0

Data Protection Declaration

Data protection

Website data protection declaration, plus information on the data subjects according to Articles 13 and 14 of the EU General Data Protection Regulation

General details

Details of the responsible entity
Company: ICB innovative cosmetic bands GmbH
Legal representatives: Helmut Baurecht, Matthias Baurecht, Stefan Neumeyer
Address: Gaußstraße 13, 85757 Karlsfeld
Tel.: 0049 8131 390 – 05
Email: online@anny-cosmetics.com

Contact details of data protection officer: datenschutz@artdeco.com

General data processing information

Relevant data: Personal data is only collected if you provide it to us of your own accord. No personal data beyond this scope will be collected. Any processing of your personal data that goes beyond the scope of the legal permissions will only be carried out on the basis of your express consent.

Purpose of processing: Contractual implementation.

Categories of recipient: Public bodies in the event of overriding legal provisions. External service providers or other contractors.
Other external bodies insofar as the data subject has given his/her consent or transmission is permissible for overriding interests.

Third country transfers: Within the permissible scope of the contractual implementation, processors outside the European Union may also be used.

Duration of data storage: The duration of the data storage depends on the legal storage obligations and is usually ten years.

Specific details of the website

Use of own “cookies” required for the website display

This website uses its own “cookies” to store settings required for website viewing (“cookies” are records sent by the web server to the user’s browser and stored there for later retrieval). No personal data is stored in our own “cookies”. You can generally prevent the use of “cookies” if you prohibit the storage of “cookies” in your browser.

The use of YouTube videos with the consent of website visitors

This website uses YouTube Video, a video player service provided by Google Ireland Limited (“Google”), based on the consent of website visitors. When you visit a page with an embedded video, a connection to Google’s servers is established and the content is displayed on the website by notifying your browser (Data subject: including: Device information, IP address, Referrer URL, Videos viewed.). If you are logged in to Google at the same time, this information will be assigned to your member account at YouTube. You can prevent this by logging out of your member account before visiting our website. The information generated by the cookie about your use of this website will also be transmitted to and stored by Google on servers in the United States. Information on what data is processed by Google and for what purposes can be found in the Google privacy policy:
https://policies.google.com/privacy?hl=de&gl=de#infocollect

The use of Hotjar with the consent of website visitors

This website uses Hotjar, a web analytics service provided by Hotjar Limited (Hotjar), based on the consent of website visitors. Hotjar will use cookies to collect data about user behavior and may also process information provided by you as part of surveys and feedback features embedded on our website. The information generated by the cookie about your use of this website may also be transmitted to a server in the U.S. and stored there. Information about what data is processed by Hotjar and for what purposes it is used can be found in Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy

Information on further data processing procedures

Specific information about the application process

Relevant data: Application details

Purpose of processing: Implementation application procedure.
Categories of recipient: Public bodies in the event of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies, subject to the data subject having already given his/her consent or where transmission is permissible for reasons of overriding interest, including customers and interested parties in the context of order acquisition.

Third country transfers: Within the permissible scope of the contractual implementation, processors outside the European Union may also be used.

Duration of data storage: Application data is generally deleted within four months of notification of the decision, unless consent has been given for data to be stored for a longer period in the context of inclusion in the applicant pool.

Specific information on the processing of customer/prospect data

Relevant data: Data provided for the performance of the contract and, where applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Contract execution, including quotations, orders, sales and invoicing, quality assurance.

Categories of recipient: Public bodies in the case of overriding legal provisions

External service providers or other contractors, including for data processing and hosting, shipping, transport and logistics, service providers for printing and mailing information. Other external bodies, subject to the data subject having already given his/her consent or where transmission is permissible for reasons of overriding interest, including the electrical transmission of information or quality assurance purposes.

Third country transfers: Within the permissible scope of the contractual implementation, processors outside the European Union may also be used.

Duration of data storage: The duration of the data storage depends on the legal storage obligations and is usually ten years.

Specific information on the processing of employee data

Relevant data: Data provided for the performance of the contract and, where applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Contract implementation within the scope of the employment relationship.

Categories of recipient: Public authorities in the case of overriding legal regulations, e.g. tax office, social insurance agency, employers’ liability insurance association. External service providers or other contractors, including for data processing and hosting, payroll accounting, travel expense accounting, insurance services and vehicle use. Other external bodies insofar as the data subject has given his/her consent or transmission is permissible for overriding interests, including order acquisition, insurance benefits.

Third country transfers: Within the permissible scope of the contractual implementation, processors outside the European Union may also be used.

Duration of data storage: The duration of the data storage depends on the legal storage obligations and is usually ten years.

Specific information on the processing of supplier data

Relevant data: Data provided for the performance of the contract and, where applicable, any additional data for processing on the basis of your express consent.

Purpose of processing: Contract execution, including inquiries, purchasing, quality assurance.

Categories of recipient: Public authorities in the case of overriding legal provisions, e.g. tax office, customs authorities. External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing. Other external bodies insofar as the data subject has given his/her consent or transmission is permissible for overriding interests.

Third country transfers: Within the permissible scope of the contractual implementation, processors outside the European Union may also be used.

Duration of data storage: The duration of the data storage depends on the legal storage obligations and is usually ten years.

Specific details of the use of the video conferencing/webinar software

Relevant data: Data provided for the use of the video conferencing software or the webinar software (esp. first name, last name, email address; optionally: Audio transmission; optional: Image transmission; optional: Questions when using chat functions); to the extent technically required, processing of data from your system to establish the connection with the provider of the conferencing software.

Purpose of processing: Conducting video conferences or webinars.

Categories of recipient: Public bodies in the event of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting. Other external bodies insofar as the data subject has given his/her consent or transmission is permissible for overriding interests.

Third country transfers: Processors outside the European Union are used (here: United States of America); standard contractual clauses have been concluded with the service provider accordingly.

Duration of data storage: Video conferences are only recorded with the previously documented consent of the participants. The technical data is deleted if it is no longer required. The duration of the data storage is dictated by legal storage obligations and is usually ten years.

Further information and contacts

In addition, you may, at any time, exercise your rights to access, correct or erase said data, restrict processing or exercise your right to object to processing thereof, as well as exercise the right to data portability. We provide details below on how to contact us via email or postal mail. You are also entitled to contact the data protection supervisory authority in the event of complaints.

Version current as of July 2022