Use of our social media pages

 Facebook fan page

Beauty Production GmbH uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (hereinafter: Facebook) for the information service offered here. The website also contains a link to the Facebook fan page of Beauty Production GmbH.

According to the ECJ, there is a joint responsibility within the meaning of Article 26 GDPR between Facebook and the operator of a Facebook fan page for the personal data processed via the Facebook fan page. For this reason, Facebook and Beauty Production GmbH have concluded a joint responsibility agreement.

Beauty Production GmbH provides you with the following information on data processing on our Facebook fan page:

Responsible persons

The processing of your personal data on Beauty Production GmbH‘s Facebook fan page is carried out under the joint responsibility of

Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

Data processing

When accessing a Facebook fan page, the IP address of your device is transmitted to Facebook. According to Facebook, this IP address is anonymized and deleted after 90 days, at least if it is a German IP address. In addition, Facebook stores further information about the end devices of its users, e.g. the Internet browser used. If necessary, Facebook is thus able to assign IP addresses to individual users. If you are logged in to your Facebook account while visiting our fan page, a cookie with your Facebook identification is stored on your end device. Based on this cookie, Facebook can track that you have visited our fan page and how you have used it. Facebook uses this information to provide you with content or advertising tailored to your needs.

If you do not want this, you should log out of your Facebook account or deactivate the “stay logged in” function. We also recommend that you delete the cookies on your device and close and restart your browser. This process will delete Facebook information that allows Facebook to link to you.

However, if you want to use the interactive functions of our fan page, you would have to log in to Facebook again with your Facebook login information. This will also allow Facebook to link to you again.

In what way Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us. In this respect, we can only refer you as a user of our fan page to Facebook’s statements on data protection.

The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union.

What information Facebook receives and how it uses it is described in general terms in Facebook’s data use guidelines. There you will also find information about how to contact Facebook and about the settings for advertisements. The Data Use Guidelines are available at the following link: http://de-de.facebook.com/about/privacy

The complete Facebook data guidelines can be found here:

https://de-de.facebook.com/full_data_use_policy

The Facebook privacy policy contains further information on data processing:

https://www.facebook.com/about/privacy/

Possibilities of objection (so-called opt-out) can be set here: https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com

Facebook Inc, the US parent company of Facebook Ireland Ltd. is certified under the EU-U.S. Privacy Shield and is thus committed to comply with European data protection law. Further information on Facebook’s privacy shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .

The transfer and further processing of personal data of users to third countries, such as the USA, as well as the associated possible risks for you as a user cannot be assessed by us as the operator of the Facebook fan page.

Legal basis of the Facebook fan page and its operation: Art. 6 para. 1 p.1 lit f GDPR

Storage duration

We store the information transmitted by Facebook at most for as long as your interest in deletion or anonymization does not outweigh the information you provide.

If you no longer wish to receive the data processing described here in the future, please remove the link between your user profile and our fan page by using the functions “I no longer like this page” and/or “Do not subscribe to this page”.

 Your rights as a data subject

We recommend that you address any requests for information or other questions regarding your rights, which are listed at the end of this privacy policy, directly to Facebook, as only Facebook has full access to the user data. Should you nevertheless address your request to us, it will of course still be processed and additionally forwarded to Facebook.

 Inquiries via contact forms and e-mail

If you contact us by e-mail, the information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

The data you provide, such as first name, last name, company, e-mail address, telephone number, function, country and, if applicable, personal information, will be stored by us to answer your questions.

Please note that all information is voluntary. You can also contact us in another way. The person concerned is free to decide which data is transmitted to us. This data may include the following information, for example:

– Personal Information

– Information on the social and professional situation

– Information for the financial situation

– Information on the state of health

– Information about personal interests and preferences

We delete the data arising in this connection after storage is no longer necessary, e.g. when your request has been dealt with. Otherwise the processing will be restricted if there are legal obligations to retain data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.

Collection of personal data upon conclusion of contract and payment

In the case of contractual relationships, the legal basis is the contract from Article 6 GDPR, which we have concluded with you. Art. 6 para. 1 sentence 1 lit. b GDPR is the legal basis for processing such requests. If you wish to make an enquiry via our website, it may be necessary for the conclusion of the contract to provide your personal data, which we need to process your enquiry.

In the context of an order we store the following personal data:

– Name,

– Address,

– Phone number,

– e-mail address,

– Possibly a different delivery address,

– Possibly an existing sales tax ID number

– Payment data.

We use this data exclusively for the purpose of implementing the contract and the communication with you that is necessary in this respect. This includes the initiation, the conclusion, the processing, the warranty as well as the reversal of the sales contract if necessary. The data will be stored by us until the complete execution of the sales contract. As far as commercial and fiscal retention periods (AO, HGB) exist, the duration of storage can be up to 10 years.

The recording and processing is carried out within the framework of the contract concluded between Beauty Production GmbH and the customer in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. The legal basis for further storage for tax and commercial law reasons is the requirement by law according to Art. 6 Para. 1 S. 1 lit. c GDPR. The partial evaluation of contract data for controlling purposes is in the legitimate interest of Beauty Production GmbH to be able to optimally position our company on the market in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

Data transmissions

We will only pass on your personal data to third parties to the extent that this is necessary to implement the contract or to protect our legitimate interests. We also use external service providers (contract processors) for the execution of the contract. Separate commissioned data processing contracts have been concluded with these service providers to ensure the protection of your personal data.

a) For the purpose of the so-called hosting of our server systems as well as the technical administration of the IT systems required for hosting, data of website visitors, customers or other interested parties of our offer may be processed by our external service company. These are log files. The data categories can be seen in the section above “Data collection based on Art.6 para.1 p.1 lit. f GDPR”.

b) To process orders, the customer’s first name, surname, address, e-mail address, telephone number and payment data are forwarded to our external processing service provider.

c) To execute the delivery, the first name, surname, address, e-mail address and telephone number of the customer will be forwarded to external shipping companies for the execution of the delivery.

d) For the purpose of payment processing, the customer’s payment data, namely first name, surname, address, e-mail address, telephone number, date of birth, IBAN, BIC and IP address are forwarded to credit institutions or payment intermediaries, depending on the payment method you have chosen.

e) In order to process our accounting, we pass on personal data, namely first name, surname, address, e-mail address and telephone number in connection with customer orders to our external accounting service provider.

The data transfer to the service providers mentioned under 9 a) – e) is carried out for the purpose of implementing the contractual relationship with you as a customer and to protect our legitimate interests. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b and lit. f GDPR.

Revocation of consent

If the processing of personal data is based on a granted consent, you have the right to revoke this consent at any time. Revocation of consent does not affect the lawfulness of the processing that has taken place on the basis of the consent until revocation.

You can contact us at any time to exercise your right of revocation.

Your rights as a data subject

You have the right to receive information about your personal data stored by us at any time. You also have the right to correction, blocking or, apart from the prescribed data storage for business transactions, deletion of your personal data and data transfer. Please contact one of our contact persons for this purpose. You will find the contact details at the bottom.

In order to be able to take into account a blocking of data at any time, these data must be kept in a blocking file for control purposes. You can also request that the data be deleted, provided there is no legal obligation to archive it. If such an obligation exists, we will block your data upon request.

You can make changes or withdraw your consent by notifying us accordingly with effect for the future.

Notwithstanding the rights you have vis-à-vis us, you also have the right to complain to a supervisory authority, in particular in the member state of your residence, place of work or place of suspected infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR.

The supervisory authority to which the complaint has been submitted will inform you of the status and the results of the complaint, including the possibility of a judicial appeal under Art. 78 GDPR.

A list of all supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

We hope that this information has helped you to exercise your rights. If you would like more detailed information on the data protection regulations, we are at your disposal.

Changes to our privacy policy

We reserve the right to adapt this data protection declaration from time to time so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when new services are introduced. The new data protection declaration then applies to your renewed visit.

Questions on data protection

If you have any questions regarding data protection, please write us an e-mail or contact us in writing.

Status of the privacy policy: 18.6.2020