We are very pleased about your interest in our company. Data protection has a particularly high priority for us. In this data protection declaration we inform you about the data processing in our company - in particular via our website and in the context of the ordering process - insofar as this data processing also concerns your data.
If you would first like an introduction to the subject of data protection and general information on the terms used in the General Data Protection Regulation, you can find this, for example, on the website of the Federal Data Protection Commissioner, available at https://www.bfdi.bund.de/DE/Datenschutz/datenschutz-node.html.
2.1 Responsible for the processing of your personal data Nouvellune GmbH, Kurfürstenstr. 27, 50678 Cologne, Germany. You can reach us by e-mail at email@example.com.
2.2 If you have any questions regarding data protection or if you wish to exercise your rights under data protection law (see clause 9), you can contact our data protection officer either by post at our address given above or by e-mail at firstname.lastname@example.org.
3.1 Visiting our website without logging in
If you visit our website without logging in, registering or otherwise filling in input fields on the website, we process your personal data as follows:
3.1.1 For the purpose of providing our website, we process the name of the website accessed, the file accessed, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and IP address of all website visitors. The processing is technically necessary to enable the use of our website (Art. 6 para. 1 b DS-GVO). The data is deleted after the end of your visit to our website, unless individual data is further processed for one of the purposes listed below.
3.1.2 For the purpose of detecting and defending against attacks on our website and technical infrastructure (e.g. hacking, denial of service attack), we process the IP addresses, [data categories] of all website visitors. The processing serves the fulfilment of our legal obligation to take protective measures (Art. 6 para. 1 c DS-GVO). The data is deleted seven (7) days after the end of your visit to our website, provided that no attack attempt is detected. In the event of a detected attack attempt from your connection, the data will be further processed for full technical and, if necessary, legal processing.
3.2.1 You can register on our website by creating a user account. Registration allows you to complete the ordering process on our website more quickly and easily, store multiple shipping addresses and view and track orders. As part of the registration process, we process your first and last name, email address and a password that you are free to choose. The processing serves the execution and fulfillment of the user contract (Art. 6 para. 1 b DS-GVO). Your data will remain stored by us as long as your user account remains active. You have the option to delete your user account yourself. If we are not legally obliged to store the data, it will also be deleted.
3.2.2 In all other respects, the same data processing will take place as described in section 3.1.
3.3.1 When an order is placed in our online shop, we collect the following data from the customer: name, address, date of birth, telephone number, gender and e-mail address. We require this data for the processing of the purchase contract, the dispatch of the goods, the invoicing as well as for the warranty and returns management. The processing of this data is necessary for the fulfilment of the purchase contract concluded via our online shop (Art. 6 para. 1 b DS-GVO). We delete this data as soon as it is no longer required for the above-mentioned purposes and there are also no longer any legal retention obligations. In the latter case, we will not delete the data, but we will block it for any further processing.
3.3.2 We process your payment information for the purpose of processing payments when you purchase a product through our website. Depending on the payment method you choose, we may pass on your payment information to third parties (e.g. your credit card provider in the case of credit card payments). Within the framework of an order, the following payment methods can be selected:
a) When paying via PayPal, credit card via PayPal, direct debit via PayPal, "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") within the framework of payment processing. This data processing is necessary for the execution or fulfilment of the contract (Art. 6 para. 1 b DS-GVO). The data will only be passed on to the extent that this is necessary for the processing of the payment. For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments. For further information on data protection, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
d) When selecting the payment method prepayment, we use the payment service Komfortkasse.eu. we transmit your name, your e-mail address, the purchase price to be paid and the designation of the purchased products to the payment service Komfortkasse.eu. This is a payment service of LTC Information Services GmbH, Business Tower, Seligenstädter Str. 107, 63073 Offenbach am Main. The data will be passed on exclusively for the purpose of payment processing. This data processing is necessary for the execution or fulfilment of the contract (Art. 6 para. 1 b DS-GVO). The data protection regulations of Komfortkasse can be found here: https://komfortkasse.eu/datenschutz.
In the context of order processing, we use the services of various partners in order to be able to process the order properly and to provide you with advertising for other interesting products. In doing so, we rely on the cooperation with the following partners:
b) We use DHL as our logistics service provider. DHL GmbH provides logistics services on our behalf. For this purpose, we provide DHL with your name and recipient address, email address, telephone number, customer reference number, the name of the invoice recipient and the invoice address. DHL is contractually obliged to use this data only for the purpose described above and in accordance with our instructions.
We use Adnymics to send you promotional flyers with your product delivery about other Nouvellune products you may be interested in. In order to find out what you are interested in, we transfer information about the products you have viewed on our website to Adnymics. The processing is necessary to protect our overriding legitimate interest (Art. 6(1)(f) DS-GVO) to provide you with the most targeted advertising possible for other products that may interest you. The data processed in this regard will be deleted once the purpose has been achieved. Adnymics is contractually obliged to use this data only for the purpose described above and in accordance with our instructions.
If one of our products is out of stock, you have the possibility to set up a reminder for this product. For this purpose, we will set up a text field on the product page in which you can enter your e-mail address. As soon as the specific product is available again, we will send you an e-mail with a corresponding notice to the e-mail address you entered. This data processing is necessary for the execution or fulfilment of the contract (Art. 6 para. 1 b DS-GVO). Your e-mail address will be deleted after the reminder e-mail has been sent.
Technically necessary cookies are those that are absolutely necessary for the use of all functionalities of our website. Without these, an error-free use of our website cannot be guaranteed.
Non-technically necessary cookies are, for example, those that allow us to recognize you as a customer when you visit our site again. We can then restore the settings you selected when you first visited our site. In addition, these cookies help us to analyse user behaviour with regard to our web shop.
Third-party cookies record your visit to our website, other websites you have visited and the links you have executed. We use this information to optimize our website and the advertising we direct to you and to design it according to your interests.
a) For the provision of our website as well as a personalized presentation of our website, we store technically necessary cookies on the end devices of the website visitors. These cookies contain the following data: An identifier that serves as an identifier to recognize several related requests of a user and assign them to a session, called category of the website, language settings as well as the content of the shopping cart. The processing is technically necessary to enable the use of our website (Art. 6 para. 1 b DS-GVO). All cookies are allowed, blocked and deleted (e.g. when closing the browser window) according to the settings stored in your web browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
b) The third-party cookies listed below are set on our website in order to adapt our online offer to your interests and with the aim of ensuring that you only receive advertising about products in which you are interested.
bb) We use Bing Ads to optimize our advertising efforts and to broadcast our advertisements. Bing Ads is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). In order to be able to use this service, a cookie is set on your terminal device if you have reached our website via a Microsoft Bing ad. This allows Microsoft and us to recognize that someone has clicked on an ad, been redirected to our website, and reached a predetermined landing page ("conversion site"). We only learn the total number of users who clicked on that Bing ad and were then redirected to our site. Microsoft processes information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are used to display advertisements. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to optimize the advertising of our website for users. These cookies are deleted according to the settings stored in your web browser (e.g. when you close the browser window).You have the option to prevent the cookie from being set by making the appropriate browser settings. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection under the following link http://choice.microsoft.com/de-DE/opt-out . Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
cc) In order to display only personalised advertising to visitors to our website, we use Criteo's Dynamic Retargeting technology. By using this technology, anonymized information about the surfing behavior of website visitors on our website is stored in cookies on the end device of the website visitor. Criteo GmbH then analyzes the recorded surfing behavior and can then display targeted product recommendations as personalized advertising banners on websites (so-called publishers) that the user visits after having been on our website. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to show visitors to our website only advertisements for products in which the user is interested. These cookies are deleted according to the settings stored in your web browser (e.g. when closing the browser window). You can prevent the storage and use of information by the Criteo service by clicking on the following link(http://www.criteo.com/de/datenschutzrichtlinie) and setting the "Opt-Out" slider to "ON". If you select "ON", a new cookie (opt-out cookie) will be set in your browser. This cookie signals to the Criteo service that Criteo may no longer collect and process data about your usage behaviour. You have the option to reactivate this function by setting the slider to "OFF". Please note that this setting must be made for each browser you use. If all cookies in your browser are deleted, this will also affect the opt-out cookie.
dd) For the purpose of analyzing the effectiveness of advertisements, we use the online advertising program "Google AdWords" and, within the framework of Google AdWords, conversion tracking. The cookie for conversion tracking is set and transferred to Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie is still valid, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. The processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to measure the reach of our advertisements and their cost/benefit ratio in order to advertise in the most targeted manner possible. The transfer to the United States of America takes place on the basis of an adequacy decision of the EU Commission (Art. 45 DSGVO) due to the participation of the recipient in the "EU-US Privacy Shield". The cookies are deleted after 30 days, unless another setting in your web browser provides for earlier deletion.
ff) We use the AWIN performance advertising network on our website. This is a service of AWIN AG, Eichhornstraße 3, 10785 Berlin ("AWIN"). As part of the tracking service, AWIN stores cookies on the end device of users who visit or use websites or other online offers of its customers (e.g. register for a newsletter) for the purpose of documenting transactions (e.g. leads and sales). These cookies are used solely for the purpose of correctly assigning the success of an advertising medium and the corresponding billing within the network. AWIN does not collect, process or use personal data. Only the information about when a certain advertising medium was clicked on by an end device is placed in a cookie. In the AWIN tracking cookies, an individual sequence of numbers is stored, which cannot be assigned to the individual user, with which the partner program of an advertiser, the publisher and the time of the user's action (click or view) are documented. AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to optimize the advertising of our website for users. The cookies are deleted according to the settings stored in your web browser (e.g. when closing the browser window). If you would like to have more information about AWIN's data processing, you can find it here: www.awin.com/de/rechtliches.
gg) You can deactivate the storage of cookies in your respective browser under Tools/Internet Options, limit it to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that in this case you will have to reckon with a restricted display of the online offers and a restricted user guidance. You can also delete cookies at any time. In this case, the information stored in them will be removed from your end device.
4.2 We use the "conversion pixel" or visitor action pixel from Facebook. This is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). By calling up this pixel from your browser, Facebook can subsequently recognise whether a Facebook advertisement was successful, e.g. led to an online purchase. We only receive statistical data from Facebook for this purpose without any reference to a specific person. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are registered with Facebook, we refer you to their data protection information www.facebook.com/about/privacy/. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to show visitors to our website only advertisements for those products in which the user is also interested.
4.3 We use a Pinterest tag on our website. This is a technology of Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). This tag is a pixel file that is embedded on our website and tells Pinterest which subpages of our website you have visited. Pinterest uses this information to show you targeted advertisements on Pinterest. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to show visitors to our website on Pinterest only advertisements for those products in which the user is also interested.
4.4 We have integrated the trust badge of Trustedshops. In order to display our Trusted Shops seal of approval and the reviews collected, if any, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops trust badge is integrated on this website. This serves to protect our legitimate interests in an optimal marketing of our offer (Art. 6 para. 1 lit. f DS-GVO). The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
You can contact us via various communication channels:
6.1 When contacting us via our contact form, the data you provide will be processed and stored by us in order to answer your inquiry and related questions. The processing of personal data from the input mask of the contact form serves us solely to process the contact. The processing of the IP address during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. When contacting us via our contact form, you must provide your first and last name as well as your e-mail address. We need your name in order to be able to allocate your enquiry when answering it and to address you personally. We need your e-mail address to send you our reply. Furthermore, you can provide voluntary information that may help us to answer your request, namely the order number, telephone number, your country of origin, a subject of the contact request. The legality of the processing of the data provided to us via the contact form is based on Art. 6 para. 1 b DS-GVO. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
6.3 In order to process general telephone enquiries and to answer customer enquiries by telephone, we process the surname, first name, telephone number, customer number of the caller, the other personal data provided by the caller by telephone and information on the content of the telephone enquiry. The processing is necessary for the execution or fulfilment of the contract (Art. 6 para. 1 b DS-GVO). Depending on the content of the request, processing is restricted immediately after completion of the processing of the request of the inquirer to processing for the specific purpose of the request (e.g. use of our products by the customer, advertising for our services as part of new customer acquisition). After the fulfilment of the respective purpose as well as all legal, in particular commercial and tax law retention obligations, the data is automatically deleted.
6.4 If you contact us via our presences in the social networks Facebook, LinkedIn or Instagram, we process the personal data that you have deposited with the respective social network. The processing of your data is necessary to process your request (Art. 6 para. 1 b DS-GVO). After the fulfilment of the respective purpose as well as all legal, in particular commercial and tax retention obligations, the data will be automatically deleted.
9.1 You can assert your rights against us at any time by sending a letter to our address given in section 2.1 above or by sending an e-mail to the e-mail address given in section 2.2 above. Please understand that we do not process requests for personal data by telephone as it is usually not possible to establish the identity of the caller with sufficient certainty.
9.2 You have the following rights in relation to personal data relating to you:
9.2.1 You can assert your right to information (Art. 15 DS-GVO), right to correction (Art. 16 DS-GVO), right to deletion (Art. 17 DS-GVO) and right to restriction of processing, i.e. blocking for certain purposes (Art. 18 DS-GVO) at any time vis-à-vis us if the respective legal requirements are met.
9.2.2 Your right to data portability (Art. 20 DS-GVO) further provides that you may, if the legal requirements are met, request that we transfer to you - or, if technically feasible, to another controller designated by you - the personal data relating to you in a structured, commonly used and machine-readable format.
9.2.3 You have a right to object to processing (Article 21 DS-GVO) for certain processing purposes, in particular advertising purposes. Insofar as we carry out processing of your data on the basis of a balance of interests (pursuant to Art. 6 (1) f DS-GVO), you have the right to object to this processing at any time for reasons arising from your particular situation. Such reasons exist in particular if they give special weight to your interests and therefore outweigh our interests, for example, if these reasons are not known to us and therefore could not be taken into account in the context of the weighing of interests.
9.2.4 You have the right to revoke your consent to data processing at any time. The legality of the data processing operations already carried out until the revocation remains unaffected by the revocation.
9.3 You also have the right to contact the competent data protection supervisory authority if you have any questions or complaints regarding our processing of your personal data.
10.1 We use appropriate and up-to-date security measures to protect your data from loss, misuse and alteration. Only authorized employees have access to personal data. We will do everything in our power to prevent any breach of your rights or risk to your personal data.
10.2 Please remember that data transmission over the Internet is never completely secure. We cannot guarantee the security of any data entered on our website during transmission over the internet. This is at your own risk.