We are pleased that you are interested in data protection on our website. The protection of your privacy is very important to us and we take it very seriously.

Please read our privacy information carefully.

1. GENERAL

We only process your personal data (e.g. title, name, address, email address, telephone number, bank details, credit card number) in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases and storage periods, as well as your rights and the person responsible for your data processing. This data protection declaration only applies to our websites. If you are redirected to other websites via links on our pages, please inform yourself there about how your data is handled.

2. DATA PROCESSING FOR THE PERFORMANCE OF THE CONTRACT

PURPOSE OF PROCESSING

The personal data you provide to us during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The processing of your data entered during the ordering process is therefore carried out for the purpose of fulfilling the contract.

If you send us an inquiry by e-mail, via a contact form, etc. before concluding the contract, we will process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.

LEGAL BASIS

The legal basis for this processing is Art. 6 para. 1 b) GDPR.

RECIPIENT CATEGORIES

Payment service providers, shipping service providers, hosting providers, if applicable, inventory management systems, if applicable, suppliers (dropshipping).

STORAGE PERIOD

We store the data required to process the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.

We retain the data required under commercial and tax law for the periods specified by law, usually ten years (see Section 257 HGB, Section 147 AO).

The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that no contract will be concluded.

3. COMMENTS

PURPOSE OF PROCESSING

It is possible to write a comment. Your data (e.g. name/pseudonym, email address, website) will then only be processed for the purpose of publishing your comment.

LEGAL BASIS

The legal basis for this processing is Art. 6 para. 1 f) GDPR.

LEGITIMATE INTEREST

Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, to ensure transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.

STORAGE PERIOD

There is no specific storage period. You can request that your comment be deleted at any time.

RIGHT OF OBJECTION

You have the right to object at any time to data processing which is carried out on the basis of Art. 6 Para. 1 f) GDPR and which does not serve direct marketing purposes for reasons arising from your particular situation.

In the case of direct marketing, however, you can object to the processing at any time without giving reasons.

4. SHOP EVALUATION BY EHI RETAIL INSTITUTE GMBH

PURPOSE OF PROCESSING

If you decide to rate our service, we will process your email address as well as your order number and date in order to send you a request for rating confirmation and a final rating request, as well as to assign your rating and prevent rating misuse.

LEGAL BASIS

This processing is carried out based on our legitimate interests in improving our services and preventing misuse of ratings in accordance with Art. 6 (1) (f) GDPR.

RECIPIENT

EHI Retail Institute GmbH

STORAGE PERIOD

Your data will be stored as long as the EHI shop rating is displayed on our website.

5. FURTHER INFORMATION

The legal basis for this processing is Art. 6 para. 1 b) GDPR, shipping service provider

6. PAYPAL TRANSACTIONS

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

7. WEB ANALYSIS WITH GOOGLE ANALYTICS

PURPOSE OF PROCESSING

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

LEGAL BASIS

The legal basis for this processing is Art. 6 Para. 1a) GDPR.

RECIPIENT CATEGORIES

Google and its partners.

TRANSFER TO A THIRD COUNTRY

Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

STORAGE PERIOD

Unlimited

RIGHT OF OBJECTION

You can prevent cookies from being saved by selecting the appropriate settings on your browser software; however, we would like to point out that if you do this, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: optout

8. INFORMATION ABOUT COOKIES

PURPOSE OF PROCESSING

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable you, for example, to place several products in a shopping cart.

LEGAL BASIS

The legal basis for this processing is Art. 6 Para. 1 f) GDPR.

LEGITIMATE INTEREST

Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles. This protects your interest in data protection.

STORAGE PERIOD

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a lifespan that varies from a few minutes to several years.

RIGHT OF OBJECTION

If you do not want these cookies to be saved, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a restriction of the functionality of our website. You can also delete permanently saved cookies at any time via your browser.

9. SOCIAL PLUGINS FROM FACEBOOK

We use social plugins from facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The plugins can be recognized by the Facebook logo or the addition "Facebook Social Plugin". If, for example, you click the "Like" button or leave a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. Facebook also makes your preferences public for your Facebook friends. If you are logged in to Facebook, Facebook can directly assign the visit to our page to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you have visited, your IP address) that is stored by Facebook. For details on how Facebook handles your personal data and your rights in this regard, please see Facebook's privacy policy. If you do not want Facebook to assign the data collected about you via our websites to your Facebook account, you must log out of Facebook before visiting our websites. You can also completely prevent the loading of Facebook plugins using add-ons for your browser, e.g. with the "Facebook Blocker" (Facebook).

10. NEWSLETTER

PURPOSE OF PROCESSING

When you register for the newsletter, your email address will be used for advertising purposes, i.e. as part of the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot identify which specific person clicked. You have expressly given the following consent separately or, if applicable, during the ordering process: Join the newsletter club.

LEGAL BASIS

The legal basis for this processing is Art. 6 para. 1 a) GDPR.

RECIPIENT CATEGORIES

newsletter delivery provider, if applicable

STORAGE PERIOD

Your email address will only be stored for the duration of your registration for the newsletter.

RIGHT OF WITHDRAWAL

You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter, By email

11. TRUSTED SHOPS

Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order. This serves to protect our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, which prevail within the framework of a balancing of interests. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, with whom we are jointly responsible for data protection in accordance with Art. 26 GDPR. As part of this data protection notice, we will inform you below about the essential contractual contents in accordance with Art. 26 Paragraph 2 GDPR.

The Trustbadge is provided by a US CDN (content delivery network) provider as part of a joint responsibility. An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on data protection at Trusted Shops GmbH can be found in their data protection declaration.

When you access the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to you personally. The anonymized data is used in particular for statistical purposes and for error analysis.

After completing the order, your email address, hashed using a cryptographic one-way function, will be sent to Trusted Shops GmbH. The legal basis is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary to fulfill our and Trusted Shops' overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional evaluation services in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. If this is the case, further processing will take place in accordance with the contractual agreement concluded between you and Trusted Shops. If you are not yet registered for the services, you will then be given the opportunity to do so for the first time. Further processing after registration is also based on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and personal reference will then no longer be possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 Paragraph 1 Letter f of GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An appropriate level of data protection is ensured in the case of the USA through standard data protection clauses and other contractual measures and in the case of Israel through an adequacy decision.

As part of the joint responsibility between us and Trusted Shops GmbH, if you have any data protection questions or wish to assert your rights, please contact Trusted Shops GmbH using the contact options provided in the data protection information linked above. Regardless of this, you can always contact the responsible party of your choice. Your request will then be forwarded to the other responsible party for response if necessary.

12. SOVENDUS - VOUCHER PLATFORM

 Information text for the online privacy policy of the advertising partner for Sovendus Sales (voucher offers):

Voucher offers from Sovendus GmbH: In order to select a voucher offer that is currently of interest to you, we transmit the hash value of your email address and your IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) in pseudonymized and encrypted form (Art. 6 Para.1 f GDPR). The pseudonymized hash value of the email address is used to take into account any objection to advertising from Sovendus (Art. 21 Para.3, Art. 6 Para.1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 Para.1 f GDPR). In addition, we transmit the order number, order value with currency, session ID, coupon code and time stamp to Sovendus in pseudonymized form for billing purposes (Art. 6 Para.1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no objection to advertising for your e-mail address and you click on the voucher banner that is only displayed in this case, we will send your title, name and e-mail address to Sovendus in encrypted form to prepare the voucher (Art. 6 Para. 1 b, f GDPR).

 

For further information on how Sovendus processes your data, please refer to the online data protection information at www.sovendus.ch/datenschutz.

 

13. YOUR RIGHTS AS A DATA SUBJECT

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

• Right to information

In accordance with Art. 15 GDPR, you can request information about your personal data processed by us.

• Right to rectification

If the information concerning you is no longer correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

• Right to erasure

You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

• Right to restriction of processing

You can request the deletion of your personal data under the conditions of Art. 17 GDPR.

• Right to data portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller.

• Right to revoke the declaration of consent under data protection law

According to Art. 7 Paragraph 3 GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation.

• Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, place of work or place of the alleged infringement) under Art. 77 GDPR.
 

PLEASE ALSO NOTE YOUR RIGHT OF OBJECTION ACCORDING TO ART. 21 GDPR:

a) General: reasoned objection required

If the processing of personal data concerning you takes place

- to protect our overriding legitimate interest (legal basis according to Art. 6 para. 1 f) GDPR) or

- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),

You have the right to object to processing at any time for reasons related to your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct advertising: simple objection is sufficient

If the personal data concerning you are processed for direct marketing purposes, you have the right to object to such processing at any time and without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

RESPONSIBLE FOR DATA PROCESSING:
Parfimo GmbH
Stahlgruberring 36
81829 Munich
Phone: +49(0)1523 - 6694964
marketing@parfimo.de