The following privacy policy applies to the use of our online service www.belladerma.de (Hereinafter referred to as the "Website"). We attach great importance to privacy. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).
Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR
BellaDerma, Owner: Ms. Faten El-Sayed
Joachimsthaler Str. 10
10719 Berlin
Germany
Phone: +49 / 30 / 88 92 92 20
E-mail: [email protected]
Website: www.belladerma.de
If you wish to object to the collection, processing or use of your data by us in accordance with this Privacy Policy as a whole or for individual measures, you can address your objection to the person responsible. You can save and print this privacy policy at any time.
We use personal data for the purpose of operating the website.
The hosting services we use are for the purpose of providing the following services: infrastructure and platform services, computing capacity, disk space and database services, collateral and technical maintenance services we use to operate the site.
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in an efficient and secure provision of this website acc. Article 6 para. 1 p. 1 f) GDPR with Article 28 GDPR.
We collect information about you when you use this website. We automatically collect information about your usage and interaction with us and register information about your computer or mobile device. We collect, store and use data about every access to our website (so-called server log files). Access data includes:
We use this protocol data without assignment to you or other profiling for statistical evaluations for the purpose of the operation, the security and the optimization of our website, in addition, for the anonymous registration of the number of visitors on our website (traffic) as well as to the extent and type of Use of our website and services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content, analyze traffic, troubleshoot and improve our services.
This is also our legitimate interest in accordance with Article 6 paragraph 1 p. 1 f) GDPR.
We reserve the right to retrospectively review the log data if, on the basis of concrete evidence, there is a legitimate suspicion of unlawful use. We store IP addresses in the logfiles for a limited period of time, if this is necessary for security purposes or for the provision of services or the billing of a service, eg. Eg if you use one of our offers. After termination of the order process or after receipt of payment, we will delete the IP address if it is no longer required for security purposes. We store IP addresses even if we have a specific suspicion of a crime in connection with the use of our website. In addition, as part of your account, we save the date of your last visit (for example, when registering, logging in, clicking links, etc.).
We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when visiting a website and stored on your hard disk. As such, this file contains a so-called session ID, with which various requests from your browser can be assigned to the shared session. This will allow your computer to be recognized when you return to our website. These cookies are deleted after you close your browser. They serve z. For example, you can use the shopping cart feature across multiple pages.
If the cookie is activated, it will be assigned an identification number and no assignment of your personal data to this identification number will be made. Your name, IP address or similar data that would allow the cookie to be associated with you will not be included in the cookie. Based on the cookie technology, we only receive pseudonymous information, for example, which pages of our shop were visited, which products were viewed, etc.
As far as technically necessary cookies are concerned, our legitimate interest in the use of cookies in accordance with Article 6 paragraph 1 sentence 1 f) GDPR is to provide you with a functional website.
If the cookies are not technically necessary (e.g. cookies for the purpose of analysis or tracking), we only store the cookie on your device on the basis of your prior consent via "opt-in". We will then explain the respective purpose of the storage of the cookie to you separately in the context of the respective service that stores the cookie on your device.
You can withdraw your consent to the storage of cookies at any time in the cookie settings.
You can also set your browser so that you are informed in advance about the setting of cookies and can decide in each individual case whether you want to exclude the acceptance of cookies for certain cases or in general, or whether cookies should be prevented completely. However, this may limit the functionality of the website.
If you contact us (e.g. via contact form or e-mail), we will process your data to process the enquiry and in the event that follow-up questions arise.
If the data processing is carried out in order to carry out pre-contractual measures, which are carried out at your request, or, if you are already our customer, in order to carry out the contract, the legal basis for this data processing is Article 6 para. 1 sentence 1 b) GDPR.
When sending the contact form, the following data is also saved:
We only process other personal data if you give your consent (Article 6 para. 1 sentence 1 a) GDPR) or if we have a legitimate interest in processing your data (Article 6 para. 1 sentence 1 f) GDPR). A legitimate interest lies, for example, in replying to your e-mail.
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as "google".
Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you.
If you have consented to the use of Google Analytics, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may be carried out with the use of Google Analytics.
We also have a legitimate interest in using Google Analytics in order to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use Google Analytics if you have given your consent accordingly.
However, in the event of activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. IP anonymization is active on this website. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage.
You agree to the transmission of the usage behavior to Google and to processing by Google. The data processing is essentially carried out by Google. The data is not anonymous; the IP address in anonymized form, computer configurations, browser settings, the pages visited and the associated time periods are processed and can be used by Google for any of its own purposes such as profile formation and can be linked to other data such as possible Google accounts.
The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.
In addition, you can prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser plug-in or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this site in the future (this opt-out cookie only works in this browser and only for this domain, delete the cookies in your browser, you must click this link again): Disable Google Analytics
On our website components of the company Facebook are integrated. As a social network, Facebook allows users to create private profiles, upload photos and socialize via friend requests.
If you have consented to the use of Facebook, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may be carried out with the use of Facebook.
We also have a legitimate interest in using Facebook in order to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use Facebook if you have given your consent accordingly.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time a subpage of our website is integrated with a Facebook component (Facebook plug-in), a connection to the Facebook server is created in order to download a representation of the Facebook Facebook component. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. The connection gives Facebook knowledge of which specific subpage of our website you are visiting.
If you are logged in to Facebook at the same time, Facebook recognizes with each visit to our website which specific subpage you are visiting. This information is collected through the Facebook component and associated with it through Facebook and your Facebook account. If you press one of the integrated Facebook buttons on our website, for example the "Like" button, or leave a comment, Facebook assigns this information to your personal Facebook user account and saves this personal data.
Facebook always receives information via the Facebook component that you have visited our website if you are simultaneously logged in to Facebook at the time of access to our website. This happens regardless of whether you click the Facebook component or not. Such transmission to Facebook can be prevented by logging out of your Facebook account before calling our website.
The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the data subject. In addition, different applications are available, which make it possible to suppress data transmission to Facebook. You can use such applications to suppress data transmission to Facebook.
We use components from YouTube on our website. YouTube is an Internet video portal that allows its users to set video clips and view, rate and comment on other people's video clips.
If you have consented to the use of YouTube, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may be carried out with the use of YouTube.
We also have a legitimate interest in using YouTube in order to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use YouTube if you have given your consent accordingly.
The operating company of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Each time you visit one of the pages on our website that incorporates a YouTube component (YouTube video), your Internet browser will automatically cause the respective YouTube component to download a representation of the corresponding component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/en/. This will give YouTube and Google knowledge of which specific bottom of our site you are visiting.
If you are logged in to YouTube at the same time, YouTube recognizes by visiting a subpage that contains a YouTube video, which specific bottom of our website you visit. This information is collected by YouTube and Google and associated with your YouTube account.
YouTube and Google always receive information through the YouTube component that you are visiting our website if you are logged in to YouTube at the time of accessing our website. This happens regardless of whether you click on a YouTube video or not. You can prevent such transmission of this information to YouTube and Google by logging out of your YouTube account before calling our website.
YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
We use Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords.
We use Google AdWords to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests).
The operating company of Google AdWords is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google's search engine and by displaying advertisements on our website.
If you reach our website via a Google ad, a so-called conversion cookie will be stored by Google on your computer. What cookies are, has already been explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. About the conversion cookie is, if the cookie has not yet expired, traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie allows both us and Google to understand whether an affected person who came to our website via an AdWords ad generated revenue, ie, completed or canceled a purchase.
The data and information collected through the use of the conversion cookie are used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject.
The conversion cookie stores personal information, such as the websites you visit. Whenever you visit our website, your personal information, including the IP address of your Internet connection, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
You can prevent the setting of cookies through our website, as shown above, at any time by means of an appropriate setting of your Internet browser and thus permanently contradict the setting of cookies. Such a setting of your Internet browser would also prevent Google from setting a conversion cookie on your computer. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
You may also opt out of Google's interest-based advertising. To do this, you need to go to www.google.com/settings/ads from the Internet browser you are using to make the settings you want.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.
We use the Google Maps API on this website. Google Maps is an online map service that visually displays geographic information.
If you have consented to the use of Google Maps, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a GDPR (consent), this consent constitutes the legal basis for the processing of personal data that may be carried out with the use of Google Maps.
We also have a legitimate interest in using Google Maps in order to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests). However, we only use Google Maps if you have given your consent accordingly.
The operating company of the Google Remarketing services is the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Each time you visit one of the pages on our website that incorporates a Google Maps component, Google will connect to the server to download a representation of Google's equivalent Google Maps component. This will give Google knowledge of which specific subpage of our website you are visiting.
If you are logged in to Google at the same time, Google recognizes with you each visit to our website by you and during the entire duration of the respective stay on our website, which specific underside of our website is visited by you. This information is collected through the Google component and attributed by Google to your Google Account. You can prevent such transmission of this information to Google by logging out of your Google Account before calling our website.
For more information about Google's data processing, see the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.
For detailed instructions on managing your own data related to Google products click here.
Our website uses Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage site tags through a single interface.
We use Google Tag Manager to optimise our website. The corresponding legal basis for this is Art. 6 para. 1 lit. f GDPR (Legitimate Interests).
The operating company of the Google services is the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect personally identifiable information. The tool triggers other tags, which may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
Our website uses plugins from the provenexpert.com site operated by Expert Systems AG. The operator of the pages is Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin.
When you visit one of our pages equipped with a ProvenExpert plugin, a connection is established to the servers of Expert Systems AG. In the process, the ProvenExpert server is informed which of our pages you have visited.
ProvenExpert is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
Further information on the handling of user data can be found in the privacy policy of ProvenExpert AG at: https://www.provenexpert.com/en-gb/privacy-policy/.
Unless specifically stated, we only store personal data for as long as it is necessary to fulfil the purposes pursued.
In some cases the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will only be stored by us for these legal purposes, but will not be processed in any other way and will be deleted after expiry of the legal retention period.
Under applicable law, you have various rights to your personal information. If you would like to assert these rights, please send your request by e-mail or by post with a clear identification of your person to the address specified in section 1.
Below is an overview of your rights.
You have the right to receive clear information about the processing of your personal data.
In detail:
You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to request from us free information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to receive the following information:
If personal data are transmitted to a third country or to an international organization, you have the right to be informed about the appropriate guarantees under Article 46 GDPR in connection with the transfer.
You have the right to ask us to correct and, if necessary, complete personal data concerning you.
In detail:
You have the right to ask us to correct incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
In a number of cases we are obliged to delete personal data concerning you.
In detail:
Pursuant to Article 17 Paragraph 1 GDPR, you have the right to demand that we provide you with the following personal data are deleted immediately, and we are obliged to delete personal to delete data immediately if one of the following reasons applies:
If we have made the personal data publicly available and if we are obliged to delete it in accordance with Art. 17 (1) GDPR, we shall take appropriate measures, including technical ones, for data controllers who are responsible for the personal data, taking into account the available technology and the implementation costs Process Data, informing you that you have requested deletion of any links to such personal information or copies or replications of such Personal Information.
In a number of cases, you are entitled to ask us to restrict the processing of your personal data.
In detail:
You have the right to demand that we restrict processing if one of the following conditions is met:
You have the right to receive, transmit or have us transmit personal data relating to you in machine-readable form.
In detail:
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another responsible person without hindrance from us, if
In exercising your right to data portability in accordance with paragraph 1, you have the right to obtain that the personal data are transmitted directly by us to another person responsible, as far as this is technically feasible.
You also have the right to object to the lawful processing of your personal data by us if this is justified by your particular situation and if our interests in the processing do not outweigh our own.
In detail:
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6 paragraph 1, sentence 1 e) or f) GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If personal data are processed by us in order to operate direct mail, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes under Article 89 (1) of the GDPR Unless the processing is necessary to fulfill a public interest task.
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner.
There is no automated decision-making based on personal data collected.
You have the right to revoke your consent to the processing of personal data at any time.
You have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data is unlawful.
We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.
Your personal data will be transmitted encrypted with us. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (for example, when communicating by e-mail) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.
To safeguard your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we always adapt to state-of-the-art technology.
We also do not warrant that our offer will be available at specific times; Disturbances, interruptions or failures can not be excluded. The servers we use are regularly backed up carefully.
Basically, we only use your personal data within our company.
If we engage third parties in the performance of contracts (such as logistics service providers), they will only receive personal information to the extent that the transmission is required for the corresponding service.
In the event that we outsource certain parts of the data processing ("order processing"), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights.
Data transmission to agencies or persons outside the EU outside of the cases mentioned in this declaration in paragraph 2 does not take place and is not planned.
Mon–Fri: 9am–8pm
030/88 92 92 20