Mann & Schröder GmbH (hereinafter referred to as “Mann & Schröder Cosmetics”), Bahnhofstraße 14, 74936 Siegelsbach and Schröder Cosmetics GmbH & Co. KG (hereinafter referred to as “Schröder Cosmetics”), Mann & Schröder Str. 1, 74928 Hüffenhardt (hereinafter also referred to jointly as “we or our”) take the protection of your personal data very seriously and strictly adhere to all applicable laws and regulations on data protection, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG).

The following explanations provide you with an overview of how we ensure this protection and which data we process for which purpose.

1. Usage data

Every time this website is accessed and every time a file is retrieved, general data about this process is automatically stored in a log file. The storage serves exclusively system-related and statistical purposes (based on Art. 6 para. 1 letter f.) DSGVO), as well as in exceptional cases to report criminal offences (based on Art. 6 para. 1 letter f.) DSGVO, § 25 para. 2 No. 2 TTDSG). Our legitimate interest is to ensure the delivery of the website and to combat abuse and troubleshooting. The data is not passed on to third parties or evaluated in any other way, unless there is a legal obligation to do so (Art. 6 para. 1 letter c) DSGVO). In detail, the following data record is stored about each retrieval:

- - name of the retrieved file
  - date and time of the retrieval
  - amount of data transferred
  - message whether the retrieval was successful

description of the type of web browser used
operating system used
the previously visited page
provider
your IP address

We pass on the collected data to the responsible internal departments or to external service providers who act for us as order processors (e.g. hoster, provider of the content management system) for processing in accordance with the processing required for the presentation of the website and the creation of the content.

The deletion of the log file takes place as soon as they are no longer needed for the purposes mentioned, at the latest after 7 days.

2. Personal data via the contact form, competitions, product reviews and newsletters.

Personal data will only be processed by us if we are permitted to do so by law, or if you have given us your consent.

In detail:

a. Contact form

When you contact us, we store your data on the basis of Art. 6 (1) (b) DSGVO, in the case of inquiries in connection with a contract, and Art. 6 (1) (f) DSGVO for the purpose of processing your inquiry and in the event that further correspondence should take place. When processing the data that arises in the course of communication, we have a legitimate interest in processing the data in accordance with legal requirements, for internal review or in accordance with the respective communication request.

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. For the use of the contact form, the following data is mandatory:

your first and last name,
a valid e-mail address,
your specific message.

The listed data will be processed by us for the following purposes:

to be able to identify you and
to be able to answer your question.

In addition, you can voluntarily provide your address for a postal contact.

The use of the form provided via the website is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the form, but can also use the other contact options provided on our website. If you wish to use our form, you must fill in the fields marked as mandatory. If you do not fill in the required information of the form, you will either not be able to send the request or we will unfortunately not be able to process your request.

We pass on the collected data to the respective internal departments for processing. In addition, external IT service providers such as our hoster have access to the data entered via the form.

The personal data collected by us for the purpose of responding to your inquiry will be automatically deleted after the inquiry you have made has been dealt with, if the circumstances indicate that the matter in question has been conclusively clarified and there are no legal obligations to retain the data.

b. Competitions

For the participation, the execution and the dispatch of prize notifications as well as prizes, we require personal data from you. This includes for example

your first and last name,
your e-mail address,
if applicable, your address,
if applicable, your date of birth
if applicable, your telephone number.

The legal basis for this is Art. 6 para. 1 lit. b) EU DSGVO, i.e. you provide us with the data on the basis of the contractual relationship (conditions of participation) between you and us. For details on the contractual relationship, please refer to the respective conditions of participation. The provision of your personal data is necessary for the conclusion of the contract. You are not obliged to provide the personal data. If you do not provide your data, you will not be able to participate in the competition.

If we organize competitions on social media platforms (e.g. Instagram), we would like to ask you to also observe the data protection provisions of the respective platform.

In some cases, we pass on your data to service providers

for the shipment of raffle prizes to a shipping company and / or
for the processing of sweepstakes to the website hoster.

For some sweepstakes, it is also necessary for the processing to transmit your data to our cooperation partners who support us in the implementation of sweepstakes, or to have them process your data so that they can contact the winner and/or deliver or provide the prizes. We inform you about our cooperation partners in the respective conditions of participation.

In addition, we also organize sweepstakes together with other organizers (partners). For the processing of your data in the context of jointly organized sweepstakes, there is a joint responsibility pursuant to Art. 26 DSGVO between and the respective partner. We and the partner have set out the principles for the joint processing of personal data and the respective data protection-relevant tasks and responsibilities in the context of the sweepstakes in a written agreement. In connection with jointly organized sweepstakes, your personal data collected by us will be shared with the partner or the partner will share the data collected by it with us in order to carry out the sweepstakes. We have agreed with the partner that both we and the partner are responsible for the fulfillment of the information obligations pursuant to Art. 13, 14 DSGVO, as well as the provision of information pursuant to Art. 26 (2) p. 2 DSGVO, and that we will provide you with this information as part of your participation in the sweepstakes. The obligation to exercise your data subject rights applies to both us and the respective partner, depending on to whom you assert your rights. Both we and the respective partner will not correct, delete or restrict the processing of your data on their own authority, but only by mutual agreement. If a competition is organized jointly with a partner, you will be informed of this separately in the conditions of participation.

If you do not wish your data to be transmitted for the purpose of processing the competition, you will not be able to participate.

The legal basis for the transmission of data is Art. 6 para. 1 lit. b) DSGVO.

In principle, your data will be deleted after completion of the competition.

We store the winners’ data until the expiry of the legal or possible contractual warranty and guarantee rights.

c. Product testing

If you participate as a product tester or similar promotions from us, we will use the personal data you provide to carry out the promotion. You will find further information on the purposes in the respective conditions of participation of the promotion.

The provision of your personal data is necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide your data, the promotion cannot be carried out.

In the course of applying for a product test, we require personal data from you for the following purposes:

inclusion in our product tester database
determining whether you are eligible to participate
assignment of the appropriate product
notification of selection to participate in the product test
dispatch of the test products in case of selection as a product tester
transmission of the form link through which the evaluations can be submitted

Personal data includes for example

your first and last name
your e-mail address
Your address
Your birthday
Your skin type or condition on the face and body
Your favorite product category

The legal basis for this is Art. 6 para. 1 lit. b) DSGVO, i.e. you provide us with the data on the basis of the contractual relationship (conditions of participation) between you and us. For details on the contractual relationship, please refer to the respective conditions of participation.

In the event of acceptance for a product test, you have the opportunity to evaluate the product voluntarily, according to predefined questions, as well as in your own words. Optionally, you can upload photos of yourself before and after using the product.

Thus, we collect the following data from you when evaluating a specific product test:

The answers you provide to the evaluation questions about the product and your consumption behavior, the evaluation created in your own words, and the photos you optionally upload.

The aforementioned data, which we collect from you during the voluntary evaluation of the tested products, is used exclusively to carry out the product tests in accordance with the agreement and thus ultimately to evaluate our products. Your evaluations will be published on the product test platform with your user name.

If you agree to participate in a product test, you will receive a 20% discount code for the alkmene online store after successfully submitting your evaluation.

Thus, we collect the following data in case of participation:

the discount code vouchers we sent you by e-mail in connection with the execution of the product tests as well as data we receive when redeeming the discount vouchers (redeemed discounts, date and place of redemption).

The aforementioned data, which we collect from you when sending and redeeming the discounts, is used exclusively for the execution of the product tests in accordance with the agreement. If we do not collect the aforementioned data or if you do not provide us with this data, it will not be possible to carry out the product tests.

As part of your application to participate in the product tests, we will send you test-specific service e-mails. These contain, for example, confirmation of participation, rejection or a reminder of your ongoing product tests. Within the scope of these e-mails, we process the data of your e-mail address in order to be able to write to you.

The legal basis for the data transfer is Art. 6 para. 1 lit. b) DSGVO.

As a matter of principle, your data collected by us will not be disclosed to third parties, unless the disclosure is necessary for the execution of the product test to the website provider or the sending of the discount codes via the newsletter tool or the test products to a shipping company.

In addition, we use other service providers for the processing of personal data, including for the sending of e-mails (e.g. the company CleverReach GmbH & Co. KG), the storage of your data in a secure data center and the maintenance and analysis of databases.

All processors have been carefully selected, support us strictly in accordance with instructions and are only given access to your data to the extent and for the period required to provide the services or to the extent that you have consented to the data processing and use.

Your personal data will not be transferred outside the European Union / European Economic Area.

You have the option of deleting your stored profile (all contact information, test-specific answers to the questions about yourself, your interests and preferences and your consumer behavior, optionally uploaded photos). To do this, please send an e-mail to one of the two jointly responsible persons. If you have not submitted an application for a product test for a period of at least four calendar years, your profile will be automatically deleted. If you regularly take part in a product test at least once every four years, your profile will remain saved until you delete it. We reserve the right to block your profile in the event of a breach of the conditions of participation or misuse of your profile and, if necessary, to delete it after checking.

We also store your personal data for the duration of contractual or legal retention periods.

d. alkmene Skin Stories

If you participate in the alkmene Skin Stories promotion, we will use the personal data you provide to carry out the promotion. You will find further information on the purposes in the respective conditions of participation in the promotion.

The provision of your personal data is essential for a contractual relationship. You are not obliged to provide the personal data. If you do not provide your data, the promotion cannot be carried out.

In the course of the alkmene Skin Stories promotion, we require personal data from you for the following purposes:

inclusion in our alkmene Skin Stories database
To publish your first name, age, skin history, skin type and skincare routine, supplemented by your pictures if applicable, via our website, newsletters or social networks.
Notification of selection and publication of Skin Stories
Participation and execution of the linked prize draw
Eligibility for a discount code for the alkmene online shop
Dispatch of the prize draw notifications and the facial care package.

Personal data includes for example

Your first and last name
your e-mail address
Your address
Your birthday
Your skin type or condition
Your skin history

Other voluntarily provided personal data includes, for example

Image upload: Before/after picture of your skin and a picture of yourself
Your favourite alkmene product from the MY TEA TREE OIL series as well as a justification of this favourite product
Your personal tip on the subject of impure skin

We process the personal data to determine whether your submitted skin story will be published via the website, newsletter or social media channels of the organiser. In this context, we receive information about your skin type, your skin history or development and your skin care routine.

Thus, when you participate in the alkmene Skin Stories, we will collect the following personal data:

The answers given to the questions about yourself, your skin type, your skin development and your skin care routine.

When you register to take part in the alkmene Skin Stories, you will receive a 10% discount code for the alkmene online shop after successfully submitting your registration.

Thus, we collect the following data when you participate:

the discount code vouchers that are filled in and redeemed on the website www.alkmene.de, as well as data that we receive when the discount vouchers are redeemed (redeemed discounts, date and place of redemption).

The aforementioned data that we collect from you through the discount code vouchers is solely for the purpose of carrying out alkmene Skin Stories as agreed. If we do not collect the aforementioned data or if you do not provide it to us, it will not be possible to carry out the alkmene Skin Stories.

When participating in the alkmene Skin Stories, you have the opportunity to voluntarily provide information about your favourite product in accordance with the questions provided, as well as in your own words, and to provide a personal tip on the subject of impure skin. You also have the option of uploading photos of yourself before and after using the alkmene product as well as of yourself.

In this way, we collect the following data from the information you voluntarily provide:

The answers and descriptions you give about alkmene products and your skin tips written in your own words, as well as the photos you optionally upload.

The aforementioned data, which we collect from you when you voluntarily provide it, is used exclusively for the implementation of the alkmene Skin Stories as agreed and thus ultimately for the evaluation of our products. Your descriptions and information may be published on our website, newsletter or social media channels with your first name and age.

As part of your participation in the alkmene Skin Stories, we will send you test-specific service emails. In the context of these emails, we process the data of your email address in order to be able to write to you.

The legal basis for the data transfer is Art. 6 para. 1 lit. b) DSGVO.

As a matter of principle, your data collected by us will not be passed on to third parties, unless the passing on is essential for the implementation of the alkmene Skin Storys or the sending of the discount codes or the raffle prizes and there is a data protection law authorisation to pass on the data.

If you voluntarily register for our alkmene newsletter in the course of the promotion, we will also use other service providers for the processing of personal data, including for the sending of e-mails (e.g. the company CleverReach GmbH & Co. KG), the storage of your data in a secure data centre and the maintenance and analysis of databases.

All processors have been carefully selected, support us strictly in accordance with instructions and only receive access to your data to the extent and for the required period of time that is essential for the provision of the services or to the extent that you have consented to the data processing and use.

Your personal data will not be transferred outside the European Union / European Economic Area.

You have the option of deleting your registered data (all contact information, answers to questions about yourself, your descriptions of your skin, optionally uploaded photos). To do so, please send an e-mail to one of the two jointly responsible persons. We reserve the right to block your profile in the event of a breach of the conditions of participation or misuse of your profile and, if necessary, to delete it after checking.

We also store your personal data for the duration of contractual or legal retention periods.

e. Product rating function on the website

For the product rating function on this page, in addition to your comment, details of when the comment was created, your e-mail address, the username you have chosen and – if uploaded – an image will be stored.

Storage of the IP address

Our rating function stores the IP addresses of users who write ratings. Since we do not check comments on our site before they are activated, we need this data to be able to take action against the author in the event of legal violations such as insults or propaganda.

Storage period of comments

The ratings and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments). If you would like us to delete the rating or any data published in connection with it, please send an e-mail to one of the two joint controllers.

Legal basis

The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). The IP address is stored on the basis of Art. 6 (1) (f) GDPR, Section 25 (2) No. 2 TTDSG. Our legitimate interest is to clarify legal violations. You can withdraw your consent at any time. To do so, please send us an email to one of the two joint controllers. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

f. Newsletter and newsletter tracking

We are happy to offer you a personalized promotional mailing and inform you about our company as well as our product range via our newsletter.

To send a newsletter, we need your e-mail address. You can enter this information in the fields provided on our website. You can also voluntarily provide the following information:

your name

We use this voluntarily provided data to address you personally and to send you individual information and offers tailored to your needs.

After you have sent this data, you will receive an e-mail from us to the e-mail address you provided, in which you must click on a confirmation link to verify the e-mail address you provided. Your data will be processed by us for the purpose of sending the newsletter.

In addition, we store your IP address and the date of your registration in order to be able to prove the newsletter registration in case of doubt.

The newsletter is sent using “CleverReach”, a newsletter sending platform of the provider CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany. You can view the data protection provisions of the dispatch service provider here: https://www.cleverreach.com/en-de/privacy-policy/ .

The e-mail addresses of our newsletter recipients, as well as their other data described in the context of this notice, are stored on the servers of CleverReach. CleverReach uses this information to send and evaluate the newsletter on our behalf.

However, CleverReach does not use the data of our newsletter recipients to address them itself or to pass them on to third parties.

The personalized newsletters contain so-called pixels, which are retrieved from the CleverReach server when the newsletter is opened. In the course of this retrieval, technical information such as information about the browser and your system, as well as your IP address and time of retrieval are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of CleverReach to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them, to improve it or to send different content according to the interests of our users.

There are cases in which we direct the newsletter recipients to the websites of CleverReach. For example, our newsletters contain a link with which the newsletter recipients can call up the newsletters online (e.g. in the event of display problems in the e-mail program). Likewise, the CleverReach privacy policy linked above can only be accessed on their site.

In this context, we would like to point out that the CleverReach website uses cookies and that personal data is thus processed by CleverReach, its partners and service providers used (e.g. Google Analytics). We have no influence on this data collection. For more information, please refer to the CleverReach privacy policy linked above.

We would also like to draw your attention to the options for objecting to the collection of data for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the European region).

The legal basis for data processing is Art. 6 para. 1 lit. c) DSGVO, or by clicking on the confirmation link your consent and thus Art. 6 para. 1 letter a) DSGVO, § 25 para. 1 TTDSG.

You can unsubscribe from the newsletter at any time. At the same time, your consent to the newsletter dispatch via CleverReach and to the statistical analysis will expire. A separate revocation of the dispatch via CleverReach e-mail or the statistical analysis is unfortunately not possible. You will find a link to revoke your consent at the end of each newsletter. Alternatively, please send us an e-mail to one of the two jointly responsible persons.

g. Evaluation reduction after product purchase

In order to constantly improve our service, we offer you the opportunity to rate and comment on the products you have purchased from us. If you have expressly agreed to this during the ordering process, you will be contacted by us for this purpose by e-mail and asked to submit a rating of the purchased product. For this purpose, we use the e-mail address that you have entered in the corresponding dialog box in the online store. In this e-mail you will also be sent the appropriate link for rating the purchased product.

Within the scope of the rating reminder function, the following data will be collected from you and processed:

e-mail address

The legal basis for data processing in the context of the use of the product rating reminder function is your consent pursuant to Art. 6 (1) a) DSGVO. You can revoke your consent at any time. Your e-mail address will then be blocked for this function. The revocation of consent does not affect the lawfulness of the processing carried out on its basis until the revocation.

h. Survey after newsletter unsubscription

In order to constantly improve our service, we offer you the opportunity to participate in a survey after newsletter unsubscription. The survey, which we create without an external provider, is displayed on the confirmation page after a successful newsletter unsubscription, but does not have to be answered.

In order to enable the evaluation of the survey and thus an improvement of the web services, only the survey response is stored by us – once the survey has been answered. The name, e-mail address or your ip address is therefore not collected.

i. Data analysis

We use the user data of our newsletter subscribers, survey participants and product test participants, including in the context of data analyses, for market research purposes. In doing so, we pursue the following purposes in particular:

The classification into different target and user groups in the context of market research (user segmentation).
Insights into different target groups and their respective usage habits and shopping interests.
Gaining insights into the demographics, interests, shopping and usage habits of our users and marketing these insights as part of advertising services provided to third parties.
The early identification of trends in cosmetics and online shopping.
Insights into how our newsletter and products are used (usage analysis).

The user data is first anonymised before further processing for these purposes, so that it is only processed further in the form of summarised, statistical, depersonalised (anonymised) data. For this purpose, the user data is first transferred to our own analysis tool, which is hosted on our own servers. Anonymisation takes place immediately. For the aforementioned data analyses, we use the data that we have anonymised. For example, for analyses of the purchasing behaviour of our users, we use summarised (aggregated), statistical, depersonalised (anonymised) profile data as well as anonymised device and access data in order to be able to track and analyse purchasing processes through data analyses. We thereby gain anonymous information about the general usage behaviour of our users.

We process your data on the basis of a balancing of interests to protect our legitimate interests. Our legitimate interest in processing data is derived from the purposes described above and, unless otherwise stated, is of a competitive and economic nature.

The data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO.

3. Orders via our online store

We collect personal data if you provide it to us voluntarily as part of your order. Mandatory fields are marked as such, as we require the data in these cases to process the contract. Which data is collected can be seen from the respective input forms.

Similarly, you must enter your data again if you want to request the return and fill out the return form for this purpose. Which data is collected can also be seen from the respective input forms.

The processing of this data takes place

to be able to identify you as our customer
to be able to process, fulfill and handle orders;
for correspondence with you;
for invoicing purposes;
to process any liability claims that may exist, as well as the assertion of any claims;
to manage your customer data.

We pass on your data to the shipping company commissioned with the delivery (e.g. DPD), insofar as this is necessary for the delivery of ordered goods. In addition, the data is passed on to the service provider selected for payment processing (e.g. PayPal). Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, insofar as you create an account there. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

a. Integration of the online store functionality via “WooCommerce” and guarantee of the legal conditions via “WooCommerce Germanized”

For the operation of the online store we use on this website “WooCommerce”, a WordPress plug-in from WooCommerce Inc, 60 29th Street #343, San Francisco, CA 94110. WooCommerce provides an e-commerce platform through which we offer our goods for sale. It is a local plug-in. No personally identifiable information is transferred to WooCommerce. The WooCommerce plug-in adds the functionality of an online store to our content management system. For more information, please refer to WooCommerce’s privacy policy at https://automattic.com/privacy/.

“WooCommerce Germanized” extends WooCommerce and ensures the technical adaptation to the specific German legal conditions. In this way, we ensure compliance with data protection requirements when using WooCommerce.

Payment processing platform “mollie“

If you choose a payment method offered via the payment processing platform “mollie”, the payment processing will be carried out via Mollie HQ. Keizersgracht 126, 1015CW Amsterdam, The Netherlands, to whom we pass on the information you provide during the ordering process, together with information about your order. The following payment methods are integrated via mollie: KLARNA Sofortüberweisung, credit card. Your data will only be passed on for the purpose of payment processing with mollie B.V. and only insofar as it is necessary for this purpose. mollie B.V. acts on our behalf within the framework of an order processing agreement pursuant to Art. 28 (3) p. 1 DSGVO. You can find more information about the data protection of “mollie” at the https://www.mollie.com/privacy .

c. Payment service provider “PayPal“

If you choose payment services from “PayPal” (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), you will be redirected directly to the PayPal website.

Regardless of this, we send the following data to PayPal to process the payment: name and first name of the customer, delivery address with name and first name (in the case of a different delivery address, possibly also names of third parties such as neighbors), total amount of the shopping cart (no information about individual items), order number. All entries of payment data are entered directly into the system of PayPal and can be neither read nor stored by us.

After a risk check by PayPal, we receive for further order processing only the information from PayPal, whether the order is accepted or rejected (if necessary, after manual review by PayPal). In the latter case, the customer can then select another payment method.

Without the transmission of your personal data, we can not make a payment via PayPal, but you can choose another payment method.

In this respect, please note the privacy policy of PayPal, available here: https://www.paypal.com/webapps/mpp/ua/privacy-full .

Payment service provider “Klarna“

If you choose to pay by Sofortüberweisung, our payment service provider Klarna Bank AB (publ), German Branch, Chausseestraße 117, 10115 Berlin (Klarna) will handle the payment. Klarna is a provider that allows customers to pay in installments and Sofortüberweisung. For this purpose, we transmit to Klarna your name, your order data, your invoice data and your order number if you have chosen this payment method. Klarna checks whether the payment options can be offered to you and informs us of the result and processes the payment directly with you.

e. Data analysis

We use the user data of our online shop customers and persons with a customer account, also in the context of data analyses, for market research purposes. In doing so, we pursue the following purposes in particular:

Classification into different target and user groups within the framework of market research (user segmentation).
Insights into different target groups and their respective usage habits and shopping interests.
Gaining insights into the demographics, interests, shopping and usage habits of our users and marketing these insights as part of advertising services provided to third parties.
The early identification of trends in the cosmetics and online shopping sectors.
Insights into how our online shop is used (usage analysis).

The data processing is carried out on the basis of Art. 6 Para. 1 lit. f DSGVO.

4. Customer account

You can register for our customer account (hereinafter “alkmene customer account”). In the alkmene customer account you can easily and quickly place an order with your e-mail address and password. You can also manage your personal data such as address or phone number and view your order history.

You can register for your alkmene customer account on our website by entering personal data. The following data is collected during the registration process:

name and first name
username
e-mail address
password
The following data is also stored at the time of registration:
your IP address (will be anonymized)
date and time of registration.

In order to provide you with the services from the customer account and to process your order, we process your data on the basis of a contract. The legal basis for the processing of the data is Art. 6 para. 1 b) DSGVO.

Provided that you delete your account, your personal data will be deleted immediately. You can do this at any time. It is also possible to change the data in your account at any time. If you have made a purchase, the data about this purchase (such as name, address, payment data and goods data) will be stored for 10 years due to tax and commercial law obligations. The period for storage begins on 1.1. of the year following the purchase and ends 10 years later. The data will be deleted accordingly after this period.

5. Microsoft365

We use Microsoft365. As a result, we cannot rule out the possibility that your (sensitive) data may also be transferred outside the European Economic Area and thus outside the material scope of the GDPR or that your (sensitive) data may be accessed, e.g. as part of support by Microsoft or other cloud providers. This applies in particular to the transfer of your (sensitive) data to and access to your (sensitive) data from the USA. There is no unrestricted adequacy decision by the European Commission for the USA. A transfer of your (sensitive) data therefore takes place in accordance with Art. 46 para. 2 lit. c) GDPR generally on the basis of the standard contractual clauses of the European Commission. You can obtain a copy of the passages of the contracts concerning you from us.

6. Cookies – General information

6.1 Information and purposes

We use so-called cookies and similar technologies in some areas on this website (hereinafter generally referred to as “Tools”). Cookies are small text files that are placed on your computer to store certain information and can be stored by your browser. Through such file elements, your computer can be identified as a technical entity during your visit to this website with the same terminal device. During your visit to the website or the next time you visit our website with the same terminal device, the information stored in cookies is sent back either to our website (“first party cookie”) or to another website of a third-party provider to which the cookie belongs (“third party cookie”).

The stored and returned information allows the respective website to recognize that you have already accessed and visited it with the browser of your end device. Some cookies also enable us to recognize individual users by means of pseudonyms, e.g. an individual or random IDs, so that we can offer individual services. In addition, other technologies, such as local storage or device fingerprinting, may be used by which information from your terminal device used when visiting our website is read and used for recognition purposes.

This website uses the following types of tools

Essential tools

To ensure that the requested service can be provided.

Functional tools

Additional tools to measure the performance/attractiveness of our website and to provide other additional(personalized) functionalities.

Statistical tools

Conducting basic analysis and evaluation of the use of our website.

Marketing tools

Cross-site marketing profiling tools based on your user behavior.

The tools are set by our website or the external services to maintain the full functionality of our website, to improve the user experience and to optimize our web offering or to pursue the purpose stated in your consent.

For the tools we use, we will inform you in the respective sections of the privacy policy whether and how cookies are set and used in each case. You can also find further information on the cookie management platform used on this website.

6.2 Legal basis

The use of tools and any further storage and processing of personal data will only take place with your express consent or if this is absolutely necessary so that you can use the services offered and accessed by you accordingly.

Legal bases are Art. 6 para. 1 lit. f DSGVO (legitimate interest), § 25 para. 2 No. 2 TTDSG or Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO (consent), § 25 para. 1 TTDSG. Consent according to Art. 6 para. 1 lit. a DSGVO is also considered consent in the sense of § 25 para. 1 TTDSG for setting the cookie on or reading information from the user’s terminal device. Insofar as another legal basis is mentioned according to the DSGVO, the storage or setting of the cookie or the reading out of information is carried out on the basis of the exception according to § 25 para. 2 no. 2 TTDSG.

In the case of tools that are used on the basis of a legitimate interest, it generally applies that our legitimate interest is to ensure the functionality of our website and the services integrated on it (necessary tools). In addition, it may be that the tools increase user-friendliness and enable an optimized design of our web offering. Here, we have weighed your interests against our interests.

With the help of the tools, we can only identify, analyze and track you if you have consented to the use of the tool and your personal data pursuant to Art. 6 (1) lit. a DSGVO, Section 25 (1) TTDSG.

You will be informed which legal basis is relevant for the respective tools below in the respective sections on the tools used.

6.3 Deletion and objection

In addition to tools that are only used during a session and deleted after the website visit (“session cookies”), tools can also be used to store user settings and other information for a certain period of time (e.g. two years) (“permanent cookies”). Details on the deletion periods are listed with the respective tool. Most of the cookies used are so-called “session cookies”, which are deleted when you end your browser session.

However, you usually have the option of setting your browser to prevent cookies from being stored on your end device. Cookies that have already been set can be deleted at any time via browser settings. You can find instructions on how to do this in the help function of your browser.

A general objection to cookies used for online advertising can be declared for a large number of the services used on websites within the framework of developed self-regulation programs, e.g. via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/ . We would like to point out that the setting made will be deleted when you delete your cookies

We point out that the exclusion of cookies may lead to functional limitations of the website.

6.4 Essential cookies

In some areas of this website, we use so-called technically essential cookies. Some functions of this website cannot be offered without the use of cookies. Essential cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

The use of essential cookies on our website is possible without your consent. For this reason, essential cookies cannot be individually disabled or enabled. However, you always have the option to generally disable cookies in your browser (see above). These cookies are automatically deleted after a time defined by us.

On this website, the following cookies are used, which are technically essential for the operation of the website:

Cookie name	Provider	Purpose	Storage duration	Type
PHPSESSID	M&S / CMS	Use in connection with session handling	session	essential
pum-40179	Pop Up Maker	Opening and closing the newsletter pop-up, controls the repeated display of pop-ups	1 month	essential
pum-40256	Pop Up Maker	Triggering the pop-up (submitting the newsletter form)	1 month	essential

We base the use of cookies on Art. 6 para. 1 letter f) DSGVO as well as § 25 para. 2 No. 2 TTDSG. The processing is carried out to enable the functioning of our website. It is therefore essential to protect our legitimate interests.

7. Essential services

7.1 Usercentrics (CMP Tool)

We use the consent management service of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany (“Usercentrics”) on this website for the purpose of consent management.

Data processing purposes

The following list represents the purposes of data collection and processing:

compliance with legal obligations to obtain consent for data processing and use of cookies or other technologies, as well as fulfillment of obligations to provide evidence
consent storage

Technologies used

Local Storage

Collected data

When using the Service, the following data is collected:

opt-in and opt-out data
referrer URL
user Agent
user settings
consent ID
time of consent
consent type
template version
banner language

Legal basis

The legal basis for the data processing is the fulfillment of legal obligations according to Art. 6 para. 1 s. 1 lit. c DSGVO as well as Art. 25 para. 2 no. 2.

Place of processing

European Union

Retention period

The consent data (consent and revocation of consent) is stored for three years. The data is then deleted immediately.

Data recipient

Usercentrics GmbH (processor)

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: datenschutz(at)usercentrics.com.

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://usercentrics.com/privacy-policy/

More information about the service

For more information on Usercentrics, please visit: https://usercentrics.com/ .

7.2 Google Tag Manager

We use the tag management system “Google Tag Manager” from Google Ireland Limited, Google Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”) on this website.

Via Google Tag Manager, tags can be integrated centrally via a user interface. Tags are small sections of code that can track activities. Script codes of other tools are integrated via the Google Tag Manager. The Tag Manager makes it possible to control when a particular tag is triggered, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all deactivated tracking tags that are implemented with Google Tag Manager.

Data processing purposes

The following list represents the purposes of data collection and processing:

tag management

Technologies used

website tags

Collected data

When using the Service, the following data is collected:

aggregated data about the tag triggering
the Google Tag Manager does not store any personal data

Legal basis

The legal basis for the data processing is the legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO as well as Art. 25 para. 2 no. 2 TTDSG.

Place of processing

European Union and third-party countries
transmissions to and access from third-party countries are possible. As suitable guarantees for data transmission to the USA, so-called standard contractual clauses pursuant to Art. 46 Bas. 2 lit c DSGVO have been concluded with Google. For third-party countries/companies for which an adequacy decision exists, the adequacy decision pursuant to Art. 46 (1) DSGVO applies. Information on data transfer to third-party countries by Google can also be found under the following link: https://privacy.google.com/businesses/controllerterms/mccs/ .

Retention period

The data is deleted within 14 days after retrieval.

Data recipient

Alphabet Inc. (subprocessor)
Google LLC (subprocessor)
Google Ireland Limited (subprocessor)

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/contact/general_privacy_form

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

8. Services for functional purposes

8.1 Open Street Map

We use the Leaflet API to show the integrated map service “Open Street Map” from OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom on this website. To make it easier to find the nearest retailer, you have the option to enter your zip code or address.

Data processing purposes

The following list represents the purposes of data collection and processing:

functionality for displaying map material and/or displaying directions

Technologies used

Collected data

Information about the use of our website is already collected when those subpages are called up in which the map from Open Street Maps is integrated.

When using the Service, the following data is collected:

location information
IP address

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and § 25 Para.1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here; and disabling the “OpenStreetMap” service within the “Functional” category.

Place of processing

United Kingdom
Netherlands

Retention period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient

OpenStreetMap Foundation

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: privacy@osmfoundation.org

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://wiki.osmfoundation.org/wiki/Privacy_Policy

8.2 Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website, a service that verifies whether data entry is made by a human or by an automated program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”).

Data processing purposes

Because reCAPTCHA is intended to verify whether data entry on our websites (e.g. in a contact form) is done by a human or by an automated program, reCAPTCHA analyzes your website behavior based on various characteristics. For the analysis, reCAPTCHA evaluates various information. The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. You will not be notified that an analysis is taking place.

The following list represents the purposes of data collection and processing:

bot protection
spam prevention
fraud detection

Technologies used

scripts

Collected data

When using the Service, the following data is collected:

browser language
browser plug-ins
click path
date and time of visit
IP address
user behavior
time spent on a page
user input
device information
mouse movements
geographic location
device operating system

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the “reCAPTCHA” service within the “Functional” category.

Place of processing

European Union and third-party countries

Retention period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Alphabet Inc. (subprocessor)
Google LLC (subprocessor)
Google Ireland Limited (processor)

Disclosure to third-party countries

The collected information is usually transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Google Ireland Limited on the standard data protection clauses approved by the EU Commission and therein also agreed on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data depending on the need for protection. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://business.safety.google/adscontrollerterms/

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/contact/general_privacy_form

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

8.3 Google Fonts

The service „Google reCAPTCHA“ used by us on this website use so-called web fonts (hereinafter “Google Fonts”) for display, which are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin 4, Ireland (hereinafter “Google”). When you call up our website, the browser loads the required web fonts into the browser cache in order to display texts and fonts correctly.

If your browser does not support web fonts, a standard font is used by your computer.

For the above purpose, the browser used must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address.

Data processing purposes

The following list represents the purposes of data collection and processing:

provision of fonts for the service „Google reCAPTCHA“
improvement of the services

Technologies used

Collected data

When using the Service, the following data is collected:

IP address
aggregated usage figures
font request
referrer URL
CSS requests
user Agent
browser information

Legal basis

The legal basis for the data processing is your consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. If you consent to the use of the services “Google reCAPTCHA” this also includes consent to the Google Fonts.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the service “reCAPTCHA” within the category “Functional”. Because Google Fonts is linked to this service, deactivation is only possible in this way.

Place of processing

European Union

Retention period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Alphabet Inc. (subprocessor)
Google LLC (suprocessor)
Google Ireland Limited (processor)

Disclosure to third-party countries

The collected information is usually transferred to a server of the service provider in the USA and stored there.

Details on data processing, which comply with the standard contractual clause, can be found here: https://business.safety.google/adscontrollerterms/

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/contact/general_privacy_form

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

More information about the service

Weitere Informationen zu Google Web Fonts finden Sie unter https://developers.google.com/fonts/faq/

8.4 YouTube

We use embedded YouTube videos on this website, which are stored on https://www.youtube.com. They are displayed on our website using a so-called “framing technology” and can be played directly here. The provider of YouTube is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). As soon as you play a video, data is transferred to YouTube, a Google company.

Data processing purposes

The following list represents the purposes of data collection and processing:

show videos

Technologies used

YouTube is integrated via the extended privacy mode.

Collected data

When using the Service, the following data is collected:

device information
IP address
referrer URL
videos viewed

This transmission takes place regardless of whether you have a user account with YouTube or not.

If you are logged in to a Google user account, your data will be directly assigned to this account. If you do not wish this, you must log out of your user account before playing the video.

The data transmitted to YouTube is stored by YouTube in the form of user profiles and used for advertising and market research purposes and for the personalized design of their website. With the help of this evaluation, YouTube can generate demand-optimized advertising (even for users who are not logged in) and inform other YouTube users about your visit to our portal.

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the “YouTube Video” service within the “Functional” category.

You can object to the above-mentioned creation of user profiles by contacting YouTube.

Click here to revoke on all domains of the processing company: https://safety.google/privacy/privacy-controls/

Place of processing

European Union

Retention period

Data are deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Alphabet Inc. (subprocessor)
Google LLC (subprocessor)
Google Ireland Limited (joint processor)

Disclosure to third-party countries

The collected information is usually transferred to a server of the service provider in the USA and stored there.

Details on data processing, which comply with the standard contractual clause, can be found here: https://business.safety.google/adscontrollerterms/

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/contact/general_privacy_form

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

9. Services for statistical purposes

9.1 Google Analytics

We use “Google Analytics” on this website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”).

Data processing purposes

On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The following list represents the purposes of data collection and processing:

Statistics in order to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you. In addition, we receive information about the functionality of our website (for example, to detect navigation problems).

Technologies used

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site.
Pixel
JavaScript
device fingerprint

Collected data

When using the Service, the following data is collected:

click path
date and time of visit
device information
location information
IP address
- We would like to point out that on this website Google Analytics has been extended by the code “gat. anonymizeIp();” to ensure anonymized collection of IP addresses (so-called IP masking).
visited pages
referrer URL
browser information
host name
browser language
browser type
screen resolution
device operating system
interaction data
user behavior
visited URL

We also use the “demographic characteristics and interests” function of Google Analytics, which enables us to obtain reports on age, gender and interest categories. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers and cannot be assigned to any specific person.

We have adjusted the configuration of Google Analytics so that only the website analysis function is used, unless separate consent has been given for the advertising functions.

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the services ” Google Analytics” and “Google Analytics 4” within the category “Statistics”.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can deactivate the above-mentioned “demographic characteristics and interests” function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics.

Click here to revoke on all domains of the processing company: https://safety.google/privacy/privacy-controls/

Place of processing

European Union and third-party countries

Retention period

The deletion of Analytics data and set cookies is set to 14 months for Google Analytics Universal and 2 months for Google Analytics 4 Property.

Data recipient

Alphabet Inc.(subprocessor)
Google LLC (subprocessor)
Google Ireland Limited (processor)

When configuring Google Analytics, care was taken to ensure that Google receives this data as a processor and is therefore not allowed to use this data for its own purposes. The configuration of the “Google Analytics advertising functions” is independent of this and is described separately in the corresponding sections, insofar as these are also used on this website.

Disclosure to third-party countries

The information collected is generally transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Google Ireland Limited on the standard data protection clauses approved by the EU Commission, and in these clauses we have also agreed on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data, depending on the level of protection required. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://business.safety.google/adscontrollerterms/

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/contact/general_privacy_form

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

10. Services for marketing purposes

10.1 Google Ads Conversion Tracking

We use “Google Ads Conversion Tracking” on this website. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”).

When you click on an ad placed via Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user’s computer.

With the help of Google Ads Conversion Tracking, Google and we can recognize whether you have performed certain actions on the website. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

Data processing purposes

The following list represents the purposes of data collection and processing:

conversion tracking
analysis
measuring the success of marketing campaigns

Technologies used

cookies
tracking pixel
tracking code

Collected data

When using the Service, the following data is collected:

browser language
browser type
clicked ads
cookie ID
date and time of visit
IP address
referrer URL
web request
user behavior

Legal basis

The legal basis for the data processing is your consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the “Google Ads Conversion Tracking” service within the “Marketing” category.

You can disable Google interest-based ads on Google in your browser by activating the “Off” button at https://adssettings.google.de/authenticated or by deactivating them at http://www.aboutads.info/choices /.

Click here to revoke on all domains of the processing company https://safety.google/privacy/privacy-controls/

Place of processing

European Union and third-party countries

Retention period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Google Ireland Limited
Google LLC
Alphabet Inc

There is a joint responsibility regarding the data processing in connection with Google Ads Conversion between Google and us according to Art. 26 DSGVO. We have agreed with Google that the primary responsibility under the GDPR for the processing of the data will be assumed by us and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://support.google.com/policies/troubleshooter/7575787?hl=en

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy?hl=en

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies?hl=en

10.2 Google Ads Remarketing

We use the “Google Ads Remarketing” service on this website. Google Ads Remarketing is a remarketing service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

In doing so, we use the remarketing function within the Google Ads service. With the remarketing function, we can present you with advertisements based on your interests on other websites within the Google Ads network (on Google itself, so-called “Google Ads” or on other websites). For this purpose, your interaction is analyzed, e.g. which offers you are interested in, in order to be able to show you targeted advertising on other websites even after you have visited our website. For this purpose, Google stores a number in your browser that visit certain Google services or websites in the Google Ads network. Through this number, known as a “cookie”, the visits are recorded by you. This number is used to uniquely identify your web browser on a particular computer and not to identify you personally. Your personal data is not stored.

Data processing purposes

The following list represents the purposes of data collection and processing:

remarketing
advertising
user action tracking

Technologies used

Collected data

When using the Service, the following data is collected:

visit duration
IP address
pages visited
content the user is interested in
website usage
referrer URL
advertising identifier
date and time of visit
device information
browser information

Legal basis

The legal basis for the data processing is your consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the ” Google Ads Remarketing” service within the “Marketing” category.

Click here to revoke on all domains of the processing company https://safety.google/privacy/privacy-controls/

Place of processing

European Union and third-party countries

Retention period

The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Google Ireland Limited
Google LLC
Alphabet Inc

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policies.google.com/privacy

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://policies.google.com/technologies/cookies

10.3 Facebook Pixel

We use the visitor action pixel “Facebook Pixel” from Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter “Facebook”) on this website for the purpose of conversion measurement.

With the help of the Facebook Pixel, your behavior on our website can be tracked after you have been redirected to our website by clicking on a Facebook ad. This allows us to evaluate the effectiveness of our Facebook ads for statistical and market research purposes and to optimize our future advertising efforts.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about your identity. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the website operator.

Furthermore, the website uses the remarketing function “Custom Audiences” to be able to address you again within 6 months. This enables us to display interest-based advertisements (“Facebook Ads”) to you following your visit to our website in the context of your visit to the social network Facebook or other websites that also use this procedure. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you. The use of our website by you takes place without us being able to draw conclusions about you as a person. It is therefore completely anonymous.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page of our website, or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

Data processing purposes

The following list represents the purposes of data collection and processing:

analysis
marketing
retargeting
advertising
conversion tracking
personalization

Technologies used

cookies
pixel

Collected data

When using the Service, the following data is collected:

viewed advertisements
viewed content
device information
geographic location
HTTP header
interactions with advertisements, services and products
IP address
clicked items
marketing information
Ppges visited
pixel ID
referrer URL
usage data
user behavior
facebook cookie information
facebook user ID
usage/click behavior
browser information
device operating system
device ID
user Agent
browser type

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and Art. 25 Para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and deactivating the service “Facebook Pixel” within the category “Marketing”.

If you wish to object to the use of Facebook website Custom Audiences, you can do so at https://www.facebook.com/ads/Webseite_custom_audiences/.

Deactivation of the “Facebook Custom Audiences” function is available for logged-in users at https://www.facebook.com/settings/?tab=ads#.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

Place of processing

European Union and third countries

Retention period

User interactions recorded on the websites are stored for no longer than two years. However, the data will be deleted as soon as they are no longer needed for the purposes of processing.

Data recipient

Meta Platforms Ireland Ltd.
Meta Platforms Inc.

We share responsibility with Facebook for the collection and transfer of data as part of this process. This applies for the following purposes:

the creation of individualized or suitable advertisements, as well as for their optimization
the delivery of commercial and transactional messages (e.g., via Messenger).

The following processing operations are therefore not included in the joint processing:

processing that occurs after collection and transmission is the sole responsibility of Facebook

The creation of reports and analyses in aggregated and anonymized form is carried out as part of commissioned processing and is therefore our responsibility.

For joint responsibility, we have concluded a corresponding agreement with Facebook, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This sets out the respective responsibilities for fulfilling the obligation under the DSGVO with regard to shared responsibility.

The contact details of the responsible company, as well as Facebook’s data protection officer, are available here: https://www.facebook.com/about/privacy.

We have agreed with Facebook that Facebook can be used as a point of contact for the exercise of data subject rights (see section 1.3.). This is without prejudice to the competence of the data subject rights.

Disclosure to third-party countries

The collected information is usually transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Meta Platforms Ireland Ltd on the standard data protection clauses approved by the EU Commission and therein also agreed on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data depending on the need for protection. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://www.facebook.com/legal/EU_data_transfer_addenDum

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://www.facebook.com/help/contact/540977946302970

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://www.facebook.com/privacy/explanation

10.4 Facebook Conversion API

We use the conversion connection “Conversion API” of Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter “Facebook”) on this website.

With the help of the Conversion API, a direct connection can be established between the marketing data collected by the Facebook Pixel and the Facebook systems, which in turn help to optimize ad targeting, reduce the cost per action and measure the results.

Data processing purposes

The following list represents the purposes of data collection and processing:

conversion tracking
targeting
retargeting
advertising
measurements
performance measurements
analysis

Technologies used

Collected data

When using the Service, the following data is collected:

clicked ads
IP address
events
websites visited
user data
browser ID
geographic location
user Agent
referrer URL
device ID
username
e-mail address

Legal basis

The legal basis for data processing is your consent within the meaning of Art. 6 Para. 1 lit. a DSGVO and § 15 Para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the service by clicking here and disabling the ” Conversion API” service within the “Marketing” category.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com

Place of processing

European Union and third-party countries

Retention period

However, the data will be deleted as soon as they are no longer required for the purposes of processing.

Data recipient

Facebook Inc.
Facebook Ireland Limited

We share responsibility with Facebook for the collection and transfer of data as part of this process. This is for the following purposes:

the optimization of individualized or matching ads.

The following processing operations are therefore not covered by the joint processing:

processing that occurs after collection and transmission is the sole responsibility of Facebook.

The creation of reports and analyses in aggregated and anonymized form is carried out as part of a commissioned processing and is therefore our responsibility.

The contact details of the responsible company, as well as Facebook’s data protection officer, are available here: https://www.facebook.com/about/privacy.

Disclosure to third-party countries

The information collected is usually transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Facebook Inc. on the standard data protection clauses approved by the EU Commission and also agreed therein on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data depending on the need for protection. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://www.facebook.com/legal/EU_data_transfer_addenDum

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: https://www.facebook.com/help/contact/540977946302970

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://www.facebook.com/privacy/explanation

Cookie policy of the data recipient

Click here to read the cookie policy oft the data recipient: https://www.facebook.com/policies/cookies

10.5 Pinterest Tag

On this website, we use the conversion tracking technology “Pinterest Tag” of Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, United States of America (hereinafter “Pinterest”), which enables us to display relevant advertisements and offers on Pinterest to our website visitors who are already interested in our website and our content / offers and are Pinterest members.

For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on our pages, via which Pinterest is informed when you visit our website that you have accessed our website and in which parts of our offer you were interested.

If, for example, you were interested in our products on our website, you may be shown an ad for our products on Pinterest.

Data processing purposes

The following list represents the purposes of data collection and processing:

analysis
conversion tracking
targeting
measuring the success of the marketing campaigns

Technologies used

website tags

Collected data

When using the Service, the following data is collected:

viewed ads
click path
clicked ads
cookie information
crash data
date and time of visit
device identifier
device information
device operating system
geographic location
IP address
settings
search terms
third party information
visited websites
browser settings

Legal basis

The legal basis for the data processing is your consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG.

Deactivate data processing

You can prevent future data collection and execution of the Service by clicking <a href=”#” onClick=”UC_UI.showSecondLayer();”>here</a> and disabling the “Pinterest Tags” service within the “Marketing” category.

You can also disable the collection of data for the display of interest-based advertising on Pinterest at any time in your account settings on Pinterest at https://www.pinterest.de/settings (there, under “Customization”, disable the button “Use info from our partners to better tailor recommendations and ads on Pinterest”) or at https://help.pinterest.com/de/article/personalization-and-data#info-ad (there, disable the checkbox under “Customization”).

Place of processing

European Union
United States of America

Retention period

Data are deleted as soon as they are no longer needed for the processing purposes.

Data recipient

Pinterest Inc.

Disclosure to third-party countries

The collected information is usually transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Pinterest Inc. on the standard data protection clauses approved by the EU Commission and therein also agreed on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data depending on the need for protection. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://business.pinterest.com/de/pinterest-advertising-services-agreement/

Data protection officer of the data recipient

Below you will find the e-mail address of the data protection officer of the data recipient: privacy-support@pinterest.com

Privacy policy of the data recipient

Click here to read the privacy policy of the data recipient: https://policy.pinterest.com/en-gb/privacy-policy

11. Other services

11.1 Affiliate Marketing

We include so-called affiliate links or other references (which may include, for example, search masks, widgets or discount codes) to the offers and services of us or third-party providers on this website in connection with our online offer (collectively referred to as “affiliate links”). If you follow the Affiliate Links or subsequently take advantage of the offers, we may receive a commission or other benefits from the providers of the Affilliate Programs (collectively, “Commission”).

In order to be able to track whether you have taken advantage of the offers of an affiliate link used by us, it is necessary that the respective providers learn that users have followed an affiliate link used within our online offer. The assignment of the affiliate links to the respective business transactions or to other actions (e.g. purchases) serves the sole purpose of commission accounting and will be cancelled as soon as it is no longer necessary for the purpose.

For the purposes of the aforementioned assignment of the affiliate links, the affiliate links may be supplemented by certain values that are a component of the link or may be stored elsewhere, e.g. in a cookie. The values may include, in particular, the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user.

a. Amazon affiliate program

We participate in the Amazon EU affiliate program of Amazon EU SARL, Niederlassung Deutschland, Marcel-Breuer-Str. 12, 80807 Munich, Germany (Amazon). On our pages are integrated by Amazon advertisements and links to the site of Amazon.de, from which we can earn money through advertising reimbursement. Amazon uses cookies to track the origin of orders. This allows Amazon to recognize that you have clicked the partner link on our website.

The legal basis for this processing is your consent in accordance with Art. 6 para. 1 p. 1 lit. af) DSGVO and § 25 para. 1 TTDSG.The collected information is usually transferred to a server of the service provider in the USA and stored there.

For the transfer of data to the USA, we have agreed with Amazon on the standard data protection clauses approved by the EU Commission and also agreed therein on the implementation of appropriate protective measures for the specific case, which may also include encryption of the data depending on the need for protection. The transfer of data to the servers in the USA is therefore based on Art. 46 (2) c) DSGVO.

Details on data processing, which comply with the standard contractual clause, can be found here: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010&language=en_GB&currency=EUR

For more information about Amazon’s use of data, please see Amazon’s privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401 .

b. AWIN

We use the affiliate program of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”) on this website in the form of text links, image links, advertising banners or input masks. AWIN uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of the use of the website. AWIN also uses so-called web beacons. These are invisible graphics used to collect information. Through these web beacons, visitor traffic on these pages can be analyzed. The information generated by cookies and/or web beacons about the use of this website and delivery of advertising formats is transmitted to a server of AWIN and stored there. AWIN will use this information for the purpose of evaluating your use of the website in relation to the advertisements, compiling reports on website activity and advertising for website operators, among other things. Awin can process the remuneration (i.e. commission payments) through this evaluation and allocation. For this purpose, data such as a transaction ID, order number, order date, publisher, net merchandise value and the advertising medium used are transmitted.

The legal basis for this processing is your consent in accordance with Art. 6 para. 1 p. 1 lit. f) DSGVO and § 25 para. 1 TTDSG.

If you do not wish these cookies to be stored, you can also deactivate the acceptance of these cookies in your internet browser. You can delete the cookies on your hard drive at any time. Alternatively, you can also deactivate Awin cookies via this link: https://www.awin.com/de/rechtliches/optout.

11.2 Instagram Plug-in „Instagram Feed Pro“

We use functions of the Instagram service on this website with the help of a plug-in “Instagram Feed Pro” from Awesome Motive HQ, 2701 Okeechobee Blvd, West Palm Beach, FL. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.

The Instagram Feed Pro plug-in loads the images and content of our Instagram account directly from Instagram and integrates them into our website. All other data is collected and cached on the server side. When you as a visitor to our website load the content, it is loaded for the Instagram feed from the cache of Instagram Feed Pro. According to current knowledge, no special cookies are set specifically by this plug-in in your browser in this case, which collect, process or use personal data. Nevertheless, we cannot completely rule out the possibility that personal data (e.g. IP addresses, browser data or similar) may be transmitted to the provider of the plug-in or Instagram.

You can find more information about Instagram’s data protection here: https://instagram.com/about/legal/privacy.

12. SSL or TLS encryption

We use SSL or TLS encryption on this website for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

13. Retention period

Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

14. Responsible Company

The

Mann & Schröder GmbH

Bahnhofstrasse 14

74936 Siegelsbach / Germany

Phone: +49 7264 7002-0

Fax: +49 7264 7002-777

E-mail: info(at)mann-schroeder.de

and the

Schröder Cosmetics GmbH & Co KG

Mann & Schröder Str. 1

74928 Hüffenhardt

Phone: +49 7264 7002-0

Fax: +49 7264 7002-777

E-mail: info(at)schroeder-cosmetics.de

are jointly responsible for the described processing of personal data within the meaning of Art. 4 (7) GDPR and Art. 26 GDPR.

The parties have jointly determined the purposes and means of data processing. They are therefore jointly responsible for the protection of your personal data within the process stages described below (Art. 26 GDPR).As part of their joint responsibility under data protection law, Party 1 and Party 2 have agreed which of them will fulfill which obligations under the GDPR. This applies in particular to the exercise of the rights of the data subjects and the fulfillment of the information obligations pursuant to Articles 13 and 14 GDPR. Even if there is joint responsibility, we fulfill the data protection obligations according to the respective responsibilities as follows: The data collection on a website is carried out by the company specified in the respective legal notice. The data will subsequently be processed by the company if you have given your consent or if this is necessary for contractual purposes or the implementation of pre-contractual measures or to safeguard the legitimate interests of the respective company. Each company shall make the information required under Art. 13 and 14 GDPR available to the data subjects free of charge in a precise, transparent, comprehensible and easily accessible form in clear and simple language. Each party shall provide the other party with all necessary information from its sphere of activity.

Certain processing operations may be carried out under the responsibility of other companies. This is indicated under the respective descriptions of the processing, if this is the case.

15. Our data protection officer

If you have any questions on the subject of data protection, please do not hesitate to contact our data protection officer:

Mr. Michael Egenberger
E-Mail: datenschutz(at)mann-schroeder.de

16. Data Subject Rights

The following data subject rights can be asserted both with Mann & Schröder Cosmetics (e.g. by e-mail to marketing(at)mann-schroeder.de) and with Schröder Cosmetics (e.g. by e-mail to marketing(at)schroeder-cosmetics.de). Data subjects will generally receive the information from the office where the rights were asserted.

(a) Right to information
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If necessary, we will inform the other company immediately of any legal positions asserted by data subjects. You will provide each other with all information necessary to respond to requests for information.

(b) Correction/deletion/restriction of processing
Furthermore, you have the right to demand from us that

inaccurate personal data concerning you be corrected without delay (right to rectification);
personal data concerning you be deleted without delay (right to erasure); and
the processing be restricted (right to restriction of processing).

(c) Right to data portability
You have the right to receive personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.

(d) Right of withdrawal
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

(e) Right of objection
If the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Art. 6(1)(e) DSGVO) or for the protection of our legitimate interests (Art. 6(1)(f) DSGVO), you have the right to object.

(f) Right of appeal
If you believe that the processing of personal data concerning you is in breach of the DSGVO, you have the right to lodge a complaint with a supervisory authority, without prejudice to other legal remedies.

17. Data recipient

Unless expressly stated in this paragraph or above in the description of the individual processing operations, your personal data will not be disclosed to third parties or other recipients.

For the provision (hosting) and for the content-related as well as technical operation of our website, we use the services of external service providers. The personal data collected on this website is stored on the hoster’s servers and can be viewed by our technical service provider. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via the website. The use of the external service providers is in the interest of a secure, fast and efficient provision of our website by a professional provider. The external service providers will only process your data to the extent necessary to fulfill their performance obligations to us and will follow our instructions regarding the data processed for these purposes. We have concluded a contract with each of the service providers used regarding commissioned processing in accordance with Art. 28 DSGVO.

We reserve the right, in the event of a legal obligation, to disclose information about you if the disclosure is required of us by lawfully acting authorities or law enforcement bodies. The legal basis is Art. 6 (1) c) DSGVO (legal obligation).

18. Change of the privacy policy

We reserve the right to adapt this data protection declaration in the event of any changes to the legal situation, the service offered on the website and the data processing. However, this only applies with regard to declarations on data processing. If your consent is required or components of the data protection declaration contain provisions of the contractual relationship with you, the changes will only be made with your consent.

You can regularly inform yourself about any changes in this data protection declaration.

Status: March 2024