Source: https://www.lavera.com/en/privacy-policies/?mobile=1%27A
Timestamp: 2020-07-09 10:58:56
Document Index: 77400917

Matched Legal Cases: ['Art. 4', 'Art. 6', 'art.\n5', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 3', 'Art. 6', 'Art. 6', 'Art. 3', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policies | lavera Naturkosmetik Privacy Policies | lavera Naturkosmetik
1) Information on the gathering of personal data
The Controller pursuant to Art. 4(7) EU GDPR is:
Personally liable shareholder/company:
2. Haase Verwaltungs GmbH Wennigsen, Hanover Commercial Register Court, (Commercial Register, Companies’ Section) Record No. 202460
Executive Board: Thomas Haase
VAT ID: DE 266832075
Commercial register: HRA (Commercial Register, Partnerships' Section), Record No. 201478
Tel.: + 49-511 54549-700
Fax: + 49- 510 39391-7984
You can reach our Data Protection Officer at datenschutz@lavera.de or our postal address, marking it for the attention of “The Data Protection Officer”.
Laverana GmbH & Co. KG is committed to protecting the personal rights of anyone whose personal data is processed at our company. Your personal data (e.g. form of address, name, address, e-mail address and user conduct) will only be processed by us in line with the data privacy provisions.
The provisions below inform you about the nature, scope and purpose of gathering, processing and using personal data. This data privacy statement only relates to our web pages. Should you be redirected to other pages via links set on our pages, please find out there about how your data is handled.
c) When you get in touch with us by e-mail or via a contact form, in particular via our consumer portal, the data given by you (in particular your e-mail address, name and telephone number) and any further information that you provide us with in the e-mails, will be saved by us in order to answer your questions. We delete or anonymise the data arising in this context once it is no longer necessary to save it, or limit the processing, should statutory archival obligations exist.
d) Should we resort to commissioned service providers for individual functions of our range of services or should we wish to use your data for commercial purposes, we will inform you about the respective procedures below in detail. In this context, we will also specify the criteria laid down for the period of storage.
a) You have the following rights vis-à-vis us in regard to the personal data concerning you:
the right to correction or deletion;
the right to oppose said processing;
the right to the data being transmittable.
b) In addition, you are entitled to complain to a data protection supervisory authority about the processing of your personal data by us.
3) Gathering of personal data when visiting our website
a) When you use the website merely to obtain information, even if you do not register or transmit information to us in any other way, we will only gather the personal data that your browser transmits to our servers. If you would like to view our website, we gather the following data, that is technically necessary for us, in order to display our website to you and ensure its stability and security (the legal basis is Art. 6(1)(1)(f) GDPR);
Operating system and its graphic user interface
b) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser used by you, and by means of which the organisation that places the cookie (in this case, us) receives certain information. Cookies are not able to execute any programs or transmit viruses to your computer. They serve the purpose of making the range of our online services more user-friendly and effective.
c) Use of cookies:
i)	This website uses the following types of cookies, the scope and functioning of which is explained below:
(1)	Transient cookies are automatically deleted when you close the browser. This in particular includes session cookies. They save a so-called session ID, with which various requests of your browser can be allocated to the joint session. In this way your browser can be recognised again if you return to our website. The session cookies are deleted once you log out or close the browser.
(2)	Persistent cookies are automatically deleted after a predefined period of time, which may vary, depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
ii)	You can configure your browser setting in line with your wishes, and, for example, refuse to accept third party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
We maintain up-to-date technical measures, to guarantee the data security, in particular in order to protect your personal data from any data transmission risks, as well as from third parties becoming aware of it. These are accordingly always adapted in line with the current state of the art.
5) Further functions and services of our website
a) Beside the purely informational use of our website, we offer various services that you can make use of if you are interested. For that purpose, you generally need to specify further personal data that we use to provide the respective service and for which the data processing principles specified above apply.
b) In order to process your data, we sometimes make use of external service providers. These are chosen carefully and instructed by us, are bound to our instructions, and are monitored regularly.
c) We may, furthermore, pass your personal data on to third parties if participation in campaigns, sweepstakes, the conclusion of contracts or similar services is offered by us in conjunction with partners. You can obtain further information on this when you enter your personal data or below in the description of our services.
d) Should our service providers or partners have their registered office in a country that falls outside the European Economic Area (EEA), we will inform you about the consequences of such a circumstance in the description of the services.
6) Objection to or revocation of the processing of your data
a) Should you have given consent to your data being processed, you may revoke it at any time. Such a revocation influences the admissibility of the processing of your personal data, once you have declared it to us.
b) Should we base the processing of your personal data on the weighing up of interests, you may file an objection against such processing. This is the case if the processing is in particular not necessary in order to fulfil a contract with you, which is in each case explained by us in the subsequent description of the functions. When making such an objection, we ask you to state the reasons why we are not supposed to process your personal data in the way that we have been doing. In the event of your making a substantiated objection, we will review the circumstances and will either cease processing the data or adapt it, or point out to you our mandatory reasons, worthy of protection, based on which we will continue to process your data.
c) You can, of course, object to the processing of your personal data for advertising purposes and data analysis at any time. You can inform us about your objection to your data being used for advertising purposes
7) Newsletter/Blogging newsletter
a) For subscribing to our newsletter (by that we mean the regular newsletter and the blogging newsletter), we use the so-called double opt-in procedure. That means that, once you have given us your e-mail address, we send you a confirmation e-mail to the e-mail address specified, where we ask you to confirm that you wish to be sent the newsletter. If you do not confirm it within 24 hours, your subscription is automatically cancelled. Should you confirm that you wish to receive the newsletter, we store your e-mail address until such time as you unsubscribe from the newsletter. Your e-mail address is stored solely for enabling us to send you the newsletter. Whenever you register with us and confirm your registration we moreover save your IP addresses and the time, so that we are able to provide evidence of your registration and prevent any abuse of your personal data.
b) The only mandatory detail for being sent the newsletter is your e-mail address. Once you have confirmed, we save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6(1)(1)(a) GDPR.
c) You may revoke your consent to being sent the newsletter at any time. You can declare your revocation by clicking on the link provided in any newsletter e-mail or unsubscribe on the web page accessible at the following link: www.lavera.de/newsletter-abbestellen. Your data specified will not be passed on to third parties.
d) We would like to point out that, when we send you the newsletter, we evaluate your usage pattern. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. With the data obtained in this way we create a user profile, so that we can customise the newsletter in line with your individual interests. When you read our newsletter, we record what links you click on in it, and, based on that, keep a note of what interests you personally. We link said data to actions carried out by you on our website. You can object to such tracking at any time, by clicking on the separate link that is provided in every e-mail, or inform us by contacting us in another way. The information will be stored for as long as you have subscribed to the newsletter. Once you unsubscribe, we store the data purely for statistical purposes, and anonymously.
8) Use of the dealer and press portals
a)	If you would like to use our dealer portal, you need to register at www.lavera.de/haendlerbereich/haendler-registrierung/, giving details of your contact and customer data (user name, password, name, company, customer number, if it is to hand, whether you purchase the products directly or indirectly, the type of dealer, street address, house number, postcode, town/city, country, telephone number and e-mail address). If you register to use the dealer portal, we save the above-mentioned contact and customer data. We continue to save any further data given by you voluntarily for the period during which you use the portal, unless you delete it earlier. You can log on to the dealer portal at www.lavera.de/haendlerbereich/login/, based on your login details. You can delete your account at the dealer portal at any time by sending an e-mail to info@lavera.de. Your data stored in connection with the dealer portal will, in this case, be deleted.
b)	To register for the press portal, please send an e-mail to presse@lavera.de, giving your contact details (name, street address, house number, postcode, town/city, country, telephone, e-mail address). We will process your enquiry without delay and provide you with the login details. If you register to use the press portal, we save the above-mentioned contact data. We continue to save any further data given by you voluntarily for the period during which you use the portal. You can delete your account at the press portal at any time by sending an e-mail to presse@lavera.de. Your data stored in connection with the press portal will, in this case, be deleted.
c)	The legal basis is Art. 6(1)(1)(f) GDPR.
9) The use of Google Analytics
a)	We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, i.e. text files which are stored on your computer and which enable an analysis of the use of the website by you. The information generated by the cookie on your use of this website is usually transferred to a server of Google in the USA and saved there. We use IP anonymisation on this website, i.e. your IP address is truncated by Google within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a server of Google in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, in order to compile reports on the website activities, and in order to provide the website operator with further services associated with the use of the website and Internet.
b)	The IP address transmitted by your browser within the scope of Google Analytics is not merged with any other data of Google.
c)	You can, moreover, prevent the data generated by the cookie which relates to your use of the website (incl. your IP address) from being recorded by Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout
d)	We use Google Analytics to be able to analyse the use of our website and regularly enhance it. The statistics obtained help us to enhance our website and design it in a more interesting way for you, as the user. For the exceptional cases, where personal data is transmitted to the USA, Google has submitted to the EU/US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(1)(f) GDPR.
e)	Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms and conditions of use: www.google.com/analytics/terms/de.html; overview on data privacy: www.google.com/intl/de/analytics/learn/privacy.html, and the data privacy statement: www.google.de/intl/de/policies/privacy.
10) Google-Maps
a)	On this website we use the services of Google Maps. We can thereby show you interactive maps directly on the website and enable you to use the map function conveniently.
b)	Through the visit to the website Google obtains the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in Art. 3 of this statement is transmitted. This is done irrespective of whether Google provides a user account, via which you are logged in, or whether no user account exists. If you are logged into Google, your data is directly assigned to your account. If you do not wish it to be allocated to your profile at Google, you need to log out prior to activating the button. Google stores your data as a usage profile and uses it for the purpose of advertising, market research and/or designing its website in line with your requirements. Such an evaluation is in particular performed (even for non-logged in users) to provide customised advertising and to inform other users of the social network about your activities on our website. You have a right of opposition to such a user profile being created, in regard to which you need to contact Google in order to exercise said right.
c)	You can obtain further information on the purpose and scope of gathering data and having it processed by the plug-in provider in the provider’s data privacy statements. There you will also receive further information on your rights and setting options to protect your privacy, in this respect: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU/US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Maps is Art. 6(1)(1)(f) GDPR.
11) Cookie information
Our website uses so-called session or flash cookies. Cookies are text files that are stored in the internet browser or by the internet browser in the user's computer system. When a user visits a website, a cookie can be stored in his or her operating system. This cookie contains a characteristic string of characters that permits the browser to be uniquely identified at the next visit of this website. The legal basis for the processing of personal data by means of cookies is GDPR section 6.1.f. The use of technically required cookies serves the purpose of simplifying website use for the user. Some functions of our website cannot be provided without the use of cookies, as they require the browser to be recognized even after changing to another page. In addition, we also use so-called persistent cookies – insofar as you permit – which are used over and beyond the session ("multi-session cookies"). Especially these cookies serve to make the online service more user-friendly, effective and safe. The user data collected by means of technically required cookies will not be used to identify you.
Google Analytics functions for advertising reports
The user data collected by way of technically required cookies will not be used for the creation of user profiles. The processing of personal data is required to pursue our legitimate interests as per GDPR section 6.1.f. Cookies are stored in the user's PC and sent to our page by it. You thus have full control over the use of cookies as the user, and these cookies will be deleted again when the browser is closed. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Already stored cookies can be deleted at any time. This can also be done in an automated fashion. If cookies are deactivated, you may no longer be able to use all the website's functions.
Services provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereafter referred to as "Google"):
Google Remarketing (Google Analytics ad function remarketing)
We use the Google Remarketing application. This application enables our adverts to be displayed in your further internet use after visiting our website. This is done by way of cookies that are stored in your browser and help Google track and evaluate your user behaviour when visiting various websites. Google is thus able to discover your previous visit of our website. These cookies can be stored for up to 24 months. According to the information provided by Google, the data collected in the remarketing will not be merged with any personal data of yours possibly stored by Google. In particular, a pseudonymization is used in the remarketing, according to Google. The legal basis of the processing is GDPR 6.1.f.
You can prevent your inclusion in this tracking process in various ways: a) by the corresponding settings of your browser software, with the suppression of third-party cookies especially preventing the display of advertising from third-party providers; b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin; c) by deactivating the interest-related ads from providers included in the "About Ads" self-regulation campaign, by way of the link http://www.aboutads.info/choices, thus providing a setting that will be deleted when you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browser at the link http://www.google.com/settings/ads/plugin, e) by way of the corresponding cookie settings. We need to point out that you may not be able to make full use of all this offer's functions in this case.
Further information on data protection at Google is available here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can also visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
In addition to the standard functions, we also use the expanded functions of Google Analytics on this website. The Google Analytics advertising functions implemented in this website include: reports on impressions in the Google display network; Google Analytics reports on the performance in relation to demographic features and interests; integrated services for which data are collected in Google Analytics for advertising purposes, including the collection of data via cookies for ad preferences and anonymous identifiers.
To this end and besides the data collected by way of the Google Analytics analysis tool, further data are also collected by way of Google cookies for ad preferences and anonymous identifiers for visits. These cookies can be stored for up to 26 months. We use this information to improve our online services. The legal basis of the processing is GDPR section 6.1.f.
You can prevent the use of Google Analytics ad functions in various ways: a) by setting your browser software accordingly; via the Google ad settings at https://www.google.com/ads/preferences/?hl=de; c) by means of the corresponding cookie settings, or d) by deactivation on the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. We need to point out that you may not be able to make full use of all this offer's functions in this case.
We use the remarketing function within the Google Ads service. The remarketing function helps us present users of our website with ads based on their interests on other websites included in the Google ad network (in the Google search or on YouTube, so-called "Google ads" or on other webpages). This involves an analysis of the users' interactions on our website, e.g. concerning which offers interested them, in order to be also able to display targeted ads to users based on their interests on other websites after visiting ours. To do this, Google stores a number in the browsers of users visiting specific Google services or websites in the Google display network. This number is referred to as a "cookie", stored in your browser for up to a month, and used to register the visits of these users. The number only serves to uniquely identify a web browser of a specific device and not the identification of a person, with no personal data being stored. The legal basis for the processing is GDPR section 6.1.f.
We rely on the Google Ads Conversion service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). We are able to measure the success of individual advertising measures in relation to the data of the advertising campaigns. This serves our interest in displaying adverts to you which are of interest to you, in making our website more interesting for you, and ensuring fair billing of advertising costs.
These advertising media are delivered by Google by way of so-called "ad servers", for which we use ad server cookies enabling specific success parameters such as the display of advertising or user clicks to be measured. If you are referred to our website by a Google ad, Google Ads will store a cookie in your device. These cookies will lose their validity after 30 days as a rule and are not meant to serve your personal identification. The analysis values stored for this cookie usually include the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user does not wish to be addressed any longer).
These cookies enable Google to recognize your internet browser. If a user visits specific pages in the website of an Ads client before the cookie stored in his or her computer has expired, Google and the client will both be able to recognize that this user has clicked the ad and was referred to this page. Every Ads client is allocated a different cookie. Cookies can thus not be tracked via the websites of Ads clients. We do not collect or process any personal data in the mentioned advertising measures ourselves, but are merely provided with statistical evaluations by Google. These evaluations help us discover which of the applied advertising measures are particularly effective. We are not being provided with any further data from the use of advertising media, and are especially unable to identify users with the help of this information. The legal basis for the processing is GDPR section 6.1.f.
Based on the marketing tools used, your browser will automatically establish a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google by means of these tools, and are therefore informing you in keeping with our state of knowledge: The integration of Ads Conversion provides Google with the information that you have visited the respective part of our internet presentation or clicked an ad of ours. If you are registered with a Google service, Google will be able to relate the visit to your account. Even if you are not registered with Google and/or have not logged in, the provider may possibly still gain knowledge of your IP address and store it.
Retargeting with NE.R.O.
We use the NE.R.O ad server service provided by the ad service provider ADITION technologies AG, Oststrasse 55, D-40211 Düsseldorf. This uses browser cookies and mobile identifiers to mark and recognize devices (web browsers or mobile apps).
Browser cookies are small text files or simple data base entries that will be stored by your browser for up to 180 days after the contact. The data in the cookies can only be read by the system that wrote them. To identify devices in ad delivery, the cookies installed by the ad servers contain a unique, pseudonymous session number (identifier). When a cookie is deleted, the identifier will also be irrevocably deleted from the device. The cookies used by the systems will not do any damage in your device (e.g., computer/tablet), and in particular not contain any viruses. You can prevent the storage of cookies by the corresponding settings of your browser, but may no longer be able to use all the functions of the platform or visited website in this case. The same applies to the deletion of stored cookies.
The platform can also serve the ad delivery to mobile applications (apps). To achieve this, the apps can use a so-called mobile identifier provided by the operating system of your device (Apple iOS or Google Android). This identifier is used in the same way as a cookie containing a pseudonymous session number. The systems of the advertising service providers can neither change nor delete the identifier by themselves, but you can prevent the use of identifiers by a corresponding setting in the app and/or your operating system, in which case you may no longer be able to use all the functions of the app and/or system. The same also applies to changes or deletion of the identifier, depending on the app and operating system. Please see the data protection advice of the respective app and your system for details.
The systems of our advertising service provider are used for the following purposes in the course of online campaigns; the legal basis is always GDPR section 6.1.f:
The collected information serves the following management and measurement processes: management and measurement of the number of ad displays overall and per device (web browser or mobile app), management of the sequence of individual advertising media displayed on a device, measurement of the responses to advertising media (clicks on or mouse movements across advertising media), measurements concerning which individual page of an advertising marketer an advert is displayed on, measurement of whether an ad display was visible loaded to the screen of a device. Pseudonymous browser cookies or mobile identifiers are used to identify the devices.
In the so-called targeting, the service provider tracks and processes your user behaviour on webpages of advertising clients or ad-bearing websites pseudonymously at our behest – meaning that no data which could be traced to a person are stored. These data are used for addressing devices with targeted advertising again, based on your user behaviour. The pseudonymous identifiers can also be allocated to advertising categories (e.g. presumed age between 18 and 35, or interest in cars). These categories will always apply to a larger group of devices, however, both individually and together. This means that we or our service provider are neither able to identify you personally by way of the advertising ID as such, nor of the categories assigned to this ID.
The tracking serves to relate user contacts with advertising displays on other websites (visual contacts and clicks on advertising banners) to later interactions on the advertising clients' websites. The collected data are statistically evaluated to enable the performance of media campaigns to be optimized.
You can always prevent the tracking of usage data by the system by installing an opt-out cookie. When you delete the cookies from your browser, the opt-out cookies will also be deleted. You will then need to repeat the opt-out again.
An opt-out option and further information on the data protection at Adition is available at: https://www.adition.com/kontakt/datenschutz/
12) Use of social media plug-ins
a)	We currently use the following social media plug-ins: Facebook and Instagram. In that respect, we use the so-called two-click solution. That means that if you visit our website, no personal data will be passed on the provider of the plug-in initially. You can recognise the provider of the plug-in via the marking on the box, going by its initial letter, or by the logo. We give you the opportunity to communicate directly with the provider via the button. Only if you click on the field marked and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding website of our online services. In addition, the data specified in Clause 3) of this statement is transmitted. In the case of Facebook, as per details given by the respective providers in Germany the IP address is anonymised immediately once the data is gathered. That means that, through the plug-in being activated, personal data of yours is transmitted to the respective plug-in provider and stored there (in the case of US-based providers, in the United States). The plug-in provider in particular undertakes the gathering of data using cookies.
b)	We neither have any control over the data gathered or the data processing procedures nor are we are aware of the full extent of the data gathered, the purposes of the processing or the storage periods. We also have no information about the deletion of the data gathered by the plug-in provider.
c)	The plug-in provider stores the data gathered about you as a usage profile and uses it for the purpose of advertising, market research and/or designing its website in line with user requirements. Such an evaluation is in particular performed (also for non-logged in users) to display customised advertising and to inform other users of the social network about your activities on our website. You have a right to object to such a user profile being created, in regard to which you need to contact the respective plug-in provider in order to exercise said right. Via the plug-ins we give you the opportunity to interact with the social networks and other users, so that we can improve our website and design it in a more interesting way for you as a user. The legal basis for the use of the plug-ins is Art. 6(1)(1)(f) GDPR.
d)	Data is passed on irrespective of whether or not you have an account with the plug-in provider or are logged in there. If you are logged in with the plug-in provider, your data gathered by us will be directly assigned to your account kept with the plug-in provider. If you press the activated button and link the page, for example, the plug-in provider also stores this information in your user account and notifies your contacts about it publicly. We recommend you to regularly log out after using a social network, in particular, however, prior to activating the button, as in this way you can avoid any of your user activities being assigned to your profile kept with the plug-in provider.
e)	You can obtain further information on the purpose and scope of gathering data and having it processed by the plug-in provider from these providers’ data privacy statements specified below. There you will also receive further information on your rights and setting options to protect your private sphere, in this respect.
f)	Addresses of the respective plug-in providers and URLs containing their data privacy policies:
i)	Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other, as well as www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU/US Privacy Shield, see www.privacyshield.gov/EU-US-Framework.
ii)	Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has submitted to the EU/US Privacy Shield, see www.privacyshield.gov/EU-US-Framework.
iii)	Social media plug-in of Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA; help.instagram.com/519522125107875
iv)	Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has submitted to the EU/US Privacy Shield, see www.privacyshield.gov/EU-US-Framework.
13) Integration of YouTube videos
a)	We have included YouTube videos in our online services, and these are stored at www.youtube.com and can be played back directly from our website. They are all included in “extended data privacy mode”, i.e. no data is transmitted to YouTube via you as a user if you do not play back the videos. Only if you play back the videos is the data referred to under
b) transmitted. We have no control over such data transmission. b)	Through the visit to the website YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in Art. 3 of this statement is transmitted. This is done irrespective of whether YouTube provides a user account, via which you are logged in, or whether no user account exists. If you are logged into Google, your data is directly assigned to your account. If you do not wish it to be allocated to your profile at YouTube, you need to log out prior to activating the button. YouTube stores your data as a usage profile and uses it for the purposes of advertising, market research and/or designing its website in line with your requirements. Such an evaluation is in particular undertaken (even for non-logged in users) to provide customised advertising and to inform other users of the social network about your activities on our website. You have a right of opposition to such a user profile being created. You need to contact YouTube in order to exercise said right.
c)	You can find further information on the purpose and scope of data being gathered and the processing of it by YouTube in the data privacy statement. There you can also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU/US Privacy Shield, see www.privacyshield.gov/EU-US-Framework.
(Status: 27/04/2018)
a) We collaborate with earnesto GmbH in order to respond to your queries and comments on our social media channels and in our blog, and to improve our customer contact. Insofar as earnesto GmbH stores your queries and comments, these are anonymised as far as possible, in particular through the deletion of the user name.
b) The processing of your data takes place exclusively in either a country which is a member of the European Union or otherwise in a country which is a signatory to the Agreement on the European Economic Area.
c) Insofar as your enquiry is necessary for the fulfilment of a contract or for the execution of pre-contractual measures, the legal basis for our processing is Art. 6, para. 1, sentence 1 (b) of the GDPR; otherwise the basis for our processing is our justified interest in the improvement and maintenance of our customer contact and, in this case, the legal basis is Art. 6, para. 1, sentence 1 (f) of the GDPR. In the latter case, you have the right to file an objection to the processing of your data. You can address this to our Data Protection Officer (datenschutz@lavera.de)
d) Further notes on the provider and their Privacy Statement can be found here: https://www.lavera.de/fileadmin/redaktion/datenschutzerklaerungen-pdf/earnesto-datenschutz-EN.pdf
15) Information on data processing with respect to the Facebook page
Information on data processing with respect to the Facebook page: www.facebook.com/laveradeutschland/, www.facebook.com/laveraitaliano/, www.facebook.com/laveraunitedkingdom/, www.facebook.com/laverafrance/
The Facebook page of Lavera serves to enable communication with Lavera fans, end consumers and customers and to highlight news items, products, campaigns and such like. Please note that in this respect user data may be processed outside the area of the European Union. However, Facebook is subject to the terms of the EU-US Privacy Shield and guarantees compliance with the data protection standards of the EU. (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).The Lavera natural cosmetics Facebook page, including the processing of personal user data, reflects the company’s justified interest in contemporary and supportive opportunities for information and interaction for and with our customers, fans and friends as defined in Art. 6 (1) lit. f. DSGVO (General Data Protection Regulation). The processing of data on this Facebook page is subject to an Agreement on the Joint Processing of Personal Data with Facebook. Processing of Personal Data by Facebook In its judgement of 5 June 2018, the Court of Justice of the European Union (CJEU) decided that the operator of a Facebook page is responsible together with Facebook for the processing of personal user data. Lavera is aware that Facebook processes user data for the following reasons: Advertising (analysis, compilation of customised adverts), Preparation of user profiles Market research. As a rule, the data are processed to satisfy the requirements of market research and advertising. From the usage pattern and the user’s interests thereby traced, it is possible to generate user profiles. The user profiles can then, for example, serve to place advertisements in and outside Facebook that can be assumed to reflect the interests of the user. To this end, cookies are stored on the user computers in which the usage pattern and user interests are saved. Furthermore, irrespective of the user’s hardware, it is also possible to save data in the user profiles (in particular if the user is a Facebook member and is actually logged in). The following data privacy statement gives information about the data processing carried out by Facebook: www.facebook.com/about/privacy/ . Facebook also provides options for the user to object to advertisements (so-called opt out). These can be set under the following link: www.facebook.com/settings. Via the so-called “insights” from the Facebook page, statistical data of various categories can be called up for Lavera. These statistics are generated and provided by Facebook. We, as site operators, have no influence on the generation and display of these statistics. We are not able to deactivate this function or prevent data being generated and processed. Requests for information and enquiries on the assertion of user rights can be addressed the most effectively to Facebook directly. Only Facebook has access to the user data and can take the necessary measures and provide information. If you no longer wish your data to be processed in future as described here, then you may cancel your user profile’s link to our page by using the functions “I don’t like this page any more” and/or “Cancel subscription to this page”. Best of all, just call up the Facebook page for Lavera natural cosmetics - lavera_Naturkosmetik - and make use of the buttons there to confirm. (https://www.facebook.com/laveradeutschland/)