PRIVACY POLICY

We, the ASAM Betriebs-GmbH, are pleased about your visit to https://www.asam-cosmetics.com/?lang=en  (in the following: “our website“). The protection and security of your personal data is our highest priority. This privacy policy (“Privacy Policy“) explains what personal data and other information we collect during your visit to our website, how and for what purposes we use the personal data and information and with whom we share it. In addition, we hereby inform you of your rights in relation to the processing of your personal data, such as the right to information, correction, objection and deletion. We only use your personal data (hereinafter referred to as “your data“), i.e. information that allows conclusions to be drawn about you, in accordance with the applicable data protection regulations. In case we use your data for purposes other than those stated in this Privacy Notice, we will inform you about these purposes separately in advance and, if necessary, obtain your consent. If you have given one or more consent(s) for data processing (e.g. regarding a newsletter), you can freely revoke this consent(s) for the future at any time. The revocation does not incur any costs for you and has no negative consequences for you. The legality of the processing of your data before your revocation remains unaffected in this case.

1. General information

1.1 Who is responsible for the use of your data?

We are responsible (Data Controller) in terms of data protection law.

ASAM Betriebs-GmbH
Altenzeller Weg 23
92339 Beilngries-Aschbuch
Web: https://www.asam-cosmetics.com/?lang=en
E-Mail: sales@asam-cosmetics.com

This means that we are responsible for the use of the data we collect from you and are legally obligated to ensure that the necessary measures are taken to protect your data and to safeguard your rights. 

1.2 Which of your data do we collect and how do we process your data?

Depending on the information you provide to us, we collect the following data:

(a) Data collection when you visit our website:

We collect information about you when you use our services, for example when you visit our website. This involves the following data:

1. Device related information

We collect device-specific information, such as the model of hardware you are using, version of the operating system, information about the mobile network you are using and data about device events such as crashes, system activity, hardware settings, browser type, browser language, date and time of your request and referral URL.

• Your IP address
• Location related information

If you use our services, we collect and process information about your location in the case of your consent. We use various technologies to determine your location, such as IP addresses, GPS and other sensors that provide us with information about nearby devices, WLAN access points or cell towers. You can also check, activate or deactivate the collection of location data at any time in the settings of your terminal device.

• Cookies

When you visit our website, we collect information by using so-called cookies. See more about this below under 2.

(b) Direct communication

When you contact us (e.g. by telephone, contact form or e-mail), we collect personal data. Which data are collected via the contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of processing your request or for contacting you and the related technical administration. The legal basis for the processing of the data is our legitimate interest in processing your request in accordance with Art. 6 I 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the legal basis for processing is Art. 6 I 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry if it is clear from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

(b) Application possibility

You can apply to us by e-mail or in the career portal. If you apply by e-mail, we collect and store the data you send us by e-mail. We process your data only for the purpose of processing your application. Your data will not be passed on to third parties when you apply by e-mail. The career portal is operated by Ströer SE & Co. KGaA, Ströer Allee 1, 50999 Cologne, Germany. You will find further information on data protection at Ströer in the career portal. The legal basis for the processing is Art. 88 (1) GDPR in conjunction with. § Section 26 (1) BDSG. If, in the event of a rejection, you give us permission to continue storing your data so that we can return to your application in the future, if necessary, the legal basis is Art. 6 (1) a) GDPR. If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. § 15 AGG. The start of the deadline is the receipt of the rejection letter.

If you have given us permission to include you in our applicant pool, we will store your data for a maximum of two years. Only the departments involved in the decision (responsible HR or specialist departments, management) will receive your data. 

In addition, we may be obliged by law, official or court order to transmit your data to public authorities (e.g. public prosecutor’s office, police, supervisory authorities, tax office, social security institutions, etc.). Other data recipients may be those bodies for which you have given us your consent to transfer data.

1.3 For what purpose and on what legal basis do we collect your data?

We use your data for the following purposes and on the following basis:

(a) To perform the contract to which you are a party or to perform pre-contractual obligations to you:

• To enable you to use our services by sharing posts and interests, likes and thoughts on our website.
• To provide you with your account, technical support, and other similar purposes,
• to resolve other problems regarding our products and the storage of our communications with you to the extent necessary to resolve the problem.

(b) On the basis of our legitimate interest:

• to provide, maintain, protect and improve our services, to develop new services, and to protect us and our users,
• also to provide you with customized content in search results and personalized advertising (e.g., by means of advertising banners on websites),
• to further improve the security of our IT system for the benefit of all users, to enforce applicable Terms of Use, including investigating possible violations of the Terms of Use or applicable law (e.g., libel, fraud),
• for other necessary communication with you, unless such communication is for the purpose of fulfilling (pre-)contractual obligations to you (for example, to notify you of malfunctions),
• to detect or prevent technical problems, to protect rights involving our property or safety, the property or safety of our users, or the public, as permitted and required by law.

(c) On the basis of legal obligations:

• To fulfill and comply with applicable laws, regulations, legal proceedings or enforceable official orders that are binding on ASAM Betriebs-GmbH,
• to detect, prevent or combat violations of law, provided that ASAM Betriebs-GmbH is legally obligated to do so or third parties have a claim against ASAM Betriebs-GmbH

(d) On the basis of your consent:

• You can find the exact purposes in the respective consent form. These purposes may include processing for the provision, maintenance, protection and improvement of our services, for competitions, for the development of new services and for our protection and the protection of our users, furthermore, to offer you tailored content (e.g. to provide you with personalized advertising) or to provide you with product information.
• Processing may also be carried out to record communications with us to assist you in resolving any issues that may arise and for communications regarding the use of our services, including notices of pending changes or improvements, to your email address, unless this is for the performance of our contract with you or for the performance of pre-contractual obligations or legal obligations – in which case your consent is not required.

1.4 Where is your data processed?

Your data will only be processed by us within the European Union (“EU”) and the European Economic Area (“EEA”). An exception is the analysis service Google Analytics of Google Inc. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The laws for the protection of personal data in the USA may differ from the protection within the EU and may only provide a lower level of protection. If personal data is processed by Google in the USA, this will take place on the basis of appropriate confidentiality and security measures that ensure the protection of your data. Your data will only be processed by us within the European Union (“EU”) and the European Economic Area (“EEA”).

1.5 How long do we store your data?

We will not store your data for longer than is necessary to fulfill the respective purpose for which it was collected, unless there is a legal basis for such storage. We will then delete your data. The respective retention periods depend on the underlying purpose and the type of personal data. In particular, we store

• Data that we need for the purpose of a personalized account (login data) for as long as you want to use this account. If you no longer wish to use your account, you can request deletion, including all login data, via our contact form.
• Data we use for advertising (such as your email address if you register for our newsletter), unless you request deletion and there are no legal storage obligations.
• Your IP address for a maximum of 2 months.
• Cookies for a period of up to 12 months. In addition, you can delete cookies from your computer at any time.

2. Cookies

When you visit or open our website, we collect information about you by using cookies. Cookies are small text files that allow your browser to be recognized and that are sent to your computer or mobile device. We use cookies to provide you with a user-friendly and secure website and to tailor our services to your needs and interests, e.g. show you ads on our website that are tailored to you (e.g. as banner ads).

These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with your declared consent pursuant to Art. 6 para. 1 lit. a DSGVO or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.

Browser settings configuration

Most web browsers are preset to automatically accept cookies. However, you can configure your respective browser so that it only accepts certain cookies or not at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since the various browsers can differ in their respective modes of operation, we ask you to use the respective help menu of your browser for the corresponding configuration options.

The deactivation of the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate the use of cookies again.

3. Web analysis services

3.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”). The legal basis for the processing of your personal data within the scope of the use of Google Analytics is the consent you have declared in accordance with Art. 6 I 1 lit. a GDPR.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually sent to a Google server in Europe (or in a member state of the European Economic Area Agreement) to make the IP address anonymous, so that no personal reference can be made. Only after the IP address has been anonymized is the shortened IP address transmitted to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide us with additional services related to the use of the website. The IP address transmitted by your browser in the context of Google Analytics is not combined with other data from Google.

You have the right to withdraw your consent at any time with effect for the future. You can also prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie is set to prevent the future collection of your data when you visit this website.

Further information on data protection at Google Analytics can be found here http://www.google.com/analytics/terms/de.html 

and here http://www.google.com/intl/de/analytics/privacyoverview.html.

3.2 Google Fonts

a) Type and scope of data processing   

We use external fonts from Google Fonts on this website. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

We embed Google Fonts locally, i.e. on our own server. This avoids a connection to Google servers in the USA and a transfer and storage of personal data to or on Google servers in the USA. 

b) Purpose and legal basis        

The purpose of using Google Fonts is the uniform presentation of fonts. The legal basis is Art. 6 para. 1 lit. f) DS-GVO.

c) Right of objection      

You have the right to object to the creation of user profiles.

3.3 Google reCAPTCHA

a) Type and scope of data processing

We use reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

This service enables Google to determine which website is sending a request and from which IP address you are using the so-called reCAPTCHA input box.

In addition to your IP address, Google may collect other information necessary to provide and guarantee this service. 

b) Purpose and legal basis    

The purpose of using Google reCAPTCHA is to ensure data security during the transmission of forms.

This serves above all to differentiate whether the input is made by a natural person or whether it is misused by mechanical and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

The legal basis is Art. 6 par. 1 lit. f) GDPR. Our legitimate interest lies in the security of our internet presence and in the defence against unwanted, automated access in the form of spam.

c) Storage period

The stored data will be deleted as soon as they are no longer needed for our purposes.

d) Right to object 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

If you do not wish your data to be collected by Google via our website, so-called opt-out cookies can also be used. These prevent future processing of your personal data when you visit our website. In order to prevent the processing of your personal data across different systems, you must use the opt-out cookie on all systems used.

For more information see Google’s privacy policy: https://policies.google.com/privacy?hl=en

4. Rights of the data subject

4.1 General provisionsgen

The applicable data protection law grants you comprehensive data protection rights (rights of information and intervention) towards the person responsible for the processing of your personal data, about which we inform you below: Datenschutzrecht gewährt Ihnen gegenüber dem Verantwortlichen hinsichtlich der Verarbeitung Ihrer personenbezogenen Daten umfassende Betroffenenrechte (Auskunfts- und Interventionsrechte), über die wir Sie nachstehend informieren:

• Right of information in accordance with Art. 15 GDPR: In particular, you have the right to be informed about your personal data processed by us, the purposes of data processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right of rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees provided under Art. 46 GDPR when your data is transferred to third countries;
• Right of rectification in accordance with Art. 16 GDPR: You have the right to correct any incorrect data and/or to complete any incomplete data stored by us without delay;
• Right of deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17 I GDPR are fulfilled. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to demand the restriction of the data processing of your personal data for as long as the accuracy of your data which you dispute is verified, if you refuse to delete your data on the grounds of unlawful data processing and instead demand the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection on the grounds of your particular situation, as long as it has not yet been established whether our legitimate reasons outweigh the objection;
• Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of data processing towards the data controller, the latter is obliged to notify all recipients to whom the personal data concerned have been disclosed of this rectification, erasure or restriction of data processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party, as far as this is technically feasible;
• Right to revoke consents granted under Art. 7 III GDPR: You have the right to withdraw at any time with future effect any consent you have given to the processing of data. In the event of revocation, we will immediately delete the data concerned, unless further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal;
• Right of complaint under Art. 77 GDPR: If you believe that the processing of personal data relating to you is in breach of the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged breach occurs.

4.2 RIGHT OF OBJECTIONCHSRECHT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS DATA PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE STOP THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5. Contact

To exercise your rights above, or if you have any questions or comments about this privacy statement or about data protection in general, please contact our data protection team: privacy@asam-cosmetics.com 

You can also contact our data protection officer at georg.schroeder@legaldata.law .

6. Exclusion of liability for external links

Die ASAM Betriebs-GmbH verweist auf Seiten mit Links auf andere Seiten im Internet. Für alle diese Links gilt: Die ASAM Betriebs-GmbH erklärt auASAM Betriebs-GmbH refers to pages with links to other Internet sites. The following applies to all these links: ASAM Betriebs-GmbH expressly declares that it has no influence whatsoever on the design and content of the linked websites and therefore expressly distances itself from all content of all third-party websites linked to https://www.asam-cosmetics.com  and does not adopt this content as its own.  This declaration applies to all displayed links and to all contents of the pages to which links lead.

7. Changes to this privacy policy

We reserve the right to modify this privacy policy at any time with effect for the future. A current version is available on our website.

8. Copyright

©ASAM Betriebs-GmbH – The pages of the website and their components including the illustrations may be protected by copyright. The use, in particular the duplication and imitation, even in extracts, is only permitted with the permission of ASAM Betriebs-GmbH.