I. Name and address of the person responsible
The person responsible for the purposes of the data security-basic order and other national data protection act of the member states as well as other data security-juridical regulations is:
BelCos Cosmetic GmbH
II. Contact dates of the data security official
The controller of data protection of the person responsible is:
or about the address of the abovementioned person responsible.
III. Universal to the data processing
1. Extent of the processing of personal dates
We raise and use personal dates of our users basically only, as far as this is necessary for the provision of a functioning website as well as our contents and performances. The elevation and use of personal dates of our users follows regularly only after approval of the user. An exception is valid in such cases in which a previous collection of an approval for actual reasons is not possible and the processing of the dates is permitted by legal regulations.
2. Legal basis for the processing of personal dates
As far as we catch up an approval of the affected person for processing processes of personal dates, serves article. 6 paragraphs 1 lit. a EU-data security reason order (DSGVO) as a legal basis for the processing of personal dates. By the processing of personal dates which is necessary to the fulfilment of a contract whose contracting party is the affected person, serves article. 6 paragraphs 1 lit. b DSGVO as a legal basis. This is also valid for processing processes which are necessary for the realisation of precontractual measures.
As far as a processing of personal dates is necessary to the fulfilment of a juridical liability which is defeated our company, serves article. 6 paragraphs 1 lit. c DSGVO as a legal basis.
For the case that vital interests of the affected person or another natural person require a processing of personal dates serves article. 6 paragraphs 1 lit. d DSGVO as a legal basis. If the processing is necessary for the protection of a legitimate interest of our company or a third and the interests, fundamental rights and fundamental freedoms of the affected person do not outbalance the first mentioned interest, serves article. 6 paragraphs 1 lit. f and the following DSGVO as a legal basis for the processing.
3. Date deletion and memory duration
The personal dates of the affected person are extinguished or closed, as soon as the purpose of the storage is cancelled. In addition, a storage can follow when this was planned by the European or national legislator in union-juridical orders, laws or other regulations by which the person responsible is defeated. A blockage or deletion of the dates also follows if a memory period prescribed by the called norms runs off, unless a requirement exists to the other storage of the dates for a contract conclusion or a completion of contract.
IV. Provision of the website and production of log files
1. Description and extent of the data processing
By every call of our Internet site our system registers automatically dates and information of the computer system of the appealing computer. The following dates are raised, on this occasion:
(1) Information about the browser type and the used version
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of the access
(6) The websites from which the system of the user reaches our Internet site
(7) The websites which are called on by the system of the user about our website
The dates are also stored in the log files of our system. A storage of these dates together with other personal dates of the user does not take place.
2. Legal basis for the data processing
Legal basis for the passing storage of the dates and the log files is article. 6 paragraphs 1 lit. f and the following DSGVO.
3. Purpose of the data processing
The passing storage of the IP address by the system is necessary to allow a delivery of the website to the computer of the user. For this the IP address of the user for the duration of the meeting must remain stored.
The storage in log files follows to guarantee the effectiveness of the website. Besides, the dates serve us for the optimisation of the website and for the backup of the security of our technical of information systems. An evaluation of the dates for marketing purposes does not take place in this connection.
In these purposes our legitimate interest also lies with the data processing after article. 6 paragraphs 1 lit. f and the following DSGVO.
4. Duration of the storage
The dates are extinguished, as soon as they are not necessary for the reaching of the purpose of her elevation any more. In case of the capture of the dates for the provision of the website this is the case if the respective meeting is finished.
In case of the storage of the dates in log files this is after at the latest seven days the case. A darüberhinausgehende storage is possible. In this case the IP addresses of the users are extinguished or made unfamiliar, so that an assignment of the appealing client is not possible any more.
5. Contradiction and removal possibility
The capture of the dates for the provision of the website and the storage of the dates in log files is necessary for the company of the Internet site compelling. Consequently there is no contradiction possibility on the part of the user.
1. Description and extent of the data processing
We use permanent and so-called session cookies. Session cookies are already extinguished while closing your web browser. Permanent cookies remain on your terminal, until they are not necessary for the reaching of her purpose any more and are extinguished.
The cookies serve an improvement of our services and the use of certain features. Thus, e.g., the order process of our web page can be allowed exclusively with the help of cookies, among the rest, in addition, cookies are also used to raise statistical values to our web offer, for example, above the number of the visitors.
You can prevent the settlement of cookies any time by means of a suitable setting of your used Internet browser and contradict permanently with it the settlement of cookies. Further sedate cookies can be already extinguished any time about an Internet browser or other software programmes. This is possible in all current Internet browsers. Deactivate the settlement of cookies in the used Internet browser, not all functions of our Internet site are usable under circumstances completely.
Pixels are small graphics on web pages which allow a log file recording and a log file analysis which is often used for statistical evaluations.
In this manner the following dates can be transmitted:
(1) Given administer search words
(2) Frequency of side calls
(3) Claim of website functions
The dates upraised in this manner of the users become by technical precautions pseudonymisiert. Hence, an assignment of the dates is not possible to the appealing user any more. The dates are not stored together with other personal dates of the users.
2. Legal basis for the data processing
The legal basis for the processing of personal dates under use technically of notweniger cookies is article. 6 paragraphs 1 lit. f and the following DSGVO.
3. Purpose of the data processing
The use of the analysis cookies follows for the purpose to improve the quality of our website and her contents. By the analysis cookies we find out how the website is used and can optimise thus our offer steadily.
In these purposes our legitimate interest also lies in the processing of the personal dates after article. 6 paragraphs 1 lit. f and the following DSGVO.
4. Duration of the storage, contradiction and removal possibility
VI. Application and use from
1. Google Analytics (with function for anonymization)
For the processing persons responsible the component has integrated on this Internet site Google Analytics (with Anonymisierungsfunktion). Google Analytics is a web analysis service. Web analysis is the elevation, collection and evaluation of dates about the behaviour of visitors of Internet sites., Among the rest, a web analysis service registers dates about that from which Internet site an affected person on an Internet site has come (so-called Referrer) which undersides of the Internet site was accessed or how often and for which retention period an underside was looked. A web analysis is used predominantly for the optimisation of an Internet site and to the cost-benefit analysis by Internet advertising.
Operating authority company of the Google Analytics component is the Google Inc, 1600 Amphitheatre Pkwy, Mountain View, APPROX. 94043-1351, the USA.
For the processing persons responsible uses for the web analysis about Google Analytics the addition "_gat. _ anony-mizeIp". By means of this addition the IP address of the internet connection of the affected person is shortened by Google and is made anonymous if the access to our Internet sites from a member state of the European Union or from another signatory of the agreement about the European economic area follows.
The purpose of the Google Analytics component is the analysis of the streams of visitors on our Internet site. Google uses the won dates and information, among the rest, to evaluate the use of our Internet site to put together for us of the online report which indicate the activities on our Internet sites, and to render standing services next with the use of our Internet site in connection.
Google Analytics puts a cookie on the technological of information system of the affected person. What cookies are, was already explained on top. With settlement of the cookie Google an analysis of the use of our Internet site is allowed. By every call of one of the single sides of this Internet site which is pursued by for the processing persons re-sponsible and on which a Google Analytics component was integrated, the Internet browser on the technological of information system of the affected person is automatically arranged by the respective Google Analytics component to transmit dates for the purpose of the online analysis in Google. Within the scope of this technical procedure Google receives knowledge about personal dates, like the IP address of the affected person who serve Google, among the rest, to understand the origin of the visitors and click and to allow subsequently commission accounts.
By means of the cookie becomes personal information, for example, the access time, the place from which an access went out and the frequency of the visits of our Internet site by the affected person, stored. In every visit of our Internet sites these personal dates, including the IP address of the internet connection used by the affected person, in Google will transfer in the United States of America. These personal dates are stored by Google in the United States of America. Google transmits these personal dates upraised about the technical procedure under circumstances into three parts.
The affected person can prevent the settlement of cookies by our Internet site, as on top already shown, any time by means of a suitable setting of the used Internet browser and contradict permanently with it the settlement of cookies. Such a setting of the used Internet browser would also prevent that Google puts a cookie on the technological of information system of the affected person. Besides, one cookie already sedate by Google Analytics can be extinguished any time about the Internet browser or other software programmes.
Further information and the valid privacy agreements of Google can be called away under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. Google Ana-lytics is more exactly explained under this link https://www.google.com/intl/de_de/analytics/.
2. Google Adwords
The operating company of the services of Google AdWords is Google Inc. If you reach our website via a Google ad, a so-called conversion cookie is stored on your browser by Google. A conversion cookie usually loses its validity after thirty days and is not used for identification. If the cookie has not expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both we and Google to track whether our visitors have reached our website via an AdWords ad and generated sales.
The data and information collected through the use of the conversion cookie is therefore used to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither we, nor other advertising customers of Google AdWords receive information from Google that could be used to identify our website visitors. No personal data is transmitted to Google. The IP address collected by us is only forwarded to Google after anonymization.
It is possible for you to object to the interest-based advertising by Google. To do so, you must call up the link https://support.google.com/ads/answer/2662922?hl=de and make the desired settings there. Further information and the applicable data protection regulations of Google can be found at https://www.google.de/intl/de/policies/privacy/.
3. Google Remarketing
Google Remarketing is a function of Google-AdWords. The integration of Google Remarketing allows to a company to erect userrelated advertising and to let indicate adverts relevant for interest the Internet user. Operating authority company of the services of Google Remarketing is the Google Inc.
Google Remarketing puts a cookie in your Internet browser. With the settlement of the cookie Google a recognition of the visitor of our Internet site is allowed if this calls on subsequently Internet sites which are also a member of the Google-advertising network. The Internet browser identifies with every call of an Internet site on which the service was integrated by Google Remarketing automatically in Google. Besides, no personal dates are transmitted in Google. The IP address upraised by us is passed on only after Anonymisierung in Google. There is for you the possibility to contradict the interestrelated advertising by Google. More over you have to do the link https://support.google.com/ads/answer/2662922?hl=de appeal and there carry out the desired settings.
Further information and the valid privacy agreements of Google can be called away under https://www.google.de/intl/de/policies/privacy/.
4. google maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an attractive presentation of our online offers and to make it easy to find the places we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
5. Social media
We use on the sides of our blog Icons of the social networks "Facebook", "Instagram" and "Google+". These services are offered by the companies Facebook Inc, Google Inc and Instagram Inc (supplier).
To raise the protection of your dates in the visit of our website, it concerns with the forwardings static links by means of so-called "Shariff" – project are installed. Thereby it is prevented that your dates are already sent in the visit of our website to the social networks. A contact between you and the social network is only established when you click actively on the badge. You find further information about it here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz2467514.html.
To allow nutzergruppengesteuertes marketing on social networks, a Tracking of the Social Media Dienstes Facebook Inc is integrated on this web page by means of 1 pixel. In the visit of our web page the pixel is loaded by your web browser. Besides, information is sent to Facebook., Among the rest, this concerns the information whether in your browser Facebook cookies are put. With the help of this information the browser meeting of a person is assigned. This assignment follows pseudonymisiert only with the help of a Facebook ID, so that for us no personal relation is produceable.
There is the possibility to contradict under http://optout.aboutads.info/?c=2#!/ behavioral-based advertising. If you put here a hook, an Opt out cookie is put in your browser.
You can carry out additional settings to the advertising on Facebook there in your user's profile.
Our website uses plugins from the Google operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our sites equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
To ensure that the newsletter is sent with your consent, we use the so-called double opt-in procedure. In the course of this procedure, the potential recipient can be added to a distribution list. Subsequently, the user receives a confirmation e-mail to confirm the registration in a legally binding manner. Only if the confirmation is received, the address is actively added to the distribution list.
We use this data exclusively for sending the requested information and offers.
Newsletter2Go is used as newsletter software. Your data will be transmitted to Sendinblue GmbH. Sendinblue is not allowed to sell your data or use it for other purposes than for sending our newsletters. Sendinblue is a German, certified provider, which was selected according to the requirements of the Data Protection Basic Regulation and the Federal Data Protection Act.
You can find further information here: https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go.
You can revoke your consent to the storage of your data, your e-mail address and its use for sending the newsletter at any time, e.g. via the "unsubscribe" link in the newsletter.
The data protection measures are continuously subject to new regulations concerning the basic data protection regulation and for this reason we ask you to inform yourself about our data protection measures at regular intervals by consulting our data protection declaration.
VII. Contact form and e-mail contact
1. Description and scope of data processing
On our website there is a login mask and contact form which can be used for electronic ordering or contacting. If a user takes this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:
(1) Name, first name
(2) e-mail address
(4) Street, postal code, town (optional)
(6) Orders and order quantities
(7) Payment status
(8) Shipping address
At the time the message is sent, the following data is also stored:
(1) The IP address of the user
(2) Date and time of registration
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
In this context, it does not pursue the transfer of data to third parties. The data will be used exclusively for processing the conversation.
2. Legal basis for the data processing
Legal basis for the processing of the dates is by presentation of an approval of the user's article. 6 paragraphs 1 lit.. a DSGVO.
Legal basis for the processing of the dates which are transmitted in the course of a remittance of e-mail is article. 6 paragraphs 1 lit. f and the following DSGVO. If the e-mail contact is aimed at the conclusion of a contract, additional legal basis is for the processing article. 6 paragraphs 1 lit. b DSGVO.
3. Purpose of the data processing
The processing of the personal dates from the input mask serves us alone for the treatment of the establishment of contact. In case of an establishment of contact by e-mail the necessary legitimate interest lies at this also with the processing of the dates.
The other personal dates processed during the Absendevorgangs serve to prevent an abuse of the contact form and to guarantee the security of our technical of information systems.
4. Duration of the storage
The dates are extinguished, as soon as they are not necessary for the reaching of the purpose of her elevation any more. For the personal dates from the input mask of the contact form and those which were sent by e-mail this is the case when the respective conversation is finished with the user. The conversation is finished when can be taken from the circumstances that the affected circumstances are cleared finally.
The personal dates in addition upraised during the Absendevorgangs are extinguished at the latest after a period of seven days.
5. Contradiction and removal possibility
The user has any time the possibility to revoke his approval of the processing of the personal dates. If the user gets in touch with us by e-mail, he can contradict the storage of his personal dates any time. In such a case the conversation cannot be continued.
In this case all personal dates which were stored in the course of the establishment of contact are extinguished.
VIII. Rights of the affected person
If personal dates are processed by you, you are an affected person in reflects to DSGVO and it are entitled to you the following rights towards the person responsible:
1. Information right
You can require from the person responsible information about whether the personal dates which you concern are processed by us.
If such a processing is given, you can require from the person responsible about the following information information:
(1) The purposes for which the personal dates are processed
(2) The categories of the personal dates which are processed
(3) The consignees or the categories were disclosed by consignees, compared with those the dates concerning personal you or are still disclosed
(4) The planned duration of the storage of the personal dates concerning you or, if concrete specifications are not possible moreover, criteria for the definition of the memory duration
(5) The existence of a right on correction or deletion of the personal dates concerning you, a right on restriction of the processing by the person responsible or a contradiction right against this processing
(6) The existence of a complaint right at a supervisory authority
(7) All available information about the origin of the dates if the personal dates are not raised with the affected person
(8) The existence of an automated decision-making including Profiling according to article 22 paragraphs 1 and 4 DSGVO and – at least in these cases – expressive information about the involved logic as well as the range and the aimed effects of a such processing for the affected person
The right is entitled to you to require information about whether the personal dates concerning you are transmitted in a third country or to an international organisation. In this connection you can ask, about the suitable guarantees according to be informed Article 46 DSGVO in connection with the transmission.
2. Surely on correction
You have a right on correction and/or complement towards the person responsible, provided that the processed personal dates which you concern are wrong or incomplete. The person responsible has to carry out the correction immediately.
3. Surely on restriction of the processing
Under the following conditions you can require the restriction of the processing of the personal dates concerning you:
(1) If you deny the correctness concerning you personal for a duration which enables to the person responsible to check the correctness of the personal dates
(2) The processing is wrongful and you refuse the deletion of the personal dates and require, instead, the restriction of the use of the personal dates
(3) Nevertheless, the person responsible the personal dates need this for the assertion, exercise or defence of legal entitlements, or for the purposes of the processing no longer required, you
(4) If you contradiction against the processing according to article 21 paragraphs 1 DSGVO have inserted and yet is not certain whether the entitled reasons of the person responsible predominate compared with your reasons. If the processing of the personal dates concerning you was limited, these dates may be processed – by her storage seen – only with your approval or for the assertion, exercise or defence of legal entitlements or for the protection of the rights of another natural or legal entity or for reasons of an important public interest of the union or a member state.
If the restriction of the processing became after supra P. Conditions limited, you are informed of the person responsible before the restriction is lifted.
4. Surely on deletion
a) Deletion duty
You can require from the person responsible that the personal dates concerning you are immediately extinguished, and the person responsible is obliged to extinguish immediately these dates, provided that one of the following reasons applies:
(1) The personal dates concerning you are for the purposes for which they were raised or were processed in other manner, no more inevitably
(2) They revoke your approval, on to themselves the processing according to. Article 6 paragraphs 1 lit.a or article 9 paragraphs 2 lit. a DSGVO supported, and there is not enough an other legal basis for the processing
(3) They lay according to article 21 paragraphs 1 contradiction DSGVO against the processing one and it no high-priority entitled reasons are given for the processing, or you lay according to article 21 paragraphs 2 contradiction DSGVO against the processing one
(4) The personal dates concerning you were processed illegally
(5) The deletion of the personal dates concerning you is necessary to the fulfilment of a juridical liability according to the union right or the right of the member states by which the person responsible is defeated
(6) The personal dates concerning you became concerning offered services of the information society according to article 8 paragraphs 1 DSGVO raised.
b) Information into three parts
If the person responsible has made the personal dates concerning you public and he is according to Article 17 paragraphs 1 DSGVO to their deletion obliges, he takes taking into account the available technology and the implementing expenses adequate measures, also of technical kind, around for the data processing persons responsible who process the personal dates to inform about the fact that you have required the deletion of all links to these personal dates or from copies or replications of these personal dates as an affected person of them.
The right on deletion does not exist, as far as the processing is necessary
(1) For the exercise of the right on freedom of speech and information
(2) To the fulfilment of a juridical liability which requires the processing according to the right of the union or the member states by which the person responsible is defeated, lies, or for the perception of an assignment, which in the public interest or follows in exercise of public power which was transferred to the person responsible
(3) For reasons of the public interest in the area of the public health according to article 9 paragraphs 2 lit. h and i as well as article 9 paragraphs 3 DSGVO
(4) For archive purposes lying in the public interest, scientific or historical research purposes or for statistical purposes according to Article 89 paragraphs 1 DSGVO, as far as under segment a) called right makes probably the realisation of the aims of this processing impossible or seriously interferes with, or
(5) For the assertion, exercise or defence of legal entitlements.
5. Surely on instruction
If you have asserted the right on correction, deletion or restriction of the processing towards the person responsible, this is obliged, to all consignees to whom the personal dates concerning you were disclosed to inform of this correction or of deletion of the dates or restriction of the processing unless, this turns out impossible or is connected with disproportionate expenses.
The right is entitled towards the person responsible to you to be informed about these consignees.
6. Surely on date transferability
You have the right, which to receive you to the concerning personal dates which you have provided to the person responsible, in a structured, current and machine-readable format. Moreover, you have the right these dates to another person responsible without impediment by the person responsible to whom the personal dates were provided to transmit, provided that
(1) The processing on an approval according to. Article. 6 paragraphs 1 lit. a DSGVO or article 9 paragraphs 2 lit. a DSGVO or on a contract according to article 6 paragraphs 1 lit. b DSGVO is based and
(2) The processing follows with the help of automated procedures
In exercise of this right you have further the right to obtain that the personal dates concerning you directly by a person responsible are transmitted to another person responsible, as far as this is technically feasible. Freedoms and rights of other people may not be affected through this.
The right on date transferability is not valid for a processing of personal dates which is necessary for the perception of an assignment which lies in the public interest or follows in exercise of public power which was transferred to the person responsible.
7. Contradiction right
You have the right, for reasons of which arise from her special situation, any time against the processing of the personal dates concerning you, on the basis of article. 6 paragraphs 1 lighted. e or and the following DSGVO follows to insert contradiction; this is also valid for a Profiling supported on these regulations.
The person responsible does not process the personal dates concerning you any more, unless, he can prove compelling protective-worthy reasons for the processing which your interests, rights and freedoms outbalance, or the processing serves the assertion, exercise or defence of legal entitlements.
If the personal dates concerning you are processed to pursue direct advertising, you have the right to insert any time contradiction against the processing of the personal dates concerning you for the purpose of such advertising; this is also valid for the Profiling, as far as it stands with such direct advertising in connection. If you contradict the processing for the purposes of the direct advertising, the personal dates concerning you are not processed any more for these purposes.
You have the possibility to use your contradiction right by means of automated procedures in connection with the use of services of the information society – in spite of the guideline in 2002 / 58 / the EC – with which technical specifica-tions are used.
8. Surely on cancellation of the data security-juridical approval explanation
You have the right to revoke your data security-juridical approval explanation any time. The legality is not touched by the cancellation of the approval on account of the approval up to the cancellation followed processing.
9. Automated decision in particular cases including Profiling
You have the right not to be subjected exclusively on an automated processing – including Profiling – being based decision which unfolds juridical effect towards you or affects you in similar manner considerably. This is not valid, if the decision
(1) Is necessary for the conclusion or the fulfilment of a contract between you and the person responsible,
(2) On the basis of regulations of the union or the member states by which the person responsible is defeated is allowed and these regulations contain adequate measures for the protection of your rights and freedoms as well as your legitimate interests or
(3) With your explicit approval follows
Indeed, these decisions on special categories of personal dates are not allowed after article 9 paragraphs 1 DSGVO are based, provided that not article 9 paragraphs 2 lit. a or g is valid and adequate decisions for the protection of the rights and freedoms as well as your legitimate interests were made.
Concerning in (1) and (3) called cases the person responsible takes adequate measures to protect the rights and freedoms as well as your legitimate interests to what at least the right on Erwirkung of the intervention of a person on the part of the person responsible, on statement of own position and on challenge of the decision belongs.
10. Surely on complaint at a supervisory authority
Regardless of an other management-juridical or judicial legal remedy the right stands to you on complaint at a supervisory authority, in particular in the member state of her place of residence, her workplace or the place of the supposed offence, to if you take the view that the processing of the personal dates concerning you offends against the DSGVO.
The supervisory authority at which the complaint was lodged informs the complainant above the stand and the results of the complaint including the possibility of a judicial legal remedy after article 78 DSGVO.