Privacy Policy

Data protection
The controller responsible for data processing is:
48g bio cosmetics GmbH
Unter den Linden 32-34
10117 Berlin
Germany
Mail support@48grams.com
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. ACCESS DATA AND HOSTING

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which z.B. The log file contains the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. When you access our website/application, the browser used on your device automatically sends information to our website/application's server, where it is temporarily stored in a log file. We have no control over this process. The following information is collected automatically and stored until its automatic deletion:
• the IP address of the requesting internet-enabled device,
• the date and time of access,
• the name and URL of the retrieved file,
• the website/application from which the access was made (referrer URL),
• the browser you are using and, if applicable, the operating system of your internet-enabled computer, as well as the name of your access provider.
This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves our legitimate interests, which, in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR, override any conflicting interests, in ensuring the correct presentation of our services. All access data is deleted no later than seven days after the end of your visit to the website.
Hosting services provided by a third-party provider
As part of processing on our behalf, a third-party provider hosts and displays our website. All data collected through the use of this website or via forms provided in the online shop, as described below, is processed on their servers. Processing on other servers only takes place within the scope described here.
This service provider is located within a country of the European Union or the European Economic Area.

2. DATA COLLECTION AND USE FOR CONTRACT PROCESSING, CONTACTING US AND WHEN OPENING A CUSTOMER ACCOUNT

We collect personal data when you provide it to us in connection with your order or when contacting us (z.B. You may voluntarily provide us with information (via contact form or email). Required fields are marked as such, as we absolutely need this data to process your order or your inquiry, and you cannot submit your order or contact request without providing it. The specific data collected is evident from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR for contract processing and handling your inquiries.
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account.
After complete fulfillment of the contract or deletion of your customer account, your data will be restricted from further processing and deleted after the statutory retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement. You can delete your customer account at any time, either by sending a message to the contact address provided below or by using the corresponding function in your customer account.

3. DATA TRANSFER

For the purpose of fulfilling the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we will forward your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select during the ordering process, we will forward the payment data collected for this purpose to the bank commissioned with processing the payment and, if applicable, to payment service providers commissioned by us, or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection policy of the respective payment service provider applies in this respect.
The same applies to the transfer of data to our partners in cases where they handle shipping for us (drop shipping).
Data transfer to shipping service providers
If you have given us your express consent during or after your order, we will, on the basis of this consent and in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, forward your email address to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination.
You can withdraw your consent at any time by contacting us using the contact details provided below or directly with the shipping provider at the contact address listed below. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, which we will inform you about in this privacy policy.
DHL Parcel GmbH
Sträßchenweg 10
53113 Bonn
Germany

Data transfer to debt collection agencies
For the purpose of fulfilling the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we will forward your data to a commissioned debt collection agency if our payment claim remains unpaid despite prior reminders. In this case, the debt collection agency will collect the claim directly. Furthermore, the transfer of your data serves to protect our overriding legitimate interests in the effective assertion and enforcement of our payment claim pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

4. EMAIL NEWSLETTERS AND POST ADVERTISING

Email advertising with newsletter registration
When you subscribe to our newsletter, we use the data required for this purpose or data you have separately provided to send you our email newsletter regularly based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact details provided below or by using the unsubscribe link in the newsletter.After you unsubscribe, we will delete your email address from the mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement.
Email advertising without newsletter registration and your right to object
If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right, based on Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), to regularly send you offers for similar products from our range by email. This serves our legitimate interest in advertising to our customers, which outweighs your interests in this context.
You can object to this use of your email address at any time by sending a message to the contact details provided below or via a link provided in the advertising email, without incurring any costs other than the transmission costs according to the basic rates.
The newsletter is sent by a service provider who processes your data on our behalf, and to whom we pass on your email address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.
Email advertising when you sign up for product alerts
If you subscribe to our product alert service for unavailable items, we will use the data required for this purpose or data you have separately provided to inform you by email when the products become available again. These emails are sent based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR.
You can unsubscribe from product alerts at any time, either by sending a message to the contact address provided below or by using the unsubscribe link in the email. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, which we will inform you about in this privacy policy.
Direct mail advertising and your right to object
Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes. z.B. for sending interesting offers and information about our products by postal mail. This serves our legitimate interest in contacting our customers for advertising purposes, which outweighs your interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
The advertising mailings are sent by a service provider who processes data on our behalf, and to whom we pass on your data for this purpose.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact details described below.

5. DATA PROCESSING FOR PAYMENT PROCESSING

When processing payments in our online shop, we work together with the following partners: technical service providers, credit institutions, payment service providers.

5.1 Data processing for transaction processing

Depending on the payment method selected, we will forward the data necessary for processing the payment transaction to our technical service providers, who act as data processors on our behalf, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for processing the payment. This serves the purpose of fulfilling the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.In some cases, the payment service providers themselves collect the data required for processing the payment, z.B. on their own website or via technical integration in the ordering process. The data privacy policy of the respective payment service provider applies in this respect.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

5.2 Data processing for the purpose of fraud prevention and optimization of our payment processes

Where appropriate, we provide our service providers with additional data, which they, together with the data necessary for processing the payment, will use as our data processors for the purposes of fraud prevention and optimizing our payment processes (z.B. We use your data for invoicing, processing disputed payments, and supporting our accounting. This is done in accordance with Article 6(1)(f) GDPR to protect our legitimate interests, which, after weighing the interests involved, override your interests, in safeguarding ourselves against fraud and in efficient payment management.

6. USE OF ASSESSMENT AND CERTIFICATION GRAPHICS

Integration of the Trusted Shop Trustbadge
To display our Trusted Shops seal of approval and any collected reviews, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.
This serves to protect our overriding legitimate interests in optimal marketing by enabling secure online shopping, in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is provided by a CDN (Content Delivery Network) provider as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. You can find further information on data protection at Trusted Shops GmbH here.
When the Trustbadge is accessed, the web server automatically saves a server log file containing your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), thus documenting the access. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted no later than 90 days after creation.
Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you, as the buyer, are already registered to use a product is automatically checked using a neutral parameter: your email address hashed via a cryptographic one-way function. Before transmission, the email address is converted into this hash value, which is undecipherable for Trusted Shops. After checking for a match, the parameter is automatically deleted.
This is necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in providing buyer protection and transactional review services linked to the specific order, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including information on how to object, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
EHI seal of approval widget
We use the "EHI Certified Online Shop" seal on our website, a widget provided by EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne, Germany ("EHI"). When you visit our website, dynamic content (current shop rating, certificate, etc.) is loaded into the widget from EHI's servers. In doing so, your IP address, the previously visited website, the date and time of access, the amount of data transferred, the browser type used, your operating system, and the requesting provider (referrer data) are transmitted to EHI's servers. This processing is based on our overriding legitimate interest in optimizing our website, pursuant to Art. 6 para. 1 f GDPR. Further information on data protection at EHI can be found at: www.ehi-siegel.de/data protection

7. COOKIES AND WEB ANALYTICS

To make your visit to our website more attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages, provided that you have given your consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.
Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find information about the storage duration in the overview in your web browser's cookie settings. You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or you can block cookies in certain cases or altogether. If you do not accept cookies, the functionality of our website may be limited. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers at the following links:
Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
Furthermore, you can withdraw your consent at any time by sending a message to the contact details described in the privacy policy.
Use of Google (Universal) Analytics for web analytics
Provided you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analytics service is offered by Google Ireland Limited, a company incorporated and operating under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.www.google.deGoogle (Universal) Analytics uses methods that enable analysis of your website usage, such as cookies. The information automatically collected about your use of this website is generally transmitted to and stored on a Google server in the USA. By activating IP anonymization on this website, your IP address is shortened before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected in this context will be deleted once the purpose for its collection has been fulfilled and we have ceased using Google Analytics.
To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can withdraw your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of data generated by the cookie relating to your use of the website (including your IP address) and the processing of this data by Google.
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your device. If you delete your cookies, you will be asked for your consent again.
Provided you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this website also uses Google Signals. This is an extension of Google Analytics that enables so-called "cross-device tracking." This means that if your internet-enabled devices are linked to your Google account, Google can generate reports on usage behavior (in particular, cross-device user numbers), even if you switch devices. Google uses data for this purpose if you have activated the "personalized advertising" setting in your Google account.
We do not process any personal data in this respect; we only receive statistics generated based on Google Signals.
You can withdraw your consent at any time with effect for the future by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google. You can also deactivate the "personalized advertising" setting in your Google account. Details can be found here.
New Relic (New Relic Inc.)
This website uses the web analytics service New Relic, operated by New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA. New Relic collects, analyzes, and stores pseudonymized visitor data based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6 Para. 1 lit. f GDPR. Pseudonymized user profiles can be created and analyzed from this data for the same purpose. New Relic uses cookies, which are small text files stored locally in the cache of the website visitor's internet browser. These cookies serve, among other things, to recognize the browser and thus enable more accurate statistical data collection. The user's IP address is also collected, but it is pseudonymized immediately after collection and before storage to prevent it from being linked to a specific individual.
New Relic Inc., based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
New Relic will under no circumstances associate your personal data with other data held by New Relic.If you wish to object to the analysis of user behavior via cookies, you can configure your browser to notify you when cookies are being set and allow you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Alternatively, you can use the opt-out page for EU consumers. http://www.youronlinechoices.com/de/praferenzmanagement/ Check if advertising cookies from New Relic are being used in your browser and disable them.
New Relic's privacy policy can be accessed at the following web address: https://www.newrelic.de/cookie-policy Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
Pingdom (Pingdom AB)
This website uses the monitoring service Pingdom, operated by Pingdom AB, Kopparbergsvägen 8, 722 13 Västerås, Sweden. Pingdom uses cookies, which are small text files stored locally in the cache of the website visitor's internet browser. These cookies serve to recognize the browser and thus enable analysis of your visits, as well as the loading behavior ("performance") and availability of our website, in order to improve the loading behavior and the presentation of the website's content. If personal data is also processed by the cookies, this is done in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the continuous content and technical optimization of our online presence. To generally deactivate the use of cookies on your computer, you can configure your internet browser so that no more cookies can be stored on your computer in the future or so that cookies that have already been stored are deleted. However, disabling all cookies may prevent some functions on our websites from working properly. You can find Pingdom's privacy policy at [link to privacy policy]. https://www.pingdom.com/legal/privacy-policy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
Mouseflow (Mouseflow ApS)
This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to record randomly selected individual visits (using only pseudonymized IP addresses). This creates a log of mouse movements and clicks with the intention of replaying individual website visits on a sample basis and deriving potential improvements for the website. If personal data is processed in this context, this is done in accordance with Article 6 Paragraph 1 Letter f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes. The processed information will not be shared with third parties. You can permanently object to Mouseflow's web analytics at any time by setting an opt-out cookie. To do this, download and install the opt-out cookie available at the following link: www.mouseflow.de/opt-out/ Further information and Mouseflow's privacy policy can be found here: https://mouseflow.co/privacy/ The opt-out cookie is set by Quantcast.
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR.You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
Using etracker for web analytics
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, technologies from etracker GmbH will be used on this website (www.etracker.comFor the purpose of website analysis, data is automatically collected and stored, from which user profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized user profiles will not be merged with personal data about the holder of the pseudonym without separately granted, explicit consent. Once the purpose for which the data was collected has ceased and we have discontinued using eTracker, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future by clicking this link.
After you withdraw your consent, an opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to grant your consent again.

8. ONLINE MARKETING

Google Ads
We advertise this website via Google Ads in Google search results and on third-party websites. When you visit our website, Google sets a so-called remarketing cookie, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This serves our legitimate interest in the optimal marketing of our website, which outweighs your interests in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR. The data collected in this context will be deleted once the purpose for its collection has ceased and we have discontinued using Google Ads.
Further data processing only takes place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to create target audiences.
Google Ads is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can deactivate the remarketing cookie via this link. You can also learn more about cookies and adjust your settings at the Digital Advertising Alliance.
Google Customer Reviews (formerly Google Certified Shops)
We collaborate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website.After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Article 6 Paragraph 1 Letter a GDPR, we will transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will subsequently be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. The use of Google Customer Reviews may also involve the transfer of personal data to the servers of Google LLC in the USA. You can withdraw your consent at any time by contacting the data controller or Google directly.
In the event that personal data is transferred to Google LLC, which is based in the USA, Google LLC has certified itself under the EU-US Privacy Shield Framework, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list
Further information on Google's data protection practices in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de You can find more information about Google Seller Ratings' privacy policy at this link: https://support.google.com/google-ads/answer/2375474
Microsoft Advertising (Bing Ads)
We use Microsoft Advertising to promote this website in Bing, Yahoo, and MSN search results, as well as on third-party websites. If you have given us your consent in accordance with Article 6(1)(a) GDPR, a cookie will be automatically set when you visit our website. This cookie uses a pseudonymous cookie ID and the pages you have visited to enable interest-based advertising. The data collected in this context will be deleted once the purpose for which it was collected has been fulfilled and we have ceased using Microsoft Advertising.
Microsoft Advertising is a service provided by Microsoft Corporation (www.microsoft.comMicrosoft Corporation is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can withdraw your consent at any time with effect for the future by disabling the remarketing cookie via this link. You can also learn more about the use of cookies and adjust your settings at the Digital Advertising Alliance.
Criteo (Criteo SA)
This website uses the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), to collect, store, and analyze information about the browsing behavior of website visitors in pseudonymized form using cookie text files. This is based on our legitimate interest in displaying personalized advertising in accordance with Art. 6 para. 1 lit. f GDPR. Criteo uses an algorithm to analyze browsing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). Under no circumstances can the collected data be used to personally identify visitors to this website. The data will not be used for any other purpose or shared with third parties. To object to the data collection and creation of pseudonymized user profiles in the future, you can use the following [link to opt-out]Download opt-out cookie: Criteo opt-out (https://www.criteo.com/de/privacy/)
Further information about Criteo's technology can be found in the Criteo Privacy Policy: https://www.criteo.com/de/privacy/
Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.
Sovendus
Voucher offers from Sovendus GmbH: To select a voucher offer that is currently of interest to you, we transmit the pseudonymized and encrypted hash value of your email address and your IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) (Art. 6 para. 1 f GDPR). The pseudonymized hash value of the email address is used to take into account any objection you may have to receiving advertising from Sovendus (Art. 21 para. 3, Art. 6 para. 1 c GDPR). Sovendus uses the IP address exclusively for data security purposes and, as a rule, anonymizes it after seven days (Art. 6 para. 1 f GDPR). Furthermore, for billing purposes, we transmit the pseudonymized order number, order value with currency, session ID, coupon code, and timestamp to Sovendus (Art. 6 para. 1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no objection to advertising on your email address, and you click on the voucher banner displayed only in this case, we will transmit your title, name and email address to Sovendus in encrypted form for the purpose of preparing the voucher (Art. 6 para. 1 b, f GDPR).
Special offers from Sovendus GmbH: To select a special offer that is currently of interest to you in your region, we transmit your title, year of birth, country, postal code, email address hash value, and IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) in pseudonymized and encrypted form (Art. 6 para. 1 f GDPR). The pseudonymized email address hash value is also used to take into account any objection you may have to receiving advertising from Sovendus (Art. 21 para. 3, Art. 6 para. 1 c GDPR). Sovendus uses the IP address exclusively for data security purposes and, as a rule, anonymizes it after seven days (Art. 6 para. 1 f GDPR).
When you click on a special offer, we also transmit your name, address details and email address to Sovendus in encrypted form for the purpose of preparing the personalized request for the special offer from the product provider (Art. 6 para. 1 b, f GDPR).
For further information on how Sovendus processes your data, please refer to the online privacy policy at https://www.sovendus.de/datenschutz.

9. SOCIAL MEDIA

Use of single sign-on methods
Facebook Connect
On our website, you can create a customer account or register using the "Facebook Connect" social plugin from the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), using single sign-on technology, provided you have a Facebook profile. You can recognize the "Facebook Connect" social plugins on our website by the blue button with the Facebook logo and the text "Log in with Facebook" or "Sign in with Facebook".
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The plugin's content is transmitted directly from Facebook to your browser and integrated into the page.By integrating this feature, Facebook receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a server of Facebook Inc. in the USA and stored there. This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Facebook's legitimate interest in displaying personalized advertising based on your browsing behavior.
By using the "Facebook Connect" button on our website, you also have the option of logging in or registering using your Facebook user data. Only if you give your explicit consent in accordance with Article 6 Paragraph 1 Letter a GDPR before the registration process, based on a corresponding notice regarding the exchange of data with Facebook, will we receive the general and publicly accessible information stored in your Facebook profile when you use the "Facebook Connect" button. This information depends on your personal privacy settings on Facebook. This information includes your user ID, name, profile picture, age, and gender.
Please note that following changes to Facebook's privacy policy and terms of service, granting your consent may also result in the transfer of your profile pictures, your friends' user IDs, and your friend list if these are marked as "public" in your Facebook privacy settings. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary information (title, first name, last name, address, country, email address, date of birth), provided you have authorized this on Facebook. Conversely, based on your consent, data (z.B. Information about your browsing and purchasing behavior will be transferred from us to your Facebook profile.
The consent given can be revoked at any time by sending a message to the controller named at the beginning of this privacy policy.
Facebook Inc., based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php
If you do not want Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent Facebook plugins from loading by using browser add-ons. z.B. with "Adblock Plus" (https://adblockplus.org/de/).
Use of social plugins from Facebook, Twitter, Instagram
Our website uses so-called social plugins (“plugins”) from social networks.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The plugin's content is transmitted directly from the provider to your browser and integrated into the page. By integrating the plugins, the providers receive information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly...).(to the USA) and stored there. If you are logged into one of these services, the providers can directly associate your visit to our website with your profile on the respective social network. If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts. This serves our legitimate interests, which outweigh your interests, in the optimal marketing of our services pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
YouTube Video Plugins
This website integrates content from third-party providers. This content is provided by Google ("Provider"). YouTube is a service of Google Ireland Limited, a company incorporated and operating under Irish law, located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
For YouTube videos embedded on our site, the enhanced privacy setting is activated. This means that no information about website visitors is collected and stored by YouTube unless they play the video. Embedding these videos serves our legitimate interest in the optimal marketing of our services, which outweighs any potential impact on your privacy, in accordance with Article 6(1)(f) GDPR.
For information on the purpose and scope of data collection and the further processing and use of data by the providers on their websites, as well as contact options and your related rights and settings for protecting your privacy, please refer to the providers' privacy policies:
https://www.facebook.com/policy.php
https://twitter.com/de/privacy
https://help.instagram.com/155833707900388
https://policies.google.com/privacy
If you do not want social networks to directly associate the data collected via our website with your profile on the respective service, you must log out of the relevant service before visiting our website. You can also completely prevent the loading of plugins using browser add-ons, such as the script blocker "NoScript".
Our online presence on Facebook, Twitter, YouTube, Instagram
Our presence on social networks and platforms serves to improve and actively communicate with our customers and potential customers. We use these platforms to provide information about our products and current special offers.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used to z.B. To display advertisements both on and off the platforms that are likely to match your interests. For this purpose, cookies are generally used on your device. These cookies store information about visitor behavior and user interests. This serves our legitimate interests, which, in accordance with Art. 6 para. 1 lit. f GDPR, override your interests, in optimizing the presentation of our offerings and communicating effectively with customers and prospective customers. If you are asked by the respective social media platform operators for your consent to data processing, z.B. By using a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This decision is based on the EU-US Privacy Shield.A current certificate for the respective company can be viewed here.
For detailed information on how the providers process and use your data on their websites, as well as contact options and your rights and settings for protecting your privacy, in particular your right to object (opt-out), please refer to the providers' privacy policies linked below. Should you still require assistance, please feel free to contact us.
Facebook: https://www.facebook.com/about/privacy/
Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR, which you can view here.
Further information on data processing in connection with visiting a Facebook fan page (information on Insights data) can be found here.
Google/YouTube: https://policies.google.com/privacy?hl=de
Twitter: https://twitter.com/de/privacy
Instagram: https://help.instagram.com/519522125107875
Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Google/YouTube: https://adssettings.google.com/authenticated?hl=de
Twitter: https://twitter.com/personalization
Instagram: https://help.instagram.com/519522125107875

10. Sending review reminders via email

If you have given us your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will use your email address to remind you to submit a review of your order via the rating system we use.
This consent can be revoked at any time by sending a message to the contact details described below.
Review reminder by Trusted Shops
If you have given us your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder via email.
This consent can be revoked at any time by sending a message to the contact details described below or directly to Trusted Shops.
If you have given us your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will use your email address to remind you to submit a review of your order via our review system. You can revoke this consent at any time by contacting us using the contact details provided below.
Review reminder by eKomi
If you have given us your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will transmit your email address to eKomi Ltd. , Markgrafenstraße 11, 10969 Berlin (www.ekomi.de), so that they can send you a review reminder via email.
This consent can be revoked at any time by sending a message to the contact details described below or directly to eKomi Ltd.

11. CONTACT OPTIONS AND YOUR RIGHTS

As an affected party, you have the following rights:
In accordance with Article 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
In accordance with Article 16 GDPR, you have the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us;
In accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing is necessary.
to exercise the right to freedom of expression and information;
to fulfill a legal obligation;
for reasons of public interest or
necessary for the establishment, exercise or defense of legal claims;
according to Art.Article 18 of the GDPR grants you the right to request the restriction of the processing of your personal data, insofar as
the accuracy of the data is disputed by you;
the processing is unlawful, but you object to its deletion;
we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or
You have objected to the processing pursuant to Article 21 GDPR;
In accordance with Article 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
According to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your habitual residence, your place of work, or the location of our company headquarters.
If you have any questions about the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as for the revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details in our legal notice.
Right to object
To the extent that we process personal data as explained above to protect our overriding legitimate interests within the framework of a balancing of interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you only have a right to object if there are grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

12. Changes to this declaration

As we introduce new products or services, change our internet procedures, or as internet and IT security technology evolves, this privacy policy will need to be updated. We therefore reserve the right to amend or supplement this policy as needed. We will publish any changes here. You should therefore check this website regularly to stay informed about the current version of the privacy policy.