Source: https://saida-nails.de/en/privacy-notice.html
Timestamp: 2019-04-25 07:54:20+00:00

Document:
We, the Saida Nails GmbH, represented by Saida Nasirova, are pleased about your interest and the visit on our website and our shop. The protection of your privacy is very important to us. In the following we inform you in detail about the handling of your data in the event of a visit to our website, as well as a use of the online store at the address https://www.saida-nails.de (hereinafter collectively referred to as "our website").
With this data protection declaration you receive information about type, extent and purpose of the collection and use of your data by the responsible provider.
The protection of your personal data is a serious matter for us. In principle the use of this website is possible without any indication of personal data. However, if you wish to make use of special services of our company via this website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.
The processing of your personal data (e.g. name, address, email address, telephone number) always takes place in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to our company. By means of this data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore you will be informed about your rights by means of this data protection declaration.
As the party responsible for processing, we have implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless internet-based data transmissions might in general have security gaps, so that absolute protection cannot be guaranteed. For this reason you are also free to transmit personal data to us by alternative means, for example by telephone.
You can visit our website without providing any personal information. We then only store access data without personal reference (such as the name of your Internet service provider, the page from which you visit us or the name of the requested file). These data are evaluated exclusively for the improvement of our offer and do not allow any conclusion about your person.
Personal data is only collected if you voluntarily provide it to us during your registration as a customer for the online store https://www.saida-nails.de and/or when placing an order or training. We use the data provided by you (e.g. title, name, address, date of birth, email address, telephone number, fax number, bank details) without separate consent exclusively for the fulfilment and processing of the order. Your personal data will be collected, processed and stored by us exclusively in accordance with the provisions of German data protection law (in particular in accordance with the Federal Data Protection Act and the Telemedia Act and from 25 May 2018 in accordance with the GDPR).
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfilment of a contract to which the data subject is a party,as is the case, for example, with processing operations that are necessary for the delivery of goods or the rendering of other services or consideration, the processing shall be based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, such as in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, if a visitor of our business for example would be injured and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR.
Finally processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis, if processing is necessary to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned predominate. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. It represented in this respect the opinion that a justified interest could be to be accepted if the person concerned is a customer of the responsible person (recital 47 sentence 2 GDPR).
If the processing of personal data is based on article 6 I f GDPR, our legitimate interest is the conduct of our business for the benefit of all our employees and shareholders.
Sometimes it may be necessary for a contract that a person concerned provides us with personal data, which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data when our company concludes a contract with him or her. Non-provision of personal data would mean that the contract could not be concluded with the data subject.
Before the data subject provides personal data, he or she must contact us. We inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what consequences the non-provision of the personal data would have.
Due to legal regulations, this website contains information that allows quick electronic contact with our company as well as direct communication with us, which includes a general address of the so-called electronic mail (email address). If you contact us by email or via a contact form, the personal data you provide will be stored automatically. Such personal data (e.g. name, address, telephone number, email address) that you voluntarily provide to us will only be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties.
A transfer of your data will only take place, if this is necessary to fulfil the contractual relationship. In order to process payments, we forward your payment data to the credit institution commissioned with the payment. Your personal data will not be passed on to other third parties or used for advertising or comparable purposes without your explicit permission.
With full processing of the contract and full payment of the purchase price all personal data that you have communicated to us in the context of the order via https://www.saida-nails.de will be blocked for further use and deleted after the expiry of the tax and commercial retention periods, unless you have expressly agreed to the further use of your data. The same applies to the data that you have provided to us when concluding a contract for the provision of a service.
In accordance with the principles of data avoidance and data minimization, we store personal data for a maximum period of time that complies with the respective storage period stipulated by law. After this period has expired, the corresponding data will be routinely deleted unless they are no longer required for contract fulfilment or contract initiation.
We process and store your personal data only for the period of time necessary to achieve the storage purpose or if this has been permitted by the European Directive and Regulation Body or another legislator in laws or regulations to which we are subject.
If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation Body or another competent legislator expires, the personal data shall be deleted routinely and in accordance with the legal regulations.
Our website enables payment via PayPal or Paypal Plus (incl. payment by credit card, SEPA direct debit, purchase on account). Provider of the payment service is the PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and trustee and offers buyer protection services.
If you pay with PayPal, a transmission of the payment data entered by you, which is necessary for the payment handling, is carried out to PayPal. Personal data related to the respective order (e.g. number of articles, article number, invoice/tax amount, other invoice information) are also necessary for the processing of the purchase contract. The transfer of your data is necessary for payment processing via PayPal and is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). PayPal may share your personal information with affiliates and service providers or subcontractors as necessary to fulfill your contractual obligations or to process the information on behalf of PayPal.
PayPal may share your personal information with credit reporting agencies as part of an identity or credit check. PayPal uses credit checks to decide which payment method to provide, taking into account the statistical probability of non-payment. The creditworthiness information can contain probability values (score values). If this is the case, the basis of these score values is based on a scientifically recognized mathematical-statistical procedure.
A revocation of your already given consent to the processing of your data is possible at any time vis-à-vis Paypal. Data processing processes in the past remain effective in the event of a revocation, if the data had to be processed, used or transmitted for the processing of payments in accordance with the contract.
On our website, users are given the opportunity to subscribe to our company newsletter. Which personal data is transmitted to us when ordering the newsletter results from the input mask used for this purpose.
We inform our customers and business partners at irregular intervals by means of a newsletter about offers of the company. The newsletter of our company can only be received by you if (1) you have a valid e-mail address and (2) you register for the newsletter dispatch. For legal reasons, a confirmation e-mail in the double opt-in procedure will be sent to the e-mail address you entered for the first time for the newsletter dispatch. This confirmation e-mail serves to check, if the owner of the e-mail address has authorised the receipt of the newsletter as the person concerned.
When you register for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) to the computer system you are using at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to track the (possible) misuse of your e-mail address at a later date and therefore serves our legal protection.
The personal data collected as part of the newsletter registration will only be used to send our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail, if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter offering or changes to the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You may cancel your subscription to our newsletter at any time. All you need to do is send an e-mail to newsletter@saida-nails.de stating your e-mail address with which you have registered in the shop or for the newsletter. Your deletion request will be made manually by our technical support staff.
The consent to the storage of personal data, which you have given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking your consent, you will find the corresponding support e-mail address (newsletter@saida-nails.de) in each newsletter.
Our newsletters contain no tracking functions and do not collect any other statistical data.
On various subpages of our website we use so-called 'cookies' to make visiting our website attractive and to enable the use of certain functions. 'Cookies' are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive after the browser session has ended (so-called session cookies). Other cookies permanently store data and enable you, for example, to log in to our website as a registered user without having to enter your user name and password again. These cookies are permanently stored on your computer and allow us to recognize your computer on your next visit (permanent cookies).
The collection and storage of data within the context of cookies can also be rejected at any time with effect for the future, in which you can independently prevent the acceptance of cookies by means of settings in your internet browser. In your internet browser you can in particular set whether you wish to generally accept cookies on your computer or are informed about the setting of cookies and whether you decide to accept them on a case-by-case basis or you generally exclude the acceptance of cookies. If cookies are not accepted the functionality of our website, in particular the functionality of the online shop at https://www.saida-nails.de, may be restricted.
Extras I Internet Options I Privacy I Advanced I Cancel automatic cookie handling I Confirm each I OK I OK.
Finally we would like to draw your attention to the fact that you can also completely prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizelp();" in order to guarantee an anonymous collection of IP addresses. However, due to the activation of IP anonymization on this website your IP address will be previously truncated by Google within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States.
We have included Google AdWords on this website, an internet advertising service that allows advertisers to serve ads in both Google's search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define keywords that will be used to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network the ads are distributed to relevant internet sites using an automatic algorithm and in accordance with the keywords defined before.
The company operating the Google AdWords services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of Google AdWords is to promote our website by displaying advertisements relevant to your interests on the websites of third-party companies and in the search results of the Google search engine and by displaying third-party advertisements on our website.
If a person concerned reaches our website via a Google advertisement, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart of our online store system, have been accessed on our website. Through the conversion cookie, both we and Google can track whether a person who came to our website via an AdWords ad generated a revenue, i.e. completed or cancelled a purchase.
The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive any information from Google that could identify the individual concerned.
The conversion cookie is used to store personal information, such as the internet pages visited by the person concerned. Accordingly, each time you visit our website personal data including the IP address of the internet connection used by the person concerned is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer personal data collected through this technical process to third parties.
The person concerned can prevent the setting of cookies by our website at any time, as described above, by means of an appropriate setting of the Internet browser used and thus permanently prevent the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore the person concerned has the opportunity to reject the interest-related advertising by Google. To do this the data subject must access the link www.google.de/settings/ads from any of the Internet browsers he or she uses and make the desired settings there.
We do not use any social media plug-ins on this website. Behind all other logos of social networks (e.g. Youtube or Facebook) there is a normal link to the corresponding social network page of our company.
The operating company of the Google Maps service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Each person concerned has the rights listed below, granted by the European Directive and Regulation Body, vis-à-vis the controller (our company).
You may request confirmation as to whether personal data concerning you will be processed by us.
You also have a right to know whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate guarantees in connection with the transfer.
You may request the immediate rectification of any inaccurate personal data concerning you. Furthermore you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing.
You revoke your consent on which the processing was based in accordance with art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
You insert objection against the processing ( according to art. 21 para. 1 GDPR) and there are no prior legitimate reasons for the processing or you insert objection against the processing according to art. 21 para. 2 GDPR.
Personal data have been processed unlawfully.
The personal data were collected in relation to services offered by the information society in accordance with art. 8 para. 1 GDPR.
If one of the above-mentioned reasons applies and you wish to have personal data stored by us deleted, you can contact us at any time. We will comply with the request for deletion immediately.
If the personal data have been made public by us and if our company is obliged to delete the personal data in accordance with art. 17 para. 1 GDPR, we shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform other persons responsible for data processing who process the published personal data that you have requested these other persons responsible for data processing to delete all links to this data or their copies or replications, insofar as the processing is not necessary. We will take the necessary steps in individual cases.
The accuracy of the personal data is disputed by you for a period of time that allows us to verify the accuracy of the personal data.
The processing is unlawful, you refuse the deletion of the personal data and demand instead the restriction of the use of the personal data.
We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
You have objected to the processing in accordance with art. 21 para. 1 GDPR and it is not yet certain, if the justified reasons outweigh us against yours.
If one of the above mentioned conditions is met and you wish to request the restriction of personal data stored by us, you can contact us at any time. We will arrange the restriction of the processing.
You may obtain the personal data relating to you that you have provided to a responsible person in a structured, common and machine-readable format at any time. You also have the right to transfer this data to another controller without interference from the controller to whom the personal data have been provided, as long as the processing is based on the consent pursuant to art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR or on a contract pursuant to art. 6 para. 1 lit. b GDPR and the processing is carried out using automated procedures, as long as the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the controller.
Furthermore, when exerting your right of data transferability in accordance with art. 20 para. 1 GDPR, you have the right to demand that the personal data is transferred directly from one responsible person to another, insofar as this is technically possible and insofar as this does not impair the rights and freedoms of other persons.
You may object to the processing of personal data concerning you on the basis of art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation at any time. This also applies to profiling based on these provisions.
In the case of objection, we will no longer process the personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims.
If we process personal data in order to conduct direct advertising, you have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling in so far as it is related to such direct marketing. If you object to our company processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.
In addition you have the right, for reasons arising from your particular situation, to object against the processing of personal data concerning you by us for scientific or historical research purposes or for statistical purposes in accordance with art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task in the public interest.
You can contact us directly to exert your right of objection. You are also free to make use of your right of objection in connection with the use of information society services, regardless of Directive 2002/58/EC, by means of automated procedures using technical specifications.
You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effect on you or similarly significantly affects you, unless (1) the decision is necessary for the conclusion or performance of a contract between you and our company, or (2) it is permissible under the laws of the Union or Member States to which we are subject and such laws contain reasonable measures to protect your rights, freedoms and legitimate interests or (3) it is made with your express consent.
If the decision (1) is necessary for the conclusion or performance of a contract between you and our company or (2) is made with your express consent, we will take reasonable steps to protect your rights and freedoms and legitimate interests, including, as a minimum, the right of our company to obtain the intervention of any person, to state our point of view and to challenge the decision.
You can revoke your consent to the processing of personal data at any time.
Under the mentioned article you have the right to complain to a supervisory authority. As a rule you can contact the supervisory authority of your usual place of residence or workplace.
If you wish to make use of one or more of the abovementioned rights, you can contact us at any time. An email with the request to the above mentioned email address is sufficient.
For the highest possible data security, we use SSL (Secure Socket Layer) encryption for our website, whereby the highest encryption level supported by your browser is used. This is normally a 256 bit encryption. If your browser does not support 256-bit encryption, 128-bit v3 technology will be used instead. The closed (or green) lock symbol or key icon in the address or status bar of your browser indicates that a page on our website and its content is being transmitted in encrypted form.
Furthermore, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
We secure our website and other systems through technical and organizational measures against loss, destruction, access, alteration or distribution of your data by unauthorized persons. Despite regular checks and up-to-date technology, 100% protection against all dangers on the Internet is unfortunately practically impossible.
It may be necessary to modify this statement due to the further development of our website and services or due to changes in legal or official requirements. You can call up the current version of our data protection declaration at any time on this website under the menu item " Privacy Notice".
supplemented by the data protection declaration generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as External Data Protection Officer Hof, in cooperation with the Christian Solmecke.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 21
 art. 6
 art. 9
 art. 6
 art. 20
 art. 6
 art. 89