Privacy Policy | JACKS beauty GmbH

privacy policy

The person responsible for data processing is:

Miriam Jacks
Danneckerstrasse 8
10245 Berlin
Germany

support@jacks-beautyline.com or use our contact form .

We are pleased that you are interested in our online shop. The protection of your privacy is very important to us. Below we will inform you in detail about how we handle your data.

access data and hosting

You can visit our websites without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access.

This access data is evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our offering. In accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, this serves to safeguard our legitimate interests in a correct presentation of our offering, which prevail within the framework of a balancing of interests. All access data is deleted no later than seven days after the end of your visit to the site.

hosting services provided by a third party

As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below is processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is located in a country outside the European Union for which the European Commission has determined that the level of data protection is adequate.

Data collection and use for contract processing, contact, when opening a customer account or participating in digital product advice

We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g. via contact form or email) or when participating in digital product advice. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract or to process your contact and you cannot send the order or contact without providing it. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 Para. 1 Clause 1 Letter b of GDPR to process the contract and process your inquiries.

If you have given your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.

After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

The personal data used to determine the product recommendation will be stored for as long as it is necessary to fulfil the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

data transfer

In order to fulfil the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.

The use of your data for product recommendations is based on our legitimate interest in the type-appropriate presentation of our products in accordance with Art. 6 (1) (f) GDPR.

We also use an external merchandise management system to process orders and contracts. The data transfer or processing that takes place in this regard is based on order processing.

data transfer to debt collection companies

In order to fulfil the contract in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR, we will pass on your data to a commissioned debt collection company if our payment claim has not been settled despite a previous reminder. In this case, the claim will be collected directly by the debt collection company. In addition, the transfer serves to protect our legitimate interests, which prevail within the framework of a balancing of interests, in the effective assertion or enforcement of our payment claim in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.

email newsletter

email advertising with newsletter registration

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.

The newsletter is sent as part of processing on our behalf by a service provider to whom we pass on your email address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

Cookies and web analytics

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests in an optimized presentation of our offer in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, which predominate in the context of a balancing of interests. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). You can find out how long they are stored for in the overview in the cookie settings of your web browser. You can set your browser so that you are informed when cookies are set and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet ExplorerTM

SafariTM

ChromeTM

FirefoxTM

OperaTM

If you do not accept cookies, the functionality of our website may be limited.

Further information on data protection

Google Double Click

If you have given your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, this website also uses the so-called DoubleClick cookie as part of the application of Google Analytics (see below) for advertising purposes, which enables your browser to be recognized when you visit other websites. The information automatically generated by the cookie about your visit to this website is usually transferred to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymization on this website before being transmitted within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services related to website activity. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Once the purpose no longer applies and we no longer use Google DoubleClick, the data collected in this context will be deleted.

Google Double Click is offered by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

To the extent that information is transferred to and stored on Google servers in the USA, the American company Google LLC is certified under the Trans-Atlantic Data Privacy Framework. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

You can withdraw your consent at any time with effect for the future by deactivating the DoubleClick cookie using this link . You can also find out about the use of cookies and adjust the settings for this from the Digital Advertising Alliance. Finally, you can set your browser so that you are informed about the use of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

Google Analytics

We use the Google Analytics service provided by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). The service analyzes and evaluates the use of our website and uses this data to create statistics and reports that help us optimize and improve our site for visitors. Google Analytics uses cookies for this purpose.

For this purpose, the information generated by the cookie, such as your anonymized IP address, device and browser properties, session duration, pages visited, are transferred to a Google server on our behalf, stored and evaluated there.

We use the IP anonymization function of Google Analytics on this website. This ensures that IP addresses are recorded anonymously. Your IP address is generally anonymized by shortening it within the European Union or in other contracting states of the European Economic Area (EEA). In exceptional cases, your IP address will be transferred to a Google server in the USA and anonymized there. Your IP address transmitted in this way will not be merged with other Google data.

As part of the Google Analytics advertising function, remarketing and reports on performance according to demographic characteristics and interests are used. The purpose of these processes is to use information about user behavior to better tailor advertising measures to the interests of the respective users. As part of remarketing, personalized advertising measures can be placed on other websites based on the user's surfing behavior on this website. The advertising material can contain products that the user has previously viewed on the website. If you have agreed that Google can link your web and app browsing history to your Google account and use information from your Google account to personalize ads, Google will use this data for cross-device remarketing.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. The revocation can be made by deactivating the corresponding selection on our consent management platform, which you can access via the following link: https://jacks-beautyline.com/pages/datenschutzeinstellungen

You can also prevent Google from collecting and processing data by downloading and installing the browser add-on available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Alternatively, or within browsers on mobile devices, please click on the following link: https://support.google.com/analytics/answer/181881?hl=de. This will store an opt-out cookie on your device for our website with effect for the browser you are currently using. If you delete your cookies in this browser, you must click on this link again.

Google offers registered Google users and other users the option to deactivate personalized advertising. You can find details here: https://support.google.com/ads/answer/2662922?hl=de.

You can find Google's privacy policy here: https://policies.google.com/privacy?hl=de and here: https://policies.google.com/technologies/partner-sites

Google Ads Remarketing

We use Google Ads to advertise this website in Google search results and on third-party websites. When you visit our website, Google sets a so-called remarketing cookie, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. This serves to protect our legitimate interests in the optimal marketing of our website, which prevail within the framework of a balancing of interests, in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Once the purpose no longer applies and we no longer use Google Ads Remarketing, the data collected in this context will be deleted.

Any further data processing will only take place if you have given Google your consent to link your web and app browsing history to your Google account and to use information from your Google account to personalize ads that you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data to create target groups.

Google Ads is offered by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

You can deactivate the remarketing cookie via this link . You can also find out more about the use of cookies and make settings for this at the Digital Advertising Alliance.

Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and, as part of this, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google").

When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that there is no way for cookies to be tracked across Ads customers' websites. The information collected using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

As part of the service, data is transferred to the USA. The transfer is based on the standard contractual clauses of the EU Commission. Details can be found at https://policies.google.com/privacy/frameworks?hl=de and https://business.safety.google/adscontrollerterms/sccs/.

You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de .

Google AdSense

We use Google Adsense, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on our website. With Google AdSense, we can display advertisements on our website that are tailored to our website offerings and your interests.

Google AdSense uses cookies and so-called web beacons (invisible graphics) to record and process not only the IP address but also individual user behavior on the website (e.g. interactions with the advertisement). Google can use this to create individual user profiles for advertising, optimize ad display and measure the success of ads.

Data processing, in particular the setting of cookies, takes place with your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future.

You can find Google’s privacy policy here: https://policies.google.com/privacy?hl=de .

Google Optimize

Our website uses the web analysis and optimization service "Google Optimize", which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the Google Optimize service to increase the attractiveness, content and functionality of our website by displaying new functions and content to a percentage of our users and statistically evaluating changes in usage. Google Optimize is a sub-service of Google Analytics (see Google Analytics section).

Google Optimize uses cookies to optimize and analyze your use of our website. The information on your use of our website generated through these cookies is usually transferred to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization, so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information to evaluate your use of our website, to compile reports on optimization tests and related website activities, and to provide us with other services related to website and internet usage.

Data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.

In addition, you can prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. For more information about data collection and processing by Google, please see Google's privacy policy, which you can access at https://policies.google.com/privacy?hl=de.

Google Meet

We use Google Meet to communicate with customers. Google Meet is an online conference tool. This service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When communicating with this tool via video or audio conferences, personal data is processed by us and the provider of the tool. The data collected includes all information that you provide when using the tool. In addition, metadata relating to the conference is processed. Furthermore, technical information required for the online communication to function is processed. Furthermore, all files shared within the tool are stored on the tool provider's servers. Google Meet can also set cookies. These cookies are only set with consent. This consent can be revoked at any time. The legal basis for this is Art. 6 Para. 1 lit. a GDPR. Otherwise, the legal basis for the processing of data by Google Meet is Art. 6 Para. 1 lit. b GDPR. The communication is related to the fulfillment of a contract or is necessary to fulfill pre-contractual obligations. Furthermore, this tool is used to simplify communication with our company. This represents a legitimate interest within the meaning of Art. 6 Paragraph 1 Letter f of GDPR. This data is stored until the person concerned requests deletion, the consent to storage has been revoked or the purpose for storage no longer applies. Cookies remain on the device until the user deletes them. Mandatory legal provisions on retention periods remain unaffected.

Further details: https://policies.google.com/privacy?hl=de .

Google Fonts

We use Google Fonts on this website. Google Fonts is a tool that enables a uniform display of fonts (so-called Google Fonts). This service is offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

As soon as a website visitor visits a website that uses Google Fonts, the browser used must connect to the Google servers. No cookies are set here. However, the IP address of the website visitor is recorded and used for analysis purposes. The legal basis for the processing is Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as this consent includes access to information in the user's end device or the storage of cookies within the meaning of the TDDDG. This consent can be revoked at any time.

Details:

https://developers.google.com/fonts/faq?hl=de

https://policies.google.com/privacy?hl=de .

Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Pandectes GDPR Compliance

We use the consent management tool Pandectes GDPR Compliance (Pudisoo, 74626 Harju maakond, Estonia) on our website. The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consents already given. The data processing serves the purpose of obtaining and documenting the necessary consents to data processing and thus complying with legal obligations. Cookies can be used for this purpose. The following information, among others, can be collected and sent to Pandectes: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to other third parties.

The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 Paragraph 1 Letter c of GDPR. Further information on terms of use and data protection at Pandectes can be found at: https://pandectes.io/privacy-policy/.

Rakuten Advertising

Our website participates in the Rakuten Advertising partner program. This is offered by Rakuten Marketing Germany GmbH, Schönhauser Allee 112, 10439 Berlin Germany (hereinafter "Rakuten"). This is a so-called affiliate system in which people registered with Rakuten (also known as "publishers") promote the products or services of the so-called "advertisers" on their websites using advertising material. This serves to protect our legitimate interests in optimizing and commercially exploiting our online offering, which prevail within the framework of a balancing of interests, in accordance with Art. 6 Para. 1 lit. f GDPR.

Using a cookie ( rmuid ), Rakuten can track the progress of the respective order and, in particular, understand that you clicked on the respective link and then ordered the product via the affiliate partner program. You can prevent the setting of cookies by our contractual partners or our website at any time by making the appropriate settings in your Internet browser. In addition, cookies that have already been set can be deleted at any time via the Internet browser or other software programs.

Further information on data processing at Rakuten can be found here (PDF).

Hotjar

We use Hotjar on our website, an analysis software from Hotjar Limited, Dragonara Business Center, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. Hotjar makes it possible to measure and evaluate usage behavior on our website. The information generated by the "Hotjar Tracking Code" script implemented on the website and the use of cookies about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there.

In addition to mouse events (clicks, mouse movements, scroll heights, etc.), Hotjar also processes meta and communication data (e.g. anonymized IP address, device information) and date and location data (e.g. geographical location, timestamp of the website visit). Hotjar will use this information to evaluate your use of our website, to create reports on usage (e.g. using heat maps) and for other services relating to website usage and internet analysis of the website.

Data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 Paragraph 1 Clause 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.

You can prevent Hotjar from collecting data by clicking on the following link and following the instructions there: https://www.hotjar.com/de/legal/policies/do-not-track/.

You can view Hotjar’s privacy policy at https://www.hotjar.com/legal/policies/privacy/de/.

Shopify

To operate our online shop, we use the shop and e-commerce platform Shopify, a service of Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). This enables us to present and sell our products to you online in a web shop.

Shopify provides us with software that we use to run our e-commerce business. It is a tool for creating and hosting websites, especially online stores.

When you, as our customer, visit our online store or make a purchase, Shopify collects and processes personal data from you. This data is only used to provide you with our online store and to enable you to purchase our products.

When you visit our website, Shopify collects your IP address as well as information about the device and browser you use.

When you make a purchase on our website, personal data that you provide such as your name, billing address, shipping address, email address, phone number, payment information and other data related to your purchase will be processed to enable you to complete a transaction, to screen orders for fraud and risk and to fulfill orders.

We also collect and process information about how you access our website, your account and our platform, including information about the device and browser you use, your network connection, your IP address and details about how you navigate our website and our platform. This enables us to provide analytics, such as the number of visitors to our store, and to help us fix errors or improve our store offering for you.

Shopify collects some of this information directly from your device using cookies or other similar technologies.

The use of Shopify and the processing of your data is carried out on the one hand to fulfill the contract on the basis of Art. 6 Para. 1 Clause 1 Letter b GDPR and on the basis of Art. 6 Para. 1 Clause 1 Letter f GDPR. We have a legitimate interest in a reliable and secure technical presentation of our website (our online shop).

For more information, please visit the Shopify website: https://www.shopify.de/. Additional information on how Shopify processes personal data can be found in the privacy policy: https://www.shopify.de/legal/datenschutz.

Facebook, Instagram

Our website uses so-called social plugins (“plugins”) from social networks.

If you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugin, the providers receive the information that your browser has accessed the corresponding page on our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile in the respective social network. If you interact with the plug-ins, for example by pressing the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts there. This serves to safeguard our legitimate interests in the optimal marketing of our offer, which prevail within the framework of a balancing of interests, in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

The purpose and scope of data collection and the further processing and use of the data by the providers on their websites as well as a contact option and your related rights and setting options to protect your privacy can be found in the data protection information of the providers:

https://www.facebook.com/policy.php

https://help.instagram.com/155833707900388

If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you must log out of the relevant service before visiting our website. You can also completely prevent the loading of the plug-ins using add-ons for your browser, e.g. with the script blocker "NoScript".

Our presence on social networks and platforms serves to improve and actively communicate with our customers and interested parties. We provide information about our products and current special offers there.

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used on your device for this purpose. These cookies store visitor behavior and the interests of users. In accordance with Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (consent) to data processing, e.g. using a checkbox, the legal basis for data processing is Art. 6 (1) (a) GDPR.

If the aforementioned social media platforms have their headquarters in the USA, the following applies: For the USA, there is an adequacy decision from the European Commission. This is based on the Trans-Atlantic Data Privacy Framework.

For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights and setting options to protect your privacy, in particular the option to object (opt-out), please refer to the providers' data protection notices linked below. If you still need help in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found in Facebook’s privacy policy.

Instagram: https://help.instagram.com/519522125107875

Opt-out option:

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

Meta Pixel

On this website we use the Meta Pixel service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company Meta Platforms, Inc (USA) (“Meta”) for conversion measurement in order to show you and other interested users advertising on Meta and other websites and to measure the effectiveness of advertising.

Through the Meta Pixel that we have implemented on our website, your browser establishes a connection with Facebook, which allows user data such as IP address or user ID to be compared. If you are registered with Facebook, Meta can assign the visit to your account. This means that your behavior can be tracked if, for example, you came to our page by clicking on a Facebook ad or were redirected to the advertiser by clicking on an ad displayed by us. The ads can then be evaluated for effectiveness for statistical or other market research purposes and other advertising can be improved. We cannot draw any conclusions about the identity of the users from this. However, Meta can then adjust the placement of ads on and outside of Facebook.

For this purpose, Meta may use cookies, web beacons or other storage technologies and sets a cookie for a maximum of 180 days with, among other things, the information that you have accessed our website or clicked on an advert from us as soon as you have agreed to the use of cookies requiring consent.

Data processing takes place with your consent on the basis of Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future via our consent management platform, which you can access here, without affecting the legality of the processing carried out on the basis of the consent until the revocation. In addition, you can revoke your consent by setting your browser accordingly or, as a logged-in user of the social network Facebook, at https://www.facebook.com/settings/?tab=ads#_. You can also deactivate user-based advertising via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/), at http://www.youronlinechoices.com/de/praferenzmanagement/ or the US website (http://www.aboutads.info/choices). As a logged-in Facebook user, you can deactivate the “Custom Audiences” remarketing function in the Advertising Settings area.

To the extent that personal data is collected on our website using the tool mentioned and forwarded to Meta, we and Meta are joint controllers for this data processing to a limited extent. We have concluded a contract with Meta on joint responsibility for the processing of your data in accordance with Art. 26 GDPR, the terms of which you can view here. We are therefore responsible for providing the data protection information and for the data protection-compliant implementation of the tool on our website. Meta is responsible for data security. Rights of those affected with regard to the data processed by Meta can be asserted directly with Facebook and, if asserted, will be forwarded to Facebook. Further information on which personal data is processed as part of the joint responsibility can be found at https://www.facebook.com/legal/terms/businesstools_jointprocessing. The processing by Meta after forwarding is not joint responsibility.

It cannot be ruled out that Meta will transfer data to the USA for storage and further processing. If such data is transferred to the USA, it will be based on the standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381 .

For more information about how Meta processes personal data, including how you can exercise your data subject rights vis-à-vis Meta, please see Meta's data policy at https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 .

Meta Conversion API

On this website we use the Meta Conversions API service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; parent company: Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA (hereinafter "Meta").

Using the Conversion API, we can record user actions on our website (e.g. page views, placing products in the shopping cart, purchasing). In addition to this action data, your IP address, device information and meta/communication data (e.g. user agent, language settings) are processed. The data collected is forwarded to Meta. If you are registered with Facebook, Meta can assign the visit to our website to your account.

The processing of the data enables us to reach relevant customer groups by personalizing ads, optimizing our advertising campaigns and measuring their success.

The legal basis for data processing is your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time with effect for the future. You can revoke your consent by deactivating the corresponding selection on our consent management platform, which you can access via the following link: https://jacks-beautyline.com/pages/datenschutzeinstellungen

To the extent that personal data is collected on our website using the tool mentioned and forwarded to Meta, we and Meta are joint controllers for this data processing (Art. 26 GDPR). The processing carried out by Meta after forwarding is not jointly responsible. The framework conditions of joint responsibility were set out in an agreement on joint processing: https://www.facebook.com/legal/controller_addendum . We are therefore responsible for providing the data protection information and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of Meta products. You can assert the rights of those affected (e.g. requests for information) with regard to the data processed by Meta with Meta. If you assert your rights with us, we are obliged to forward these requests to Meta.

For information on how Meta processes personal data, including the legal basis on which Meta relies, the options for exercising the rights of data subjects vis-à-vis Meta, and how to contact Meta and the Meta Data Protection Officer, please see Meta's Privacy Policy at https://www.facebook.com/privacy/policy

YouTube video plugins

This website includes content from third-party providers. This content is provided by Google ("Provider"). YouTube is an offering from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

For videos from YouTube that are embedded on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to protect our legitimate interests in the optimal marketing of our offer, which prevail within the framework of a balancing of interests, in accordance with Art. 6 Para. 1 Clause 1 Letter f of GDPR.

https://policies.google.com/privacy?hl=de

Opt-out option:

https://adssettings.google.com/authenticated?hl=de

TikTok Pixel

We use the TikTok Pixel on our website, a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, 4 Lindsey Street, Barbican, London, EC1A 9HP, United Kingdom (hereinafter “TikTok”) to show you and other potentially interested users advertising on TikTok and to measure the effectiveness of our advertising.

Through the TikTok pixel, your browser establishes a connection with TikTok and sets a cookie with the information that you have visited our website or clicked on an ad from us as soon as you have agreed to the use of cookies that require consent. If you are registered with TikTok, TikTok can assign the visit to your account. TikTok's conversion tracking allows us to measure actions by website visitors (e.g. purchasing a product, viewing a specific page element). Visitors to our website can also be addressed again with targeted and personalized advertising on TikTok. The TikTok pixel records meta and communication data (e.g. IP address, device information, browser properties, operating system, timestamp of the website action). We cannot draw any conclusions about the identity of website visitors from the data collected.

You can view TikTok’s privacy policy at https://www.tiktok.com/legal/page/eea/new-privacy-policy/de-DE.

hellocharles

You can contact us and start a conversation via WhatsApp. We are responsible within the meaning of Art. 4 No. 7 GDPR for subsequent data processing in connection with WhatsApp. To offer and use WhatsApp, we use the software solution of Charles GmbH, Gartensstr. 86-87, 10115 Berlin, as part of a data processing agreement. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API, with the result that no other third parties or WhatsApp within the scope of our responsibility have access to your communication content.

The use of WhatsApp is subject solely to the agreements you have made with WhatsApp. In accordance with WhatsApp's terms of use, we have your telephone number and username when you contact us. We use this and other information you provide to recognize you and your preferences and to respond to your WhatsApp messages. The legal basis here is your consent to be contacted in accordance with Art. 6 Para. 1 lit. a GDPR. We will also send you newsletters via WhatsApp if you have given us your consent to do so. You also have the option of using WhatsApp to put together your shopping cart. In this case, data processing is based on Art. 6 Para. 1 lit. b GDPR.

You can revoke your consent at any time with effect for the future. According to the GDPR, you also have the right to information, correction, transferability and deletion of your personal data as well as the right to restrict or object to certain processing. You also have the option of complaining to the supervisory authority responsible for you.

For further information please refer to our data processors:

Charles GmbH: https://www.hello-charles.com/c-com-blog/whatsapp-newsletters .

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea .

Okendo

If you have given us your express consent to do so during or after your order in accordance with Art. 6 Paragraph 1 Letter a of GDPR, we will transmit your email address to Okendo, 100 Harris Street, Pyrmont, New South Wales 2009, Australia ( https://www.okendo.io/ ) so that they can send you a review reminder by email. This consent can be revoked at any time by sending a message to the contact option described in the imprint or directly to Okendo Pty Ltd.

Klar Insights GmbH

We use technology from Klar Insights GmbH (Marktstr. 18, 80802 Munich, Germany) on this website to collect data for marketing purposes. Klar processes this data in Germany and the Netherlands on the basis of the use of cookies for marketing purposes in accordance with Art. 6 Para. 1 lit. (a) GDPR and based on the user's consent.

The data is used to create anonymized usage profiles. In addition to the cookies, a fingerprint is created to identify the usage profile.

The data will not be collected without the user's prior consent and the user will not be identified. Consent can be revoked at any time using the following link: https://september.durchsichtig.xyz/donottrack/me

ABlyft

We conduct A/B tests to analyze different versions of a specific website and thereby improve the page design. ABlyft, a web analysis service from Conversion Expert GmbH, is used for this purpose. ABlyft uses cookies. The information generated by cookies about the use of our website is usually transferred to an ABlyft server in Germany and stored there.

Your IP address will not be stored (even shortened or hashed), nor will a user ID be stored. On behalf of the operator of this website, ABlyft will use aggregated data to evaluate the non-personal use of the website and to compile reports on website activities.

Provider: ABlyft is a service of Conversion Expert GmbH, Zeppelinring 52c, 24146 Kiel, Germany ( https://ablyft.com )

Purpose of tracking: ABlyft collects information about user behavior in order to improve the user-friendliness of the website.

Processing of personal data: No personal data is stored in or transferred to the platform. Data is stored anonymously and in aggregated form.

Storage period: User data (IDs etc.) is not stored.

Possibility to prevent processing (opt-out): You can object to the use of ABlyft at any time by clicking on the following link: https://jacks-beautyline.com/?ablyft_opt_out=true .

Data transfer to third countries? No

Klaviyo

We use Klaviyo to provide our newsletter. This service is offered by Klaviyo, Inc., 125 Summer Street, Boston MA, 02111, USA. This service can be used to organize and analyze the sending of newsletters. The data entered to receive the newsletter is stored on the service's servers. Klaviyo can be used to analyze interactions with the newsletter. In addition, conversion rates can be determined and newsletter users can be categorized in order to adapt the newsletter to different target groups. The legal basis for the processing is Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG. Consent can be revoked at any time by unsubscribing from the newsletter. The legality of the processing that has already taken place remains unaffected by any revocation. We also use other email services from Klaviyo to fulfill our contractual services and customer management. The legal basis for this is Art. 6 Para. 1 lit. b GDPR. The data will be deleted at the end of the contract between us and Klaviyo, unless the website visitor revokes his/her consent beforehand. If this is the case, the data will be deleted from the distribution list. When data is transferred to the USA, the standard contractual clauses (SCC) of the EU Commission apply. This contract text can be viewed here: https://www.klaviyo.com/privacy/dpa .

Further details: https://www.klaviyo.com/legal/privacy/privacy-notice .

Calendly

In order to be able to make an appointment with us, we integrate the functions of Calendly on our website. This service is offered by Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA. The data requested for this purpose is used for the planning, implementation and follow-up of the appointment and stored on Calendly servers. Calendly uses cookies to collect and store data on our website. These cookies are only set with your consent. You can revoke and manage your consent at any time in our cookie consent tool. The legal basis for this is Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TDDDG, insofar as this consent includes access to information on the user's end device or the storage of cookies within the meaning of the TDDDG. In addition, the legal basis for the use of Calendly is Art. 6 Para. 1 lit. f GDPR, as we have a legitimate interest in communicating directly with customers, potential customers and other interested parties and processing inquiries immediately and as quickly as possible. The data will be stored until the person concerned requests deletion, revokes consent to storage or the purpose for storage no longer applies. Mandatory legal provisions on retention periods remain unaffected. When data is transferred to the USA, the EU Commission's standard contractual clauses (SCC) apply.

Further information can be found here:

https://calendly.com/de/pages/privacy

https://calendly.com/pages/dpa

Clarity

We use the Clarity service on our website, an analysis tool from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to better understand the experiences of our users and to optimize the offering on this website. Clarity's technology helps us to gain a better understanding of the experiences of our users, for example how much time they spend on which pages, how far they scroll and which links or areas are clicked on particularly often. Clarity works with cookies and other technologies to collect information about usage behavior and corresponding end devices. For this purpose, personal data is processed, in particular the IP address of the device (recorded and stored exclusively in anonymized form). In addition, screen size, device type, information about the browser used and location (only the country) are recorded. Clarity stores this information in a pseudonymized usage profile, the storage period is one year. This is done on the basis of your consent, which you can revoke at any time. The information is not used by Clarity or us to identify individual users or combined with other data about individual users. For more information, see Microsoft’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement .

Cloudfare

We use the "Content Delivery Network" Cloudflare on this website, a service provided by Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA (hereinafter "Cloudflare"). The service is used to optimize loading times when opening our website and thus improve the use of our website by you and other users. The service also helps us protect our website from attacks (e.g. DDoS and bot attacks).

As part of the service, the data flow between your browser and our website is routed through the Cloudflare network. Cloudflare processes IP addresses, device information and log data (e.g. time and date of access) and user interaction with our website. Cloudflare also uses cookies for this purpose.

The data processing serves our legitimate interest in accordance with Art. 6 (1) (f) GDPR to optimize our website offering and thus improve the user experience. We also have a legitimate interest in protecting our website from malicious attacks and ensuring the functionality of the website.

Cloudflare’s privacy policy can be found here: https://www.cloudflare.com/de-de/privacypolicy/ .

Criteo

This website uses features from Criteo, a JavaScript tag that Criteo uses to track the behavior of users when browsing its website. The provider is Criteo SA, 32 Rue Blanche, 75009 Paris (hereinafter "Criteo").

Criteo is used to show you interest-based advertisements within the Criteo advertising network. Your interests are determined based on your previous usage behavior. For example, Criteo records which products you have viewed, put in your shopping cart or purchased. You can find further details on the data collected by Criteo here: https://www.criteo.com/de/privacy/how-we-use-your-data/ .

In order to show you interest-based advertising, we or other Criteo partners must be able to recognize you. For this purpose, a cookie is stored on your device or a comparable identifier is used that links your user behavior with a pseudonymous user profile. You can find details in Criteo's privacy policy at: https://www.criteo.com/de/privacy/ .

Your personal data and the Criteo cookies stored in your browser are stored for a maximum of 13 months from the date of collection.

Criteo is used in the interest of targeted advertising measures. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Criteo and we are joint controllers within the meaning of Art. 26 GDPR. A joint processing agreement has been concluded between Criteo and us, the essential contents of which Criteo describes at the following link: https://www.criteo.com/de/privacy/how-we-use-your-data/ .

LoyaltyLion

We use the LoyaltyLion service from LoyaltyLion Ltd., 20 Farringdon Street, London , UK, on our website to analyze customer data and attract new customers. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in the LoyaltyLion Ltd. privacy policy at https://loyaltylion.com/privacy.

Wishlist King

We use the Wishlist King service from Scope Digital Ventures Ltd., 71 Lower Baggot Street, Dublin, Ireland on our website to analyze customer behavior and send reminder emails. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in Wishlist King's privacy policy at https://www.appmate.io/legal/privacy-policy.

Ask Stella AI

We use the Stella AI service from Woow Club GmbH, Pettenkoferstraße 4E, 10247 Berlin on our website to analyze the shopping behavior of customers and to personalize it using artificial intelligence. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in the Ask Stella AI privacy policy at https://askstella.io/privacy .

Hive

We use the Hive service from Hive Technologies GmbH, Rosenthaler Straße 36, 10178 Berlin on our website to optimize the ordering and delivery process. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, which you can revoke at any time. You can find more information in Hive's privacy policy at https://www.hive.app/privacy-policy.

Unplinkly Digital Downloads

We use the Unplinkly Digital Downloads service from Stratoware Pte Limited, 20 Collyer Quay, Singapore 049319, Singapore on our website to use it as a digital product platform. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in Hive's privacy policy at https://www.uplinkly.com/data-processing-addendum/.

EasyGift

We use the EasyGift service from FiftyPoint6 Ltd., 84 Eccleston Square, Pimlico, London, UK, on our website to manage shopping cart management. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in EasyGift's privacy policy at https://506.io/easygift/privacy .

Fast Bundle

We use the Fast Bundle service on our website to put together and offer product packages for the customer during the ordering process. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in Fast Bundle's privacy policy at https://fastbundle.co/privacypolicy/ .

Pathway

We use the Pathway service of pathway solutions GmbH, Alstertwiete 3, 20099 Hamburg, on our website to process invoicing. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, which you can revoke at any time. You can find more information in Pathway's privacy policy at https://www.pathway-solutions.de/pages/datenschutzerklaerung.

Tolstoy

We use the Tolstoy service from Tolstoy Ltd., 2-3 Bard Road, London, UK, on our website to embed video media on the website. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, which you can revoke at any time. You can find more information in Tolstoy's privacy policy at https://www.gotolstoy.com/privacy-policy.

Stocklist Store Locator

We use the Stocklist service from Nitra LLC, 285 Fulton St, New York, United States, on our website to bundle information about stores. Personal data is processed for this purpose. This is done on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you can revoke at any time. You can find more information in Stocklist's privacy policy at https://stockist.co/privacy.

Payments:Credit check

For payment methods where we make advance payments (e.g. purchase on account), we reserve the right to carry out a credit check. The data entered is transmitted to a credit agency for this purpose. This data is used to determine how likely a payment default is to occur. If the risk of payment default is excessive, the payment method in question can be refused. If the request is related to the performance of a contract or is necessary to fulfill pre-contractual obligations, the legal basis for processing this data is Art. 6 (1) (b) GDPR. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 (1) (f) GDPR in order to prevent payment defaults.

VISA

We use VISA on this website. VISA is a payment service provider. This service is offered by Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, Great Britain. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. When data is transferred to the USA, the standard contractual clauses (SCC) of the EU Commission apply.

Further details: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html .

Mastercard

We use Mastercard on this website. Mastercard is a payment service provider. This service is offered by Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contractual and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. Mastercard can transmit the data to the parent company in the USA. Mastercard has Binding Corporate Rules (BRaUl) for this purpose.

Further details:

https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf

https://www.mastercard.de/de-de/datenschutz.html

Shopify Payment

This website uses Shopify Payment. Shopify Payment is a payment service provider. This service is offered by Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contractual and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details: https://www.shopify.com/de/legal/datenschutz .

Sofortüberweisung

We use Sofortüberweisung on this website. Sofortüberweisung is a payment service provider. This service is offered by Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. For this purpose, the PIN and a valid TAN are transmitted to Sofort GmbH, which logs into the online banking account. The account balance is checked and the corresponding transfer is carried out. In addition, sales, the credit limit of the overdraft facility and the existence of other accounts and their account balances are queried. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details:

https://www.sofort.de/datenschutz.html

https://www.klarna.com/sofort/

Paydirekt

We use Paydirekt on this website. Paydirekt is a payment service provider. This service is offered by Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. In addition, further data such as the delivery address and the individual items in the shopping cart are transferred. Paydirekt then authenticates the transaction using the account stored with the bank. The website operator has no access to the account data. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details:

https://www.paydirekt.de/agb/index.html

Klarna

We use Klarna on this website. Klarna is a payment service provider. This service is offered by Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details:

https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf

https://www.klarna.com/de/datenschutz/ .

Google Pay

We use Google Pay on this website. Google Pay is a payment service provider. This service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details: https://policies.google.com/privacy .

Apple Pay

We use Apple Pay on this website. Apple Pay is a payment service provider. This service is offered by Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process.

Further details: https://www.apple.com/legal/privacy/de-ww/ .

PayPal

We use PayPal on our website. PayPal is a payment service provider. This service is offered by PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contract and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. When data is transferred to the USA, the standard contractual clauses (SCC) of the EU Commission apply.

https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full .

Stripe

We use Stripe on this website. Stripe provides technology for operating online payment systems. This service is offered by Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Attention. For the purpose of payment processing, the payment data of the website visitor(s) is processed by Stripe as soon as a contractual relationship is established via this website. Stripe's respective contract and data protection provisions apply to the respective transaction. Stripe also uses cookies to collect the data. These cookies are only set with your consent. Consent can be revoked at any time. The legal basis for this is Art. 6 Para. 1 lit. a GDPR. Otherwise, the legal basis for processing by Stripe is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of contractual obligations. We also have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. The data will be deleted as soon as it is no longer required for data processing.

Further details: https://stripe.com/de/privacy/

American Express

We use American Express on this website. American Express is a payment service provider. This service is offered by American Express Europe SA, Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (“American Express”). For the purpose of processing payments, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contractual and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. American Express can transmit the data to the parent company in the USA. American Express has Binding Corporate Rules for this purpose.

Further details: https://www.americanexpress.com/en-iec/company/legal/privacy-centre/binding-corporate-rules/ .

Union Pay

We use Union Pay on this website. Union Pay is a payment service provider. This service is offered by Union Pay International Co., Ltd., German Branch, An der Welle 4, 60322 Frankfurt (“Union Pay”). For the purpose of payment processing, the payment data of the website visitor is processed by the payment service provider as soon as a purchase is made via this website. The respective contractual and data protection provisions of the payment service provider apply to the respective transaction. The legal basis is Art. 6 Para. 1 lit. b GDPR. The data is processed for the purpose of (pre-)contractual obligations. In addition, we have a legitimate interest in processing this data within the meaning of Art. 6 Para. 1 lit. f GDPR in order to ensure a fast and reliable payment process. Union Pay can transmit the data to the parent company in China. Union Pay has Binding Corporate Rules for this purpose.

Further details: https://www.unionpayintl.com/en/privacyNotice/ .

Shop Pay

On this website we offer payment with Shop Pay, among other options. The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shop Pay”).

If you decide to pay with Shop Pay, Shop Pay will collect various personal data from you. You can find details about this in the Shop Pay help at https://www.shopify.com/pay and in the Shop Pay privacy policy at https://www.shopify.de/legal/datenschutz . Your data is transmitted to Shop Pay on the basis of Art. 6 Para. 1 lit. a GDPR and Art. 6 Para. 1 lit. b GDPR. You have the option of revoking your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations that have taken place in the past.

right of objection

If we process personal data as described above to protect our legitimate interests, which predominate in the context of a balancing of interests, you can object to this processing here with effect for the future . If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are reasons that arise from your particular situation.

After exercising your right of objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

Status of the data protection declaration: 05.07.2024

We reserve the right to change this privacy policy at any time with future effect.