Privacy Policy

Controller within the meaning of the EU General Data Protection Regulation (GDPR) is: CUTIFEM COSMETICS GMBH, Friedrichstraße 171, 10117 Berlin, Germany Phone: +49 30 21459-450 (standard landline rates apply), Fax: +49 30 21459-453 E-Mail: datenschutz@cutifem-cosmetics.de

2. Visiting our website

You can visit our website without disclosing any personal information. Every time you visit our website, our webserver temporarily stores the following access data and information within a so called server log file:

• date, time and frequency of the processing request
• IP-address assigned to your computer by the access provider
• website, hyperlink, application e.g. of the processing request
• quantaty of transferred data
• name and URL of the requested files
• message whether file access was succesful
• identification data of your browser and operating system you use
• name of the requesting provider

These data will be used solely to ensure a smooth and secure operation of the website and analysed for the purpose of improving our website. We also reserve the right to check the log files via the last known IP address of such users who, based on certain facts, are suspected of using our website illegally or in breach of contract. The record will only be used for this purposes and will be deleted after six months.

The legal basis for this data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract, and Art. 6 (1) (f) GDPR, which allows the processing of data because of our legitimate interest to optimize the functionality of our website, to make sure that the website is displayed correctly and to ensure the systems security and technical administration of network infrastructure.

We have implemented technical and organisational measures to ensure that that the regulations governing data protection are observed by CUTIFEM COSMETICS as external service providers. This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of personal data and other confidential content (such as orders in our online shop or the inquiries you send to us as the site operator). You can recognize an encrypted connection by the string “https://” and the lock icon displayed in your browser’s address bar.

Some of our web pages use cookies. A cookie is a small text file saved by your browser and stored on the hard disk of your device. We use cookies to improve your shopping expirience and to enable the use of certain functions of our online shop (registered customer and shopping cart function) by saving certain settings and entered information to share it with our system through your browser.

Some of the cookies we use are deleted after you close your browser (so-called session cookies). Other cookies are stored on your hard disk and enable us to recognise your browser when you visit our website again (so-called persistent cookies). Persistent cookies will automatically be deleted after a certain time that varies depending on the cookie.

The legal basis for data processing using cookies is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract, and Art. 6 (1) (f) GDPR, which allows the processing of data because of our legitimate interest to ensure the best functionality of our website for the user and an as customer-friendly design of the ordering process as possible.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. You can also delete cookies already stored. Every browser has a different policy for managing cookie settings. For further information please contact the developer of your browser or see the help menu of your browser.

Please note that disabling of functional cookies may limit your access to some features of our website, such as the registered customer and shopping cart function.

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops Trustmark and the collected reviews as well as to offer Trusted Shops products to buyers after an order.

This is necessary to safeguard our legitimate prevailing interests in an optimal marketing by ensuring the safety of your purchase according to Art. 6 (1) (f)GDPR. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH (herinafter called: Trusted Shops), Subbelrather Str. 15C, 50823 Cologne, Germany. The Trustbadge is made available by a CDN provider (Content-Delivery-Network) as part of order processing. Trusted Shops uses also service provider from the USA. An adequate level of data protection is guaranteed. Further information to the data security of Trusted Shops can be found here: https://www.trustedshops.co.uk/imprint/

When the Trustbadge is called up, the web server automatically saves a server log file which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data are stored in a security database for the analysis of security problems. The log files are automatically deleted 90 days after creation at the latest.

Further personal data will be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement made between you and Trusted Shops applies. For this purpose personal data is automatically collected from the order data. Whether or not you are already registered as a Trusted Shops customer is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted to this hash value, which cannot be decrypted by Trusted Shops before it is transmitted. After checking for a match, the parameter is deleted automatically. This is necessary for the fulfillment of our and Trusted Shops' legitimate prevailing interests in the provision of the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6 (1) (f) GDPR. In additition the legal basis for this data processing is Art. 6 (1) (b) GDPR. Further details, including your right to object to the processing of your personal data by Trusted Shops, can be found in the Trusted Shops Privacy Policy linked above and within the Trustbadge.

When you contact us by e-mail all personal data you send us, will only be stored and used for purposes of contacting you and answering your questions and concerns. The legal basis for this data processing is Art. 6 (1) (f) GDPR, which allows the processing of data because of our legitimate interest in processing your request. In case you contact us with the intention to conclude an agreement we also store your data pursuant to Art. 6 (1) (b) GDPR. After final processing of your request, we will delete the received data, unless the deletion conflicts with legal or contractual obligations to retain data.

Personal data is processed for the purpose of contract processing if you voluntarily provide it to us registering for our services. Which data is collected is evident from the input form. You may choose whether to provide this information. Mandatory information requested (marked with an asterisk *) must be provided in full to complete the order or registration.

The legal basis for this data processing is Art. 6 (1) (b) GDPR. Your e-mail address is additionally used according to Art. 6 (1) © GDPR, because it is necessary to send you our order confirmation. In addition we store the IP address regarding your order to protect us in the case of internet fraud, Art .6 (1) (f) GDPR. We delete this IP address at the end of a period of six month from the date of your oder.

The data entered at registration will be used according to Art. 6 (1) (a) GDPR based on your consent. You can withdraw your consent at any time. All you need to do is send an informal e-mail to the person responsible specified unter article 1 of this privacy policy. The lawfulness of any data processing already carried out remains unaffected by the withdrawal.

After complete processing of the contract or deletion of your custumer account, your data will be restricted for further processing and deleted after expiry of the storage periods under tax and commercial law, unless you have expressivly consented to further use of your data beyond this.

Due to our legitimate interest in sending personalized postal mail for the purpose of advertising and in accordance with Art. 6 (1) (f) GDPR we reserve the right to store and use your first and last name and your postal address, as well as your optionally provided information about a possible academic title and company, for our own advertising purposes, e.g. to send you interesting offers and information about our products by post.

You may object to the storage and use of your data for this purpose at any time by sending a message to the responsible person specified under article 1 of this privacy policy.

Personal data as part of the implementation and fulfilment of contracts is only used and processed within the scope of the necessity to fulfil the contract. In accordance with Art. 6 (1) (b) GDPR we will pass on the data required for the fulfilment of the contract to the shipping company assigned with the delivery, if this is necessary for the delivery of the ordered goods.

Depending on which payment service provider you select during the order process, we pass on the necessary data for the processing of payments to the credit institution assigned with the payment, and if applicable, to payment service providers assigned by us or to the selected payment service. The legal basis for this data processing is Art. 6 (1) (b) GDPR. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

As a data subject, you have the following rights:

in accordance with art. 15 GDPR,

you have the right to request information about your personal data processed by us to the extent described therein;

in accordance with art. 16 GDPR,

you have the right to demand the immediate correction of incorrect or complete personal data stored by us;

in accordance with art. 17 GDPR,

you have the right to request the deletion of your personal data stored with us, unless further processing is required to exercise freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;

in accordance with art. 18 GDPR,

you have the right to request the restriction of the processing of your personal data, insofar as the correctness of the data is denied by you, the processing is unlawful, but you refuse to delete it, we no longer need the data, but you do need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to art. 21 GDPR;

in accordance with art. 19 GDPR,

you have the right to be informed on your request about each recipient to whom your personal data have been disclosed;

in accordance with art. 20 GDPR,

you have the right to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible, if this is technically possible;

in accordance with art. 7 (3) GDPR,

you have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

in accordance with art. 77 GDPR,

you have the right to complain to a supervisory authority. You can also contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

The duration of the storage of personal data depends on the existing legal archival requirements (such as retention periods relating to commercial or tax law). After expiry of the various statutory retention periods all personal data will be deleted immediately, if the data are no longer necesssary for contract processing, contract initiation and/or there s no other legitimate interest for continued storage or in the case that you have expressivly consented to further use of your data beyond this.