Data protection is a matter of trust, and your trust is important to us. We respect your privacy and personal sphere. The protection and the legally compliant collection, processing, and use of your personal data is a key concern for us. To ensure you feel secure when visiting our websites, we strictly observe legal data protection regulations when processing your personal data and would like to inform you here about our data collection and data use.
Responsible Controller
IONTO Health & Beauty GmbH
An der RaumFabrik 33b
76227 Karlsruhe
Legally represented by the Managing Directors
Martin La Fontaine, Julian La Fontaine
Contact Details of the Data Protection Officer
Dr. Sebastian Kraska
E-mail: [email protected]
Purpose
According to the Telemedia Act and the EU General Data Protection Regulation (GDPR), we are obliged to inform you about the collection, transmission, storage, and processing of your data.
Data Concerned
Personal data is only collected if you provide it to us of your own accord. Beyond this, no personal data is collected. Processing of your personal data beyond the scope of legal statutory permissions only takes place on the basis of your express consent.
Personal data refers to information about factual or personal circumstances of a specific or identifiable natural person. This includes, for example, your name, telephone number, address, and all inventory data that you provide to us during registration and when creating your customer account. Statistical data collected, for example, when visiting the online shop and which cannot be directly linked to your person, is not included here. Examples include statistics on which shop pages are particularly popular or how many users visit certain pages of the online shop.
Collection, Processing, and Use of Your Personal Data
We strictly adhere to the legal provisions of the Federal Data Protection Act and the Telemedia Act when collecting, processing, and using your personal data. We collect, store, and process your data for the entire processing of your purchase, including any subsequent warranties, for our services, technical administration, and our own marketing purposes. Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract execution or billing, or if you have given prior consent. Within the framework of order processing, for example, the service providers we use (such as carriers, logistics companies, banks) receive the necessary data for order and contract processing. The data passed on in this way may only be used by our service providers to fulfill their tasks. Any other use of the information is not permitted and does not take place with any of the service providers commissioned by us. For your order, we require your correct name, address, and payment details. We require your e-mail address so that we can confirm receipt of your order and communicate with you. We also use it for your identification (customer login). Furthermore, you will receive your order and shipping confirmation via your e-mail address. Your personal data will be deleted provided that legal retention obligations do not prevent this and if you have asserted a claim for deletion, if the data is no longer required to fulfill the purpose pursued with the storage, or if its storage is inadmissible for other legal reasons.
Duration of Personal Data Storage
We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations.
Data Subject Rights
Every person affected by data processing has the right to rectification, restriction, and deletion of their personal data. Incoming requests for rectification, restriction, and deletion are documented, checked, and implemented by the body responsible for data protection in the company and the person responsible for the processing activity. This also takes into account any processors and recipients of the data subject's personal data. The data subject will receive feedback on this. Upon request, we will provide the person affected by the data processing with the personal data provided to us in a structured, commonly used, and machine-readable format. If technically feasible, we will also provide the data directly to another controller at the request of the data subject.
You can contact us by e-mail or letter here: Legal Notice
Furthermore, you have the right to lodge a complaint with the data protection supervisory authority.
Third Country Transfer
Data transfer to countries outside the EU only takes place insofar as this is necessary to execute your orders, is required by law, you have given us consent, or within the framework of commissioned data processing. If service providers are used in third countries, they are obliged—in addition to written instructions—to comply with the level of data protection in Europe by agreeing to the EU Standard Contractual Clauses.
Links to Other Websites
We link to websites of other providers (third parties) not affiliated with us. If you click on these links, we no longer have any influence on which data is collected and used by these providers. You can find more detailed information on data collection and use in the privacy policy of the respective provider. We assume no responsibility for the collection and processing of data by third parties.
Access Data (Server Log Files)
When you access our website, we automatically collect data that is stored in a so-called server log file. The following data is stored:
- URL of the visited website
- Date and time of access
- Amount of data sent in bytes
- Your origin, i.e., the source or reference from which you reached the page
- Browser used
- Operating system used
- IP address used
This data is not processed further. However, we reserve the right to check the server log files retrospectively if we are legally required to do so or if there are concrete indications of unlawful use.
Cookies
This website uses its own "cookies" to increase user-friendliness ("cookies" are data records sent from the web server to the user's browser and stored there for later retrieval). No personal data is stored in our own "cookies." You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser settings.
Google Analytics and Google Tag Manager
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services associated with website use and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. In view of the discussion regarding the use of analysis tools with full IP addresses, we would like to point out that this website uses Google Analytics with the extension "_anonymizeIp()" and therefore IP addresses are only processed in abbreviated form in order to rule out direct personal identification. Specifically for browsers on mobile devices, please click this link to prevent the anonymized collection by Google Analytics on this website for your browser in the future by means of a so-called "opt-out cookie".
Additionally, we use the Google Tag Manager. This service is used to manage so-called tags. The Google Tag Manager itself does not process any personal data, but manages the services that may process personal data. If you opt out of tracking for a specific service such as Google Analytics, this opt-out also automatically applies to any tracking via the Google Tag Manager.
Google AdWords Conversion Tracking
This website uses Google AdWords Conversion Tracking, a web analysis service of Google Inc. ("Google"). Google AdWords Conversion Tracking also uses "cookies" that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operators, and to provide further services associated with website use and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will under no circumstances associate the data with other Google data. You can generally prevent the use of cookies by prohibiting the storage of cookies in your browser.
Use of Google Maps
These websites use Google Maps, a service provided by Google Inc. By using the relevant websites, you consent to the collection, use, and processing of the data collected by Google Inc. or its representatives or third parties. The terms of use can be found in the current version at https://policies.google.com/privacy?hl=en.
Use of Google Fonts
These websites use Google Fonts, a service provided by Google Inc., for the uniform display of fonts. By using our websites, you consent to the collection, use, and processing of the data collected by Google Inc. or its representatives or third parties. The terms of use can be found in the current version at https://policies.google.com/privacy?hl=en.
Use of Google reCAPTCHA
These websites use Google reCAPTCHA, a service provided by Google Inc. We use this to increase the security of our websites by identifying whether the access is by a natural person or an automated and possibly malicious access. By using our websites, you consent to the collection, use, and processing of the data collected by Google Inc. or its representatives or third parties. The terms of use can be found in the current version at https://policies.google.com/privacy?hl=en.
Re-Targeting
Our websites use so-called re-targeting technologies. We use these technologies to make the website more interesting for you. This technology makes it possible to address internet users who have already expressed interest in our shop and our products with advertising on our partners' websites. We are convinced that the display of personalized, interest-based advertising is generally more interesting for the internet user than advertising that has no such personal reference. The display of these advertising materials on our partners' pages is based on cookie technology and an analysis of previous usage behavior. This form of advertising is completely pseudonymous. No usage profiles are merged with your personal data. By using our websites, you consent to the use of so-called cookies and thus to the collection, storage, and use of your usage data. Furthermore, your data will be stored in cookies beyond the end of the browser session and, for example, accessed again during your next visit to the websites. You can revoke this consent at any time with effect for the future by refusing to accept cookies in your browser settings.
Newsletter
If you wish to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. To ensure that the newsletter is sent with consent, we use the so-called double-opt-in procedure. In this process, the potential recipient can be included in a distribution list. Subsequently, the user receives a confirmation e-mail to confirm the registration in a legally secure manner. The address is only actively included in the distribution list if confirmation is received. Brevo is used as the newsletter software. Your data will be transmitted to Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo is prohibited from selling your data and using it for purposes other than sending newsletters. Brevo is a certified German provider, selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
Further information can be found here: https://www.brevo.com/en/legal/termsofuse/
You can revoke your consent to the storage of data, the e-mail address, and its use for sending the newsletter at any time, for example via the "Unsubscribe" link in the newsletter. Data protection measures are always subject to technical updates; for this reason, we ask you to inform yourself about our data protection measures at regular intervals by viewing our privacy policy.
Product Recommendations
We use your contact details, which we receive from you in connection with the sale of goods or services, contact requests, or newsletter registration, for advertising information in postal or electronic form, provided you have not objected to this use. In this way, we want to send you information about products from our range that might interest you based on your recent purchases from us. In doing so, we strictly comply with legal requirements. If you no longer wish to receive product recommendations or any promotional messages from us, you can object at any time.
Facebook Button
On our websites, we use the Facebook button of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can recognize the Facebook button by the Facebook logo or the "Like" button. If you are logged in as a member of Facebook, Facebook assigns this information to your personal Facebook user account. When using the Facebook button (e.g., clicking the button, submitting a comment), corresponding information is transmitted directly from your browser to Facebook and also assigned to your Facebook user account and stored there. Further information on the collection and use of data by Facebook and your rights and options for protecting your privacy can be found in Facebook's data protection notice at https://www.facebook.com/about/privacy/.
Twitter Button
We use a Twitter button on our website, a social network operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. You can recognize the Twitter button by the corresponding logo, possibly with text. Twitter receives information that you have visited our website with your IP address. When the button is used, corresponding information is further transmitted directly from your browser to Twitter. Further information on the collection and use of data by Twitter and your rights and options for protecting your privacy can be found in the data protection notice: https://twitter.com/en/privacy.
YouTube Button
We use a YouTube button on our website, a social network operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. You can recognize the YouTube button by the corresponding logo, possibly with text. YouTube receives information that you have visited our website with your IP address. When the button is used, corresponding information is further transmitted directly from your browser to YouTube. Further information on the collection and use of data by YouTube and your rights and options for protecting your privacy can be found in the data protection notice: https://policies.google.com/privacy?hl=en.
SSL Encryption
For security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Trusted Shops Trustbadge
To display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products for buyers after an order, the Trusted Shops Trustbadge is integrated on this website. This serves to protect our overriding legitimate interests in an optimal marketing of our offer within the framework of a balancing of interests. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement made between you and Trusted Shops applies.
Surveys
For surveys, we use SurveyMonkey, which is offered by SurveyMonkey Europe based at 2 Shelbourne Buildings, Second Floor, Shelbourne Road, Dublin 4, Ireland ("SurveyMonkey"). In connection with the collection, use, and storage of personal data, SurveyMonkey complies with the Safe Harbor guidelines developed by the US Department of Commerce for handling personal data from EU member states. If you participate in our surveys, you agree that data from you, such as IP address, name, and other data entered by you within the scope of the survey, may be stored on SurveyMonkey's servers.
We would like to point out explicitly that SurveyMonkey reserves the right to collect, process, use, and forward information and evaluations for its own purposes. For this purpose, cookies, ad tracking, and IP addresses are used or recorded in particular. SurveyMonkey also reserves the right to pass this information on to third parties, including to other countries and the USA. Further details can be found in SurveyMonkey's privacy policy: https://www.surveymonkey.com/mp/policy/privacy-policy/.
Credit Check
We carry out a credit check before concluding the purchase contract. This is done to be able to offer you a choice of different payment methods and at the same time to protect us against defaults on payments on account and by direct debit. In addition, the credit check serves your security and ours, as it prevents fraud and other criminal acts. As part of the credit check, we examine all data available to us and determine which payment methods can be offered for an order. This includes checking all previous orders in your customer account. In addition, it is checked whether the delivery address differs from the billing address, whether it is a new delivery address, or whether the order is to be delivered to a packing station. In addition to the data available to us, data from external service providers is also required. For this purpose, we transmit the personal data required for a credit check (first and last name, your address, and, if applicable, your date of birth) to the credit agency.
Creditreform Karlsruhe
Bliss & Hagemann GmbH & Co. KG
Kriegsstraße 236-240
76135 Karlsruhe
R+V Allgemeine Versicherung AG
Raiffeisenplatz 1
65189 Wiesbaden
This credit agency uses the aforementioned data transmitted by us to carry out a corresponding assessment of your creditworthiness with regard to the respective order on the basis of mathematical-statistical procedures (scoring). Furthermore, the credit agency uses the aforementioned data for other companies (e.g., other online retailers) for purposes of address verification or identity checks as well as for scoring applications based thereon. Your address data is also included in the calculation of the probability value. Under certain circumstances, a conclusion about hard negative characteristics is possible. As part of the ordering process, we also compare your bank details (only IBAN and BIC or account number and bank code) with the Return-debit Prevention Pool (RPP). The RPP has the function of a blacklist. Furthermore, in the event of non-payment of the direct debit, we will, where permissible, report your bank details (only IBAN and BIC, no personal details) to the RPP of the ICD, which transmits this block to other companies involved in the inquiry process upon request. After payment of the returned debit, we will report the settlement to the RPP. If you do not agree with the payment methods offered to you, you can inform us of this in writing by letter or by e-mail to [email protected]. We will then review the decision again, taking your point of view into account. You can revoke your consent at any time with effect for the future in writing or in text form to [email protected], and you can also obtain information about the stored data from us and from our credit agency (at the addresses mentioned above).
PayPal
It is possible to process the payment transaction with the online payment provider PayPal. PayPal processes and stores personal data and may pass it on to third parties. You can find out in detail how PayPal handles your data in the current version at https://www.paypal.com/en/webapps/mpp/ua/privacy-full