Our website may be used without entering personal information. Different rules may apply to certain services on our site, however, and are explained separately below. We collect personal information from you (e.g. name, address, email address, telephone number, etc.) in accordance with the provisions of German data protection statutes. Information is considered personal if it can be associated exclusively to a specific natural person. The legal framework for data protection may be found in the German Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). The provisions below serve to provide information as to the manner, extent and purpose for collecting, using and processing personal information by the provider.
Please be aware that data transfer via the internet is subject to security risks and, therefore, complete protection against third-party access to transferred data cannot be ensured.
SECTION 1 - WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect the personal information you give us such as your name, address and email address.
When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.
Email marketing: With your permission, we may send you emails about new posts, our store, new products and other updates. Please read the SECTION 11 below.
SECTION 2 - CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.
How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at email@example.com or mailing us at:
Itsmebeauty.com UG c/o System Akvile
Osdorfer Landstrasse 31
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.
SECTION 4 - SHOPIFY
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
Using PayPal as a payment method
If, while completing your order, you decide to use PayPal as an online payment service, your contact details will be sent to PayPal during the order process. PayPal is a service from PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service and trustee, and offers buyer protection services.
The personal data transmitted to PayPal usually includes your first name, last name, address, telephone number, IP address, e-mail address, or other data required to process your order, such as the quantity of articles ordered, the article number, invoice amount, percentage taxes and invoice details, etc.
This information needs to be transferred to process your order using your chosen payment method, mainly in order to confirm your identity and manage your payment and the customer relationship.
Please note the following however: PayPal may also pass on your personal data to subcontractors or other affiliates, to the extent necessary for fulfilling the contractual obligations arising from your order or for processing personal data in your order.
SECTION 5 - THIRD-PARTY SERVICES
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Europe and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 - COOKIES
Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not.
_session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
_shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite If the shop has a password, this is used to determine if the current visitor has access.
We use Google (Universal) Analytics for our webpage.
Use of Google Analytics with anonymization
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google“. Google Analytics employs so-called “cookies“, text files that are stored to your computer in order to facilitate an analysis of your use of the site.
The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
We use Google Analytics with an IP anonymization feature on our website. In doing so, Google abbreviates and thereby anonymizes your IP address before transferring it from member states of the European Union or signatory states to the Agreement on the European Economic Area.
Google will use this information to evaluate your usage of our site, to compile reports on website activity for us, and to provide other services related to website- and internet usage. Google may also transfer this information to third parties if this is required by law or to the extent this data is processed by third parties on Google´s behalf.
Google states that it will in never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.
Google also offers a disabling option for the most common browsers, thus providing you with greater control over the data which is collected and processed by Google. If you enable this option, no information regarding your website visit is transmitted to Google Analytics. However, the activation does not prevent the transmission of information to us or to any other web analytics services we may use. For more information about the disabling option provided by Google, and how to enable this option, visit https://tools.google.com/dlpage/gaoptout?hl=en
Use of Facebook components
Our website employs components provided by facebook.com. Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA.
Each time our website receives an access request equipped with a Facebook component, the component prompts your browser to download an image of this Facebook component. Through this process, Facebook is informed precisely which page of our website is being visited.
When you access our site while logged into Facebook, Facebook uses information gathered by this component to identify the precise page you are viewing and associates this information to your personal account on Facebook. Whenever you click on the “Like“ button, for example, or enter a comment, this information is transmitted to your personal account on Facebook and stored there. In addition, Facebook is informed of your visit to our website. This occurs regardless of whether you click on a component or not.
If you wish to prevent the transfer to and storage of data by Facebook about you and your interaction with our website, you must first log out of Facebook before visiting our website. The data protection policies of Facebook provide additional information, in particular about the collection and use of data by Facebook, your rights in this regard as well as the options available to you for protecting your privacy: https://de-de.facebook.com/about/privacy/
You can find an overview of Facebook plugins at https://developers.facebook.com/docs/plugins/
Use of Twitter recommendation components
Our website employs components provided by Twitter. Twitter is a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
You may change your data privacy settings in your account settings, at http://twitter.com/account/settings.
Use of Pinterest
Our website employs the services of pinterest.com. Pinterest.com is a service of Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. Through the “Pin it“ button integrated into our website, Pinterest is informed that you have accessed that particular page of our site. If you are logged into Pinterest, Pinterest can associate your visit to our site with your Pinterest account and thereby create a link to the data collected. Pinterest stores the data that is transferred through clicks on “Pin it“ buttons. You can find more information with respect to the purpose and extent of data collected, how it is processed and used as well as your rights in this regard and what settings you can use to protect your privacy by consulting the Pinterest data protection policy, which you can access at http://pinterest.com/about/privacy/.
To prevent Pinterest from associating your visit to our website to your Pinterest account, you must first log out of your Pinterest account before visiting our site.
The use of Instagram
We promote the service Instagram on our website. Instagram is a service of Instagram Inc. By means of the integrated "Insta" button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the "Insta" button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.
To prevent your visit to our site from being accessed by your Instagram account, you must log out of your Instagram account before visiting our site.
Use of YouTube components with enhanced data protection mode
On our website we use components (videos) of YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company belonging to Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
To this end, we use the “ - enhanced data protection mode - ” option provided by YouTube.
When you display a page that has an embedded video, a connection will be made to the YouTube server and the content will appear on the website via a communication to your browser.
According to the information provided by YouTube, in “ - enhanced data protection mode -”, data is only transferred to the YouTube server, in particular which of our websites you have visited, if you watch the video. If you are logged onto YouTube at the same time, this information will be matched to your YouTube member account. You can prevent this from happening by logging out of your member account before visiting our website.
Further information about data protection by YouTube is provided by Google under the following link:
SECTION 8 – GOOGLE-ADWORDS
Use of Google-Adwords
For purposes of promotion, our website also employs the Google ad tool "Google-Adwords". As part of this, our website employs the analysis service "Conversion-Tracking" from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google“. If you access our site by way of a Google ad, a cookie is placed on your computer. Cookies are small text files that your internet browser downloads and stores to your computer. These so-called "conversion cookies" cease to be active after 30 days and are not used to identify you personally. If you visit certain pages of our website while the cookie is still active, we and Google know that you, as user, have clicked on ads placed on Google and were redirected to our site. Google uses the information obtained through "conversion cookies" to compile statistics for our website. These statistics tell us the total number of users who have clicked on our ad as well as which pages of our site were then accessed by each user. However, neither we nor other advertisers who use "Google-Adwords" receive any kind of information that can be used to personally identify users. You can prevent the installation of "conversion cookies" by making the appropriate change to your browser settings, for example by setting your browser so that the automatic placement of cookies is deactivated or by blocking cookies from the domain "googleadservices.com“.
SECTION 9 - CONTACTING US
On our website we offer you the opportunity to contact us, either by email and/or by using a contact form. In such event, information provided by the user is stored for the purpose of facilitating communications with the user. No data is transferred to third parties. Nor is any of this information matched to any information that may be collected by other components of our website.
SECTION 10 - OUR BLOG
On our website we offer you the opportunity to post comments about individual articles. For this purpose, the IP address of the user/internet connection subscriber is stored. This information is stored for our security in the event the author through his/her comments infringes against third party rights and/or unlawful content is entered. Consequently, we have a direct interest in the author’s stored data, particularly since we may be potentially liable for such violations. No data is transferred to third parties. Nor is any of this information matched to any information that may be collected by other components of our website.
Subscribing to Comments
On our website we offer you the opportunity to subscribe to subsequent comments about an article which you intend to comment on. When you choose this option, you will receive a confirmation email which is used to determine if you are actually the owner of the email address entered. You may at any time revoke your decision to subscribe to such follow-on comments. You will find additional details in the confirmation email. No data hereby obtained is transferred to third parties. Nor is any of this information matched to any information that may be collected by other components of our website.
SECTION 11 - OUR NEWSLETTERS
Our website offers you the opportunity to subscribe to our newsletter. The newsletter provides you periodically with information about our services. To receive our newsletter, we require a valid email address. We will review the email address you provide for the purpose of determining whether you are in fact the owner of the email address provided or whether the actual owner of said address is authorized to receive the newsletter.
When subscribing to our newsletter, we will store your IP address as well as the date and time you subscribed. This serves to protect us in the event a third party improperly and without your knowledge makes use of your email address to subscribe to our newsletter. We will not collect any other data. The data thereby collected is used solely for the purpose of receiving our newsletter. No data is transferred to third parties. Nor is any of this information matched to any information that other components of our website may collect. You may cancel your subscription to the newsletter at any time. You will find additional details in the email confirming your subscription as well as in each newsletter.
Use of MailChimp
You will be asked to consent to the use of your personal data to receive our newsletter as follows:
We use the newsletter to provide you with regular updates about our offers. To receive our newsletter, you will need a valid email address. We will then check the email address entered to ensure that you are actually its owner or if its owner has agreed to receive our newsletter. By registering for the newsletter, we will save your IP address and date and time of registration. This will be used in case a third party misuses your email address to subscribe to our newsletter without your knowledge.
We will not compare the data collected during newsletter registration with any other data that might be collected by other components of our site.
Newsletter by MailChimp
We use MailChimp to send our newsletter to our subscribers. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA.
The data stored when you registered for the newsletter (email address, name, IP address, and time and date of registration) will be sent to a server operated by The Rocket Science Group in the United States and stored there in accordance with the EU-US Privacy Shield.
Further information about the data protection offered by MailChimp can be found at: http://mailchimp.com/legal/privacy/
Further information about the EU-US Privacy Shield can be found at:
You may cancel your newsletter subscription and revoke your consent to the storage of this data at any time with future effect. For instructions to take this step, please refer to the confirmation email and each newsletter.
Our newsletter includes so-called web bugs that allow us to recognize if and when an email has been opened and which links in the email have been clicked by its recipient.
This data is stored by us so that we can best align our newsletter to the wishes and interests of our subscribers. Accordingly, the data thus collected is used to send personalized newsletters to each recipient.
You will be asked to consent to the use of your personal data as follows:
“I agree that my data and my user responses will be stored electronically by newsletter tracking so that I can receive a personalized newsletter. The revocation of the consent to receive the newsletter constitutes a revocation of the consent for the tracking described above.”
By revoking the consent to receive the newsletter, the consent to the aforementioned tracking is revoked.
SECTION 12 - AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our us at firstname.lastname@example.org or by mail atItsmebeauty.com UG c/o System Akvile
Osdorfer Landstrasse 31