Privacy policy

PRIVACY POLICY

Data Protection Statement

1) Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 Thank you for visiting our website. Below, we inform you about the processing of your personal data when using our site. Personal data refers to any information that allows you to be personally identified.

1.2 The data controller for this website is Talia Collective. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (as defined by the EU General Data Protection Regulation — GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or enquiries). You can identify an encrypted connection by the browser address bar beginning with "https://" and by the padlock icon.

2) Data Collected When Visiting Our Website

When you use our website solely for informational purposes (without registering or sending us information), we collect only the data that your browser transmits to our server (so-called "server log files"). These are necessary to display the site and ensure its stability. The following data is collected:

  • Page visited
  • Date and time of access
  • Amount of data transferred (in bytes)
  • Page from which you accessed the site (referrer)
  • Browser used
  • Operating system used
  • IP address used (possibly anonymised)

The processing of this data is based on our legitimate interest in improving the stability and functionality of the site, in accordance with Article 6(1)(f) of the GDPR. No further transfer or use of the data takes place, unless there is concrete evidence of unlawful use, in which case the logs may be reviewed.

3) Cookies

To make our website more appealing and to enable the use of certain functions, we use cookies (small text files stored on your device). Some cookies are deleted at the end of the session (session cookies), whilst others remain stored to recognise your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser type, location, or IP address.

Persistent cookies are automatically deleted after the defined period, which varies depending on the cookie. Some cookies simplify the ordering process (for example, by saving products in your basket). Where cookies process personal data, the processing is based on Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) (legitimate interest in the optimal functionality of the site and an efficient user experience).

We may work with advertising partners who also store cookies on your device when you visit our website (third-party cookies). Should this be the case, we will inform you in this policy about their use and scope. You may configure your browser to notify you about the installation of cookies and to decide individually whether to accept them or not. If you decline cookies, certain functions of the site may not be available.

4) Contact

When you contact us (for example, via a form or e-mail), we collect your personal data. The data collected is indicated in the relevant form. We use this data solely to respond to your enquiry and to manage the related technical aspects. The legal basis for this processing is our legitimate interest in responding (Article 6(1)(f) of the GDPR). If your contact is for the purpose of entering into a contract, the legal basis will also be Article 6(1)(b). Once the matter has been resolved and there are no legal retention obligations, your data will be deleted.

5) Customer Accounts and Performance of Contracts

When you provide us with personal data to enter into a contract or create a customer account, we process it in accordance with Article 6(1)(b) of the GDPR. The data required is indicated in the relevant forms. You may request the deletion of your account at any time by writing to the address of the controller mentioned above. Once the contract has been completed or the account deleted, the data will be blocked for tax and commercial reasons and deleted once those periods have elapsed, unless you consent to further use or the law permits it.

6) Use of Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will send you regular offers. We only require your e-mail address; other details are optional and are used to personalise the message. We use the "double opt-in" method — you will receive a confirmation e-mail and only after clicking the link will we begin sending you the newsletter. By activating the link, you give your consent to the processing of your data under Article 6(1)(a) of the GDPR. We record the IP address and time of registration to prevent misuse. You may unsubscribe at any time using the link in the newsletter or by writing to us at support@taliacollective.nz. Upon doing so, we will remove your address from our mailing list, unless you consent to another use or the law permits it.

6.2 Sending Newsletters to Existing Customers

If you provided us with your e-mail address when making a purchase, we may send you offers for similar products by e-mail without requiring additional consent. This is based on our legitimate interest in personalised direct marketing, in accordance with Article 6(1)(f) of the GDPR. You may object at any time by writing to us.