DATA PROTECTION

privacy policy

Hello first of all!
Protecting your privacy is a priority for us. Below we will inform you about the collection and processing of personal data when using our website or our online shop www.valjues.de and www.valjues.com . This includes all data that can be related to you personally, e.g. name, address, email address, user behavior, etc.

I. Responsible person
Responsible for data protection in accordance with Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR):
VALJUES COSMETICS GmbH
Kirchplatz 4, 53804 Much
Management: Jennifer Hey/ Heidi Jahn
VAT No./Ust.IdNr: DE815452670


II. Data Protection Officer
You can contact our data protection officer as follows:
Heidi Jahn
heidi@valjues.com
VALJUES COSMETICS GmbH
Kirchplatz 4, 53804 Much

III. Data security
We make sure that your data is not accessible to unauthorized persons. Access to customer accounts is only possible after entering your email address and a personal password. You should always treat your access data confidentially and close the browser window after each use when communication with us has ended. In connection with access to our website, data that may allow identification (e.g. IP address) is temporarily stored on our servers for data and system security purposes. The processing of potentially personally identifiable data for data and system security purposes is based on Art. 6 Para. 1 Sentence 1 lit. f. GDPR and our legitimate interest in securing our systems and preventing misuse.
IV. Principles for the storage of personal data
Personal data is only processed for the period necessary to achieve the respective storage purpose, or if this is provided for in laws or regulations applicable to us, e.g. commercial or tax law retention obligations. The processing of personal data due to a legal obligation, namely the fulfillment of statutory retention obligations, is based on Art. 6 Para. 1 Sentence 1 lit. c GDPR. Insofar as personal data is processed for the purposes of securing evidence in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR, these processing purposes cease to apply after the statutory limitation periods have expired; the statutory regular limitation period is three years.

visit to our website
If you do not register, do not purchase anything in the online store or do not otherwise provide us with personal information, we may collect personally identifiable information that your browser automatically transmits to our servers. We also use common tracking technologies for our web analysis.

I. Technical provision of the website
When you visit our website, we collect, among other things, the following data, which is technically necessary for us to display our website to you and to ensure the stability and security of our online offering:
IP address
Date and time of the request
time zone difference to Greenwich Mean Time (GMT)
Which side you are on
access status/HTTP status code
amount of data transferred
website from which the request comes
Which browser you use
operating system and its interface
Language and version of the browser software.
The legal basis for this collection and processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our interest in this lies in the provision of a functional user offering and its system security.

II. Cookies
Our website uses cookies. Cookies are small text files that are placed and saved on a computer system via your internet browser. By using cookies, we can provide you better services that could not be implemented or could only be implemented to a limited extent without the cookie setting. Cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users of our online offering to use it. Cookies are used on the basis of Art. 6 Para. 1 Sentence 1 lit. f GDPR. Our interest is therefore in providing and optimizing a functional and convenient online offering. If this website provides for the use of cookies that is not technically necessary for the operation of the website (e.g. for tracking and/or advertising measures), they will only be used with the user’s consent (Art. 6 Para. 1 Sentence 1 lit. a GDPR).
You can prevent cookies from being set by changing the settings in your Internet browser and thus permanently deny the setting of cookies. You can also delete cookies that have already been set using an Internet browser or other software programs. Please note, however, that you may not be able to use all the functions of our website and other online services if you deactivate cookies in your Internet browser or reject them in our cookie banner.

III. Web analysis
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses additional cookies. The information on your use of our website generated through the cookie is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website.We use Google Analytics to analyze the use of our website and to be able to improve it regularly. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 Paragraph 1 Sentence 1 Letter f of GDPR.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of Use: https://www.google.com/analytics/terms/de.html
Overview of data protection: https://www.google.com/intl/de/analytics/learn/privacy.html
Privacy Policy: https://www.google.de/intl/de/policies/privacy.

IV. Social Media
We maintain online presences in social networks to communicate with and inform our customers. In this regard, we would like to point out that when using these networks, user data may be processed outside the European Union. Possible risks for users may arise because this could, for example, make it more difficult to enforce users' rights. The data generated during use is generally used for market research and advertising purposes and processed in such a way that user profiles can be created. This makes it possible to place advertising tailored to users within and outside the platforms that corresponds as closely as possible to their interests. Cookies are usually stored on users' computers for this purpose. These store the users' usage behavior and interests. In addition, data can also be stored across devices, especially when users are logged into their respective user accounts.
The processing of users' personal data is based on our interest in effectively informing users and communicating with users in accordance with Art. 6 (1) (f) GDPR. If users are asked by the respective providers to consent to data processing (i.e. they declare their consent, for example, by checking a box or confirming a button), the legal basis for processing is Art. 6 (1) (a), Art. 7 GDPR. Only the providers have access to users' data and can take appropriate measures and provide information directly. Accordingly, we would like to point out that requests for information and user rights can be most effectively made to or asserted with the providers. If you still need help, you can contact us.

C. Use of Services
Personal data is collected and processed when you communicate with us when ordering goods or when registering in our online shop, using our newsletter service or using the contact options provided (e.g. via our contact form).

I. Online Shop
When you shop in our online store, we essentially process your personal contact details, order details and payment details - everything we need to ensure that your order finds its way to you safely and as quickly as possible.
1. Orders
If you would like to order from the online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information required for the processing of the contracts is marked separately, further information is voluntary. We process the data you provide to process your order. The legal basis for data processing for the purpose of order execution and order processing is Art. 6 Paragraph 1 Sentence 1 Letter b of GDPR.
2. Customer account
You can voluntarily create a customer account through which we can save your data for future purchases. To register, you must provide your billing address for later shipping and your email address for online registration. After submitting your data, you will receive a registration confirmation from us at the email address you provided. The legal basis for the data processing in this regard is also Art. 6 Paragraph 1 Sentence 1 Letter b of GDPR.

3. Data transfer
Your data will only be passed on to third parties if this is necessary for the provision of the respective service. For example, your data will be transmitted to the shipping company commissioned with the delivery (e.g. DHL or UPS) or to the financial service provider commissioned with the payment processing (e.g. Paypal or KLARNA) to the extent necessary for order processing. The legal basis for data processing is Art. 6 Paragraph 1 Sentence 1 Letters b, f of the GDPR. The data is processed to carry out and process orders and to protect our legitimate interests in efficient shipping and payment processing.

4. Existing customer advertising
If we receive your email address in connection with the sale of a product or service in the online shop, we can use your email address for direct advertising for our own similar products; this includes conducting customer satisfaction surveys or product feedback. The basis for data processing is Art. 6 Paragraph 1 Sentence 1 Letter f of GDPR, taking into account the requirements of Section 7 Paragraph 3 of the UWG. Our legitimate interest lies in optimizing our product and service offering and enabling individual advertising.
Of course, you can object to such use at any time without incurring any costs other than any transmission costs according to the basic rates.
5. Storage and data deletion
In the case of orders via our website, we are obliged to store your address, payment and order data for a period of ten years due to commercial and tax law requirements. The legal basis for the corresponding data processing is Art. 6 Paragraph 1 Sentence 1 Letter c of GDPR.
II. Communication
On our website we offer you various ways to contact us and send us messages. The easiest way to contact us is by email or using the contact form provided. If you contact us, the data you provide (e.g. email address, name and telephone number if applicable) will be stored and processed by us in order to process your request. The legal basis in this respect is Art. 6 Para. 1 lit. b and f GDPR. Our legitimate interests lie in the efficient and structured recording and processing of customer inquiries. We delete the data collected after storage is no longer necessary or restrict processing if statutory retention periods apply.

III. Newsletter
If you register for our newsletter, we collect and process personal data to send you advertising information, as well as information about events and special offers or promotions for various holidays. Registration is based on consent. The only mandatory information is your email address. We use the data you submit when registering for the newsletter exclusively for the purpose of sending our newsletter. In addition, the following data is collected when you register: IP address of the computer accessing the newsletter, date and time of registration. This collection and storage takes place in order to be able to demonstrate that the respective user has actually given effective consent.
The legal basis for the processing of your data for the purpose of providing the newsletter service is your consent in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a of GDPR. To the extent that the registration for our newsletter is technically documented, the legal basis is Art. 6 Paragraph 1 Sentence 1 Letter f of GDPR, whereby our legitimate interests lie in the verifiability of proper collection.
The data collected when you register for the newsletter will only be stored for as long as the newsletter subscription is active. You can cancel your newsletter subscription at any time. For this purpose, there is an unsubscribe link in every newsletter.

D. Rights of the data subject
You have the following rights:
Right to information (Article 15 (1), (2) GDPR)
Right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing (Article 21 GDPR)
Right of withdrawal (Article 7 paragraph 3 GDPR)
Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Below you will find a few more details that can help you better understand the whole data jungle. Everything given is not intended to be complete.
1. Right to information You have the right to request confirmation from those responsible as to whether personal data is being processed.
the purposes of processing;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of a right to request from the controller rectification or erasure of the personal data concerned or restriction of processing of the personal data or to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, all available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject;
if personal data are transferred to a third country or to an international organisation, to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer. With regard to the personal data concerning him or her that are subject to processing, the data subject has the right to have a copy of the personal data provided.

2. Right to rectification
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data – also by means of providing a supplementary statement.

3. Right to restriction of processing
The data subject has the right to request the controller to restrict processing if one of the following conditions applies:
the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead;
the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to assert, exercise or defend legal claims, or
the data subject has objected to processing pursuant to Art. 21(1) GDPR, as long as it has not yet been determined whether the legitimate reasons of the controller outweigh those of the data subject.

4. Right to deletion
In principle and subject to the legally determined necessity of data processing (see exceptions in Art. 17 Para. 3 GDPR), the data subject has the right to demand that the controller delete personal data concerning him or her immediately if one of the following reasons applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
The data subject withdraws consent on which the processing is based according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 Para. 2 GDPR.
The personal data were processed unlawfully.
The erasure of personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject.
The personal data were collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

5. Rights to data portability
The data subject shall have the right to receive the personal data concerning him or her, which he or she has made available to a controller, in a structured, common and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to whom the personal data were made available, provided that the processing is based on consent or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means.
In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

6. Right of withdrawal
The data subject has the right to withdraw any consent given at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.

7. Right to lodge a complaint with a supervisory authority
Any data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data concerning him or her infringes this Regulation.

If you still have any questions, please contact us using our contact form!

Your VALJUES TEAM