Data protection declaration of NuGenesis Nails Germany

 

Thank you for your interest in NuGenesis Nails Germany and our online shop nugenesisnails.de. We take the protection of personal data very seriously and always process it in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation. With this data protection declaration we would like to inform you fully about the type, scope and purpose of the personal data processed by us and your rights as a data subject.

 

General information

Our services are intended for the general public and not for children. We do not knowingly collect personal information from users who are considered children according to the respective national legislation.

 

1. Access data and hosting

You can visit our website without providing any personal information.

When you visit our website, the browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information / access data is recorded without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • date and time of access,
  • Name and URL of the file accessed,
  • Website from which access is made (referrer URL),
  • The browser used and, if applicable, the operating system of your computer and the name of your access provider.

This data is processed exclusively for the purpose of ensuring a smooth connection to the website and improving our offer. According to Art. 6 Para. 1 Clause 1 lit. f GDPR to protect our legitimate interests, which outweigh our interests, in the correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

 

2. Collection and storage of personal data for contract processing and opening a customer account

We collect personal data if you provide us with your data as part of your order, opening a customer account or registering or contacting us using the contact form or email. Mandatory fields are always marked as such, since in these cases we need the data to process the contract or to process your contact or open the customer account / registration and without their specification the order and / or opening of a customer account cannot be completed. Which data is collected can be seen from the respective input forms.

We use the data provided by you in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR for contract processing and processing your inquiries.

After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the tax and commercial retention periods. Your customer account can be deleted at any time and either by sending a message to the contact option described below or using a function provided in the customer account.

 

3. Data transfer

To fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select in your order process with us, we will forward the necessary payment data collected for this to the payment institution, the payment service provider commissioned by us or the selected payment service provider to process payments. In some cases, data is collected by the payment service providers themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.

In addition, we only transfer your personal data to third parties if the transmission is necessary to fulfill our contractual obligations to you and this is evidently done with or together with another provider (e.g. in the case of cooperations) are otherwise legally authorized or obliged, or you have given us the appropriate consent.

In certain cases, we also use external service providers or affiliates who are commissioned by us to process data for us in accordance with instructions. Such service providers are contractually obliged by us as processors in accordance with the strict requirements of the GDPR and may not use your data for any other purpose. Order processors we use provide us with the following services in particular: payment service (s), printers, hosting, debt collection / receivables management, lettershop and newsletter dispatch.

The transfer of data to processors takes place on the basis of Art. 28 Para. 1 GDPR, alternatively based on our legitimate interest in the economic and technical advantages associated with the use of specialized processors, Art. 6 Para. 1 lit. f GDPR.

If we are legally obliged to do so or if this is permitted by data protection law, we transmit personal data to authorities, for example the police or public prosecutor (Art. 6 Para. 1 lit. c GDPR). This data is passed on based on our legitimate interest in combating abuse, prosecuting crimes and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data do not prevail, Art. 6 para. 1 lit. . f GDPR.

 

4. Email advertising

E-mail advertising with registration for the newsletter
If you have subscribed to our newsletter and, in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO have expressly consented, we use your e-mail address or the data separately provided by you to send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of any other data is voluntary and is used to address you personally. We use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to click the corresponding link to confirm that you want to receive newsletters in the future. When registering for the newsletter, we save your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your email address at a later date. You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described below or by clicking the link at the end of each newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

E-mail advertising without registering for the newsletter and your right to object
If we receive your e-mail address in connection with the sale of a product or service and you have not objected to it, we reserve the right to regularly offer you products similar to yours on the basis of Section 7 (3) UWG Send products already purchased from us by email. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in addressing our customers in advertising. You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided in the advertising email, without incurring any costs other than the transmission costs according to the basic tariffs.

The newsletter or e-mail advertising is sent as part of processing on our behalf by a service provider to whom we pass on your e-mail address.

This service provider is located within a country of the European Union or the European Economic Area.

 

5. Use of data in payment processing

Identity and credit check when choosing Klarna payment services
If you choose Klarna's payment services, we ask for your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO that we may transmit the data necessary for processing the payment and an identity and credit check to Klarna. In Germany, the credit bureaus mentioned in Klarna's data protection declaration can be used for identity and credit checks. Klarna uses the information it receives about the statistical probability of a payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact details below. As a result, we may no longer be able to offer you certain payment options. You can also withdraw your consent to this use of personal data at any time by Klarna.

PayPal
We have integrated the payment option PayPal on our website. PayPal is an online payment service provider of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal also has the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services. If the person concerned selects "PayPal" as the payment option during the ordering process in our online shop, the data of the person concerned is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of personal data required for payment processing. The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number or other data that are necessary for payment processing. In order to process the purchase contract, personal data related to the respective order are also necessary. The purpose of the transmission of the data is to process payments and prevent fraud. We will transmit PayPal personal data in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfill the contractual obligations or the data are to be processed in the order. The data subject has the option of withdrawing their consent to the handling of personal data at any time from PayPal. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing. PayPal's current data protection regulations can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

 

6. Cookies and web analysis

In order to make visiting our website attractive and to enable or improve the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which predominate in the context of a balance of interests, in a needs-based design and statistical evaluation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). Information is stored in the cookie, which results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity.

The duration of the storage can be found in the overview in the cookie settings of your web browser. You can configure your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is created. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

However, the complete deactivation of cookies can mean that you cannot use all functions of our website.

Use of Google (Universal) Analytics for web analysis
We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/ ) (1600 Amphitheater Parkway, Mountain View, CA 94043), for the purpose of designing and continuously optimizing our pages. USA; hereinafter "Google"). This serves to protect our legitimate interests, which predominate in the context of a balance of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

Google (Universal) Analytics uses methods that enable an analysis of your use of the website.

In this context, pseudonymised usage profiles are created and cookies (see under 6) are used. The information generated by the cookie about your use of this website such as

  • browser type / version,
  • operating system used,
  • referrer URL (the page previously visited),
  • host name of the accessing computer (IP address),
  • Time of the server request are transferred to a Google server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of this website.

By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data. After we have ceased to use Google Analytics and have ceased to use it, the data collected in this context will be deleted.

Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de .

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is placed on your device. If you delete your cookies, you must click the link again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de) .

 

7. Advertising through marketing networks

Google AdWords remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising using a pseudonymous CookieID and on the basis of the pages you visit. This serves to safeguard our legitimate interests in an optimal marketing of our website, which predominate in the context of a balance of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. After we have ceased to use Google AdWords Remarketing and the use of it ends, the data collected in this context will be deleted.

Any further data processing will only take place if you have agreed with Google that your web and app browser history will be linked by Google to your Google account and information from your Google account will be used to personalize the advertisements that you place on the web see. If you are logged in to Google in this case while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data to Google Analytics data in order to form target groups.

Google AdWords Remarketing is an offer from Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to this agreement between the USA and the European Commission, the latter has determined an appropriate level of data protection for companies certified under the Privacy Shield.

You can deactivate the remarketing cookie via this link. You can also find out about the setting of cookies from the Digital Advertising Alliance and make settings for this.

 

8. Social media plug-ins

We do not use social media plug-ins when visiting the website.

 

9. Data security

We use the widespread SSL (Secure Socket Layer) procedure in connection with the highest encryption level supported by your browser. As a rule, this is a 256 bit encryption. You can tell whether a single page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

10. Contact details and data subject rights

As a data subject, you have the following rights:

  • according to Art. 15 GDPR, we have the right to receive information from us at any time free of charge as to whether personal data about you are being processed by us and, more specifically, which data is stored about them and can request a copy of the stored data;
  • according to Art. 16 GDPR, the right to immediately request the correction of incorrect or incomplete personal data stored by us;
  • according to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
    • to exercise the right to freedom of expression and information;
    • to fulfill a legal obligation;
    • for reasons of public interest or
    • is necessary to assert, exercise or defend legal claims. Please note that there are statutory retention requirements and we cannot therefore completely delete your data in every case. In this case, your data will be marked with the aim of restricting their future processing;
  • according to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, as far as
    • the accuracy of the data is disputed by you;
    • the processing is unlawful, but you refuse to delete it;
    • we no longer need the data, but you need it to assert, exercise or defend legal claims, or
    • you have objected to processing in accordance with Art. 21 GDPR;
  • according to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible;
  • according to Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data as well as revocation of any given consent or objection to a specific use of data, please contact us.

 

Right to object

Insofar as we process your personal data to protect our legitimate interests, which outweigh our interests, as explained above, you can object to this processing with effect for the future.

If the processing takes place for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing takes place for other purposes, you have a right to object only if there are reasons that arise from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of Serves legal claims.

This does not apply if the processing is done for the purposes of direct marketing. Then we will no longer process your personal data for this purpose.

If you would like to exercise your right to object, simply send an email to info@nugenesisnails.de.

 

11. Up-to-dateness and change of this data protection declaration

This data protection declaration is currently valid and was last updated in January 2020.

Due to the further development of our website and offers about it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website.