Source: https://ioniqskin.com/privacynotice/
Timestamp: 2019-04-19 17:02:34+00:00

Document:
IONIQ Skincare GmbH & Co. KG (further legal information can be found in the Legal Information section) is the entity responsible for complying with data protection legislation relating to this website. We are delighted by your interest in our website, and we want you to feel secure and happy during your visit. IONIQ Skincare GmbH & Co. KG (hereinafter “IONIQ”) therefore takes the protection of your personal data very seriously. This data privacy statement is intended to inform you about which personal data we collect from you when you use our website, and for what purposes we process and use this data.
Your personal data will only be forwarded or transmitted to third parties or processors if this is necessary for the purpose of carrying out the processing purpose and if there is a corresponding requirement for such authorization.
As soon as you access the pages of our website with your browser, the server automatically stores in log files the data necessary for the operation of a web service: the name of your browser, the name of your Internet service provider, the address of the page from which you are accessed our website, the name of your operating system, the websites you visit, as well as the date and time of your visit. This data is temporarily stored in the log files and then automatically deleted. The purpose of storage is to be able to carry out an analysis of the potentially disruptive activities in the event of a problem.
When visiting our website, statistical analyses may be made of your surfing behaviour. This happens primarily using cookies and analytics. The analysis of your surfing behaviour is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy notice. You can object to this analysis. We will inform you below about how to exercise your options in this regard.
If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy notice explains what information we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmitted via the internet (e. g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
You have the right to find out about the personal details we have stored about you and also the right to block, delete and correct erroneous data. In such instances, please use the contact form so that we are able to attend to your request. If you would prefer to contact IONIQ’s Data Security Officer to exercise these rights rather than IONIQ itself, you are of course welcome to do so (info@ioniqskin.com). (info@ioniqskin.com).
We have appointed a data protection officer for our company. If you have any questions regarding the use of your personal data or the enforcement of your rights, please do not hesitate to contact them.
The reasons for processing the data collected in our contact forms are based on the purpose of your enquiry. Essentially, we process your information in order to respond to your query. Other reasons for processing this data are outlined below.
We collect your salutation, your name, your address and your postcode so that we know who is contacting us and for what purpose, and so that we can forward your request instantly to the correct person. The details of your email address are mandatory, since we will use it to process your request depending on the reason for you contacting us. It is not used for any other purpose. We want you to voluntarily provide your telephone number since we will use it to process your request depending on the reason for you contacting us. Your personal details are stored in our CRM system so that it can be used if you get in touch with us again. It is not used for any other purpose.
The information you provide us about the product will be stored in the event of a support request along with your personal details in our CRM and SAP system.
If your enquiry relates to a complaint, warranty claim or similar, we will also transfer this data together with your personal details to the distributor from which you purchased the device, or to another distributor near you so that your request can be dealt with.
If your device is repaired or replaced by IONIQ, your data will be stored in our support, accounting and logistics system until the statutory storage period has elapsed, and then deleted. The data entered in the contact form will be processed on the basis of your consent (Art. 6 (1) (b) DSGVO) or on the basis of the data processing pursuant to Art. 6 (1) (b) DSGVO, which permits the processing of data to fulfil a contract or pre-contractual measures. You can revoke the processing on the basis of your consent at any time. All you need to do is send an informal message via the contact form or by e-mail to our data protection officer. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation. The data entered by you in the contact form will remain with us until you request deletion, revoke your consent for storage or the purpose for data storage ceases to apply. Mandatory statutory provisions - in particular retention periods - remain unaffected.
On our websites, we offer you the opportunity to receive regular newsletters about our products, new products and special offers. You receive an electronic newsletter from us because you have given us your consent to the use of your e-mail address for this purpose by sending the newsletter order form and have confirmed this order with a so-called second opt-in. Further information on the newsletter form is obligatory and will be used to address you with a personal form of address and, if necessary, to provide you with information tailored to your needs. We use these data exclusively for the dispatch of the requested information. The mandatory information requested during registration must be provided in full, otherwise we will refuse the registration. We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (b) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.
Completion of a data processing agreementWe have entered into a data processing agreement with MailChimp, in which we require MailChimp to protect the data of our customers and not to disclose said data to third parties. This agreement may be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.
We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfil a contract or for measures preliminary to a contract. In order to avoid bad debts, we can, on the basis of Art. 6 (1) (b) DSGVO, in accordance with our legitimate interest, after placing an order with Euler Hermes Forderungsmanagement GmbH, Risk Management Division, P.O. Box 50 07 40, 22707 Hamburg, Germany, to submit your credit assessment data. In a credit check, a so-called score value is calculated on the basis of a mathematical procedure, which makes statements about your solvency. This usually happens as soon as a credit limit of € 1,000 is exceeded. We would like to point out that Euler Hermes Forderungsmanagement GmbH continues to use the transmitted data for its own purposes. You can object to the transmission of this data to Euler Hermes Forderungsmanagement GmbH at any time, however, the execution of the purchase contract may then not be possible. Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected.
The internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, the acceptance of cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website. Cookies that are required to carry out the electronic communication process or to provide certain functions that you wish to use (e.g. shopping cart function) are processed on the basis of Art. 6 para. 1 lit. f DSGVO saved. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (such as cookies for analyzing your surfing behavior) are stored, they will be treated separately in this privacy notice.
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are: • Browser type and browser version • Operating system used • Referrer URL • Host name of the accessing computer • Time of the server request • IP address These data will not be combined with data from other sources. The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfil a contract or for measures preliminary to a contract.
Our website includes plugins for the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognized by the Facebook logo or the Like button on our site. For an overview of Facebook plugins, see https://developers.facebook.com/docs/plugins/. When you visit our site, a direct connection between your browser and the Facebook server is established via the plugin. This enables Facebook to receive information that you have visited our site from your IP address. If you click on the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our site to your Facebook profile. This allows Facebook to associate visits to our site with your user account. Please note that, as the operator of this site, we have no knowledge of the content of the data transmitted to Facebook or of how Facebook uses these data. For more information, please see Facebook's privacy notice at https://de-de.facebook.com/policy.php. If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.
Our website contains functions of the Instagram service. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can click the Instagram button to link the content of our pages with your Instagram profile. This means that Instagram can associate visits to our pages with your user account. As the provider of this website, we expressly point out that we receive no information on the content of the transmitted data or its use by Instagram. For more information, see the Instagram privacy notice: https://instagram.com/about/legal/privacy/.
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analysing user behaviour to optimize both its website and its advertising.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. For more information about how Google Analytics handles user data, see Google’s privacy notice: https://support.google.com/analytics/answer/6004245?hl=en.
Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behaviour on one device (e.g. your mobile phone), on other devices (such as a tablet or computer). Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalized promotional messaging. To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion. You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/. The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google per Art. 6 (1) (a) DSGVO. For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analysing anonymous user behaviour for promotional purposes. For more information and the Google privacy notice, go to: https://www.google.com/policies/technologies/ads/.
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is used to check whether the data entered on our website (such as on a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e. g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google. The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam. For more information about Google reCAPTCHA and Google’s privacy notice, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
With this data protection notice we inform you about how we process your personal data and which rights are granted to you by data protection law in this context. The individual personal data that are processed by you and the scope of the processing depends on the legal provisions and the content of the contractual business relationship that has been agreed with you. It may therefore be that not all parts of this data protection information are applicable to you.
First and foremost, we process the personal data that we receive or have collected from the data subjects within the scope of the business or customer relationship. We also process data provided on the basis of inquiries / visits / registrations (e.g. Internet shop), consents (e.g. newsletter dispatch) etc. within the legally permitted framework.
In addition, we also process personal data provided to us in the context of order processing and data from publicly accessible sources (e.g. press, Internet), insofar as this is necessary and permissible for the respective purposes. We also process personal data that are legally transmitted to us by other companies of the Wagner Group or by third parties (e.g. credit insurance, receivables management, indications of criminal acts).
The personal data processed by us in this context consist of personal data / identification data (name, address, contact data, user ID, etc.), data from the fulfillment of our contractual obligations (bank data, history, authorizations, etc.), data provided by us of consent (e.g. product test data from test takers who may also include health data such as responses to test products) and other data comparable to those categories.
The processing of personal data is necessary for the fulfilment of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject. If you make use of additional services, your data will be processed to the extent necessary to provide these additional services.
The processing of personal data on behalf of the customer takes place exclusively in accordance with instructions and within the framework of legal regulations.
If you have consented to certain processing of your personal data (e.g. newsletter dispatch, participation in advertising campaigns), your personal data will be processed lawfully on the basis of this consent. You can revoke your consent at any time with effect for the future. This also applies to declarations of consent that you have given us before the DS-GVO has entered into force, i.e. before May 25, 2018 Since the revocation of a consent is valid for the future, it does not affect the effectiveness of the processing until the time of the revocation.
In addition, we as a company have various legal obligations (e.g. tax laws, money laundering laws). These include identity checks, fraud and money laundering prevention, the fulfilment of tax control and reporting obligations as well as the assessment and control of risks in the company and the Wagner Group.
The company ensures the implementation of appropriate technical and organisational measures for data security by internal regulations and - if the data are processed by an external service provider - by corresponding contractual agreements, for example by using the EU standard contract clauses for data processing outside the European Union.
Please arrange for any necessary changes to your data in good time. You can contact the relevant departments or the data protection officer to clarify questions about your data and request both information and the correction / deletion of incorrect or no longer required data.
In compliance with the statutory provisions and the existing internal regulations, the departments that require your data to fulfil our contractual and statutory obligations have access to it. Similarly, service providers and vicarious agents (e.g. IT service providers, logistics, telecommunications, debt collection, consulting, financial services, marketing agencies, insurance companies…) employed by us may access your data for these purposes, provided that you maintain the confidentiality and integrity of the data in particular.
In addition, your personal data may be transferred to recipients for whom you have given us your consent. The same applies to bodies to which we may transfer personal data on the basis of a balance of interests.
the transmission is necessary to protect our legitimate interests and your interests or fundamental rights and freedoms do not outweigh the protection of your personal data.
With the consent of the data subject or on the basis of legal regulations to combat money laundering, the financing of terrorism or other criminal acts and on the basis of a balance of interests, personal data will in individual cases be transmitted to the European Union in compliance with the data protection level.
Compliance with legal retention periods (e.g. German Commercial Code (HGB), German Banking Act (KWG), German Money Laundering Act (GwG). The storage periods mentioned there are generally 6 to 10 years.
Fulfilment of justified retention periods (e.g. for customer service, inquiries, log files).
Securing of evidence within the statutory statute of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years. The regular limitation period is 3 years.
If we or a third party process your data on the basis of the above-mentioned weighing of interests, we will delete your personal data as soon as our legitimate interest no longer exists. The above-mentioned exceptions also apply here.
Data deletion takes place within the deletion routines implemented by the process owners.
In the event of consent, the data will be deleted as soon as the consent is revoked for the future, unless one of the above-mentioned exceptions exists.
To protect against the various threats to our IT - e.g. by malware, hacker attacks, spam - and the intellectual property, different procedures are used in which the information exchanged is checked for viruses, for example, and the connection data for anomalies. When anomalies are discovered, the relevant documents and connection data can be analyzed.
In order to comply with existing supply and payment restrictions - for example on companies and persons listed on various government lists - a comparison can be made against this list.
In addition, in suspicious cases, in official investigations and to defend against claims against our company, an investigation and, if necessary, the surrender of data and documents on the persons concerned may be necessary. In all cases, our internal regulations, the legal requirements and the personal rights of those affected are observed.
In addition, pursuant to Art. 77 DS-GVO in conjunction with § 19 BDSG, you have a right of appeal to the responsible data protection supervisory authority. A given consent can be revoked at any time.
Within the framework of the legal transaction to be carried out with you, you are obliged to provide the personal data required for the execution of the legal transaction and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect.
If you do not provide certain personal data, you may suffer disadvantages or the legal transaction may not be concluded.
According to Art. 22 of the DS-GVO, automated decisions can only be taken if they are necessary for the conclusion or fulfilment of a contract or if they are permitted by law or if they are legitimised by the express consent of the person concerned. If we use such procedures in individual cases, you will be informed about this and about your associated rights within the framework of legal requirements.
Some of your data will be processed automatically in order to evaluate certain personal aspects (profiling). For example, we are required by law and regulation to combat money laundering, terrorist financing and asset-polluting crimes. In this context, data analyses are also carried out.
You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is based on Art. 6 (1)(e) (data processing in the public interest) or (f) (data processing on the basis of a balance of interests); this also applies to profiling based on these provisions. If you object, we will no longer process your personal data. Anything to the contrary shall only apply if we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.
The objection can be made form-free with the subject “objection” stating your name, address and, if applicable, contact data and should be addressed to the data protection officer.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77
 § 19
 Art. 22
 Art. 6