We are very pleased about your interest in our company. Data protection has a particularly high priority for us. In this data protection declaration we inform you about the data processing in our company - in particular via our website and in the context of the ordering process - insofar as this data processing also concerns your data.
If you would first like an introduction to the subject of data protection and general information on the terms used in the General Data Protection Regulation, you will find, for example, on the website of the Federal Data Protection Commissioner, available at https://www.bfdi.bund.de/DE/Datenschutz/datenschutz-node.html.
2 Information on the data controller
2.1 Responsible for the processing of your personal data Nouvellune GmbH, Kurfürstenstr. 27, 50678 Cologne, Germany. You can reach us by e-mail at email@example.com.
2.2 If you have any questions regarding data protection or the exercise of your rights under data protection law (see Section 9), you can contact our data protection officer either by post at our address given above or by e-mail at firstname.lastname@example.org.
3. activities in which we process your personal data
3.1 Visiting our website without registration
If you visit our website without logging in, registering or otherwise filling out input fields on the website, we process your personal data as follows:
3.1.1 For the purpose of providing our website, we process the name of the website accessed, the file accessed, date and time of access, amount of data transferred, notification of successful access, browser type along with version, the user's operating system, referrer URL (the previously visited page) and IP address of all website visitors. The processing is technically necessary to enable the use of our website (Art. 6 para. 1 b DS-GVO). The data is deleted after the end of your visit to our website, unless individual data is further processed for one of the purposes listed below.
3.1.2 For the purpose of detecting and defending against attacks on our website and technical infrastructure (e.g. hacking, denial of service attack), we process the IP addresses, [data categories] of all website visitors. The processing serves to fulfill our legal obligation to take protective measures (Art. 6 para. 1 c DS-GVO). The data is deleted seven (7) days after the end of your visit to our website, unless an attack attempt is detected. In the event of a detected attack attempt from your connection, the data will be further processed for complete technical and, if necessary, legal processing.
3.2 Visiting our website with registration
3.2.1 You can register on our website by creating a user account. Registration allows you to complete the order process on our website faster and easier, store multiple shipping addresses, and view and track orders. As part of the registration process, we process your first and last name, e-mail address and a password that you can freely choose. The processing serves the implementation and fulfillment of the user contract (Art. 6 para. 1 b DS-GVO). Your data will remain stored by us as long as your user account remains active. You have the option to delete your user account yourself. If we are not legally obligated to store the data, it will also be deleted.
3.2.2 Otherwise, the same data processing will take place as described in section 3.1.
3.3 Ordering in our online shop
3.3.1 When an order is placed in our online store, we collect the following data from the customer: name, address, date of birth, telephone number, gender and e-mail address. We require this data for the processing of the purchase contract, the dispatch of the goods, the invoicing as well as for the warranty and returns management. The processing of this data is necessary for the fulfillment of the purchase contract concluded via our online store (Art. 6 para. 1 b DS-GVO). We delete this data as soon as it is no longer required for the above-mentioned purposes and there are also no longer any legal retention obligations. In the latter case, we will not delete the data, but we will block it for any further processing.
3.3.2 We process your payment information for the purpose of payment processing when you purchase a product via our website. Depending on the payment method you choose, we may forward your payment information to third parties (e.g., in the case of credit card payments, to your credit card provider). The following payment methods can be selected as part of an order:
3.3.3 Data transfer to third parties in the context of order processing
In the context of order processing, we use the services of various partners in order to be able to process the order properly and to provide you with advertising for other interesting products. In doing so, we rely on the cooperation with the following partners:
b) We use DHL as our logistics service provider. DHL GmbH provides logistics services on our behalf. For this purpose, we provide DHL with your name and recipient address, e-mail address, telephone number, customer reference number, the name of the invoice recipient and the invoice address. DHL is contractually obliged to use this data only for the purpose described above and according to our instructions.
3.3.4 Promotional flyer with the order
We use Adnymics to send you promotional flyers with your product delivery about other Nouvellune products you are interested in. In order to find out what you are interested in, we transfer data showing which products you have viewed on our website to Adnymics. The processing is necessary for the protection of our overriding legitimate interest (Art. 6 (1) f DS-GVO) to provide you with the most targeted advertising possible for other products that may interest you. The data processed in this regard will be deleted after the purpose has been achieved. Adnymics is contractually obliged to use this data only for the purpose described above and according to our instructions.
3.4 Back On-Stock Notification
If one of our products is out of stock, you have the option to set up a reminder for this product. For this purpose, we will set up a text field on the product page in which you can enter your e-mail address. As soon as the specific product is available again, we will send you an e-mail with a corresponding notice to the specified e-mail address. This data processing is necessary for the execution or fulfillment of the contract (Art. 6 para. 1 b DS-GVO). Your e-mail address will be deleted after the reminder e-mail has been sent.
Technically necessary cookies are those that are mandatory for the use of all functionalities of our website. Without these, an error-free use of our website cannot be guaranteed.
Non-technically necessary cookies are, for example, those that allow us to recognize you as a customer when you visit our site again. Then we can restore the settings you selected when you first visited our site. In addition, these cookies help us to analyze user behavior with regard to our web store.
Third-party cookies record your visit to our website, other websites you have visited and the links you have executed. We use this information to optimize our website and the advertising we direct to you and to design it according to your interests.
a) For the provision of our website and a personalized presentation of our website, we store technically necessary cookies on the end devices of website visitors. These cookies contain the following data: An identifier that serves as an identifier to recognize several related requests of a user and to assign them to a session, called category of the website, language settings as well as the content of the shopping cart. The processing is technically necessary to enable the use of our website (Art. 6 para. 1 b DS-GVO). All cookies are allowed, blocked and deleted (e.g. when closing the browser window) according to the settings stored in your web browser. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
b) The third-party cookies listed below are set on our site in order to adapt our online offer to your interests and with the aim that you only receive advertising about products in which you are also interested.
bb) We use Bing Ads to optimize our advertising measures and to broadcast our advertising. Bing Ads is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). In order to be able to use this service, a cookie is set on your terminal device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously determined target page ("conversion site"). We only learn the total number of users who clicked on this Bing ad and were then redirected to our site. Microsoft processes information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to optimize the advertising of our website for users. These cookies are deleted according to the settings stored in your web browser (e.g. when closing the browser window).You have the option to prevent the cookie from being set by selecting the appropriate browser setting. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection under the following link http://choice.microsoft.com/de-DE/opt-out. For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
cc) In order to display only personalized advertising to visitors to our website, we use the dynamic retargeting technology of Criteo. By using this technology, anonymized information about the surfing behavior of website visitors on our website is stored in cookies on the website visitor's terminal device. Criteo GmbH then analyzes the recorded surfing behavior and can then display targeted product recommendations as personalized advertising banners on websites (so-called publishers) that the user visits after having been on our website. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to show visitors to our website only advertisements for those products in which the user is also interested. These cookies are deleted according to the settings stored in your web browser (e.g. when closing the browser window). You can prevent the storage and use of information by Criteo's service by clicking on the following link (http://www.criteo.com/de/datenschutzrichtlinie) and setting the slider there for "Opt-Out" to "ON". If you select "ON", a new cookie (opt-out cookie) will be set in your browser. This cookie signals to the Criteo service that Criteo may no longer collect and process data about your usage behavior. You have the option to reactivate this function by setting the slider to "OFF". Please note that this setting must be made for each browser you use. If all cookies in your browser are deleted, this will also affect the opt-out cookie.
dd) For the purpose of analyzing the effectiveness of advertisements, we use the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking. The cookie for conversion tracking is set and transferred to Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie is still valid, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to measure the reach of our advertisements and their cost/benefit ratio in order to advertise in the most targeted manner possible. The transfer to the United States of America takes place on the basis of an adequacy decision of the EU Commission (Art. 45 DSGVO) due to the recipient's participation in the "EU-US Privacy Shield". The cookies are deleted after 30 days, unless another setting in your web browser provides for earlier deletion.
ff) We use the AWIN performance advertising network on our website. This is a service of AWIN AG, Eichhornstraße 3, 10785 Berlin ("AWIN"). As part of the tracking service, AWIN stores cookies on the terminal device of users who visit or use websites or other online offers of its customers (e.g. register for a newsletter) for the purpose of documenting transactions (e.g. leads and sales). These cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing within the network. Personal data is not collected, processed or used by AWIN in this context. Only the information about when a certain advertising medium was clicked on by an end device is placed in a cookie. In the AWIN tracking cookies, an individual sequence of numbers, which cannot be assigned to the individual user, is stored with which the partner program of an advertiser, the publisher and the time of the user's action (click or view) are documented. In this context, AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser. This data processing is necessary to protect our overriding legitimate interest (Art. 6 para. 1 f DS-GVO) to optimize the advertising of our website for users. The cookies are deleted according to the settings stored in your web browser (e.g. when closing the browser window). If you would like to have more information about AWIN's data processing, you can find it here: www.awin.com/de/rechtliches.
gg) You can deactivate the storage of cookies in your respective browser under Tools/Internet Options, limit it to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that in this case you must expect a restricted display of the online offers and a restricted user guidance. You can also delete cookies at any time. In this case, the information stored in them will be removed from your end device.
4. web analysis and web tracking
4.2 We use the "conversion pixel" or visitor action pixel from Facebook. This is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). By calling up this pixel from your browser, Facebook can subsequently recognize whether a Facebook advertisement was successful, e.g. led to an online purchase. We only receive statistical data from Facebook for this purpose without any reference to a specific person. This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. In particular, if you are logged into Facebook, we refer you to their privacy information www.facebook.com/about/privacy/. This data processing is necessary to protect our overriding legitimate interest (Art. 6 (1) f DS-GVO) to show visitors to our website only advertisements for those products in which the user is also interested.
4.3 We use a Pinterest tag on our website. This is a technology of Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). This tag is a pixel file that is embedded on our website and tells Pinterest which subpages of our website you have visited. Pinterest uses this information to show you targeted advertisements on Pinterest. This data processing is necessary to protect our overriding legitimate interest (Art. 6 para. 1 f DS-GVO) to show visitors to our website on Pinterest only advertisements for those products in which the user is also interested.
4.4 We have integrated the trust badge of Trustedshops. In order to display our Trusted Shops seal of approval and the reviews collected, if any, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops trust badge is integrated on this website. This serves to protect our legitimate interests in an optimal marketing of our offer (Art. 6 para. 1 lit. f DS-GVO). The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order, or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
5. social plugins on our website
6. contacting us
You can contact us via various communication channels:
6.1 When contacting us via our contact form, the data you provide will be processed and stored by us in order to answer your inquiry and related questions. The processing of personal data from the input mask of the contact form serves us solely to process the contact. The processing of the IP address during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems. When contacting us via our contact form, you must provide your first and last name as well as your e-mail address. We need your name in order to be able to assign your inquiry when answering it and to address you personally. We need the e-mail address for the transmission of our reply. Furthermore, you can provide voluntary information that may help us to answer your request, namely the order number, telephone number, your country of origin, a subject of the contact request. The legality of the processing of the data provided to us via the contact form is based on Art. 6 para. 1 b DS-GVO. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
6.3 In order to process general telephone inquiries and to answer customer inquiries by telephone, we process the surname, first name, telephone number, customer number of the caller, the other personal data provided by the caller by telephone and information on the content of the telephone inquiry. The processing is necessary for the execution or fulfillment of the contract (Art. 6 para. 1 b DS-GVO). Depending on the content of the request, processing is restricted immediately after completion of the processing of the requestor's request to processing for the specific purpose of the request (e.g. use of our products by the customer, advertising of our services as part of new customer acquisition). After the fulfillment of the respective purpose as well as all legal, in particular commercial and tax law retention obligations, the data is automatically deleted.
6.4 If you contact us via our presences in the social networks Facebook, LinkedIn or Instagram, we process the personal data that you have deposited with the respective social network. The processing of your data is necessary to process your request (Art. 6 para. 1 b DS-GVO). After the fulfillment of the respective purpose and all legal, in particular commercial and tax retention obligations, the data is automatically deleted.
8. your rights as a person affected by data processing
9.1 You can assert your rights against us at any time by sending a letter to our address mentioned in section 2.1 above or by sending an e-mail to the e-mail address mentioned in section 2.2 above. Please understand that we do not process any requests for personal data by telephone, as it is usually not possible to establish the identity of the caller with sufficient certainty.
9.2 You have the following rights vis-à-vis us with regard to the personal data concerning you:
9.2.1 You can assert your right to information (Art. 15 DS-GVO), right to correction (Art. 16 DS-GVO), right to deletion (Art. 17 DS-GVO) and right to restriction of processing, i.e. blocking for certain purposes (Art. 18 DS-GVO) at any time vis-à-vis us if the respective legal requirements are met.
9.2.2 Your right to data portability (Art. 20 DS-GVO) further provides that you may, if the legal requirements are met, request that we transfer the personal data concerning you to you - or, if technically feasible, to another controller designated by you - in a structured, common and machine-readable format.
9.2.3 You have a right to object to processing (Art. 21 DS-GVO) for certain processing purposes, in particular advertising purposes. Insofar as we carry out processing of your data on the basis of a balance of interests (pursuant to Art. 6 (1) f DS-GVO), you have the right to object to this processing at any time for reasons arising from your particular situation. Such reasons exist in particular if they give special weight to your interests and therefore outweigh our interests, for example, if these reasons are not known to us and therefore could not be taken into account in the context of the weighing of interests.
9.2.4 You have the right to revoke your consent to data processing at any time. The legality of the data processing operations already carried out until the revocation shall remain unaffected by the revocation.
9.3 You also have the right to contact the competent data protection supervisory authority with questions or complaints regarding our processing of your personal data.
10 Security of your data
10.1 We use appropriate and modern security measures to protect your data from loss, misuse and alteration. Only authorized employees have access to personal data. We do everything in our power to prevent a violation of your rights or a risk to your personal data.
10.2 Please remember that data transmission over the Internet is never completely secure. We cannot guarantee the security of data entered on our website during transmission over the Internet. This is at your own risk.