data protection

We have prepared this privacy policy (version 03.09.2019-311114729) to explain to you in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679, which information we collect, how we use data and what options you have as a visitor to this website ,

Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to make the most important things as simple and clear as possible.

Automatic data storage

When you visit websites today, certain information is automatically created and stored, including on this website.

If you visit our website as it is now, our web server (computer on which this website is stored) automatically saves data such as

the address (URL) of the website you are visiting

Browser and browser version

the operating system used

the address (URL) of the previously visited page (referrer URL)

the host name and IP address of the device from which it is accessed

Date and Time

in files (web server log files).

As a rule, web server log files are stored for two weeks and then deleted automatically. We do not disclose this information, but we can not rule out that it will be seen in the event of unlawful behavior.

The legal basis, according to Article 6 paragraph 1 f DSGVO (lawfulness of processing), is that there is a legitimate interest in enabling the error-free operation of this website by capturing web server log files.

cookies

Our website uses HTTP cookies to store user-specific data.

Below, we explain what cookies are and why they are used to help you better understand the following privacy statement.

What exactly are cookies?

Whenever you surf the Internet, use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most web pages store small text files in your browser. These files are called cookies.

One thing can not be dismissed: cookies are really useful helpers. Almost all websites use cookies. More precisely, it is HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored by our website on your computer. These cookie files are automatically stored in the cookie folder, the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser will return the "user-related" information to our site. Thanks to the cookies, our website knows who you are and offers you your usual standard setting. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.

There are both first-party cookies and third-party cookies. First-party cookies are created directly from our site, and third-party cookies are created by partner websites (eg Google Analytics). Each cookie is to be evaluated individually, since each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies also can not access information from your PC.

For example, cookie data may look like this:

Name: _ga

Expiration time: 2 years

Use: Differentiation of website visitors

Exemplary value: GA1.2.1326744211.152311114729

A browser should support the following minimum sizes:

A cookie should be able to contain at least 4096 bytes

Per domain at least 50 cookies should be stored

In total, at least 3000 cookies should be stored

What types of cookies are there?

The question of which cookies we use in particular depends on the services used and will be clarified in the following sections of the privacy policy. At this point we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Absolutely necessary cookies

These cookies are necessary to ensure basic functionality of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then continues surfing on other sites and later goes to the checkout. These cookies do not delete the shopping cart, even if the user closes his browser window.

Functional cookies

These cookies collect information about the user behavior and whether the user gets any error messages. In addition, these cookies also measure the load time and behavior of the website on different browsers.

Targeted cookies

These cookies make for better usability. For example, stored locations, font sizes or form data are stored.

Advertising cookies

These cookies are also called targeting cookies. They are used to provide the user with customized advertising. This can be very convenient, but also very annoying.

Usually, the first time you visit a webpage, you are asked which of these cookie types you want to allow. And of course, this decision is also stored in a cookie.

How can I delete cookies?

You decide for yourself how and whether you want to use cookies. Regardless of which service or which website the cookies come from, you always have the option of deleting cookies, only partially approving or deactivating them. For example, you may block third-party cookies but allow all other cookies.

If you want to know which cookies have been saved in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate, and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you basically do not want to have cookies, you can set up your browser so that it always informs you when a cookie is to be set. So you can decide with each single cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best if you search the instructions in Google with the terms "delete cookies Chrome" or "disable cookies Chrome" in the case of a Chrome browser or exchange the word "Chrome" against the name of your browser, eg Edge, Firefox, Safari.

What about my privacy?

Since 2009 there are the so-called "cookie guidelines". It states that the storage of cookies requires the consent of the website visitor (ie you). Within the EU countries, however, there are still very different reactions to these guidelines. In Germany, the cookie guidelines were not implemented as national law. Instead, the implementation of this directive was largely in § 15 paragraph 3 of the Telemedia Act (TMG).

If you want to know more about cookies and do not shy away from technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called "HTTP State Management Mechanism".

Storage of personal data

Personal data that you submit to us electronically on this website, such as name, e-mail address, address or other personal information in the course of submitting a form or comments in the blog, will be transmitted by us together with the time and IP address. Address used only for the purpose specified, kept safe and not disclosed to third parties.

We only use your personal data for communication with visitors who expressly request contact and for the processing of the services and products offered on this website. We will not disclose your personal information without consent, but we can not rule out that it will be seen in the event of unlawful behavior.

If you send us personal data by e-mail - outside of this website - we can not guarantee secure transmission and protection of your data. We recommend that you never send confidential information via email.

The legal basis under Article 6 (1a) of the GDPR (lawfulness of processing) is that you give us consent to the processing of the data you enter. You can revoke this consent at any time - an informal e-mail is sufficient, you will find our contact details in the imprint.

Rights according to the General Data Protection Regulation

According to the provisions of the GDPR, you have the following rights in principle:

Right to rectification (Article 16 GDPR)

Right to cancellation ("Right to be forgotten") (Article 17 GDPR)

Right to restriction of processing (Article 18 GDPR)

Right to Notification - Obligation to Notify in Connection with Correction or Deletion of Personal Data or Restriction of Processing (Article 19 GDPR)

Right to data portability (Article 20 GDPR)

Right of objection (Article 21 GDPR)

Right not to be subjected to a decision based solely on automated processing - including profiling - (Article 22 GDPR)

If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

TLS encryption with https

We use https to transmit data securely on the Internet (data protection through technology design Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data. You acknowledge the use of this safeguarding of the data transfer at the small lock symbol in the upper left corner of the browser and the use of the scheme https (instead of http) as part of our Internet address.

Google Fonts Privacy Policy

We use Google Fonts from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.

You do not need to sign in or have a password to use Google fonts. Furthermore, no cookies are stored in your browser. The files (CSS, fonts) are requested through the Google domains fonts.googleapis.com and fonts.gstatic.com. According to Google, the requests for CSS and fonts are completely separate from all other Google services. If you have a Google Account, you do not need to worry about your Google Account information being sent to Google while using Google Fonts. Google records the use of CSS (Cascading Style Sheets) and the fonts used and stores this data securely. As the data storage looks exactly, we will look at the details.

What are Google fonts?

Google Fonts (formerly Google Web Fonts) is an interactive directory of over 800 fonts that Google LLC provides for free use.

Many of these fonts are published under the SIL Open Font License, while others have been released under the Apache license. Both are free software licenses. Thus, we can use them freely without paying royalties.

Why do we use Google fonts on our website?

With Google Fonts we can use fonts on our own website and do not have to upload them on our own server. Google Fonts is an important building block to keep the quality of our website high. All Google fonts are automatically optimized for the Web, and this saves data volume and is a great advantage especially for mobile device use. When you visit our page, the low file size ensures fast loading time. Furthermore, Google fonts are so-called secure web fonts. Different image synthesis systems (rendering) in different browsers, operating systems and mobile devices can lead to errors. Such errors can partially distort texts or entire websites visually. Thanks to the fast Content Delivery Network (CDN), there are no cross-platform issues with Google Fonts. Google Fonts supports all major browsers (Google Chrome, Mozilla Firefox, Apple Safari, Opera) and works reliably on most modern mobile operating systems, including Android 2.2 and iOS 4.2 (iPhone, iPad, iPod).

So we use the Google fonts to make our entire online service as beautiful and consistent as possible. According to Art. 6 para. 1 lit. F DSGVO already constitutes a "legitimate interest" in the processing of personal data. In this case, "legitimate interest" means legal as well as economic or non-material interests that are recognized by the legal system.

What data is stored by Google?

When you visit our website, the fonts will be reloaded via a Google server. This external call sends data to the Google servers. Google also recognizes that you or your IP address is visiting our website. The Google Fonts API is designed to reduce the collection, storage and use of end-user data to what is needed for efficient font delivery. Incidentally, API stands for "Application Programming Interface" and serves, among other things, as a data transmitter in the software area.

Google Fonts securely stores CSS and font requests on Google and is thus protected. Through the collected usage figures, Google can determine the popularity of the fonts. Google publishes the results on internal analysis pages, such as Google Analytics. In addition, Google also uses data from its own web crawler to determine which websites use Google fonts. This data is published in Google Fonts' BigQuery database. BigQuery is a Google web service for companies that want to move and analyze large amounts of data.

It should be kept in mind, however, that any Google Font request will also automatically transfer information such as IP address, language settings, browser screen resolution, browser version, and browser name to the Google servers. Whether this data is also stored, is not clear or is not clearly communicated by Google.

How long and where is the data stored?

For a day, Google stores requests for CSS assets on its servers, which are mainly located outside the EU. This allows us to leverage the fonts using a Google style sheet. A style sheet is a style that allows you to easily and quickly change the design or font of a web page, for example.

The font files are stored at Google for one year. Google is pursuing the goal of generally improving the load time of websites. If millions of web pages refer to the same fonts, they will be cached after the first visit and immediately appear on all other later visited web pages. Sometimes Google updates font files to reduce file size, increase language coverage, and improve design.

How can I delete my data or prevent data storage?

Data that Google stores for a day or a year can not simply be deleted. The data is automatically transmitted to Google when the page is viewed. To prematurely delete this information, you must contact Google Support at https://support.google.com/?hl=en&tid=311114729. In this case, you prevent data storage only if you do not visit our site.

Unlike other web fonts, Google allows us unrestricted access to all fonts. So we can access unlimited fonts and get the most out of our website. More about Google Fonts and other questions can be found at https://developers.google.com/fonts/faq?tid=311114729. Although Google addresses privacy issues, it does not include detailed information about data storage. It is relatively difficult (almost impossible) for Google to get really accurate information about stored data.

You can also see what data Google collects and what this data is used for at https://www.google.com/intl/en/policies/privacy/.

Google Maps Privacy Policy

We use Google Maps from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.

By using the features of this card, data will be transmitted to Google. To see what data Google collects and what this data is used for, visit https://www.google.com/intl/en/policies/privacy/.

Source: Created with the privacy generator of AdSimple in cooperation with hashtagbeauty.de