Source: https://www.dr-scheller.com/en/our-service/data-protection/
Timestamp: 2019-04-19 06:16:15+00:00

Document:
Data protection | Dr. Scheller - zertifizierte Naturkosmetik, die wirkt.
We would hereby like to inform you of the ways and scope in which your personal data is processed by BCG Baden-Baden Cosmetics Group GmbH and your rights in accordance with data protection legislation.
1.	Who Is Responsible for Data Processing and How Do I Contact the Data Protection Officer?
2.	What Are the Purposes of and Legal Basis for Processing Data?
We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (new FDPA) as well as all other relevant laws only insofar as this is required to provide information on this website as well as our services on this website.
To ensure that the website functions, this information is saved in log files. Furthermore, this data is used for the purposes of ensuring that our information-technology systems are secure and optimizing our website.
Art. 6 (1) f) of the GDPR forms the legal basis for temporarily saving data and log files. If processing operations for personal data are based on acquiring the consent of the person affected, Art. 6 (1) a) of the GDPR serves as the legal basis.
Art. 6 (1) b) of the GDPR forms the legal basis for processing personal data in order to fulfill contracts in the case that one of the contracting parties is the person concerned. The same applies to implementing pre-contractual measures that necessitate processing operations. If our company is subject to a legal obligation for which it is necessary to process personal data, Art. 6 (1) c) of the GDPR serves as the legal basis. Art. 6 (1) d) of the GDPR is the legal basis in cases where vital interests of the persons concerned or another natural person necessitate the processing of personal data. If personal data is processed in order to protect the legitimate interests of our company or a third party, the interests, basic rights and fundamental freedoms of the person concerned are of secondary importance. Art. 6 (1) f) of the GDPR is the legal basis for processing data in this instance. Personal data can be passed onto our IT service providers for the purposes of making this website available.
We maintain up to date technical procedures to ensure data security, in particular in relation to the protection of your personal data against risks during data transfer and against third parties acquiring knowledge of these data. These procedures are continuously updated to reflect the current state of the art.
Furthermore, cookies will be stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to your browser, and through which certain information passes to the body responsible for setting the cookies (us, in this case). Cookies cannot execute programs or transfer viruses to your com-puter.
a)	Transient cookies are automatically deleted once you close the browser. This includes in particular session cookies. These store a session ID with which various queries from your browser can be as-signed to the same session. This enables your computer to be identified on a return visit to the web-site. The session cookies are deleted once you log out or close the browser.
b)	Persistent cookies are automatically deleted after a specific period of time, which may vary from cookie to cookie. You may delete the cookies at any time in the security settings of your browser.
c)	You may configure your browser settings as required and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that if you do so, you may not be able to use all of the functions of this website.
d)	The flash cookies used are not collected by your browser but by your flash plug-in. They store the necessary data independently of the browser you use and have no automatic expiry date. If you do not wish the flash cookies to be processed, you will have to install an add-on, e.g. “Clear Flash Cookies” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/clear-flash-cookies/) or Ado-be Flash Killer Cookie for Google Chrome.
e)	Analysis cookies. We use analysis cookies to improve the content and quality of our website. Analy-sis cookies enable us to understand how our website is being used, which allows us to optimize our services on an ongoing basis.
With your consent, you can subscribe to our newsletter; we use this newsletter as a means of informing you of the interesting products and services currently available. The goods and services advertised are specified in the declaration of consent. With regard to the procedure for registering for our newsletter, we use the ‘double opt-in’ process. This means that once you have specified your email address, we send you a confirmation email to the email address specified, asking you to please confirm that you would like to receive the newsletter. If you do not confirm that this is the case within a moderate period of time, your registration is deleted automatically. If you confirm that you would like to receive the newsletter, we save your email address until you unsubscribe from the newsletter. Your email is saved purely for the purpose of being able to send you the newsletter. Furthermore, when you register and confirm your registration, we save your IP address and the time so as to prevent any misuse of your personal data. An email address is the only information required for the newsletter to be sent. Specifying additional, specially designated information is voluntary and such information is used only for the purposes of personalizing the newsletter. All of this information is also fully deleted if the subscription to the newsletter is canceled. You can choose to withdraw your consent at any time with regard to receiving the newsletter. You can de-clare your choice to withdraw your consent by clicking on the link provided in each newsletter email, via email to info@dr-scheller.com or by means of sending a message via the contact details specified in the Legal Notice. Your data is not passed onto third parties. The consent of the user in accordance with Art. 6 (1) a) of the GDPR forms the legal basis for processing data once the respective user has registered to receive the newsletter. As soon as data collected for a par-ticular purpose is no longer required, it is deleted. Correspondingly, the data from newsletter subscribers is only saved for the duration of the subscription.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP ad-dress) will generally be transmitted to and stored by Google on servers in the United States. If IP anonymiza-tion is activated on this website, Google will truncate your IP address within the Member States of the Euro-pean Union or in other treaty States of the European Economic Area prior to transmitting it to the US. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. Google will use this information on behalf of the website provider for the purpose of evaluating your use of the web-site, compiling reports on website activity and providing the website provider with other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. You may prevent the collection for Google of the data (incl. your IP address) generated by cookies and relat-ed to your use of the website, and the processing of such data, by downloading and installing the browser plug-in that can be accessed at: tools.google.com/dlpage/gaoptout. or by using Google Analytics OptOut on the basis of a cookie. This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in truncated form, thereby preventing them from being traced to a specific person. If the data acquired about you can be attributed to a personal connection, this contact will be dismissed immediately and the personal data will be deleted without delay. We use Google Analytics so that we can analyze the usage of our website and improve it on a continuous basis. Using the statistics obtained, we can improve our services and make these more interesting for you as a user. In exceptional cases in which personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 (1) (1) f) of the GDPR. The legal basis for processing the personal data of users is Art. 6 (1) f) of the GDPR. Processing the person-al data of users enables us to analyze the browsing behavior of our users. By analyzing the data acquired, we are able to compile information about the use of the individual components that make up our website, which helps us to improve our site and how user-friendly it is on a continuous basis. Our legitimate interest in processing data lies in these objectives in accordance with Art. 6 (1) f) of the GDPR. Anonymizing the IP address means that the user’s interest with regard to the protection of personal data is sufficiently taken into account. The data is deleted as soon as it is no longer required for our recording purposes. Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy statement: www.google.de/intl/de/policies/privacy.
8.	Which Data Protection Rights Can I Enforce as a Concerned Party?
To withdraw any consent given to us at any point in time in accordance with Art. 7 (3) of the GDPR. This results in us no longer being permitted to continue data processing operations based on this consent in the future.
raise a complaint regarding data processing with a supervisory authority in accordance with Art. 77 of the GDPR. As a general rule, you can contact the supervisory authority in the area in which you normally live; alternatively, you can contact the supervisory authority of your workplace or our legal office. Please direct any requests for information, or queries or objections to the processing of your data via email to datenschutz@bcg-cosmetics.de or to the address listed in our Legal Notice.
We do not collect the personal data of minors. In the event that such data are collected unwittingly, they will be deleted without delay.
10.	Can I Object to My Personal Data Being Processed?
You have the right to object to your personal data being processed for the purposes of direct advertising without having to specify your reasons for doing so. If we process your data to protect legitimate interests, you can object to your data being processed for this purpose for reasons relating to your particular situation. In this case, we no longer process your personal data, unless we can establish compelling and legitimate reasons for processing the data that outweigh your interests, rights and freedoms or if the data is processed for the purposes of establishing, exercising or defending legal claims. In order to make the website available to users and ensure that the website operates correctly, it is neces-sary to record data and save this data in log files. As a result of this, users do not have the option of object-ing to data being processed in this manner. If log files are saved, they are deleted after seven days at the latest and the respective data is not pro-cessed further.
11.	Do I have the Option to Raise a Complaint?

References: Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 77