This website and the services offered are operated by: Auroville Online Store
Tel: +91 413 2622069
We have developed the website in such a way as to ensure that we collect as little data from you as possible. It is possible in principle to visit our website without entering any personal data. The collection and processing of personal data are only necessary if you decide to use certain services (e.g. using the contact form or placing an order). In doing so, we make sure at all times that we only collect and process your personal data in accordance with a legal basis or consent given by you. We adhere to the provisions of the General Data Protection Regulation (GDPR), applicable from 25.5.2018, and the relevant applicable national regulations and other special legislation on data protection.
In accordance with GDPR, the terms used in this data protection policy are defined as follows:
‘personal data’ any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
‘processing’ any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or deletion;
‘restriction of processing’ the marking of stored personal data with the aim of limiting their processing in the future;
‘pseudonymisation’ the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
‘controller’ the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
‘processor’ a natural or legal person, public authority, agency or other bodies which processes personal data on behalf of the controller;
‘recipient’ a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
‘third party’ a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;
‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
When you visit our website, we will sometimes collect certain personal data concerning you. We require your consent to do this. This takes place in the first instance in our dialogue and service area specifically when contact is made via a contact form, newsletter subscription or placing an order.
DECLARATION OF CONSENT
By using the forms we provide, you hereby permit us collecting the personal data you provide and processing it as indicated in this data protection policy. You may withdraw this consent at any time with effect for future collections by providing us with a relevant statement. However, please note that it is no longer possible to use our service without your consent. To withdraw, please use the above methods of contact (in that instance, please state your name, email and postal address).
Purpose and legal basis of personal data processing We process personal data required to legitimize, perform or process our service offering using Article 6, section 1b GDPR as our legal basis. If we use external service providers as part of commissioned data processing, the legal basis for the processing shall be Article 28 GDPR. We collect, process and use the personal data exclusively for the following purposes:
|Purpose of the data processing||Legal basis for processing (“Why is data processing required”)|
|When contact is made and for related correspondence||Based on your consent|
|Dealing with your request and to provide you with any additional advice you require||Based on your consent|
|To ensure that our website is presented to you in the most effective and interesting way (e.g. through anonymized evaluation)||Based on legitimate interests|
|Registration as an Auroville Online Store user; taking part in product reviews||Based on your consent|
|Participation in competitions||Based on your consent|
PERSONAL DATA COLLECTED AND PROCESSED
We only collect and process your personal data when it is freely provided by you with your knowledge e.g. by completing forms or sending emails.
This initially concerns the following data in the forms provided:
General contact information:
- First Name
- Telephone number
- Email address
- House number
Auroville Online Store newsletter:
- Email address
Auroville Online Store product order:
- First name
- Telephone number
- Email address
- House number
Auroville Online Store user account:
- First name
- Email address
The personal data you provide and the content thereof shall remain exclusively with us. We shall only store and process your data for the purposes stated as detailed above. Any use beyond the indicated purpose requires your express consent. The same also applies to the transfer and transmission of your data to third parties.
GENERAL LOG FILES
The connection data for the querying computer (IP address), which of our pages you visit, the date and duration of your visit, the identification data of the browser and operating system type used, the website you are visiting us from and successful access are temporarily recorded by the web server in protocol files (log files). Technical administration of websites and anonymous collection of statistics allows evaluation of access to the Auroville Online Store service and evaluation aimed at improving data protection and data security within our company, in order to ultimately ensure an optimum level of protection for the personal data we process.
The server log file data is stored separately from all the personal data you enter for a period of 12 months for analytical purposes, before being erased.
On our website, information is collected and stored using what are known as browser cookies.
WHAT ARE COOKIES?
Cookies are small text files which are stored on your computer, mobile or tablet and which store certain settings and data for interacting with our system via your browser. A cookie usually contains the name of the domain that the cookie data was sent from, information on the age of the cookie and an alphanumeric identification code.
Cookies allow our systems to recognize the user’s device and make any predefined settings available immediately. Once a user accesses the platform, a cookie is transmitted to said user’s computer hard disk. Cookies help us to improve our website and provide you with a better service more tailored to you. They allow us to recognize your computer and/or (mobile) end device if you return to our website, thus enabling us to:
- Store information on your preferred activities on the website and thus align our website to your individual interests.
- Speed up processing of your queries.
We work together with third-party services that help us make the online service and website more appealing to you. Accordingly, when you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard disk. These cookies are automatically erased after a fixed period.
CAN I DECIDE WHETHER COOKIES ARE USED?
You can manage browser cookies through your browser settings. The ‘Help’ feature on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, how to disable cookies, and when cookies will expire. If you disable all cookies on your browser, neither we nor third parties will transfer cookies to your browser. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some features and services may not work.
|Session Cookies||Session cookies are used by the server to store information about user’s page activities. Anonymous identifier of the current session is encrypted in the session cookies and they do not contain any personal information in the unencrypted form.||The session cookie is stored in the temporary memory and is removed when a user closes the Web browser.|
|Auth. Cookies||Authentication cookies contain the heavily encrypted identifier of the authenticated website visitor (shop account): ASPXAUTH_SS for non-secure (HTTP) pages ASPXAUTH_SS_s for secure (HTTPS) pages||Expiration date of the authentication cookie depends on whether a user selected the option ‘Remember me’ while logging in the web store. If not selected, the authentication cookie will be deleted when the Web browser is closed. If ‘Remember me’ is selected, the expiration date of the authentication cookie will be set to 30 days.|
|Anti-Forgery Cookies||Basket cookies contain the encrypted anonymous identifier of the visitor’s basket and do not contain any personal information in the unencrypted form.||Basket cookie is stored for 3 days.|
|Basket Cookies||Anti-forgery cookies are used to prevent CSRF attacks. It guarantees that the user is the one who initially requested the page form. It prevents anybody to forge a link and have it activated by an authenticated user.||Anti-forgery cookies are removed when a user closes the Web browser.|
|Last Viewed Products Cookies||This cookie is used to store information about the last viewed products that are shown at the bottom of the product and product list pages.||Last viewed products cookie is removed when a user closes the Web browser.|
INTEGRATION OF THIRD-PARTY CONTENT AND SERVICES
Our website uses content and services from other providers. These include, for example, maps and videos provided by Google Maps and YouTube. The IP address must be transmitted in order to ensure that this data can be accessed and displayed in the user’s browser. The providers (hereinafter referred to as ‘third-party providers’) therefore use the user’s IP address.
Although we endeavor to only use third-party providers which only require the IP address to provide content, we have no influence on whether the IP address may be stored. This process may take place for statistical purposes, among others. If we become aware that the IP address is stored, we shall inform you.
USE OF GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’).
IP anonymization is activated on our website, meaning that your IP address is shortened in advance by Google within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and shortened there in exceptional cases. In these exceptional cases, in accordance with Article 6 section 1 GDPR, this processing is based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
Google will use this information on our account to evaluate your use of the website, compile reports on website activities and provide additional services associated with website use and Internet use to us as the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
You can prevent the storage of cookies using the relevant setting in your browser software; however, please note that in this case, you may not be able to use all functions of this website to their full extent.
You can also prevent the collection of the data extracted by the cookie concerning your use of the website (including your IP address) at Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en
Google LLC, with its headquarters in the USA, is certified for the US-European ‘Privacy Shield’ data protection framework, which guarantees compliance with the level of data protection applicable in the EU.
USE OF RETARGETING TOOLS
On our website, we use what is known as retargeting technology. We use retargeting to categorize website users into user groups. Depending on the user group, we then address website visitors on other websites or in apps with personalized advertising regarding our products and services.
To do so, we use the following products, which are supplied to us by service providers:
‘Facebook Custom Audience’/’Facebook Pixel’/’Google AdWords User Lists’/’Google Dynamic Remarketing’
‘Facebook Customer Audience’/’Facebook Pixel’
‘Facebook Custom Audience’ and ‘Facebook Pixel’ are products of Facebook Ireland Ltd., Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (‘Facebook’). Our website uses a ‘Facebook Pixel’ from Facebook which creates a direct connection to the Facebook servers. The fact that you have visited our website is therefore transmitted to the Facebook server. Facebook assigns this information to your personal Facebook user account if you have such an account and are logged into it. If you visit other websites which use ‘Facebook Custom Audience’/’Facebook Pixel’, this information is also linked to your user account. However, we cannot see which other websites you visit. If you are not a Facebook user or you are not logged in to Facebook when you visit our website, your visit to our website is not assigned to a Facebook user account.
For more information on the protection of your privacy on Facebook, please see Facebook’s privacy information at https://www.facebook.com/about/privacy/. In particular, you can manage the content and information you have shared through your use of Facebook via the ‘Activity log’ tool.
Find out how to disable/enable cookies by clicking on the “Manage Cookies” section of the Interactive Advertising Bureau UK Site on the following link http://www.allaboutcookies.org
WHY DO I NEED TO ENTER MY EMAIL ADDRESS?
We use your email address as a means of identification, as this is totally unique to you.
WHY DO I NEED A PASSWORD?
When you create a password it allows you to access your account information. Your password is unique to your email address and ensures that your account details remain secure. You can access your account information at any time to edit any of your account details. Each time you return to this site, remember to sign in using your email and password.
VERIFIED BY VISA OVERVIEW
Verified by Visa, also known as 3-D Secure, is an extra level of security developed by Visa and MasterCard to improve the security of payments and transactions offered to customers over the Internet. When you initiate a transaction using one of these card issuers you will be redirected to the website of your card-issuing bank to authorize the transaction. You will have to enter your password or create one if you don’t already have one, which will then redirect you back to our site to complete your order. If you are creating a password, you can then use this password on any other site that uses 3-D Secure technology. Please note: this password is separate from the one you use to log in to our site.