Privacy Policy

We have written this privacy policy (version 11.10.2019-311120616) to explain to you in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679, which information we collect, how we use data and what options you have as a visitor to this website ,

Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to make the most important things as simple and clear as possible.

Automatic data storage
When you visit websites today, certain information is automatically created and stored, including on this website.

If you visit our website as it is now, our web server (computer on which this website is stored) automatically saves data such as

the address (URL) of the website you are visiting
Browser and browser version
the operating system used
the address (URL) of the previously visited page (referrer URL)
the host name and IP address of the device from which it is accessed
Date and Time
in files (web server log files).

As a rule, web server log files are stored for two weeks and then deleted automatically. We do not disclose this information, but we can not rule out that it will be seen in the event of unlawful behavior.
The legal basis, according to Article 6 paragraph 1 f DSGVO (lawfulness of processing), is that there is a legitimate interest in enabling the error-free operation of this website by capturing web server log files.

cookies
Our website uses HTTP cookies to store user-specific data.
Below, we explain what cookies are and why they are used to help you better understand the following privacy statement.

What exactly are cookies?
Whenever you surf the Internet, use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most web pages store small text files in your browser. These files are called cookies.

One thing can not be dismissed: cookies are really useful helpers. Almost all websites use cookies. More precisely, it is HTTP cookies, as there are other cookies for other applications. HTTP cookies are small files that are stored by our website on your computer. These cookie files are automatically stored in the cookie folder, the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser will return the “user-related” information to our site. Thanks to the cookies, our website knows who you are and offers you your usual standard setting. In some browsers, each cookie has its own file; in others, such as Firefox, all cookies are stored in a single file.

There are both first-party cookies and third-party cookies. First-party cookies are created directly from our site, and third-party cookies are created by partner websites (such as Google Analytics). Each cookie is to be evaluated individually, since each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies also can not access information from your PC.

For example, cookie data may look like this:

Name: _ga
Expiration time: 2 years
Use: Differentiation of website visitors
Exemplary value: GA1.2.1326744211.152311120616
A browser should support the following minimum sizes:

A cookie should be able to contain at least 4096 bytes
Per domain at least 50 cookies should be stored
In total, at least 3000 cookies should be stored
What types of cookies are there?
The question of which cookies we use in particular depends on the services used and will be clarified in the following sections of the privacy policy. At this point we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Absolutely necessary cookies
These cookies are necessary to ensure basic functionality of the website. For example, these cookies are needed if a user puts a product in the shopping cart, then continues surfing on other sites and later goes to the checkout. These cookies do not delete the shopping cart, even if the user closes his browser window.

In addition, these cookies also measure the load time and behavior of the website on different browsers.

Targeted cookies
These cookies make for better usability. For example, stored locations, font sizes or form data are stored.

Advertising cookies
These cookies are also called targeting cookies. They are used to provide the user with customized advertising. This can be very convenient, but also very annoying.

Usually, the first time you visit a webpage, you are asked which of these cookie types you want to allow. And of course, this decision is also stored in a cookie.

How can I delete cookies?
You decide for yourself how and whether you want to use cookies. Regardless of which service or which website the cookies come from, you always have the option of deleting cookies, only partially approving or deactivating them. For example, you may block third-party cookies but allow all other cookies.

If you want to know which cookies have been saved in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, activate, and manage cookies in Chrome

Safari: Manage cookies and site data with Safari

Firefox: Delete cookies to remove data that websites have stored on your computer

Internet Explorer: deleting and managing cookies

Microsoft Edge: Deleting and managing cookies

If you basically do not want to have cookies, you can set up your browser so that it always informs you when a cookie is to be set. So you can decide with each single cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best that you search Google for “Chrome cookies” or “Disable cookies Chrome” in the case of a Chrome browser, or replace the word “Chrome” with the name of your browser, e.g. Edge, Firefox, Safari out.

What about my privacy?
Since 2009 there are the so-called “cookie guidelines”. It states that the storage of cookies requires the consent of the website visitor (ie you). Within the EU countries, however, there are still very different reactions to these guidelines. In Germany, the cookie guidelines were not implemented as national law. Instead, the implementation of this directive was largely in § 15 paragraph 3 of the Telemedia Act (TMG).

If you want to know more about cookies and do not shy away from technical documentation, we recommend https://tools.ietf.org/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Storage of personal data
Personal data that you submit to us electronically on this website, such as name, e-mail address, address or other personal information in the course of submitting a form or comments in the blog, will be transmitted by us together with the time and IP address. Address used only for the purpose specified, kept safe and not disclosed to third parties.

We only use your personal data for communication with visitors who expressly request contact and for the processing of the services and products offered on this website. We will not disclose your personal information without consent, but we can not rule out that it will be seen in the event of unlawful behavior.

If you send us personal data by e-mail – outside of this website – we can not guarantee secure transmission and protection of your data. We recommend that you never send confidential information via email.

The legal basis under Article 6 (1a) of the GDPR (lawfulness of processing) is that you give us consent to the processing of the data you enter. You can revoke this consent at any time – an informal e-mail is sufficient, you will find our contact details in the imprint.

Rights according to the General Data Protection Regulation
According to the provisions of the GDPR, you have the following rights in principle:

Right to rectification (Article 16 GDPR)
Right to cancellation (“Right to be forgotten”) (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to Notification – Obligation to Notify in Connection with Correction or Deletion of Personal Data or Restriction of Processing (Article 19 GDPR)
Right to data portability (Article 20 GDPR)
Right of objection (Article 21 GDPR)

(Article 22 GDPR)
If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Evaluation of visitor behavior
In the following privacy policy we inform you about whether and how we evaluate data of your visit to this website. The evaluation of the collected data is usually anonymous and we can not infer from your behavior on this website on your person.

You can read more about the possibilities of this evaluation of the visit data in the following privacy statement.

TLS encryption with https
We use https to transmit data securely on the Internet (data protection through technology design Article 25 paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the Internet, we can ensure the protection of confidential data. You acknowledge the use of this safeguarding of the data transfer at the small lock symbol in the upper left corner of the browser and the use of the scheme https (instead of http) as part of our Internet address.

Google reCAPTCHA Privacy Policy
Our ultimate goal is to make our website as safe and secure as possible for you and for us. To ensure this, we use Google reCAPTCHA from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). With reCAPTCHA we can see if you are really a flesh-and-blood person and not a robot or any other spam software. By spam, we mean any, by electronic means, unwanted information that we receive unsolicitedly. For classic CAPTCHAS, you usually had to solve text or image puzzles for review. With reCAPTCHA from Google we usually do not have to bother you with such puzzles. In most cases, just tick the box to confirm that you are not a bot. With the new Invisible reCAPTCHA version, you do not even have to check the box. How this works and, above all, what data is used for this, you will learn throughout this privacy policy.

The legal basis for use is Article 6 (1) f (lawfulness of processing), as there is a legitimate interest in protecting this website from bots and spam software.

What is reCAPTCHA?
reCAPTCHA is a free captcha service from Google that protects websites from spam software and abuse by non-human visitors. This service is most commonly used when you fill out forms on the Internet. A captcha service is an automatic Turing test designed to ensure that an action on the internet is made by a human rather than a bot. In the classic Turing test (named after the computer scientist Alan Turing), a person determines the distinction between bot and human. For captchas, this is also done by the computer or a software program. Classic captchas work with small tasks that are easy for humans to solve, yet have significant difficulties for machines. With reCAPTCHA, you do not have to actively solve any puzzles. The tool uses modern risk techniques to differentiate people from bots. All you have to do is tick the text field “I’m not a robot” or Invisible reCAPTCHA does not need that anymore. With reCAPTCHA a JavaScript element is integrated into the source code and then the tool runs in the background and analyzes your user behavior. From these user actions, the software calculates a so-called captcha score. Google calculates with this score even before captcha input how high the probability that you are human. ReCAPTCHA or captchas in general are used whenever bots could manipulate or misuse certain actions (such as registrations, surveys, etc.).

to spam the blogs with unwanted advertising content. With reCAPTCHA we can avoid such bot attacks.

What data is stored by reCAPTCHA?
ReCAPTCHA collects personally identifiable information from users to determine if the actions on our site are actually human. So it can send the IP address and other data that Google needs for the reCAPTCHA service to Google. IP addresses within the member states of the EU or other parties to the Agreement on the European Economic Area are almost always truncated before the data ends up on a server in the United States. The IP address will not be combined with any other Google data unless you are logged in with your Google Account while using reCAPTCHA. First, the reCAPTCHA algorithm checks if your browser already has Google cookies from other Google services (YouTube, Gmail, etc.). Then reCAPTCHA sets an additional cookie in your browser and captures a snapshot of your browser window.

The following list of collected browser and user data is not exhaustive. Rather, they are examples of data that we understand to be processed by Google.

Referrer URL (the address of the page from which the visitor comes)
IP address (e.g., 256.123.123.1)
About the operating system (the software that enables you to operate your computer, known operating systems are Windows, Mac OS X or Linux)
Cookies (small text files that store data in your browser)
Mouse and keyboard behavior (any action you perform with the mouse or keyboard is saved)
Date and language settings (which language or which date you have preset on your PC)
All javascript objects (javascript is a programming language that allows websites to adapt to the user javascript objects can collect all sorts of data under one name)
Screen resolution (shows how many pixels the image is made of)
It is indisputable that Google uses and analyzes this data before clicking on the check mark “I am not a robot”. With the Invisible reCAPTCHA version even ticking off and the entire recognition process runs in the background. How much and what data Google stores exactly, you will not learn from Google in detail.

The following cookies are used by reCAPTCHA: Here we refer to the reCAPTCHA demo version of Google at https://www.google.com/recaptcha/api2/demo. All these cookies require a unique identifier for tracking purposes. Here is a list of cookies Google has set reCAPTCHA on the demo version:

Name: IDE
Expiration time: after one year
Use: This cookie is set by the company DoubleClick (also Google) to register and report the actions of a user on the website in the handling of advertisements. Thus, the advertising effectiveness can be measured and appropriate optimization measures are taken. IDE is stored in browsers under the domain doubleclick.net.
Example value: WqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-311120616

Name: 1P_JAR
Expiration time: after one month
Usage: This cookie collects site usage statistics and measures conversions. For example, a conversion occurs when a user becomes a buyer. The cookie is also used to show advertisers relevant ads. Furthermore, the cookie prevents a user from seeing the same ad more than once.
Example value: 2019-5-14-12

Name: ANID
Expiration time: after 9 months
Usage: We could not get much information about this cookie. In the privacy policy of Google, the cookie is used in connection with “advertising cookies” such. Mentions “DSID”, “FLC”, “AID”, “TAID”. ANID is stored at domain google.com.
Example value: U7j1v3dZa3111206160xgZFmiqWppRWKOr

Name: CONSENT
Expiration time: after 19 years
Usage: The cookie stores the status of a user’s consent to use various services provided by Google. CONSENT also provides security to verify users, prevent credential fraud, and protect user data from unauthorized attacks.
Example value: YES + AT.de + 20150628-20-0

Name: NID
Expiration time: after 6 months
Usage: NID is used by Google to tailor advertisements to your Google search. With the help of cookies, Google “remembers” your most-typed searches or your earlier interaction with ads. So you always get customized advertisements. The cookie contains a unique ID that Google uses to collect the user’s personal settings for promotional purposes.
Example value: 0WmuWqy311120616zILzqV_nmt3sDXwPeM5Q

okie is used by Google Analytics for personalized advertising. DV collects information in an anonymous form and is further used to make user distinctions.
Example value: gEAABBCjJMXcI0dSAAAANbqc311120616

Note: This list can not claim to be exhaustive, as experience has shown that Google changes the choice of cookies over and over again.

How long and where is the data stored?
Inserting reCAPTCHA transfers data to the Google server. Where exactly this data is stored, Google, even after repeated inquiries, is not clear. Without having received a confirmation from Google, it can be assumed that data such as mouse interaction, time spent on the website or language settings on the European or American Google Servers are stored. The IP address your browser sends to Google will generally not be merged with other Google data from other Google services. However, if you’re signed in to your Google Account while using the reCAPTCHA plug-in, the data will be merged. Google’s different privacy policies apply.

How can I delete my data or prevent data storage?
If you do not want data to be transmitted to Google about you and about your behavior, you must log out of Google completely and delete all Google cookies before you visit our website or use the reCAPTCHA software. Basically, the data will be sent to Google automatically as soon as you visit our page. To delete this information, you must contact Google Support at https://support.google.com/?hl=en&tid=311120616.

So, if you use our website, you agree that Google LLC and its agents automatically collect, process and use information.

To learn more about reCAPTCHA, go to the web developer site at https://developers.google.com/recaptcha/. Google is here on the technical development of reCAPTCHA closer, but accurate information on data storage and privacy-related topics are looking for there in vain. You can find a good overview of the basic use of data on Google in our own privacy policy at https://www.google.com/intl/de/policies/privacy/.

Source: Created with the privacy generator of AdSimple in cooperation with hashtagbeauty.de