Privacy Policy
This Privacy Policy describes how www.caro-editions.com (the “website” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the website.
Contact
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at info@caroeditions.com or by mail using the details provided below:
Borgergade 17B
1300 Copenhagen
Denmark
Collecting Personal Information
When you visit our website, we collect certain information about your device, your interaction with the website, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.
In this Privacy Policy, we refer to any information about an identifiable individual as “Personal Information”.
Device information
Purpose of collection: to load the website accurately for you, and to perform analytics on website usage to optimize our website.
Source of collection: collected automatically when you access our website using cookies, log files, web beacons, tags, or pixels.
Disclosure for a business purpose: shared with our processor Shopify.
Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the website.
Order information
Purpose of collection: to provide products or services to you to fulfill our contract, process payments, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for potential risk or fraud, and provide information or advertising relating to our products or services when in line with your preferences.
Source of collection: collected from you.
Disclosure for a business purpose: shared with our processor Shopify, Google, Meta.
Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
Customer support information
Purpose of collection: to provide customer support.
Source of collection: collected from you.
Disclosure for a business purpose: shared with our processor Shopify.
Personal Information collected: name, billing address, shipping address, email address, phone number, offline events.
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you.
We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We may share your Personal Information to comply with applicable laws and regulations, respond to subpoenas, search warrants or lawful requests for information, or otherwise protect our rights.
Behavioral Advertising
We might use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.
We use Google Analytics to help us understand how our customers use the website. Learn more here: Google Privacy Policy. You can opt-out here: Google Analytics Opt-out.
We share information about your use of the website, your purchases, and interaction with our ads with our advertising partners.
We use Shopify Audiences to help show ads to buyers who may also be interested in what we offer.
For more information about targeted advertising you can visit:
https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
Opt out of targeted advertising
Facebook – https://www.facebook.com/settings/?tab=ads
Bing – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Digital Advertising Alliance – https://optout.aboutads.info/
Using Personal Information
We use your personal information to provide our services to you. This includes offering products for sale, processing payments, shipping orders, and keeping you informed about products, services, and offers.
Lawful basis
If you are a resident of the European Economic Area (EEA), we process your personal information under the following lawful bases:
Your consent
The performance of the contract between you and the website
Compliance with our legal obligations
Protection of your vital interests
Tasks carried out in the public interest
Our legitimate interests, provided these do not override your fundamental rights and freedoms
Retention
When you place an order through the website, we retain your Personal Information for our records unless and until you ask us to erase this information.
Automatic decision-making
If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (including profiling) when it has a legal or significant effect on you.
Our processor Shopify uses limited automated decision-making to prevent fraud.
Temporary blacklist of IP addresses associated with repeated failed transactions.
Temporary blacklist of credit cards associated with blacklisted IP addresses.
Your rights
GDPR
If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, port it to a new service, and request correction, updating, or erasure.
Your Personal Information will initially be processed in Ireland and then transferred outside Europe including to Canada and the United States.
More information: Shopify GDPR Whitepaper
Cookies
A cookie is a small amount of information downloaded to your device when you visit our website.
Cookies allow the website to remember your actions and preferences such as login and region selection. They also help us understand how people use the website.
Cookies necessary for the functioning of the store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
| checkout_session_lookup | Used in connection with checkout. | 3w |
| checkout_session_token_<<token>> | Used in connection with checkout. | 3w |
| identity-state | Used in connection with customer authentication. | 24h |
| identity-state-<<token>> | Used in connection with customer authentication. | 24h |
| identity_customer_account_number | Used in connection with customer authentication. | 12w |
Reporting and Analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing & referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_ga | Shopify and Google Analytics. | session |
| customer_auth_provider | Shopify analytics. | session |
| customer_auth_session_created_at | Shopify analytics. | session |
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection practices when such signals are detected.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.
Complaints
If you would like to make a complaint, please contact us using the contact details listed above.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.
Legal basis for data collection
The legal basis for data processing is Article 2 section 1 p 1 lit f of the GDPR.
We also process data with your explicit consent under Article 6 Section 1 p 1 lit b GDPR and to fulfill contractual obligations or pre-contractual measures in response to your inquiries.
GDPR reference:
https://www.eugdpr.org/