Cookies & Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from enaandco.com (the “Site”).

Personal information we collect

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information”.

Cookies

Our website uses Cookies. Cookies are text files which are stored on a computer system through an Internet browser. When a user visits our website, cookies can be stored on the user’s operating system. These cookies contain a peculiar character sequence which enables the unique identification of the browser in case the website is visited again. 
We use cookies to elaborate a more user-friendly website experience. A few elements from our internet site require that the accessed browser can even be identified after the user changes internet sites.Concerning cookies the following data are stored and transferred:

  • Language settings
  • Items in the shopping cart
  • Log in/User information
  • Frequency of product view
  • Order procedure
  • Use of Website functions


You can configure the browser settings accordingly to your wishes, for instance, the acceptance of third-party cookies or the rejection of all cookies. We inform you that if you have rejected the use of all cookies, you may not be able to use the full functionality of this website.

We use cookies to identify the subsequent visits in case you have an account on the website. On the contrary, you must log in again for each visit.
The legal basis concerning the processing of personal data originated by the use of cookies is the object of Article 6 (1) (f) GDPR (so-called legitimate interests). The legitimate interests arise from the purposes aforementioned and to optimize the use of the website and to improve your user experience.

We collect Device Information using the following technologies:
- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
- “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site. Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers and data processed by payment service providers such as PayPal, Apple Pay and Google Pay), email address, and phone number. We refer to this information as “Order Information”.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

 

How do we use your personal information?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

- Communicate with you;

- Screen our orders for potential risk or fraud; and

- When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

Marketing on our website

When you visit our Site we analyze and we keep records of your user behavior to make our website more interesting and to target our advertising individually. In addition, we process your personal data for advertising purposes in the form of remarketing.


  • Google Adwords

We use on our website the online advertising system called Google-Ads which is provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.


In the context of Google Ads, we use the conversion tracking service (visit evaluation). If you click on an advertisement placed by Google, a conversion tracking cookie is set. After 30 (thirty) days this mentioned cookie is not valid which means that the users cannot be individually identified. When you visit specific pages of our website and the cookies have not yet expired, Google and we can identify that you clicked on an advertising and that you have been transferred to this website.


Each Google-Ad customer receives a different cookie. Thus, the cookies cannot be tracked through the websites of AdWords customers. The conversion cookie collects information which is used in the production of conversion statistics and for ads customers who have opted-in for conversion tracking. Customers are informed about the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, you will not receive any information enabling you to identify users personally.


The use of Google Ads is legally based on Article 6 (1) (f) GDPR (legitimate interests). We have the legitimate interests concerning targeted advertising and the analysis pursuant to the effects and efficiencies of this targeted advertising. You are also entitled by law to refute at any time the processing of your personal data based on the Article 6 (1) (f) GDPR.


You can set your browser up to be informed when cookies are set and only allow cookies in certain cases, such as to accept cookies for specific cases or total exclusion, including to activate automatic deletion of cookies when the browser is closed. You will find instructions on how to do this under this link.


If cookies are deactivated, the functionality of this website may be restricted. 
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield (Further information can be found here.)

Further information and the privacy policy of Google can be found here.

  • Facebook Pixel

We use the tool analysis named as “Facebook-Pixel” provided by the social media Facebook. Facebook-Pixel is a part of Facebook Inc., and it is located at 1 Hacker Way, Menlo Park, CA 94025, USA, in case you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook”).

Facebook-Pixel helps us concerning the measurement of our advertising efficiency and the analysis of actions taken by users on our website. Through Facebook-Pixel we are able to identify you as a visitor of our website as a target group for the presentation of ads (so-called “Facebook ads”).

We use Facebook-Pixel to target the Facebook-Ads only to display to Facebook users who have shown interest in our website or who shown certain features (for instance interest in certain topics or products) that we transfer to Facebook (named as “custom audience”). We want to ensure you that the Facebook-Ads are in accordance with the potential interest of the user. In addition, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were redirected to our website after clicking on a Facebook ad (name as “conversion”).
The establishment of Facebook Pixel as the storage of the “Conversion Cookies° are based on Article 6 (1) (f) GDPR (legitimate interests). We have a legitimate interest in the analysis of the behaviour of the user in order to optimize our website and advertising. For the exceptions where personal information is transferred to the United States, Facebook has submitted to the EU-US Privacy Shield, please access this link. 


For more information about Facebook’s collection and use of this information, your rights in this regard, and how Facebook can protect your privacy, please visit Facebook's privacy policy.


  • Google Analytics Remarketing


On the website, we use the Google Analytics Remarketing features in conjunction with the cross-device features of Google Ads and Google DoubleClick. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

This feature enables you to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads and Google DoubleClick. This allows us to display interest-based, personalized ads that have been customized to you based on your past usage and browsing behaviour on one device (e.g., mobile phone) on another of your devices (e.g., tablet or PC). If you have given your consent, Google will link the web and app browser history to your Google Account for this purpose. In this way, the same personalized advertising messages can be displayed on any device on which you sign in with your Google Account. To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data. This allows target audiences to be defined and created for cross-device advertising.

You can permanently opt out of cross-device remarketing/targeting by deactivating personalized advertising in your Google Account here and/or by following the link below and downloading and installing the plug-in provided here.

The data collected in your Google account is summarized on the basis of your consent, which you can give or revoke at Google (Art. 6 (1) (a) GPDR). In the case of data processing that is not merged into your Google Account - for example, because you do not have a Google Account or because you have been objected to the merging - the legal basis is the processing of the data Art. 6 (1) (f) GDPR (legitimate interests). The legitimate interest results from our interest in the anonymous analysis of website visitors for advertising purposes in order to address you in a targeted manner with interest-related advertising.
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield. You can find further information here. 
Further information and the privacy policy of Google can be found here.


Newsletter

On the website, there is a possibility to sign up for free newsletter. When you sign up for it, your email is transferred. The customer’s email address is collected in order to send the newsletter.
We use for the registration of the newsletter a Double-Opt-In procedure. This means that after registration we will send you an email to the given email address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of this procedure is to prove your registration and to clarify and clear any possible misuse of your data.

The newsletter is sent by a service called “HubSpot”, which is located in the USA. Therefore, the transmitted data is processed in this mentioned jurisdiction.


The email delivery HubSpot has certified to the EU-U.S. Privacy Shield Framework, and therefore offers a guarantee to comply with the European data protection level.
The data protection regulations of this service provider can be viewed here.

“HubSpot” can use the data of the recipients without allocation to an individual user, to optimize its own service or for statistical purposes. The email delivery service does not use the data of our newsletter recipients to itself or to forward the data to third parties. When the newsletter is sent, your user behavior is evaluated by HubSpot. For this evaluation, the e-mails sent contain so-called Web-beacons, more specifically, tracking pixels, which represent one-pixel image files stored on our website. For evaluation purposes, we link the data specified in §2 and the Web-Beacons with your e-mail address and an individual ID. We use the data obtained in this way to create a user profile in order to target the newsletter to your individual interests. We record when you read our newsletter, which links you click in it and infer your personal interests from this. We link this data with the actions you take on our website. You can unsubscribe this tracking at any time by clicking on the separate link provided in each e-mail or by informing us through another contact procedure. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed completely and you may not be able to use all functions. If you display the images manually, the above tracking will take place in connection with data processing for the delivery of newsletters, except for the provider HubSpot, no data is forwarded to third parties. The data will be used exclusively for the email delivery of the newsletter.
The data will only be stored until you unsubscribe from the newsletter. Subsequently, the e-mail address will be blocked for the delivery of the newsletter and may be deleted altogether. You can unsubscribe from the newsletter at any time. For this purpose, you will find a corresponding opt-out link in every newsletter. You can also declare your cancellation by e-mail or by sending a message to the address given in our Imprint.

The legal basis for the processing of data relating to the delivery of newsletter by us is Article 6 (1) (a) GDPR (consent of the user) or, if there is a business relationship with regard to information on at least similar services by us, also Art. 6 (1) (b) GDPR (performance of contract). The email delivery service provider “HubSpot” will be informed based on legitimate interests pursuant to Art. 6 (1) (f) GDPR as well as contract order processing under Art. 28 (1) (3) GDPR.


Sharing you personal Information

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

Behavioural advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by using the links below:

- Facebook: https://www.facebook.com/settings/?tab=ads

- Google: https://www.google.com/settings/ads/anonymous

- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

- Instagram: https://help.instagram.com/615366948510230

- Pinterest: https://help.pinterest.com/en/article/personalization-and-data

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Social media plug-ins

We currently use the following social media plug-ins: Facebook, Instagram, and Pinterest. We use the so-called Double-click solution. 
This means that when you visit our website, no personal data will be forwarded to providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. The buttons allow you to communicate directly with the provider of the plug-in. If you click on the marked area and thereby activate it, the plug-in provider receives the information that you have visited the corresponding website of our online service. In addition, the data aforementioned to in §2 (Processing of data by navigating the website) shall be transmitted.

We do not influence the collected data and data processing procedures, nor are we aware of the full scope of the data processing, the purposes of data processing, the periods of storage. Moreover, no information is present to us according to the deletion of the raised data by the plug-in providers.

The plug-in provider stores the data collected about you as usage profiles, and uses the following data for purposes of advertising, market research and/or demand-oriented designs of its website. Such evaluation is carried out in particular (also for users who are not logged in) to display demand-driven and oriented advertising and to attract your network about your activities on our website. You are entitled to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The legal basis for the use of the plug-ins is Art. 6 (1) (f) GDPR (legitimate interests). 
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in at the plug-in provider, your data collected by us will be directly transferred to your existing account in the platform of the plug-in. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this avoids assigning your profile to the plug-in provider.


Registration and user account

You can create a user account on our website. The data is entered in an entry form and transmitted to us and stored. When registering for a user account, the following data is collected and stored:


  • IP address
  • date and time of registration
  • your first and last name
  • your email address
  • delivery address
  • information on payment method such as account number; credit card number; iban or paypal

As part of the login process, your e-mail address and a self-chosen password need to be inserted. Moreover, the IP address of the user as well as the date and time of the login are stored at the time of the login. 


The legal basis for the processing of the aforementioned data is Art. 6 (1) (b) GDPR (performance of contract and pre-contractual measures). The registration and the login area are necessary for the performance of the contract or the implementation of pre-contractual measures. The purpose of registration and login is to provide the login function for the order, to view your most recent orders, to manage your delivery and billing addresses and to edit the password and account details. Your personal information will be used to support your user experience on our website and to manage the access to your account.

Order as guest

In addition, on the website, we offer the possibility to request and purchase our products without registering for a customer account via an order form.

The following data is collected as part of the order process through the order form:

  • First and last name (required)
  • Billing or delivery address (required)
  • E-mail address (required)
  • If applicable, it will be required details of payment method such as bank account number or credit card number, IBAN or Paypal

The order form serves the purpose of concluding a contract with us or sending a manufacturing request. The data which is processed in the order form, thus serves to conclude or terminate the contract with the user.

The legal basis for this data processing is Art. 6 (1) (b) GDPR (fulfilment of contract and pre-contractual measures), as the user provides us with the data based on the respective contractual relationship (for example, managing the customer account, processing the purchase contract).


Do not track

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

Your rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

Data retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Minors

The Site is not intended for individuals under the age of 18.

Contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at info@enaandco.com or by mail using the details provided below:

Ena & Co, Neklet Limited, Privacy Compliance Officer

69 Esker Wood Drive, Lucan, Dublin, K78PX45, Ireland

June 2020