Privacy Policy

This Privacy Policy applies to all personal data we collect and use when you visit or use our website, place an order, contact us, or otherwise interact with us, including through social media. Personal data means any information that can be used to identify you, as described in more detail below.

Personal Data We Collect

We may collect the following categories of personal data:

Contact details: name, address, phone number, email address.

Account and technical data: login details, IP address, browser type, device identifiers, general geographic location, pages visited, session duration.

Purchase data: products ordered, order history, delivery address, payment method and status.

Communication data: messages sent to us by email, social media or customer support.

Marketing preferences: your consent and preferences regarding newsletters and promotions.

Social media activity: interactions with our content on social platforms.

Cookies and tracking technologies: further details can be found in our Cookie Policy.

Purpose and Legal Basis for Processing

Order processing, payment handling and providing support: performance of a contract (Article 6 paragraph 1 point b GDPR).

Sending marketing communications: consent (Article 6 paragraph 1 point a GDPR).

Website analytics and service improvement: legitimate interest (Article 6 paragraph 1 point f GDPR).

Fraud prevention and security monitoring: legitimate interest (Article 6 paragraph 1 point f GDPR).

Compliance with legal and tax obligations: legal obligation (Article 6 paragraph 1 point c GDPR).

Our legitimate interests include improving your customer experience, keeping our services secure and analyzing the performance of our website. We carefully balance these interests against your data protection rights before relying on them.

Marketing Communications

You will only receive marketing communications from us if you have given your express consent. You can unsubscribe at any time by clicking the link included in the email or by contacting us directly.

Our website uses cookies and similar technologies to provide functionality, analyze traffic and personalize content. Cookies that are not strictly necessary, such as analytics and advertising cookies, are only used after you have given your consent through our cookie banner. You can manage your cookie preferences at any time through your browser settings or through our cookie settings page.

How We Share Your Data

We do not sell your personal data. We may share it with trusted third parties, including:

Service providers, such as hosting, analytics, email and SMS providers and customer support tools.

Payment and logistics partners, to process orders and deliver products.

Marketing and affiliate partners, but only with your consent.

Public authorities, where required by law.

Platform providers used to operate our store and communications.

All third parties we work with operate under data processing agreements to ensure your data is handled in a manner consistent with the GDPR.

International Data Transfers

Some of our service providers may be located outside the European Economic Area, including in the United States. In such cases, we take steps to protect your data, including relying on Standard Contractual Clauses approved by the European Commission or working with partners certified under recognized data protection frameworks.

Data Security

We take appropriate technical and organizational measures to protect your data, including:

SSL encryption.

Access controls and authentication.

Regular audits and vulnerability checks.

Secure data storage procedures.

Data Retention

We keep your personal data only for as long as necessary for the purposes described above or to meet our legal obligations:

Order and account information: 10 years, in line with German tax and commercial record keeping requirements.

Marketing consent: until you unsubscribe or withdraw your consent.

Customer support interactions: up to 2 years from the date of last contact.

Analytics and cookies: as set out in our Cookie Policy.

Your Rights Under the GDPR

You have the following rights regarding your personal data:

Right of access, to obtain a copy of your personal data.

Right to rectification, to correct inaccurate or incomplete data.

Right to erasure, to request deletion of your data.

Right to restriction of processing, to limit how your data is used.

Right to data portability, to receive your data in a usable format.

Right to object, to processing based on legitimate interests or for marketing purposes.

Right to withdraw consent, at any time in relation to marketing or optional data collection.

To exercise any of these rights, please contact us at info@harleysaga.com.

You also have the right to lodge a complaint with the competent German data protection authority. As our business is based in North Rhine Westphalia, the relevant authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein Westfalen.