Left Continue shopping
Your Order

You have no items in your cart

Privacy policy

 

Scope

This privacy policy is intended to inform users of this website in accordance with the GDPR, the Federal Data Protection Act (BDSG-New), and Telecommunication-Digital-Services-Data-Protection-Act (TDDDG) about the type, scope, and purpose of the collection and use of personal data by the website operator UNICOSMETIC Co. Ltd. The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. Please note that data transmission over the Internet can generally be subject to security vulnerabilities. Comprehensive protection against access by third parties is not feasible.

General Information on Data Processing

1. Scope of the processing of personal data

We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

  1. Insofar as we obtain consent from the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
  2. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
  3. If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
  4. In cases where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
  5. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the aforementioned interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

3. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of the data will also occur when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.

Access data

The website operator or page provider collects data about accesses to the site and stores them as "server log files." The following data is logged:

- Visited Website

- Time at the moment of access

- Amount of data sent in bytes

- Source/reference from which you arrived at the page

- Browser used

- Operating system used

- Used IP address

The collected data is used solely for statistical evaluations and to improve the website. However, the website operator reserves the right to retrospectively review the server log files if there are concrete indications of unlawful use.

Use of Cookies

  1. Description and Scope of Data Processing
    Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.
    We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can still be identified after a page change.
    The following data is stored and transmitted in the cookies:

1. User Session ID: ID of the current session
2. Language redirection: Cookie that remembers which language version of the website the user is using. For the user's convenience, the pages will be loaded in the user's selected language on subsequent visits.
3. Cookie acceptance message: Cookie flag that informs our website that the user has agreed to the cookie usage agreement.
4. Status data: Cookie with data about the display parameters of the map in the Distributors section.
5. Video Preloader: Cookie with the date on which the video preloader was shown to the user.
6. CSRF Token: A unique user token to prevent cross-site request forgery.

We also use cookies on our website that enable an analysis of users' browsing behavior.

In this way, the following data can be transmitted:
- Visited Website
- Time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you arrived at the page
- Browser used
- Operating system used
- Used IP address

The data collected from users in this way is pseudonymized through technical measures. Therefore, linking the data to the calling user is difficult and only possible through certain characteristics. The data is not stored together with other personal data of the users.

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent is obtained for the processing of the personal data used in this context. In this context, a reference to this privacy policy is also provided.

2. Legal basis for data processing

  • The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.
  • The legal basis for the processing of personal data using cookies for analysis purposes is, if the user has given consent, Art. 6 para. 1 lit. a GDPR.

3. Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.

For the following applications, we require cookies:
1. Contact
2. Requests and Information
3. Adoption of language settings
4. Saving Search Terms

The user data collected through technically necessary cookies is not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can continuously optimize our offerings.

We use the following cookies for marketing and analysis:

  1. Google Analytics
    2. Social Media Plugins: Facebook, Instagram, YouTube
    3. Facebook Pixel
    4. Google Tag Manager
    5. Google reCAPTCHA
    6. Yandex Maps
    7. Yandex Metrica

As far as you have consented to the use for marketing and analysis purposes via our cookie banner, this also constitutes the purpose for processing personal data according to Art. 6 para. 1 lit. a GDPR.

4. Duration of Storage, Objection and Removal Options
Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website fully.

Sharing of Personal Data with Third Parties

  1. Google Analytics
    a) Scope of the processing of personal data
    This website uses features of the web analytics service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
    Google Analytics uses so-called "cookies." These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

 

IP anonymization

We have enabled the IP anonymization feature on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings of your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.


b) Legal basis for the processing of personal data
The legal basis for data processing, if the user has given consent, is Article 6(1)(a) of the GDPR.
c) Purpose of Data Processing
This website uses Google Analytics to enable an analysis of usage. The processing of users' personal data allows us to analyze the browsing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.
d) Duration of storage
As a rule, the collected data is deleted as soon as it is no longer needed. Deletion takes place at the latest after 26 months.
e) Possibility of objection and removal
 You can object to the data collection at any time with effect for the future by downloading and installing the browser add-on to disable Google Analytics at the following link:  https://tools.google.com/dlpage/gaoptout?hl=en.

2. Use of Social Media Plugins

This website uses Facebook Social Plugins, which are operated by Meta Platforms, Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be recognized by the Facebook logo or the terms "Like", "Gefällt mir", "Share" in Facebook's colors (blue and white). Information about all Facebook plugins can be found at the following link: https://developers.facebook.com/docs/plugins/ The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and scope of the data that the plugin transmits to the servers of Meta Platforms, Inc. Information about this can be found here: https://www.facebook.com/help/186325668085084 The plugin informs Meta Platforms, Inc. that you, as a user, have visited this website. It is possible that your IP address is stored. If you are logged into your Facebook account during your visit to this website, the mentioned information will be linked to it. If you use the functions of the plugin – for example, by sharing a post or "liking" it – the corresponding information will also be transmitted to Meta Platforms, Inc. If you want to prevent Meta Platforms, Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website. Furthermore, this website uses the "+1" button from Google Plus. This is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). When you visit a page that contains the "+1" button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence on the nature and scope of the data that the plugin transmits to the servers of Google Inc. If you click the "+1" button while logged into Google+, you share the content of the page on your public profile. According to Google Inc., personal data is only collected when you click the button. Even for logged-in Google users, the IP address is stored, among other data. If you want to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website. Information about the "+1" button can be found here:  https://developers.google.com/+/web/buttonspolicy.

Instagram:

We use "Instagram" on our website, a social plug-in from Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA (hereinafter referred to as: "Instagram"), to embed content from the social platform Instagram on the websites of our online presence. In this process, personal or personally identifiable data is transmitted to Instagram. If you have a user account with Instagram and are logged in, Instagram can also assign the visit to your user account. Instagram stores this data as user profiles and uses it for advertising, market research, and/or the tailored design of its websites. Such evaluation is carried out in particular (also for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Instagram directly for this purpose.

We use Instagram to display and offer you content and features of the social platform Instagram on our website, thereby improving and making our offer and user experience more interesting. This also constitutes our legitimate interest in processing the aforementioned information. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

If you want to prevent data sharing, you cannot use the functions of Instagram. Nevertheless, we recommend that you regularly log out of your user account on the social network after use, especially before activating embedded content, as this can help you avoid linking to your profile with the respective provider.

Third-party information: Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA. For more information on data protection and data usage by LinkedIn, please refer to the following LinkedIn website:  https://help.instagram.com/155833707900388

YouTube:

On the websites of our internet presence, we embed videos from "YouTube," a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). When you access a webpage that contains an embedded YouTube video, data is transmitted to a Google server and stored there. If you have a user account with Google and are logged in, Google can associate the visit with your user account. Google stores this data as usage profiles and uses it for advertising purposes, market research, and/or to tailor its websites to user needs. Such evaluations are carried out in particular (also for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our internet presence. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

We embed content from YouTube on the websites of our online presence to make this content immediately available to you without requiring you to access the content separately on YouTube. This allows you to use features of the social media platform YouTube directly on our website. This enables us to improve and make our offer and user experience more interesting for you. This also constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

If you want to prevent data sharing, you cannot use the functions of YouTube. Regardless, we recommend that you regularly log out of your user account on the social network after using it, especially before activating embedded content, as this can help you avoid linking to your profile with the respective provider.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

For more information on data protection and data usage by Google, please refer to the following Google website:  https://policies.google.com/privacy?hl=en&gl=us

3. Facebook Pixel
a) Type and scope of the processing of personal data
We use Facebook Pixel from Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, to create so-called Custom Audiences, i.e., to segment visitor groups of our online offer, determine conversion rates, and subsequently optimize them. This is done especially when you interact with advertisements that we have placed with Meta Platforms, Inc.
b) Purpose and Legal Basis for the Processing of Personal Data
 We process your data using Facebook Pixel for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR.
c) Duration of storage
The specific storage duration of the processed data cannot be influenced by us but is determined by Meta Platforms, Inc. For more information, please refer to the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

4. Google Tag Manager
a) Type and scope of the processing of personal data
 We use the Google Tag Manager from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to precisely control the integration of services on our website and collect data.
This allows us to flexibly integrate additional services and analyze users' access to our website.
b) Purpose and Legal Basis for the Processing of Personal Data
 The use of Google Tag Manager is based on our legitimate interests, i.e., interest in optimizing our services in accordance with Art. 6 para. 1 lit. f. GDPR.
c) Duration of storage
The specific storage duration of the processed data cannot be influenced by us but is determined by Google LLC. Further information can be found in the privacy policy for Google Tag Manager: https://www.google.de/tagmanager/use-policy.html.

5. Google reCAPTCHA
a) Type and scope of the processing of personal data
 We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google LLC and enables us to distinguish whether a contact request originates from a natural person or is automated by a program. When you access this content, a connection is established to servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements to differentiate automated requests from human ones. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.
b) Purpose and Legal Basis for the Processing of Personal Data
The use of the service is based on our legitimate interests, i.e., for protection when transmitting forms in accordance with Art. 6 para. 1 lit. f. GDPR.
c) Duration of storage
The specific storage duration of the processed data is not influenced by us but is determined by Google LLC. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

6. Yandex Maps
a) Type and scope of the processing of personal data
We use the Yandex Maps service to create directions. Yandex Maps is a service of Yandex LLC, which displays a map on our website.
When you access this content on our website, you establish a connection to servers of Yandex LLC, Moscow, Moscow City, RU, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Yandex Maps.
b) Purpose and Legal Basis for the Processing of Personal Data
The use of Yandex Maps is based on our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR, i.e., our interest in making it easier for you to find the locations mentioned on the website.
c) Duration of storage
The specific storage duration of the processed data is not influenced by us but is determined by Yandex LLC. Further information can be found in the privacy policy for Yandex Maps: https://yandex.com/legal/confidential/.

7. Yandex Metrica
a) Type and scope of the processing of personal data
 We have integrated Yandex Metrica on our website. Yandex Metrica is a service provided by Yandex LLC and offers optimization tools that analyze the behavior and feedback of users on our website through analysis and feedback tools. Yandex Metrica uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity and to statistically analyze visitor data. Furthermore, Yandex Metrica records clicks, mouse movements, and scroll depths to create so-called heatmaps and session replays. In this case, your data is shared with the operator of Yandex Metrica, Yandex LLC, Moscow, Moscow City, RU.

b) Purpose and Legal Basis for the Processing of Personal Data
We process your data using Yandex Metrica for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR.

c) Duration of storage
The specific storage duration of the processed data cannot be influenced by us but is determined by Yandex LLC. Further information can be found in the privacy policy for Yandex Metrica: https://yandex.com/legal/privacy/.

Handling of Personal Data

The website operator collects, uses, and shares your personal data only if this is permitted by law or if you consent to the data collection. Personal data refers to any information that serves to identify you and can be traced back to you – for example, your name, email address, and phone number.

Handling of Contact Data

If you contact the website operator using the provided contact options, your information will be stored so that it can be used to process and respond to your inquiry. Without your consent, this data will not be shared with third parties.

Handling Comments and Posts

If you leave a post or comment on this website, your IP address will be stored. This serves the security of the website operator: if your text violates the law, they want to be able to trace your identity.

Links to other websites

This website contains links to third-party websites. The inclusion of external links does not imply that we endorse the content behind the reference or link. The respective websites are the responsibility of their operators. When initially linking to external websites, we checked the foreign content for any legal violations. At that time, no legal violations were apparent. We have no influence on the current and future design and content of the linked pages, nor on the observance of data protection regulations by the operators of the external websites. Constant monitoring of external links is not reasonable for us without concrete indications of legal violations. However, if we become aware of legal violations, such external links will be deleted immediately.

Rights of the Data Subject
If personal data about you is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

1. Right to Information
You have the right to request confirmation from the controller as to whether personal data concerning you is being processed by us. 
If such processing takes place, you can request information from the controller regarding the following details:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the intended duration of the storage of the personal data concerning you or, if specific information is not possible, the criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data, if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the involved logic as well as the scope and the intended effects of such processing for the data subject.

You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to Rectification
You have the right to rectification and/or completion with regard to the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

3. Right to Restriction of Processing
Under the following conditions, you can request the restriction of the processing of your personal data:
(1) if you dispute the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise, or defend legal claims, or
(4) if you have objected to the processing pursuant to Art. 21(1) GDPR and it is not yet clear whether the legitimate grounds of the controller override your reasons.
If the processing of your personal data has been restricted, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been limited according to the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to Deletion
a) Obligation to Delete
You can request the controller to delete the personal data concerning you without delay, and the controller is obliged to delete this data immediately if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR was based, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
(4) The personal data concerning you was processed unlawfully.
(5) The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you were collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

  1. b) Information to Third Parties
    If the controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, they shall take appropriate measures, including technical measures, considering the available technology and implementation costs, to inform the data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to this personal data or copies or replications of this personal data from them.
  2. c) Exceptions
    The right to deletion does not apply insofar as the processing is necessary
    (1) for the exercise of the right to freedom of expression and information;
    (2) to fulfill a legal obligation requiring the processing under the law of the Union or the Member States to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
    (3) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
    (4) for archival purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) is likely to render the achievement of the objectives of this processing impossible or seriously impaired, or
    (5) for asserting, exercising, or defending legal claims.
    Right to Information
    If you have exercised the right to rectification, deletion, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
    You have the right to be informed about these recipients by the controller.

    5. Right to Data Portability
    You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
    (1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and
    (2) the processing is carried out using automated procedures.
    In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly from one controller to another, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
    The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

    6. Right of objection
    You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data carried out pursuant to Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
    The controller no longer processes the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes. You have the option, in connection with the use of information society services—regardless of Directive 2002/58/EC—to exercise your right to object by automated means using technical specifications.

7. Right to Withdraw Consent to Data Protection Declaration
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent up to the point of revocation.

8. Automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permitted based on Union or Member State law to which the controller is subject, and these laws contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
(3) only with your explicit consent.

However, these decisions must not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the controller takes appropriate measures to protect the rights and freedoms as well as your legitimate interests, which include at least the right to obtain intervention by a person on the part of the controller, to present your own point of view, and to challenge the decision.

If you have any questions about data protection, please contact info@esteleurope.com.

9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the place of the alleged infringement, if you consider that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint was lodged informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The data protection supervisory authority responsible for us is:
Saxon Data Protection Officer
Devrientstraße 5
01067 Dresden
Phone: 0351/85471 101
Fax: 0351/85471 109
Internet: www.datenschutz.sachsen.de
E-mail: saechsdsb@slt.sachsen.de

Change and Update of the Privacy Policy

We ask you to regularly inform yourself about the content of our privacy policy. We adjust the privacy policy as soon as changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require an action on your part (e.g., consent) or any other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and we ask you to verify the information before making contact.

Responsible entity: 

ESTEL Europe GmbH
Trade Street 3
04420 Markranstädt
Germany
Managing Director: Iuliia Reinsberger

Data Protection Officer

Kent Schwirz
Protekto Group
Wendenstraße 279
20537 Hamburg

+49 40 422 369 24
datenschutz(at)protekto.de