Source: http://www.sanssoucis.com/en/privacy-statement/
Timestamp: 2019-04-19 08:18:27+00:00

Document:
1. Who Is Responsible for Data Processing and How Do I Contact the Data Protection Officer?
2. What Are the Purposes of and Legal Basis for Processing Data?
Art. 6 (1) f) of the GDPR forms the legal basis for temporarily saving data and log files.
If processing operations for personal data are based on acquiring the consent of the person affected, Art. 6 (1) a) of the GDPR serves as the legal basis.
Art. 6 (1) b) of the GDPR forms the legal basis for processing personal data in order to fulfill contracts in the case that one of the contracting parties is the person concerned. The same applies to implementing pre-contractual measures that necessitate processing operations.
If our company is subject to a legal obligation for which it is necessary to process personal data, Art. 6 (1) c) of the GDPR serves as the legal basis.
Art. 6 (1) d) of the GDPR is the legal basis in cases where vital interests of the persons concerned or another natural person necessitate the processing of personal data.
If personal data is processed in order to protect the legitimate interests of our company or a third party, the interests, basic rights and fundamental freedoms of the person concerned are of secondary importance. Art. 6 (1) f) of the GDPR is the legal basis for processing data in this instance.
Personal data can be passed onto our IT service providers for the purposes of making this website available.
Furthermore, cookies will be stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to your browser, and through which certain information passes to the body responsible for setting the cookies (us, in this case). Cookies cannot execute programs or transfer viruses to your computer. They are used to make our Internet services overall more user-friendly and effective.
a) Transient cookies are automatically deleted once you close the browser. This includes in particular session cookies. These store a session ID with which various queries from your browser can be assigned to the same session. This enables your computer to be identified on a return visit to the website. The session cookies are deleted once you log out or close the browser.
b) Persistent cookies are automatically deleted after a specific period of time, which may vary from cookie to cookie. You may delete the cookies at any time in the security settings of your browser.
c) You may configure your browser settings as required and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that if you do so, you may not be able to use all of the functions of this website.
d) The flash cookies used are not collected by your browser but by your flash plug-in. They store the necessary data independently of the browser you use and have no automatic expiry date. If you do not wish the flash cookies to be processed, you will have to install an add-on, e.g. “Clear Flash Cookies” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/clear-flash-cookies/) or Adobe Flash Killer Cookie for Google Chrome.
e) Analysis cookies. We use analysis cookies to improve the content and quality of our website. Analysis cookies enable us to understand how our website is being used, which allows us to optimize our services on an ongoing basis.
This stored information is stored separately from any other data submitted to us. The cookies data, in particular, are not associated with your other data. You can delete any currently saved cookies at any point in time. Automatic deletion is also an option.
You may prevent cookies being stored by adjusting the settings in your browser software accordingly; however, we would like to point out that if you do so you may not be able to make full use of all of the functions of this website.
We collect the personal data provided by you when you are completing the contact form. The data submitted will be processed and used solely for the purposes of providing you with the information you have requested. Any additional processing or use of your data for advertising or market research purposes will be carried out only with your express permission.
In order to be able to process your data within the framework of the sending progress, we request the consent of the user and refer the respective user to this privacy statement.
Contact can also be made via an alternatively provided email address; in this case, the personal data of the user sent together with the email is saved by our company.
If a user has given their consent, the legal basis for processing data is Art. 6 (1) a) of the GDPR. If the purpose of making contact via email is to conclude a contract, the legal basis for this is Art. 6 (1) b) of the GDPR.
Our company processes personal data obtained from the input mask solely for the purposes of making contact and processing the data required in this process. This also constitutes our legitimate interest, which is required for processing operations when contact is made via email. Processing other personal data during the sending process is based on preventing any misuse of the contact form as well as ensuring the security of our information-technology systems.
As soon as data collected to achieve the original purpose is no longer required, it is deleted. Personal data obtained from the input mask of the contact form on the website or sent to us via email is no longer required if it is no longer necessary to communicate with the user. This is the case if, when looking at the particular circumstances, it becomes clear that the respective situation will not continue into the future and there will be no more communication.
Additional personal information that we obtain during the sending progress is deleted within seven days.
The user can withdraw their consent regarding their personal data being processed at any time. In the case of contact being made via email, the user can withdraw their consent regarding their personal data being processed at any time. However, no further communication can take place as all of the personal data that was saved as part of making contact will be deleted in this case.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will generally be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, Google will truncate your IP address within the Member States of the European Union or in other treaty States of the European Economic Area prior to transmitting it to the US. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. Google will use this information on behalf of the website provider for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website provider with other services relating to website activity and Internet usage.
The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google.
You may prevent the collection for Google of the data (incl. your IP address) generated by cookies and related to your use of the website, and the processing of such data, by downloading and installing the browser plug-in that can be accessed at: tools.google.com/dlpage/gaoptout. or by using Google Analytics OptOut on the basis of a cookie.
This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in truncated form, thereby preventing them from being traced to a specific person. If the data acquired about you can be attributed to a personal connection, this contact will be dismissed immediately and the personal data will be deleted without delay.
We use Google Analytics so that we can analyze the usage of our website and improve it on a continuous basis. Using the statistics obtained, we can improve our services and make these more interesting for you as a user. In exceptional cases in which personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 (1) (1) f) of the GDPR.
The legal basis for processing the personal data of users is Art. 6 (1) f) of the GDPR. Processing the personal data of users enables us to analyze the browsing behavior of our users. By analyzing the data acquired, we are able to compile information about the use of the individual components that make up our website, which helps us to improve our site and how user-friendly it is on a continuous basis. Our legitimate interest in processing data lies in these objectives in accordance with Art. 6 (1) f) of the GDPR. Anonymizing the IP address means that the user’s interest with regard to the protection of personal data is sufficiently taken into account.
Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.
7. Which Data Protection Rights Can I Enforce as a Concerned Party?
· To withdraw any consent given to us at any point in time in accordance with Art. 7 (3) of the GDPR. This results in us no longer being permitted to continue data processing operations based on this consent in the future.
· raise a complaint regarding data processing with a supervisory authority in accordance with Art. 77 of the GDPR. As a general rule, you can contact the supervisory authority in the area in which you normally live; alternatively, you can contact the supervisory authority of your workplace or our legal office.
Please direct any requests for information, or queries or objections to the processing of your data via email to datenschutz@bcg-cosmetics.de or to the address listed in our Legal Notice.
9. Can I Object to My Personal Data Being Processed?
You have the right to object to your personal data being processed for the purposes of direct advertising without having to specify your reasons for doing so. If we process your data to protect legitimate interests, you can object to your data being processed for this purpose for reasons relating to your particular situation. In this case, we no longer process your personal data, unless we can establish compelling and legitimate reasons for processing the data that outweigh your interests, rights and freedoms or if the data is processed for the purposes of establishing, exercising or defending legal claims.
In order to make the website available to users and ensure that the website operates correctly, it is necessary to record data and save this data in log files. As a result of this, users do not have the option of objecting to data being processed in this manner.
If log files are saved, they are deleted after seven days at the latest and the respective data is not processed further.
10. Do I have the Option to Raise a Complaint?

References: Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 77