Data protection

General information and mandatory information

Designation of the responsible body

The responsible body for data processing on this website is:

Beauty Galerie DresdenIzabella NagyHansastrasse 1801097 Dresden

The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can revoke your consent at any time. To revoke your consent, simply send an informal email. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to lodge a complaint with the competent supervisory authority

As the person affected, you have the right to lodge a complaint with the responsible supervisory authority in the event of a data protection violation. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request that the data be transferred directly to another responsible party, this will only be done if it is technically feasible.

Right to information, correction, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. In this regard and for other questions on the subject of personal data, you can contact us at any time using the contact options listed in the imprint.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line in your browser and the lock symbol in the browser line.

Server log files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This is:

Visited page on our domainDate and time of the server requestBrowser type and browser versionOperating system usedReferrer URLHostname of the accessing computerIP address

This data will not be merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or to take pre-contractual measures.

Data transmission when concluding a contract for the purchase and dispatch of goods

Personal data will only be transmitted to third parties if this is necessary for the performance of the contract. Third parties may be, for example, payment service providers or logistics companies. The data will not be transmitted to any other parties or will only be transmitted if you have expressly consented to this.

The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures.

contact form

Data transmitted via the contact form, including your contact details, will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal notification by email is sufficient for the revocation. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions - in particular retention periods - remain unaffected.

Cookies

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our service more user-friendly, effective and secure.

Some cookies are “session cookies.” Such cookies are automatically deleted at the end of your browser session. Other cookies, however, remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality on our website.

The setting of cookies that are necessary for the performance of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart) is based on Art. 6 Paragraph 1 Letter f of GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure that our services are technically error-free and run smoothly. If other cookies are set (e.g. for analysis functions), these will be dealt with separately in this data protection declaration.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our online offering, subpages visited and the length of time visitors stay. Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we will obtain your consent in accordance with Art. 49 Paragraph 1 Sentence 1 Letter a. of GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that with third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact extent of which and the consequences for you of which we do not know, over which we have no influence and of which you may not be aware).

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Maps

Type and scope of processing

We use the Google Maps map service to create directions. Google Maps is a service provided by Google Ireland Limited, which displays a map on our website. When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes stated above and to maintain the security and functionality of Google Maps.

Purpose and legal basis

The use of Google Maps is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and Section 25 Para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we will obtain your consent in accordance with Art. 49 Paragraph 1 Sentence 1 Letter a. of GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that with third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact extent of which and the consequences for you of which we do not know, over which we have no influence and of which you may not be aware).

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

PayPal

Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.

If you pay with PayPal, the payment data you entered will be transmitted to PayPal.

Your data will be transmitted to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke your consent at any time. Data processing operations that took place in the past remain effective if you revoke your consent.

Klarna

Our website allows payment via Klarna. The payment service provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When paying with Klarna (Klarna checkout solution), Klarna collects various personal data from you. You can find details in Klarna's privacy policy at: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimize the Klarna checkout solution. This optimization represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Cookies are small text files that your web browser stores on your device. Klarna cookies remain on your device until you delete them. Details on the use of Klarna cookies can be found at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Your data will be transmitted to Klarna on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke your consent at any time. Data processing operations that took place in the past remain effective if you revoke your consent.

Instant bank transfer

Our website allows payment via “Sofortüberweisung.” The provider of the payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich.

Using the “Instant Transfer” process, we receive a payment confirmation from Sofort GmbH in real time and can begin to meet our obligations immediately.

When paying by “Sofortüberweisung”, your PIN and TAN are sent to Sofort GmbH. The payment provider then logs into your online banking account, automatically checks your account balance and makes the transfer. The transaction is then confirmed immediately. Your transactions, the credit limit of your overdraft facility and the existence of other accounts and their balances are also automatically checked after logging in.

In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. This data transmission is necessary in order to establish your identity beyond doubt and to prevent attempted fraud.

Your data will be transmitted to Sofort GmbH on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke your consent at any time. Data processing operations that took place in the past remain effective if you revoke your consent.

Details on payment with Sofortüberweisung can be found at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Google Ads also delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and save your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

The use of Google Ads is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TTDSG

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we will obtain your consent in accordance with Art. 49 Paragraph 1 Sentence 1 Letter a. of GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that with third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact extent of which and the consequences for you of which we do not know, over which we have no influence and of which you may not be aware).

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

Facebook Pixel

Type and scope of processing

We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called custom audiences, i.e. to segment visitor groups of our online offering, determine conversion rates and then optimize them. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and legal basis

The use of Facebook Pixel is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we will obtain your consent in accordance with Art. 49 Paragraph 1 Sentence 1 Letter a. of GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that with third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact extent of which and the consequences for you of which we do not know, over which we have no influence and of which you may not be aware).

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

Google Web Fonts

Type and scope of processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby your IP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent in accordance with Art. 6 (1) lit. a. GDPR and Section 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other suitable guarantees with the recipients of the data within the meaning of Art. 44 ff. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we will obtain your consent in accordance with Art. 49 Paragraph 1 Sentence 1 Letter a. of GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that with third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact extent of which and the consequences for you of which we do not know, over which we have no influence and of which you may not be aware).

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

Usercentrics

Type and scope of processing

We have integrated Usercentrics on our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which consent to the storage of cookies can be obtained and documented. Usercentrics uses cookies or other web technologies to recognize users and to save the consent given or revoked.

Purpose and legal basis

The use of the service is based on obtaining the legally required consent to the use of cookies in accordance with Art. 6 (1) (c) GDPR.

Storage period

We have no influence over the specific storage period of the processed data; it is determined by Usercentrics GmbH. Further information can be found in the privacy policy for Usercentrics: https://usercentrics.com/privacy-policy/.

Source: Data protection configurator from Mein-Datenschutzbeauftragter.de