Data protection
I. Name and address of the responsible party
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
La Schiller Perfume and Cosmetics Online Shop
Village Street 59
26180 Rastede
Germany
Telephone: 0441 35099593
Website: la-schiller.de
Email: info@la-schiller.de
Managing Director: Martina Schiller
II. General information on data processing
We collect and use our users' personal data only to the extent necessary for providing a functional website and our content and services. The collection and use of our users' personal data is generally only carried out with the user's consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.
Information on the scope, purpose, and legal basis of the processing of personal data can be found in the respective chapters of this privacy policy.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
III. Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
a) Information about the browser type and version used
b) The user's operating system
c) The user's internet service provider
d) The user's IP address
e) Date and time of access
f) Websites from which the user's system accessed our website
g) Websites accessed by the user's system via our website
The data is also stored in our system's log files. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
The data is stored in log files to ensure the website's functionality. We also use the data to optimize the website and to ensure the security of our IT systems. The data is not used for marketing purposes. This constitutes our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this occurs after a maximum of seven days. Storage beyond this period is possible. In this case, the users' IP addresses are deleted or anonymized so that it is no longer possible to identify the requesting client.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.
IV. Use of Cookies
Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. We use cookies to make our website more user-friendly. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.
Our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f) GDPR lies in the aforementioned purposes.
The following data is stored and transmitted in the cookies:
a) Language settings
b) Items in a shopping cart
c) Login information
We also use cookies on our website that allow us to analyze users' browsing behavior (third-party cookies). Further information on the scope, purpose, legal basis, and opt-out options can be found in the relevant sections of this privacy policy.
Cookies are stored on the user's computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, some of its functions may no longer be fully available. The transmission of Flash cookies cannot be prevented via browser settings, but can be blocked by changing the settings of the Flash Player.
Please note that even after adjusting your browser settings accordingly, you may be notified individually about the setting of cookies and thus be able to decide whether to accept them.
You can find help in your browser's help menu at the following links:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/kb/ph21411?locale=de_DE
Opera:
http://help.opera.com/Windows/10.20/de/cookies.html
V. Registration and order processing
If you wish to place an order in our online shop, you will need to provide your personal data, which we require to process your order. We will process the data you provide to fulfill your order.
You also have the option to register by providing personal data. This data is entered into an input form, transmitted to us, and stored. The specific data collected is detailed in the respective input form.
The following data is also stored at the time of registration:
a) The user's IP address
b) Date and time of registration
Registration is required to access certain content and services on our website, such as viewing your orders and shipment information.
As part of the registration process, the user's consent to the processing of this data is obtained. The legal basis for processing the data, if the user has given consent, is Article 6(1)(a) GDPR.
If the data collection serves the purpose of fulfilling a contract to which the user is a party or of carrying out pre-contractual measures, the additional legal basis for processing the data is Art. 6 para. 1 lit. b) GDPR. The same applies to the transfer of your payment data to our bank.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This applies to data collected during the registration process when the registration on our website is cancelled or modified.
Data collected during the registration process for the performance of a contract or for carrying out pre-contractual measures is deleted when it is no longer required for the performance of the contract. Even after the contract has been concluded, it may be necessary to store the contracting party's personal data in order to comply with contractual or legal obligations.
As a user, you have the option to cancel your registration at any time by sending us an informal email. You can also have your stored data modified at any time by sending us an informal email.
If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations preclude such deletion.
If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations preclude such deletion.
VI. Disclosure of email address to parcel service providers
During the ordering process, the customer has the option to give their consent to the transfer of their email address to the shipping service provider DHL.
The data is then shared solely for the purpose of notifying the customer of the delivery. It will not be used for any other purpose. The customer's email address will be deleted after the package has been delivered.
VII. Contact form and email contact
Our website includes a contact form that can be used to contact us electronically. If a user chooses to use this form, the data entered will be transmitted to us and stored. The specific data collected is detailed in the respective input fields.
The following data is also stored at the time the message is sent:
a) The user's IP address
b) Date and time of registration
Your consent for the processing of your data will be obtained during the submission process, and you will be referred to this privacy policy.
Alternatively, you can contact us via the email address provided in section 1. In this case, the personal data you transmit with your email will be stored.
In this context, no data will be shared with third parties. The data will be used exclusively for processing the conversation.
The legal basis for processing the data is, if the user has given their consent, Art. 6 para. 1 lit. a) GDPR.
The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
The personal data you enter in the contact form is used solely for processing your inquiry. If you contact us by email, this also constitutes the necessary legitimate interest in processing your data. The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form and data transmitted by email, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved.
The additional personal data collected during the sending process will be deleted no later than seven days after collection.
The user has the right to withdraw their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
You can withdraw your consent by sending an informal declaration to the email address mentioned in point 1. All personal data stored during the contact process will be deleted in this case.
VIII. Third Party Cookies
- Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
For browsers on mobile devices, or as an alternative to the browser plugin, you can set an opt-out cookie via the following link, which will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and for this domain. If you have deleted your cookies in this browser, the cookie must be set again): <a href="javascript:gaOptout()">Disable Google Analytics</a>
Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
- Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personally identifiable information. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If tracking has been disabled at the domain or cookie level, this setting will remain in effect for all tracking tags implemented with Google Tag Manager.
- Google DoubleClick
DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). DoubleClick by Google uses cookies to present you with relevant advertisements. A pseudonymous identification number (ID) is assigned to your browser to track which ads have been displayed and clicked. This provides us with valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR.
The cookies do not contain any personally identifiable information. The use of DoubleClick cookies merely enables Google and its partner websites to display ads based on previous visits to our or other websites on the internet. The information generated by the cookies is transmitted to and stored by Google on a server in the USA for evaluation. Google only transfers this data to third parties if required by law or as part of commissioned data processing. Under no circumstances will Google combine your data with other data collected by Google.
You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of our websites. Furthermore, you can prevent Google from collecting and processing data generated by cookies and related to your use of the websites by downloading and installing the browser plugin available at the following link under the heading "DoubleClick opt-out extension". Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising Alliance website at the following link .
- Google Translate
We want to offer visitors to our website the option of using it in other languages. For this purpose, we use Google Translate, a translation service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For data protection reasons, Google Translate is deactivated by default, indicated by the grayed-out text "Select language". Only when you click on "Select language" will Google Translate be activated and data transmitted to Google. In addition to the URL of the visited page, your IP address will also be transmitted. By clicking on "Select language", you agree to this. We have no control over the data collected or the data processing operations. We are also unaware of the scope of the data collection, its purposes, or the storage periods.
Information on the purpose and scope of data collection and its processing by Google can be found in the privacy notice listed below.
http://www.google.com/intl/de_de/policies/privacy/
We would like to point out that the computer-generated translation sometimes only approximates the original text.
- Google DoubleClick Ad Exchange
To the extent that DoubleClick Ad Exchange, a web advertising service of Google Inc., USA ("Google"), displays advertisements (text ads, banners, etc.) on this website, your browser may store a cookie sent by Google Inc. or third parties. The information stored in the cookie can be recorded, collected, and analyzed by Google Inc. or third parties. In addition, DoubleClick Ad Exchange also uses so-called "web beacons" (small, invisible graphics) to collect information. These web beacons allow simple actions, such as website traffic, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon about your use of this website is transmitted to and stored on a Google server in the USA. Google uses this information to analyze your usage patterns with regard to DoubleClick Ad Exchange ads. Google may also transfer this information to third parties if required by law or if third parties process this data on Google's behalf.
Insofar as IP addresses are transmitted and stored in this context, this is done solely for the purpose of combating and filtering spam/fraud (ad impression spam and click spam). This data is strictly accessible only to the anti-abuse teams.
You can prevent cookies from being stored on your hard drive and web beacons from being displayed. To do this, you must select "do not accept cookies" in your browser settings (in Internet Explorer under "Tools / Internet Options / Privacy / Settings", in Firefox under "Tools / Options / Privacy / Cookies"). Further information can be found here: http://www.google.com/intl/de/policies/privacy/ads/
IX. Newsletter
This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. CleverReach is a service that allows us to organize and analyze newsletter distribution. The data you enter for newsletter subscription (e.g., email address) is stored on CleverReach's servers in Germany and Ireland.
Our newsletters, sent via CleverReach, allow us to analyze the behavior of newsletter recipients. This includes analyzing how many recipients opened the newsletter and how often each link within the newsletter was clicked. Using conversion tracking, we can also analyze whether a predefined action (e.g., purchasing a product on our website) occurred after clicking a link in the newsletter. Further information on data analysis through CleverReach newsletters can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.
If you do not want your data analyzed by CleverReach, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter email. You can also unsubscribe directly on the website.
The data you provided for the purpose of subscribing to our newsletter will be stored by us until you unsubscribe. After you unsubscribe, this data will be deleted from both our servers and CleverReach's servers. Data stored for other purposes (e.g., email addresses for the members' area) will remain unaffected.
For more information, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a contract for commissioned data processing
We have concluded a data processing agreement with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.
X. external service companies
Payment service provider
We offer several payment methods for using our online shop and utilize various payment service providers. Depending on the payment method you choose, different data will be transmitted to the respective payment service provider. The legal basis for this transmission is Article 6(1)(a) GDPR. Below, we list our payment service providers.
PayPal
If you choose PayPal as your payment method, your personal data will be transmitted to PayPal. Using PayPal requires opening a PayPal account. When using or opening a PayPal account, you must transmit information such as your name, address, telephone number, and email address to PayPal. The legal basis for this data transfer is Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing necessary for the performance of a contract).
The operator of the payment service PayPal is:
PayPal (Europe) S.à rl et Cie, SCA
22-24 Boulevard Royal
L-2449 Luxembourg
Email: impressum@paypal.com
By choosing the PayPal payment option, you consent to the transfer of your personal data, such as name, address, telephone number, and email address, to PayPal. Further information about the data collected by PayPal can be found in PayPal's privacy policy, available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
IMMEDIATELY
When selecting the payment method "SOFORT," payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT's data protection policy at the following web address: https://www.klarna.com/sofort/datenschutz
Concardis
When selecting "Credit Card" as your payment method, payment processing is handled by the payment service provider Concardis GmbH, Helfmann-Park 7, D-65760 Eschborn, to whom we forward the information you provided during the ordering process, along with information about your order. Your data is shared solely for the purpose of payment processing with Concardis. Further information regarding Concardis' data protection practices can be found in theirprivacy policy .
KLARNA
When selecting the payment method "Purchase on account with Klarna" or "Installment purchase with Klarna", payment processing is handled via the
Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
Telephone: 0046 8-120 120 00
Fax: 0046 8-120 120 99
Contact: info@klarna.de .
We will forward the information you provided during the ordering process, along with information about your order, to Klarna Bank in accordance with Article 6(1)(b) of the GDPR. Your data will be forwarded solely for the purpose of payment processing with Klarna Bank and only to the extent necessary for this purpose. You can find further information about Klarna's data protection policy at the following web address: https://www.klarna.com/de/datenschutz/
Shipping service provider
The goods will be delivered to you by the following transport service provider:
DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn)
For the purpose of delivery, we will only pass on the recipient's name and delivery address to the transport service provider, insofar as this is necessary for the delivery of the goods, in accordance with Art. 6 para. 1 lit. b) GDPR.
If, in a specific case, a transport company other than those mentioned above needs to be commissioned (e.g., due to the order volume), you will be informed separately. In that case, your data will be transferred in accordance with the provisions of this section.
Only if you have given your express consent during the ordering process will we pass on your email address to the transport service provider before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, in accordance with Art. 6 para. 1 lit. a) GDPR.
Consent can be withdrawn at any time with effect for the future by contacting the controller named above or the respective transport service provider.
XI. Rights of the data subject
If your personal data is being processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
1. Right to information
You can request confirmation from the data controller as to whether personal data concerning you is being processed. Furthermore, you have the right to information about the purpose of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, and the existence of other rights such as the right to rectification of the data or the right to lodge a complaint with a supervisory authority.
2. Right to rectification
You have the right to rectification and/or completion from the data controller if the processed personal data concerning you is inaccurate or incomplete. The data controller must carry out the rectification without undue delay.
3. Right to restriction of processing
You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected to processing on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
If the processing of your personal data has been restricted, this data – apart from being stored – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If processing has been restricted, you will be informed by the controller before the restriction is lifted.
4. Right to erasure
You can request that the data controller delete your personal data without undue delay if and to the extent that the legal requirements for doing so are met. The data controller is obligated to delete this data without undue delay.
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, that personal data.
The right to erasure does not apply insofar as the processing is necessary.
(1) to exercise the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
(5) for the establishment, exercise or defense of legal claims.
5. Right to information
You have the right to be informed by the controller about which recipients the controller has notified that you have asserted your right to rectification, erasure or restriction of processing against the controller.
6. Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.
7. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions.
8. Right to withdraw consent under data protection law
You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
9. Right to non-automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.