Privacy Policy

Montreal Finds

1. General Information About Data Processing

1.1

We appreciate your visit to our website and your interest in Montreal Finds. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. Personal data refers to any information that can be used to identify you directly or indirectly.

1.2

The data controller responsible for processing personal data on this website in accordance with the General Data Protection Regulation (GDPR) is Montreal Finds. The data controller determines the purposes and methods of processing personal data, either alone or jointly with others.

1.3

For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption. You can recognize a secure connection by the “https://” prefix in your browser’s address bar and the lock icon.

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place on this website.

2. Data Collection When Visiting Our Website

When you visit our website for informational purposes only and do not provide personal information, we automatically collect data transmitted by your browser to our server (“server log files”). This includes:

  • Visited website pages

  • Date and time of access

  • Data volume transferred

  • Referring URL

  • Browser type and version

  • Operating system

  • IP address (anonymized where applicable)

This processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in ensuring the stability and security of our website. This data is not merged with other data sources and is only reviewed if there are concrete indications of unlawful use.

3. Cookies

Our website uses cookies to enhance user experience and enable specific website functions. Cookies are small text files stored on your device.

Some cookies are deleted after you close your browser (session cookies), while others remain stored on your device to recognize your browser during future visits (persistent cookies).

Cookies may process information such as browser details, location data, and IP addresses. Persistent cookies are deleted automatically after a defined period.

Where cookies are required to carry out contractual processes or provide essential website functionality, processing is based on Article 6(1)(b) GDPR. All other cookies are processed based on our legitimate interest under Article 6(1)(f) GDPR.

You can manage cookie preferences in your browser settings. Please note that disabling cookies may limit website functionality.

When you first visit our website, you will be asked to consent to non-essential cookies via a cookie banner. You may update your preferences at any time.

4. Contacting Us

If you contact us via email or a contact form, personal data will be collected as required to respond to your inquiry. This data is processed solely for communication purposes.

The legal basis for processing is Article 6(1)(f) GDPR. If your inquiry relates to a contractual relationship, processing is additionally based on Article 6(1)(b) GDPR. Data will be deleted once your inquiry has been fully resolved, unless legal retention requirements apply.

5. Customer Accounts and Contract Processing

Personal data is collected and processed when you create a customer account or place an order in accordance with Article 6(1)(b) GDPR.

You may request deletion of your customer account at any time by contacting us. After contract completion or account deletion, data will be restricted and deleted following statutory retention periods unless further lawful use is permitted.

6. Email Marketing

6.1 Newsletter Subscription

When subscribing to our newsletter, only your email address is required. We use a double opt-in procedure, meaning you must confirm your subscription via email.

The processing is based on your consent under Article 6(1)(a) GDPR. You may unsubscribe at any time via the link included in our emails or by contacting us.

6.2 Marketing to Existing Customers

If you provided your email address during a purchase, we may send promotional emails for similar products based on our legitimate interest under Article 6(1)(f) GDPR. You may object to this at any time.

7. Order Processing and Payment Providers

7.1

To fulfill your order, your personal data may be shared with shipping providers and payment processors as required under Article 6(1)(b) GDPR.

7.2 Payment Services

We may use third-party payment providers such as PayPal or SOFORT. Payment data is shared only as necessary for transaction processing. These providers may conduct credit checks in accordance with applicable law.

Please refer to the respective provider’s privacy policies for further details.

8. Review Reminder Emails

If you have given explicit consent, we may send a one-time email reminder requesting a product review. You may withdraw your consent at any time.

9. Social Media Plugins

Our website includes social media links from platforms such as Facebook, Instagram, and Google services using privacy-friendly integration methods. These links do not automatically transmit data to the respective providers until you actively click them.

For further details, please review the privacy policies of the respective platforms.

10. Online Marketing and Analytics

Google Analytics

We use Google Analytics with IP anonymization to analyze website usage. Processing is based on our legitimate interest under Article 6(1)(f) GDPR.

You can prevent data collection by adjusting browser settings or installing Google’s opt-out browser plugin.

Advertising & Remarketing

We may use advertising tools such as Google Ads and Facebook Pixel with your consent under Article 6(1)(a) GDPR. These tools help us measure campaign effectiveness and display relevant ads.

11. Data Subject Rights

You have the right to:

  • Access your personal data (Art. 15 GDPR)

  • Correct inaccurate data (Art. 16 GDPR)

  • Request deletion (Art. 17 GDPR)

  • Restrict processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7(3) GDPR)

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

12. Right to Object

You may object to data processing based on legitimate interests at any time. If your data is processed for direct marketing, you may object without providing reasons.

13. Data Retention

Personal data is stored only for as long as legally required or necessary to fulfill contractual obligations. After expiration of retention periods, data is deleted.

14. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

📧 info@shopmontrealfinds.com

Montreal Finds