Szaidel Cosmetic GmbH
Phone: +49 6372 9122-0
Fax: +49 6372 9122-80
CEO: Thorsten Molter
© 2017 szaidel-cosmetics.com
All rights reserved.
Responsible for contents according to § 10 paragraph 3 MDStV:
Thorsten Molter (adress like above)
Please note our disclaimer.
// Data protection policy
This data protection policy provides information about the processing of personal data on the website of the company Szaidel Cosmetic GmbH, represented by its Managing Director Thorsten Molter, Fabrikstrasse 9, D-66892 Bruchmühlbach-Miesau, telephone: +49 6372 9122 -0, fax: +49 6372 9122-80, www.szaidel-cosmetics.de.
Visits to the website
During visits to our website www.szaidel-cosmetics.de, data are automatically sent via the Internet browser used by the visitor to the server of this website and temporarily stored within a log file. Until they are automatically erased, the following data shall be stored without further input from the visitor:
- IP address of the visitor’s device,
- date and time of access by the visitor,
- name and URL of the page visited by the visitor,
- website from which the visitor has arrived on the company’s website (known as the “referrer URL”),
- browser and operating system of the visitor’s device and the name of the access provider used by the visitor.
The processing of these personal data is justified in accordance with Article 6, paragraph 1, sentence 1, point f) of the GDPR. The company has a legitimate interest in the data processing for the purpose of
- promptly establishing the connection to the company’s website,
- enabling userfriendly utilisation of the website,
- detecting and ensuring the security and stability of the systems,
- facilitating and enhancing administration of the website.
Processing is expressly not performed for the purpose of gaining personal information about the visitor of the website.
Visitors may send messages to the company via an online contact form on the website. In order to be able to receive a response, the provision of a valid email address is required as a minimum. Any other information may be provided voluntarily by the person making the enquiry. By sending the message via the contact form, the visitor consents to the processing of the personal data transmitted. Data processing shall take place solely for the purpose of handling and responding to enquiries received via the contact form. This is done on the basis of the voluntarily given consent in accordance with Article 6, paragraph 1, sentence 1, point a) of the GDPR. The personal data collected for the use of the contact form shall be automatically erased once the enquiry has been processed and no reasons are given for further storage (for example, subsequent commissioning of our company’s services).
Disclosure of data
Personal data shall be transmitted to a third party if
- the data subject has expressly consented to this as set down in Article 6, paragraph 1, sentence 1, point a) of the GDPR,
- disclosure in accordance with Article 6, paragraph 1, sentence 1, point f) of the GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to believe that the data subject has an overriding legitimate interest in the nondisclosure of his or her data,
- a legal obligation exists in respect of the transmission of data as set down in Article 6, paragraph 1, sentence 1, point c) of the GDPR, and/or
- this is necessary as per Article 6, paragraph 1, sentence 1, point b) of the GDPR for the performance of a contractual relationship with the data subject.
In other cases, personal data shall not be disclosed to third parties.
Your rights as a data subject
To the extent that your personal data are processed in the course of the visit to our website, you shall enjoy the following rights as a “data subject” under the terms of the GDPR.
You may request information from us about whether your personal data are processed by us. No right of access exists if the provision of the desired information has to remain confidential for other reasons, in particular because of a third party’s overriding legitimate interest. An exception may be constituted by an obligation to provide the information if, particularly taking into account imminent harm, your interests outweigh the interest in confidentiality. The right of access is also excluded if the data are being stored only because they may not be erased due to statutory retention periods or are being used solely for the purposes of data backup or data protection monitoring, provided that the provision of information would require a disproportionate amount of effort and the processing for other purposes is excluded because of appropriate technical and organisational measures. If, in your case, the right of access is not excluded and your personal data are being processed by us, you may request information from us regarding the following details:
- purposes of the processing,
- categories of your personal data being processed,
- recipients or categories of recipients to whom your personal data are being disclosed, in particular recipients in third countries,
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
- the existence of the right to rectification or erasure or restriction of processing of personal data concerning you or a right to object to such processing,
- the existence of a right to lodge a complaint with a supervisory authority for data protection,
- where the personal data have not been collected from you as the data subject, the available information as to the source of the data,
- as the case may be, the existence of automated decisionmaking, including profiling and meaningful information about the logic involved as well as the significance and envisaged consequences of automated decisionmaking,
- as the case may be, in the event of transmission to recipients in third countries where no decision of the EU Commission exists concerning the adequacy of the level of protection as set down in Article 45, paragraph 3 of the GDPR, information on which appropriate safeguards are envisaged in accordance with Article 46, paragraph 2 of the GDPR.
Rectification and completion
In the event that you determine that we hold inaccurate personal data about you, you may request that we immediately rectify such inaccurate data. Where personal data related to you is incomplete, you may request that it be completed.
You shall have a right of erasure (“right to be forgotten”) provided that the processing is not necessary for the purpose of exercising the right to freedom of expression, the right to information or for the performance of a legal obligation or for performing a task that is in the public interest and one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were processed.
- The justification for the processing was based solely on your consent that you have withdrawn.
- You have lodged an objection to the processing of your personal data that we have made public.
- You have lodged an objection to the processing of personal data that we have not made public and there are no overriding legitimate reasons for the processing.
- Your personal data have been processed unlawfully.
- The erasure of the personal data is necessary for the performance of a legal obligation to which we are subject.
No right to erasure shall exist if, in the event of legitimate nonautomated data processing, the erasure is impossible or is only possible with a disproportionate amount of effort because of the specific nature of the storage and your interest in the erasure is low. In this case, erasure shall be replaced by restriction of processing.
Restriction of processing
You may request that we restrict processing if one of the following reasons applies:
- You dispute the accuracy of the personal data. In this case, the restriction may be requested for the period of time that enables us to verify the accuracy of the data.
- The processing is unlawful and you are requesting that instead of erasure we restrict the use made of your personal data.
- Your personal data are no longer needed by us for the purposes of processing but you require those data for the establishment, exercise or defence of legal claims.
- You have lodged an objection in accordance with Article 21, paragraph 1 of the GDPR. Restriction of processing may be requested provided that it has not yet been determined whether our legitimate reasons outweigh your reasons.
Restriction of processing means that the personal data are processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest. We are obliged to notify you before we remove the restriction.
You shall have a right to data portability provided that the processing is based on your consent (Article 6, paragraph 1, sentence 1, point a) or Article 9, paragraph 2, point a) of the GDPR) or on an agreement to which you are a party and the processing is carried out by means of automated procedures. In this case, the right to data portability includes the following rights provided that other persons’ rights and freedoms are not infringed as a result of this: You may request that we provide you with the personal data that you have made available to us in a structured, commonly used and machinereadable format. You shall have the right to transmit those data to another data controller without hindrance from us. Where technically feasible, you may request that we transmit your personal data directly to another data controller.
If the processing is based on Article 6, paragraph 1, sentence 1, point e) of the GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or on Article 6, paragraph 1, sentence 1, point f) of the GDPR (legitimate interests pursued by the controller or by a third party), you shall have the right to lodge an objection at any time to the processing of personal data concerning you for reasons arising from your specific situation. This shall also apply to profiling based on Article 6, paragraph 1, sentence 1, point e) or point f) of the GDPR. After the exercise of right to object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You may lodge an objection at any time to the processing for direct marketing purposes of personal data relating to you. This shall also apply to any profiling that is related to such direct marketing. Following the exercise of this right, we shall no longer use the personal data concerned for direct marketing purposes.
You may communicate the objection informally by telephone, by email, by fax or to our postal address listed for our company at the head of this data protection policy.
Withdrawal of consent
You shall have the right at any time to withdraw any consent given with future effect. The withdrawal of consent may be communicated informally by telephone, by email, by fax or to our postal address. The withdrawal of consent shall not affect the lawfulness of processing that has been undertaken based on consent given before its withdrawal. Upon receipt of the withdrawal, data processing based exclusively on your consent shall be discontinued.
If you are of the opinion that the processing of personal data concerning you is illegal, you may lodge a complaint with a supervisory authority for data protection that is responsible for your place of residence or place of the alleged infringement.
Status and updating of this data protection policy
This data protection policy represents the version in force as of 25 May 2018. We reserve the right to update the data protection policy from time to time in order to enhance data protection and/or to adapt to changes in practice or jurisprudence.