website. Personal data refers to any information that can be used to identify you personally.

1.2

The controller responsible for data processing on this website is Chloe Studio. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, as defined by the EU General Data Protection Regulation (GDPR).

1.3

This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or inquiries). You can recognize an encrypted connection by the "https://" prefix in your browser's address bar and the padlock icon.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only (without registering or submitting information), we collect only the data that your browser transmits to our server (known as "server log files"). These data are necessary to display the website and ensure its stability and functionality.

The following information is collected:

• Visited page
• Date and time of access
• Amount of data transferred (in bytes)
• Referring website (referrer)
• Browser used
• Operating system used
• IP address used (possibly anonymized)

The processing of these data is based on our legitimate interest in improving the stability and functionality of the website, pursuant to Article 6(1)(f) GDPR.

No further use or transfer of these data takes place unless there are specific indications of unlawful use, in which case the server logs may be reviewed retrospectively.

3) Cookies

To make our website attractive and enable the use of certain functions, we use cookies (small text files stored on your device).

Some cookies are deleted at the end of your browsing session (session cookies), while others remain stored on your device to recognize your browser during future visits (persistent cookies). These cookies may collect personal data such as browser information, location, or IP address.

Persistent cookies are automatically deleted after the period defined for each cookie, which varies depending on the specific cookie.

Some cookies simplify the ordering process (for example, by saving items placed in the shopping cart).

Where cookies process personal data, the processing is based on:

• Article 6(1)(b) GDPR (performance of a contract), or
• Article 6(1)(f) GDPR (our legitimate interest in ensuring optimal website functionality and an efficient user experience).

We may work with advertising partners who also place cookies on your device when you visit our website (third-party cookies). Where this is the case, we will inform you about their use and scope in this Privacy Policy.

You can configure your browser to notify you whenever cookies are set and decide individually whether to accept them. The method varies depending on your browser; please refer to your browser's help menu. Useful links include:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera

Please note that if you reject cookies, certain features of the website may not function properly.

4) Contact

When you contact us (for example, via a contact form or email), we collect your personal data.

The specific data collected are indicated in the respective contact form.

We use these data solely for the purpose of responding to your inquiry and handling any related technical administration.

The legal basis for this processing is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR.

If your inquiry is intended to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

Once your request has been fully resolved and there are no statutory retention obligations, your personal data will be deleted.

5) Customer Account Creation and Contract Processing

When you provide us with personal data for the purpose of concluding a contract or creating a customer account, we process these data in accordance with Article 6(1)(b) GDPR.

The required information is indicated in the respective forms.

You may request the deletion of your customer account at any time by contacting us using the address provided by the controller.

After completion of the contract or deletion of your customer account, your data will be restricted for further processing due to tax and commercial retention obligations and deleted once these retention periods expire, unless you have expressly consented to further use or such use is otherwise permitted by law.

6) Use of Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will regularly send you information about our offers.

The only mandatory information required to receive the newsletter is your email address. Any additional information is voluntary and is used to personalize the newsletter.

We use the double opt-in procedure. This means that after registering, you will receive a confirmation email containing a verification link. Only after clicking this link will your subscription become active.

By activating the confirmation link, you consent to the processing of your personal data pursuant to Article 6(1)(a) GDPR.

We store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to prevent misuse of your email address.

You may unsubscribe from the newsletter at any time by clicking the unsubscribe link included in every newsletter or by contacting us at ChloeStudionw@gmail.com.

Once you unsubscribe, your email address will be promptly removed from our mailing list unless you have expressly consented to further use or such use is otherwise permitted by law.

6.2 Newsletter for Existing Customers

If you provided your email address when purchasing goods or services, we may send you promotional emails regarding similar products or services without obtaining separate consent.

This processing is based on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) GDPR.

You may object to receiving such communications at any time by contacting us.