Data protection

KIDS BEAUTY WORLD

Unless otherwise specified below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide has no consequences. This only applies if no other information is given in the subsequent processing operations.

"Personal data" is all information that relates to an identified or identifiable natural person.

Server log files

You can visit our website without giving any personal information.

Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider via your Internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. The processing takes place on the basis of Art. 6 Paragraph 1 lit. f GDPR out of our predominant legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Your data may be transmitted to third countries outside the European Union for which an adequacy decision has been made by the EU Commission. If there is no adequacy decision by the EU Commission, e.g. for transfers to the USA, the data transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/ law / law-topic / data-protection / international-dimension-data-protection / standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international- dimension-data-protection / standard-contractual-clauses-scc_de)

Contact

Responsible person - Contact us if you wish. The contact details of the person responsible for data processing can be found in our imprint.

Initiative contact by the customer by email

If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you have made available. The data processing is used to process and answer your contact request.

If the establishment of contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

If you contact us for other reasons, this data processing takes place on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in processing and answering your request. In this case you have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data based on Art. 6 Paragraph 1 lit.

We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you have made available. The data processing serves the purpose of establishing contact.

If the establishment of contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

If you contact us for other reasons, this data processing takes place on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in processing and answering your request. In this case you have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data based on Art. 6 Paragraph 1 lit. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders

When you place an order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Your data may be transmitted to third countries outside the European Union for which an adequacy decision has been made by the EU Commission. If there is no adequacy decision by the EU Commission, e.g. for transfers to the USA, the data transfers are based on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/ law / law-topic / data-protection / international-dimension-data-protection / standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international- dimension-data-protection / standard-contractual-clauses-scc_de)

advertising

Use of your personal data for sending advertising by post

We use your personal data (name, address), which we received in the context of the sale of a product or service, to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.

The processing takes place on the basis of Art. 6 Para. 1 lit.f GDPR out of our predominant legitimate interest in direct mail. You can object to this use of your address data at any time by notifying us. You will find the contact details for exercising your objection in the imprint.

Use of the e-mail address for sending newsletters

We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending the newsletter, provided you have expressly consented to this. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of the email address for sending direct mail

We use your e-mail address, which we received in the context of the sale of a product or service, for the electronic transmission of advertising for our own goods or services that are similar to those that you have already purchased from us, if you have these Have not objected to use. The provision of the e-mail address is required for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit.f GDPR out of our predominant legitimate interest in direct mail. You can object to this use of your email address at any time by notifying us. You will find the contact details for exercising your objection in the imprint. You can also use the link provided in the promotional email. There are no other costs than the transmission costs according to the basic tariffs.

Shipping service provider merchandise management

Passing on the e-mail address to shipping companies for information about the shipping status

We will pass on your e-mail address to the transport company as part of the contract processing, provided you have expressly consented to this in the ordering process. The purpose of the transfer is to inform you about the dispatch status by email. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.

Use of an external inventory control system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be transmitted to WIX.

Payment service provider

Use of PayPal

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

Use of personal data when selecting Klarna payment options

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. In this way Klarna can assess whether you can use the payment options offered by Klarna and adapt the payment options to your needs. General information about Klarna is available at: https://www.klarna.com/de/ (https://www.klarna.com/de/). Klarna will process your personal details in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s data protection regulations at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy (https: // cdn .klarna.com / 1.0 / shared / content / legal / terms / 0 / de_de / privacy).

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.

Cookies are saved on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and individually decide whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

Under the following links you can find out how you can manage cookies in the most important browsers (including deactivating them):

Chrome: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442 / windows-internet-explorer-delete-manage-cookies)

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/ safari / manage-cookies-and-website-data-sfri11471 / mac)

Technically necessary cookies

Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, more effective and safer. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.

The use of cookies or comparable technologies is based on Section 15 (3) sentence 1 of the German Telemedia Act. Your personal data is processed on the basis of Article 6 (1) (f) GDPR out of our predominant legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

For reasons that arise from your particular situation, you have the right to object to this processing of your personal data at any time.

Advertising tracking

Use of the Facebook Pixel

We use the remarketing function "Custom Audiences" from Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland "Facebook") on our website.

Facebook Ireland and we are jointly responsible for the collection of your data when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum). According to this, we are particularly responsible for the fulfillment of the information obligations according to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service as well as for compliance with the obligations according to Art. 33 , 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Facebook Ireland is responsible for enabling the rights of the data subject in accordance with Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the Protection of personal data concerns the obligations of Facebook Ireland under the joint processing agreement.

The purpose of the application is to target visitors to the website with interest-based advertising on the Facebook social network. For this purpose, the Facebook remarketing tag was implemented on the website. A direct connection to the Facebook servers is established via this tag when you visit the website. This will tell the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum (https://www.facebook.com/legal/EU_data_transfer_addendum).

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 Paragraph 3 Sentence 1 TMG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.

You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/ (https: // www. facebook.com/about/privacy/).

Use of Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (evaluation of visits). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

If you click on an advertisement placed by Google, a conversion tracking cookie will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can see that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of Ads customers.

The information that is obtained with the help of the conversion cookie is used to generate conversion statistics. Here we find out the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 Paragraph 3 Sentence 1 TMG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.

You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/ (https://www.google.de/policies/privacy/)

Use of Google AdSense

We use the AdSense function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The data processing serves the purpose of renting out advertising space on the website and using this to address visitors to the website with targeted advertising. This function is used to display personalized, interest-based advertising ads from the Google Display Network to visitors to the provider's website. Google uses cookies to help analyze how users use the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and saved there. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks). Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data.

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 Paragraph 3 Sentence 1 TMG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.

You can find more information and Google's privacy policy at: https://www.google.com/policies/technologies/ads/ (https://www.google.com/policies/technologies/ads/) and https: // www.google.de/policies/privacy/ (https://www.google.de/policies/privacy/)

Use of the remarketing or "similar target groups" function of Google Inc.

We use the remarketing or "similar target groups" function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

The application serves the purpose of analyzing visitor behavior and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies are used to record visits to the website and anonymised data on the use of the website. There is no storage of personal data of the visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks).

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 Paragraph 3 Sentence 1 TMG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.

You can find more information on Google Remarketing and the associated data protection declaration at: https://www.google.com/privacy/ads/ (https://www.google.com/privacy/ads/)

Plug-ins and miscellaneous

Using the Google Tag Manager

We use the Google Tag Manager from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.

The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables additional tags to be triggered that can collect and process personal data.

You can find more information on terms of use and data protection here (https://www.google.com/intl/de/tagmanager/use-policy.html).

Use of social plug-ins

We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place serves the purpose of optimizing the advertising for our products.

When integrating social plug-ins, a link is established between your computer and the servers of the social network provider and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's server. This applies regardless of whether you are registered or logged in to the social network. A transmission takes place even with unregistered or not logged in users. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.

The use of cookies or comparable technologies takes place with your consent on the basis of § 15 Paragraph 3 Sentence 1 TMG in conjunction with Art. 6 Paragraph 1 lit. a GDPR. Your personal data will be processed with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.

The social networks named below are integrated into our website using social plug-ins. You can find more detailed information on the scope and purpose of the collection and use of the data as well as your rights and options for protecting your privacy in the linked data protection notices of the providers.

Facebook of Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)

Facebook Ireland and we are jointly responsible for the collection of your data when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are defined.

The agreement is available at https://www.facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum). According to this, we are particularly responsible for the fulfillment of the information obligations according to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service as well as for compliance with the obligations according to Art. 33 , 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Facebook Ireland is responsible for enabling the rights of the data subject in accordance with Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the Protection of personal data concerns the obligations of Facebook Ireland under the joint processing agreement.

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum (https://www.facebook.com/legal/EU_data_transfer_addendum).

You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/ (https: // www. facebook.com/about/privacy/).

Instagram of Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA)

https://help.instagram.com/155833707900388 (https://help.instagram.com/155833707900388)

Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data is transmitted on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection / standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).

Affected rights and storage duration

Duration of storage

After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the deadline, unless you have consented to further processing and use.

Rights of the data subject

If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on Art. 6 Paragraph 1 f GDPR, as well as against processing for the purpose of direct mail.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that the processing of your personal data is not lawful.

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR, you have the right to object to this processing at any time with future effect for reasons that arise from your particular situation.

After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data processing takes place for the purposes of direct advertising, you can object to this processing at any time by notifying us. Once you have objected, we will stop processing the data concerned for the purpose of direct advertising.

last update: 27.10.2020