data protection

PRIVACY POLICY

§ 1 General

We only process your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases and storage periods, as well as your rights and the person responsible for your data processing. This data protection declaration only applies to our websites. If you are redirected to other websites via links on our pages, please find out about how your data is handled there.

§ 2 Data processing for contract performance

(1) Purpose of processing

The personal data you provide to us during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The processing of your data entered during the ordering process is therefore carried out for the purpose of fulfilling the contract.

If you send us an inquiry by email, via a contact form, etc. before concluding a contract, we will process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.

If you open a customer account, your data (in particular name, address, payment method, email and password) will be processed to register and create a customer login. With the stored data, you can shop with us more quickly and view your orders at any time. You can remove the account by sending us a message or using the delete function.

(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.

(3) Categories of recipients
Payment service providers, shipping service providers, hosting providers, if applicable, inventory management systems, if applicable, suppliers (dropshipping).

(4) Storage period
We store the data required to process the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.

We retain the data required under commercial and tax law for the periods specified by law, usually ten years (see Section 257 HGB, Section 147 AO).

The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that no contract will be concluded.

§ 3 Comments

(1) Purpose of processing
It is possible to write a comment. Your data (e.g. name/pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.

(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.

(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, to ensure transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.

(4) Storage period
There is no specific storage period. You can request that your comment be deleted at any time.

(5) RIGHT OF OBJECTION
You have the right to object at any time to data processing that is carried out on the basis of Art. 6 (1) (f) GDPR and does not serve direct marketing purposes, for reasons arising from your particular situation.

In the case of direct marketing, however, you can object to the processing at any time without giving reasons.

§ 4 PayPal transactions

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 5 Web analysis with Google Analytics

(1) Purpose of processing
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) Legal basis
The legal basis for this processing is Art. 6 Para. 1a) GDPR.

(3) Categories of recipients
Google and its partners.

(4) Transfer to a third country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

(5) Storage period
26 months

(6) RIGHT OF OBJECTION
You can prevent cookies from being saved by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: optout

You can also prevent the collection by setting an opt-out cookie. If you would like to prevent future collection of your data when visiting this website, please click here: Deactivate Google Analytics

§ 6 Information about cookies

(1) Purpose of processing
This website uses technically necessary cookies. These are small text files that are not permanently stored in or by your Internet browser on your computer system. These cookies enable you, for example, to put several products in a shopping cart.

Other cookies remain permanent and recognize your browser the next time you visit. These cookies allow you to permanently save your passwords for a customer account, for example.

(2) Legal basis
The legal basis for the processing is Art. 6 para. 1 a) GDPR.

You may have given your explicit consent to the use of cookies on our website as follows: This website uses cookies to provide you with the best possible functionality. More information Agree

(3) Storage period
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a lifespan that varies from a few minutes to several years.

(4) Right of withdrawal
If you do not wish these cookies to be saved, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a restriction of the functionality of our website.

You can revoke your consent to permanent storage by deleting the stored cookies via your browser.

§ 7 Newsletter

(1) Purpose of processing
When you register for the newsletter, your email address will be used for advertising purposes, i.e. as part of the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot identify which specific person clicked. You have expressly given the following consent separately or, if applicable, during the ordering process: Subscribe to the newsletter.

(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.

(3) Categories of recipients
newsletter delivery provider, if applicable

(4) Storage period
Your email address will only be stored for the duration of your registration for the newsletter.

(5) Right of withdrawal
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Unsubscribe link in the newsletter / Unsubscribe from newsletter and Subscribe to newsletter in the online shop / Unsubscribe from newsletter

§ 8 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

1. Right to information
In accordance with Art. 15 GDPR, you can request information about your personal data processed by us.

2. Right to rectification
If the information concerning you is no longer correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

3. Right to erasure
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

4. Right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.

5. Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller.

6. Right to revoke the declaration of consent under data protection law
According to Art. 7 Paragraph 3 GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation.

7. Right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, place of work or place of the alleged infringement) under Art. 77 GDPR.

Please also note your right of objection according to Art. 21 GDPR:

a) General: reasoned objection required

If the processing of personal data concerning you takes place

- to protect our overriding legitimate interest (legal basis according to Art. 6 para. 1 f) GDPR) or

- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),

You have the right to object to processing at any time for reasons related to your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct advertising: simple objection is sufficient

If the personal data concerning you are processed for direct marketing purposes, you have the right to object to such processing at any time and without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Person responsible for data processing:
Institute for Natural Cosmetics Prof. Kruck GmbH & Co. KG, Prof. Dr. Peter Kruck
Königsbergerstr. 43
51469 Bergisch Gladbach
Phone: +49 (0) 2202-459612
info@myrto-naturalcosmetics.de

Created and continuously updated by janolaw AG.