Privacy
Data Protection Information of SOLENI Beauty & Medical Group GmbH
In the following, we would like to inform you about the processing of personal data carried out by SOLENI Beauty & Medical Group GmbH in accordance with this new regulation (compare Article 13 DSGVO). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 2.
Table of contents
- 1. Overview
- 2. Name and address of the data protection officer
- 3. Purpose of data processing, legal basis and legitimate interests pursued by SOLENI Beauty & Medical Group GmbH or a third party as well as categories of recipients
- 3.3. data processing for advertising purposes
- 3.4. online presence and website optimization
- 4. Transfer to recipients outside the EU
- 5. Your rights
- 6. Data security
The following data protection information informs you about the nature and extent of the processing of so-called personal data by SOLENI Beauty & Medical Group GmbH. Personal data is information that can be directly or indirectly attributed to you or can be attributed to you. Data processing by SOLENI Beauty & Medical Group GmbH can essentially be divided into two categories:
-
For the purpose of contract processing, all data required for the execution of a contract with SOLENI Beauty & Medical Group GmbH is processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent necessary in each case.
-
When you access the SOLENI Beauty & Medical Group GmbH website, various information is exchanged between your terminal device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your end device. In accordance with the provisions of the GDPR, you have various rights that you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes. The option to object is highlighted in print.
-
Name and address of the responsible party
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:SOLENI Beauty & Medical Group GmbH, represented by the GF Manuel Deerberg, Tom Leon Alegre
Lauschützer Weg 21, 03172 Schenkendöbern
2. Name and address of the data protection officer
The data protection officer of the responsible party is:
M. Deerberg
Lauschuetzer way 21
03172 Schenkendöbern
If you have any questions about our privacy policy, please feel free to contact our data protection officer M.Deerberg . M. Deerberg can be reached at the above address, for the attention of the Data Protection Department, or at privacy@soleni-group.uk
General information on data processing
Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
3. Purposes of data processing, legal basis and legitimate interests pursued by SOLENI Beauty & Medical Group GmbH or a third party as well as categories of recipients
When you access our website, the browser used on your end device automatically sends information to the server of our website and temporarily stores it in a so-called log file. We have no influence on this. The following information is collected without your intervention and stored until automatic deletion:
-
Information about the browser type and version used
-
The operating system of the user
-
The user's Internet service provider
-
The IP address of the user
-
Date and time of access
-
Websites from which the user's system accesses our website
-
Websites that are accessed by the user's system via our website
The legal basis for the processing of the IP address is Article 6(1)(f) DSGVO. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we are not able to draw any conclusions about your identity from the collected data and that we will not do so.
The IP address of your terminal device and the other data listed above are used by us for the following purposes:
-
Ensuring a smooth connection setup,
-
Ensuring a comfortable use of our website,
-
Evaluation of system security and stability as well as
-
other administrative purposes.
The data is stored for a period of 14 days and then automatically deleted. Furthermore, we use so-called cookies, tracking tools, as well as social media plug-ins for our website. The exact procedures involved and how your data is used for this purpose are explained in more detail below in section 3.4.
If you have consented to geolocation in your browser or operating system or other settings on your end device, we use this function to offer you individual services based on your current location (e.g., the location of the nearest store). We process your location data processed in this way exclusively for this function. If you terminate the use, the data will be deleted.
3.2. conclusion, execution or termination of a contract
3.2.1 Data processing upon conclusion of a contract
The object of activity of SOLENI Beauty & Medical Group GmbH is the distance selling of goods and services, retail trade within the scope of officially issued permits and the serial production of the goods to be offered. In this context, we process the data required for the conclusion, execution or termination of a contract. These include:
-
First name, last name
-
Invoice and delivery address
-
E-mail address
-
Invoice and payment data
-
date of birth, if applicable
-
telephone number, if applicable
The legal basis for this is Article 6(1)(b) DSGVO. Insofar as we do not use your contact data for advertising purposes (see 3.3. below), we store the data collected for contract processing until the expiry of the statutory or possible contractual warranty and guarantee rights. After expiration of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years from the conclusion of the contract), the data is processed again solely in the event of an audit by the tax authorities.
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
3.3. data processing for advertising purposes
3.3.1 Advertising purposes of SOLENI Beauty & Medical Group GmbH and third parties
If you have concluded a contract with us, we manage you as an existing customer. In this case, we process your postal contact data outside of the existence of a specific consent in order to send you information about new products and services in this way. We process your e-mail address in order to send you information about our own, similar products, unless you have given your specific consent.
3.3.2 Interest-based advertising
To ensure that you only receive information that is of supposed interest to you, we categorize and add further information to your customer profile. For this purpose, we use statistical information as well as information about you (e.g. basic data of your customer profile). The aim is to send you advertising that is geared solely to your actual or presumed needs and, accordingly, not to bother you with useless advertising.
In principle, you will be asked to give your consent to the processing of data for (your own) advertising purposes before the contract is concluded.
In addition, the legal basis for the aforementioned processing is in each case Article 6(1)(f) DSGVO. The processing of existing customer data in this way for our own advertising purposes or for the advertising purposes of third parties is to be regarded as a legitimate interest.
You may object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact data mentioned under 1.
If you object, the contact address concerned will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent after receipt of your objection. This is due to technical reasons and does not mean that we will not implement your objection. Thank you for your understanding.
On our website we offer you the possibility to register for our newsletter. In order to ensure that no mistakes have been made when entering the email address, we use the so-called double opt-in procedure: After you have entered your email address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your email address be added to our distribution list. You can revoke your consent at any time with effect for the future. For this purpose, a short note by email to the email address given under 2. is sufficient.
3.4. online presence and website optimization
3.4.1 Cookies - general information
We use so-called cookies on our website on the basis of Article 6(1)(f) DSGVO. Our interest in optimizing our website is thereby to be regarded as legitimate within the meaning of the aforementioned provision. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been to our site and which entries and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you as well as to display information tailored specifically to you. These cookies enable us to automatically recognize that you have already been to our website when you visit it again. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. The storage period of cookies depends on their purpose and is not the same for all.
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transferred to Google's parent company in the United States.
The use of the Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data is assigned to the respective end device of the user. An assignment to a device ID does not take place.
Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in the data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Browser plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Google signals
We use Google signals. When you visit our website, Google Analytics collects, among other things, your location, search history and YouTube history, as well as demographic data (visitor data). This data can be used for personalized advertising with the help of Google signals. If you have a Google account, Google Signal's visitor data is linked to your Google account and used for personalized advertising messages. The data is also used to create anonymized statistics on the user behavior of our users.
Order processing
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage period
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 2 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=de
3.4.4 Opt-out/objection option
You can prevent the tracking technologies explained by making the appropriate cookie setting in your browser (see also 3.4.1).
We use social plug-ins of the social networks Facebook, Google+ and Twitter on our website on the basis of Article 6(1)(f) DSGVO in order to make our company better known via these. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection compliant operation is to be ensured by their respective providers. The integration of these plugins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible.
Our website uses so-called plug-ins of the social network Facebook, which is offered by Facebook Inc. The Facebook plug-ins are marked with a Facebook logo or the addition "Like" or "Share". An overview of the Facebook plug-ins and their appearance can be found behind the following link. When you activate such a plug-in (first click), your browser establishes a direct connection to Facebook's servers. The content of the plug-in is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the "Like" button, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy. If you do not want Facebook to directly assign the information collected about your visit to our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plug-ins with add-ons for your browser.
Plug-ins of the short message network Twitter Inc. are also integrated on our website. You can recognize the Twitter plug-ins ("Twitter" button) by the Twitter logo (a white bird on a blue background) and the addition "Twitter". When you call up a page of our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click the Twitter button while you are logged into your Twitter account, you can link the content of our pages on your Twitter profile. This allows Twitter to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information about this here. If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account.
So-called plug-ins of the Google-operated site YouTube are used on our website, which is offered by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. In the process, the YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. If you do not want YouTube to assign the information collected about your visit to our website directly to your YouTube profile, you must log out of YouTube or Google before visiting our website. For the purpose and scope of the data collection and the further processing and use of the data by YouTube, as well as your rights in this regard and setting options for protecting your privacy, please refer to YouTube's privacy policy.
3.4.6 External payment service providers
We offer several payment methods for the use of the webshop and use different payment service providers. Depending on which payment method you choose, different data will be transmitted to the respective payment service provider. The legal basis for the transmission is Art. 6 para. 1 p. 1 lit. a DSGVO. We list our payment service providers below.
If you decide to use the PayPal payment method, your personal data will be transmitted to PayPal. The prerequisite for the use of PayPal is the opening of a PayPal account. With the use or opening of a PayPal account, among other things, name, address, telephone number and e-mail address must be transmitted to PayPal. The legal basis for the transmission of the data is Article 6 (1) a DSGVO (consent) and Article 6 (1) b DSGVO (processing for the performance of a contract). The operator of the payment service PayPal is:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
E-mail: impressum@paypal.com
With the payment option PayPal you agree to the transmission of personal data such as name, address, telephone number and e-mail address, to PayPal. What other data is collected by PayPal, results from the respective privacy policy of PayPal. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
If you decide to use the payment method Klarna, your personal data will be transmitted to the operator of Klarna. The legal basis for the transmission of the data is Article 6 (1) a DSGVO (consent) and Article 6 (1) b DSGVO (processing for the performance of a contract). The operator of the payment service Klarna is:
Klarna Bank AB (publ)
Sveavägen 46
111 34 Stockholm
Sweden
Phone: +46 8 120 120 00
Fax: +46 8 120 120 99
Contact: info@klarna.de
Klarna collects the following data:
-
Name, date of birth, title, billing and shipping address, e-mail address, cell phone number
-
Information about ordered products
-
Information about income, credit obligations and payment notes
-
Location related information
-
IP address
For detailed information about Klarna Bank AB (publ)'s privacy policy, please visit: https://www.klarna.com/de/datenschutz/
With the exception of the processing outlined in 3.4, we do not share your data with recipients located outside the European Union or the European Economic Area. The processing operations listed under 3.4. result in a data transfer to the servers of the tracking technology providers commissioned by us. These servers are located in the USA. The data transfer takes place in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission. You can obtain a copy of these standard contractual c lauses from us. To do so, please send a letter and a stamped return envelope to the address given in section 2.
In addition to the right to revoke the consent you have given to us, you have the following additional rights if the respective legal requirements are met:
-
Right to information about your personal data stored by us in accordance with Art. 15 DSGVO,
-
Right to correct incorrect data or to complete correct data according to Art. 16 DSGVO,
-
Right to have your data stored by us deleted according to Art. 17 DSGVO,
-
Right to restrict the processing of your data according to Art. 18 DSGVO,
-
Right to data portability according to Art. 20 DSGVO,
-
Right to revoke consent given pursuant to Art. 7(3) DSGVO,
-
Right to lodge a complaint pursuant to Art. 77 DSGVO.
Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to for reasons arising from the particular situation of the data subject. The above general right to object applies to all processing purposes described in this Privacy Notice, which are processed on the basis of Article 6(1)(f) DSGVO. Unlike the specific right of objection directed at data processing for advertising purposes (compare 3.3.3 above), we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so (e.g. a possible risk to life or health). In addition, you have the option of contacting the supervisory authority responsible for SOLENI Beauty & Medical Group GmbH, the Berlin Commissioner for Data Protection and Freedom of Information.
All data transmitted by you personally, including your payment data, is transferred using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure SSL connection, among other things, by the appended s at the http (i.e. https://...) in the address bar of your browser or by the lock symbol in the lower area of your browser. We also use appropriate technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and are verified by COMODO CA Limited.
