Privacy policy

1. Scope

The protection of personal data is very important to us. With the following information on data protection, we want to bring you closer to which personal data we process for which purposes while you are using our website.

The following information applies to all contents of the website www.beautylumis.com (hereinafter referred to as "offer")

The legal basis for data protection can be found in the EU General Data Protection Regulation (hereinafter referred to as GDPR) and the Federal Data ProtectionScope Act.

2. Definition

PERSONAL DATA

"Personal Data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.B. cookie) or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

PROCESSING

"Processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination;  restriction, deletion or destruction.

3.  Types of personal data

ACCESS DATA

Access data is data about each access to the server on which our website is located. The access data includes the name of the accessed website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

COOKIES

Cookies are small files that make it possible to store specific information related to the device on the access device.

INPUT DATA

If you register with us as a customer, fill out the contact form of our website, or contact us by other means (e.B. telephone, e-mail), we process the personal data that you enter in the respective form or communicate to us by other means (e.B. last name, first name, e-mail address, address)

4. Purposes of processing

ACCESS DATA

Our hosting provider collects the access data on our behalf for security reasons for fraud and abuse control as well as for the statistical recording of website use. The legal basis for the processing is Article 6 (1) sentence 1 f GDPR. For the processing of the IP address by third-party providers, see section 6.

COOKIES

Cookies serve on the one hand the user-friendliness of websites and thus the users (e.B. storage of login data). On the other hand, they can be used to record the statistical data of website use and to be able to analyze them for the purpose of improving our offers.

The legal basis for the use of cookies is Article 6 (1) (f) GDPR. Our legitimate interest in collecting data follows from the fact that we need the use of cookies for the purpose of user-friendliness of our website and optimization of our offers.

LOCATION DATA

If you use our institute finder, your position data (geographical coordination data) may be collected. Further information can be found under Section 6.

INPUT DATA

If you register as a customer, we use your personal data for the administration of your account (legal basis Art. 6 para. 1 sentence 1 b GDPR).

If you use our contact form or provide us with your personal data by other means, we will use it to process your request (legal basis Art. 6 para. 1 sentence 1 a, f GDPR). If you communicate with us via e-mail, your e-mails and the personal data provided therein will be transported on our behalf on the servers of our e-mail provider ALL-INKL.COM in order to be stored on our servers (legal basis Art. 6 para. 1 sentence a, f GDPR).

Our legitimate interest in data collection within the meaning of Art. 6 para. 1 f GDPR follows from the fact that we cannot process your request (registration, contact) without your data.

5. Data processing by third parties

HOSTING

Our website is operated on the servers of the hosting provider WEBFLOW.COM. This processes the personal data mentioned in section 3 on our behalf for the operation of our website and for the control of misuse. The legal basis for this is Art. 6 para. 1 sentence 1 f GDPR.

PLUG-INS, USAGE ANALYSIS

We integrate various services and content from third-party providers on our website. The integration may lead to the processing of your personal data. In addition, the integration of third-party content may result in a data transfer to countries outside the EU. Further information can be found under section 6.

The legal basis for the integration of the services and content is Article 6 (1) sentence 1 f GDPR. Our legitimate interest in data processing follows from the fact that we use the services of third parties for the purpose of user-friendliness of our website and optimization of our offers.

6.  Google analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is transmitted in the Egel to a Google server in the USA and stored there. However, if IP anonmysing is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout

We would like to point out that on this website Google Analytics is assigned the code "gat. anonymizelp();" has been extended to ensure an anonymous collection of IP addresses (so-called IP masking).

Further information on terms of use and data protection can be found under htps://support.google.com/analytics/answer/6004245?hl=de

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the use of Google Analytics is Article 6 (1) sentence 1 f GDPR. Our legitimate interest in data collection follows from the fact that we need the use of Google Analytics for the purpose of optimizing our offers.

7. Voluntary provision of data

The provision of personal data when visiting our website is neither required by law nor contract nor required for the conclusion of a contract. You are also not obliged to provide personal data when you visit our website, but the collection of access data when you visit our website takes place automatically. If you want to register as a customer, the registration data is required.

8. Duration of processing

ACCESS DATA, COOKIES

The access data is stored by our hosting provider for security reasons (e.B. to investigate misuse or fraud) for a maximum of 6 months and then deleted. Data whose further storage is necessary for evidentiary purposes. Are excluded from deletion until the final clarification of the respective incident.

If IP addresses are processed by third-party providers, we have no influence on the duration of the processing. Under section 6 you will find the links to the data protection declarations of the third-party providers. There you can find out about the duration of the processing.

9. Objection

You have the right to object at any time to the personal data processed on the basis of Art. 6 para. 1 sentence 1 f GDPR, provided that there are reasons for the objection arising from your particular situation. However, your personal data will be further processed if there are compelling legitimate grounds for further processing the data that outweigh the interests, rights and freedoms of your person, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for direct marketing purposes, you have the right to object to the processing of personal data for the purpose of such advertising at any time without giving reasons (Art. 21 GDPR).

10. Other rights of data subjects

In the event of a given consent, you have the right to revoke it. We would like to point out that a revocation does not change the lawfulness of the processing granted until the revocation (no retroactive effect of the revocation).

Within the framework of the GDPR, you have the right to receive information free of charge on request about the personal data concerning you (Art. 15 GDPR)

Furthermore, in accordance with the GDPR, you are entitled to correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction (Art. 18 GDPR) and transfer (Art. 20 GDPR) of your personal data.

You also have the right to complain to the data protection supervisory authority responsible for us in justified cases (Art. 77 GDPR).

You can assert your rights under the GDPR by e-mail or in writing.

The contact details of the provider can be found below.

11. Contact data

PROVIDER AS RESPONSIBLE BODY:

beauty lumis GmbH
Bruckmannring 38
85764 Oberschleissheim
Germany
Phone.: (+49) 089 / 52033670
Fax: (+49) 089 / 52033699
Mail: info@beautylumis.com

DATA PROTECTION SUPERVISORY AUTHORITY:

Bayerisches Landesamt für Datenschutzaufsicht
Mailing address
Postfach 606
91511 Ansbach
Germany
Phone.: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Mail: poststelle@lad.bayern.de

STATUS: June 2023

‍