Privacy Statement for the Lr Aloe Vera Shop
With this privacy statement, we, Naturkosmetik & Aloe Vera Beratung, would like to inform you about how we process and use your personal data as a user of our web shop (lraloevera.shop). Naturkosmetik & Aloe Vera Beratung complies with the requirements of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
1. Which personal data do we process for what purposes and on what legal basis?
Personal data include all information about an identified or identifiable natural person that you provide to us that is created by us or otherwise collected by us. In connection with the use of our web shop, we process the following personal data relating to you:
1.1 Master Data
Master data include name, telephone, fax and mobile number, email address, as well as your account details and any information provided on a voluntary basis (e.g. credit card data).
We process your master data in accordance with Art. 6 (1) (b) GDPR for the performance of the sales contract concluded with you via our web shop. Without the processing of your master data, it is not possible to conclude and perform a contract.
Furthermore, we process your master data to send you the email newsletter you have subscribed in order to inform you about news and changes within our offer. The legal basis for this is your consent pursuant to Art. 6 (1) (a) GDPR. In all other respects, we process your master data for marketing purposes, as far as we have an overriding legitimate interest in it according to Art. 6 (1) (f) GDPR.
1.2 Order data
Order data is the data relating to your the orders you have placed or cancelled, e.g. ordered articles, selected payment method and prices. We process this data in accordance with Art. 6 (1) (b) GDPR for the execution and settlement of agreed orders. In these cases, the legal basis is Art. 6 (1) (f) GDPR (legitimate interest). Without the processing of your order data, it is not possible to conclude and execute a contract. In all other respects, we process your order data for marketing purposes, as far as we have an overriding legitimate interest in it according to Art. 6 (1) (f) GDPR.
1.3 User account
To make shopping in our web shop easier, you can create a user account. In this case we save your master data and your order data (history) under your user account (“My account”). This allows you to view previous orders at any time after registration and place further orders without having to re-enter your data.
We process this data in accordance with Art. 6 (1) (b) GDPR for the provision of the user account requested by you. Without the processing of this data, the provision of the user account is not possible.
1.4 Traffic data
Traffic data includes data relating to your use of our web shop (lraloevera.shop), e.g. which sites you accessed when and for how long.
For every visit to our web shop site, the relevant data is stored anonymously in a log file. Personal data is not collected, in particular your IP address and browser properties are not collected. For plug-ins and cookies, see Para. 4 and 5. The legal basis for the processing of traffic data is in all cases our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR.
We use links to other Internet sites of us on websites and services of third parties, e.g. on social media channels like Facebook, Twitter or YouTube. The data processing of such other service providers on their websites is the sole responsibility of these third parties and their data protection information applies.
3. Cookies and Tracking
3.1 General Information
3.1.1 What are Cookies?
In order to make our websites as user-friendly as possible and to increase the relevance of our advertising for the visitors of our websites, we and our partners use so-called “cookies”. Cookies are small files that are stored on a visitor’s hard drive. They allow information to be stored for a certain period of time and to identify the visitor’s computer. This is partly done using so-called tracking pixels, which are not stored on a visitor’s hard drive but can help identify the computer in the same way as a cookie. In the following, the term “cookie” shall refer to both cookies in the technical sense and tracking pixels and similar technical methods.
3.1.2 Which cookies do we use?
We use two categories of cookies on our websites: (1) Technically necessary cookies, without which the functionality of our websites would be restricted and (2) optional analysis, targeting or advertising cookies:
(a) Technically necessary cookies
These cookies are essential to enable you to navigate on our websites and to use its functions. For example, they can be used to save the products you have placed in your shopping cart or the progress of your order process or they allow you to easily search for retailers where you can purchase our products (e.g. by displaying a map of your area). These cookies do not collect any information about you which is to be used for marketing purposes or stores the websites you have visited. These cookies are session-specific and expire after your visit to the website (session). Disabling this category of cookies would limit the functionality of all or parts of the web pages.
(b) Analysis, targeting and advertising cookies
Analysis cookies collect information about how visitors use a website in general, for example, which pages they visit most frequently and whether they receive error messages from websites. These cookies do not collect any data that can be used to identify visitors. All information collected with the help of these cookies serves exclusively to understand and improve the functionality and service of the website. We also use Google Analytics, a web analysis service of Google Inc. for analysing our websites. The information generated by Google Analytics about your use of this website is transferred to a Google server in the US and stored there. However, IP anonymization is activated on this website, which means that Google will first shorten your IP address within Member States of the European Union or in other countries that are party to the treaty on the European Economic Area.
Targeting and advertising cookies are used to tailor advertising more specifically to you and your interests. They also serve to limit how often you see the same ad, measure the effectiveness of an ad campaign and understand people’s behavior after viewing an ad. These cookies are usually placed on the pages of advertising networks with the consent of the website operator (i.e. in this case by us). They recognize that a user has visited a website and pass this information on to other companies, e.g. advertising companies, or adjust advertising accordingly. They are often linked to a website functionality provided by this company. We therefore use these cookies to link to social networks that may then use the information about your visit to tailor advertising on other websites to you and to provide the advertising networks we use with information about your visit so that, based on your browsing behavior, you can subsequently be presented with exactly the advertising that you are potentially interested in.
3.2 Google Analytics
This websites uses the functions of the web analysis service Google Analytics. Provider of these functions is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. In general, the information generated through a cookie on your use of this website is transferred to a Google server in the US and saved there.
In case the IP has been anonymized on this website, however, Google will at first shorten your IP address within the European Union member states or in other states party to the treaty of the European Economic Area. Only in exceptional cases, the full IP address will be transferred to the Google server in the US and abridged there. By order of the operator of this website, Google will use this information to analyze your use of the website, to prepare reports on the website activities and to render further services associated with the use of the website and Internet to other website operators. The IP address transmitted by your browser in the context of Google Analytics is not combined with other Google data.
Through appropriate configuration of your browser software, you may prevent these cookies from being saved; however, we would like to point out that in this case you may not be able to fully use all functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future (the opt-out only works in the browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, however, you must click this link again.
4. Right to object
You may object to the processing of data for marketing purposes at any time. This applies, in particular, to the use of your data for sending the marketing newsletter. We are then legally obliged to terminate the collection, processing and use of data.
If we process your personal data on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR, you may object to such processing at any time for reasons arising from your particular situation. In this case, please contact the officer indicated in Para. 9 We will then check whether our legitimate interest in data processing also overrides in your case or whether your interests override due to your particular situation. In the latter case, we will stop processing your data pursuant to your objection. In this case we will not be able to process existing and possible future orders.
5. Transfer to third parties
5.1 Transfer of data to Processors
In some cases, we use service providers in compliance with statutory requirements by way of order processing, i.e. on our behalf, in accordance with our instructions and under our control.
Processors are in particular technical service providers whose services we make use of for the provision of the website and practical provision of our services, e.g. service providers for software maintenance, computer centre operation and technically necessary cookies. We also use processors for the practical implementation of advertising and marketing, e.g. service providers for sending emails and analysis cookies.
In these cases, we remain the responsible data controller; the transfer and processing of personal data to or by our processors is subject to the legal basis that allows us to process the data respectively. A separate legal basis is not required.
5.2 Data transfer to third parties
Apart from the cases explained above, we will not transfer your personal data to other third parties for marketing purposes.
DHL for Delivery your package.
We take appropriate technical and organisational measures, in particular to ensure that your personal data is protected against loss, incorrect changes or unauthorized access by third parties. The measures are constantly adapted to the improved technical possibilities.
7. Contact information
Your questions and suggestions regarding data protection are very welcome and important to us. Please do not hesitate to contact us at:
Controller: Naturkosmetik & Aloe Vera Beratung, Schillerstr. 8, 70771 Leinfelden-Echterdingen (email: firstname.lastname@example.org)
Date Protection Officer Naturkosmetik & Aloe Vera Beratung, Stanislav Rurik, Schillerstrasse 8, 70771 Leinfelden-Echterdingen, Phone: +49 176 70 60 96 53, email: email@example.com
8. Storage duration
We store your personal data as long as the purpose of the storage remains and requires the storage. Your master data and order data will be stored for as long as necessary to process the order or if storage is provided for in EU and national regulations, laws or other regulations.
Data stored exclusively for marketing purposes, in particular traffic data, will be deleted unless we have a continuing legitimate interest in storing such data.
9. Your rights
According to the General Data Protection Regulation, you are entitled to information, correction, deletion and restriction of processing, to assert your right to transferability of data and your right of objection described above, and to revoke consents granted. If these rights are contingent upon conditions under the General Data Protection Regulation, however, this only applies when fulfilled.
Please use the contact details above for the assertion of your rights. When asserting your right, your identity must be proven in order to avoid providing information to unauthorized third parties.
You are also entitled to file a complaint with the competent supervisory authority. The supervisory authority responsible for us is the Baden Württemberg State Commissioner for Data Protection and Freedom of Information, P.O. Box 10 29 32 , 70025 Stuttgart, Germany. Should you have any doubts about the legality of the processing of your data, please inform us so that we can clarify this.
10. Amendments to this Privacy Statement
It may be necessary to amend the contents of this privacy statement from time to time. We therefore reserve the right to make amendments at any time. We will also publish the amended version of the data protection information here. Therefore, we advise you to read the data protection information again when you visit us next time.
Last amended November 2018