We are pleased that you are visiting our website and thank you for your interest in our company. The protection and security of your personal data is of great importance to Das Parfum and Beauty Distribution 1912 GmbH, Friedrich-Ebert-Straße 13, 61476 Kronberg. Therefore, we respect data protection and inform you about the collection and use of personal data on our website.
The responsible party in terms of the General Data Protection Regulation (DSGVO) on this website is Das Parfum and Beauty Distribution 1912 GmbH, Friedrich-Ebert-Straße 13, 61476 Kronberg, +49 (0) 6173 . 963 08 53, e-mail: firstname.lastname@example.org
Data collection when visiting our website
During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server (so-called "server log files"). These are the name of the website visited, date and time at the time of retrieval, file, amount of data transferred, notification of successful retrieval, browser type and version, operating system used, the website previously visited, the requesting provider, the IP address used (if applicable: in anonymized form).
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offering.
In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO. Art. 28 DSGVO (conclusion of order processing contract).
Provision of contractual services
We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit. b. DSGVO. The entries marked as mandatory in online forms, are required for the conclusion of the contract.
The deletion of the data takes place after the expiry of legal warranty and comparable obligations, the necessity of keeping the data is reviewed every three years; in the case of legal archiving obligations, the deletion takes place after their expiry. Information in any customer account shall remain until it is deleted.
In addition, we process contractual data (e.g., subject matter of contract, term, customer category) as well as payment data (e.g., bank details, payment history) of customers and business partners for the purpose of providing contractual services, service and customer care, marketing or advertising.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure, or transfer of data to third parties, this will only occur if it is done for the fulfillment of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DSGVO are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection that corresponds to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Personal data is encrypted during the ordering process and transmitted via the Internet to the website operator using "Secure Socket Layer (SSL)". The online store is protected by technical and organizational measures against loss, destruction, access, modification or distribution of personal data by unauthorized persons.
You can view your user account only after entering your personal password under the button "My account". You can change or delete your user account. You should always treat access information such as passwords confidentially and keep them safe. After you have finished communicating with the online store, you should log out and close the browser window, especially if you share the computer with other people.
Disclosure to partners and processors
In the course of using our Services, certain information about you will be shared with our partners and processors who administer the Site or provide related services necessary to provide the Service, including but not limited to:
Payment Service Providers:
Your payment information will be transmitted to our payment service providers and banks to make payments in connection with your online orders. We work with the following payment service providers, among others, for this purpose:
- Payment service PayPal
- Payment service Amazon Pay
If you select the payment method "Amazon Pay", the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600
Shipping and logistics service providers
In order to ensure the shipment of the products you have ordered; we also pass on the necessary information to our shipping and logistics service providers. You can see the respective service provider in the ordering process on our website.
To make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies. These are information files that are stored on the end device of the user. Different information can be stored within the cookies. Session cookies" or "transient cookies" are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login jam can be stored. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes. Cookies from providers other than the responsible party that operates the online offering are referred to as "third-party cookies" (if it is only their cookies, these are referred to as "first-party cookies").
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b DSGVO either for the performance of the contract or in accordance with Art. 6 (1) lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You have the option to set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general. The various browser types differ in the way cookie settings are managed. A description of this can be found in the help menu of the respective browser. Below you will find the corresponding link to the respective browser:
Please note that the exclusion of cookies may lead to functional restrictions of this online offer.
When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected can be seen from the corresponding contact form. The data collected is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of any other data is voluntary and will be used to address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
E-mail Newsletter (Klaviyo)
E-mails with promotional information about the provider as well as its services are sent only with the express consent of the users. Users can object to receiving the newsletter at any time. An objection option can be found, among other things, in every e-mail. Before the newsletter is sent, the e-mail owner receives a confirmation e-mail in which he must confirm the newsletter registration. If the confirmation is not received, the registration will be automatically deleted within four weeks. Messages in the context of the contractual relationship with the user, for example the sending of technical information, information on payment processing, queries about orders and similar messages, do not belong to promotional information. Users can subsequently request to be removed from the notification list by sending an e-mail to the contact option specified above. Within the scope of the registration, the provider stores the registration as well as the confirmation time and the IP address of the user. The provider is legally obliged to log the registrations in order to be able to prove proper registration.
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter.
To ensure that the newsletter is sent without your consent, we use the so-called double opt-in procedure. In the course of this, the potential recipient allows himself to be included in a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation is received, the address will be actively included in the distribution list.
We use this data exclusively for sending the requested information and offers.
Our email newsletter is sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f DSGVO and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and customer-friendly. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
Klaviyo is also certified under the us-European data protection agreement "Privacy Shield" and thus undertakes to comply with the EU data protection requirements.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.
Use of social plugins
Our website uses the social plugin of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in from Facebook" or "Facebook Social Plugin". You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or posting a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
The described data processing operations are carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of Facebook's legitimate interests in displaying personalized advertising to inform other users of the social network about your activities on our website and for the needs-based design of the service.
If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also object to the loading of the Facebook plugins and thus the data processing operations described above for the future using add-ons for your browser, e.g. the script blocker "NoScript" (http://noscript.net/).
Facebook Inc. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
Our website uses the social plugin of the social network Instagram, which is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. The plugins are marked with an Instagram logo.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there.
If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram profile. If you interact with the plugins, for example by clicking the "Like" button or posting a comment, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram profile and displayed to your Instagram friends.
The described data processing operations are carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of Instagram's legitimate interests in displaying personalized advertising to inform other users of the social network about your activities on our website and for the needs-based design of the service.
If you do not want Instagram to directly assign the data collected via our website to your Facebook profile, you must log out of Instagram before visiting our website. You can also object to the loading of the Instagram plugins and thus the data processing operations described above for the future with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
Instagram Inc. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
Analysis tools and advertising
Facebook Pixel, Facebook Custom Audiences and Facebook Conversion
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook, which is operated for users residing in the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used.
With the help of Facebook Pixel, Facebook can determine you as a visitor to our online offer as a target group for the display of ads (so-called "Facebook Ads"). Based on this, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes, namely by being able to see whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The use of the Facebook Pixel as well as the storage of "conversion cookies" takes place on the legal basis of Art. 6 para. 1 lit. a DSGVO.
For the processing of the data, for which Facebook acts as a data processor, we have concluded a data processing contract with Facebook, in which we oblige Facebook to protect our customers' data and not to pass it on to third parties.
The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the page operator.
You can also deactivate the "Custom Audiences" remarketing function in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
You can object to the collection by the Facebook pixel and use of your data to display Facebook ads at any time.
For this purpose, it is sufficient to send a message in text form (e-mail, letter) to the contact details stated in this data protection declaration under "Person responsible".
You can find another opt-out option in our Cookie Statement.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the U.S. and stored there.
We would like to point out that our website uses Google Analytics exclusively with the extension "_anonymizeIp()" (IP anonymization). Through this extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. This ensures anonymization of the IP address and excludes direct personal reference. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:
As an alternative to the browser plugin or within browsers on mobile devices, please click on this link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Google Analytics deactivate
Google LLC, based in the USA, is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).
Hotjar is a tool used to analyze your user behavior on this website. Hotjar allows us to record your mouse movements, scrolling movements and clicks, among other things. Hotjar can also determine how long you have remained with the mouse pointer on a certain place. From this information, Hotjar creates so-called heat maps, which can be used to determine which website areas are viewed preferentially by the website visitor.
Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your input in a contact form (so-called conversion funnels).
In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings.
Hotjar uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or use of device fingerprinting).
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising. If a corresponding consent has been requested (e.g., consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time.
If you would like to deactivate the data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/opt-out
Please note that deactivation of Hotjar must be done separately for each browser or terminal device.
Contract on order processing
We have entered into an order processing contract with Hotjar to implement the strict European data protection regulations.
Rights of the data subjects
The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) towards the controller with regard to the processing of your personal data, which we inform you about below:
Pursuant to Art. 15 of the GDPR, you have in particular the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period and/or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed which guarantees exist in accordance with Art. 46 DSGVO when your data is transferred to third countries;
You have the right, pursuant to Article 16 of the GDPR, to have any inaccurate data relating to you corrected without delay and/or to have any incomplete data stored by us completed.
In accordance with Article 17 of the GDPR, you have the right to request the deletion of your personal data if the conditions of the aforementioned article are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail.
If you have asserted the right to rectification, erasure or restriction of processing against the controller in accordance with Art. 19 DSGVO, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Pursuant to Art. 20 DSGVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.
In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of personal data concerning you violates the GDPR.
You may object to the future processing of the data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct marketing purposes.
Duration of the storage of personal data
Data will be deleted or its processing restricted in accordance with Articles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations.
If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements in Germany, data is stored in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
Summary of the right of revocation and objection
Objection to the use of your data for advertising purposes
You can object to the use of data for advertising purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, a notification in text form (e-mail, letter) to the contact details stated under "Person responsible" is sufficient.
Assertion of the right of revocation and objection
In accordance with Article 7 (2) DSGVO, you have the right to withdraw your consent at any time. This has the consequence that we will no longer continue the data processing based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your data pursuant to Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will also be implemented by us without giving reasons. If you wish to make use of your right of revocation or objection, it is sufficient to send an informal message to the contact details above.
Further information and contacts
If you have any questions about data protection, please contact us. You will find the contact address above under "Person responsible".