Privacy policy
Responsible for data processing
Responsible for data processing according to the provisions of the General Data Protection Regulation (GDPR) is:
Argan Organic Cosmetics
Platz an der alten Post 2b
53424 Remagen
Web: https://arganorganiccosmetics.com/
Email: hello@ arganorganiccosmetics.com/
General information on data processing
We process data as part of our website operation.
This also includes disclosure by transmission to third parties and, if necessary, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). If we transmit data outside the EU or the EEA, we have marked this accordingly below.
data processing
On the one hand, your data is processed when you communicate it to us. This can be z. B. be data that you enter in a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
Request restriction of processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.
According to Art. 6 Para. 1 f) GDPR , the legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website.
b) hosting
To provide our online presence, we use services from this web hosting provider:
netcup GmbH
Daimlerstrasse 25
76185 Karlsruhe
Germany
The web hosting provider processes the data mentioned above and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
According to Art. 6 Para. 1 f) GDPR , the legal basis for data processing is our overriding legitimate interest in the provision of our website.
c) Shopify shop system
We use Shopify on our website, a shop system from Shopify Inc., 150 Elgin St., 8th Fl, Ottawa, ON K2P 1L4, Canada ("Shopify").
Shopify processes the following data of our customers as part of the provision of the shop system: name, email address, delivery and billing address, payment data, company name, telephone number, IP address, information about orders, information about shops visited and supported by Shopify and information about the devices and browsers used.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 Para. 1 f) GDPR.
For customers from the European Economic Area, data processing is mainly carried out by the Shopify subsidiary, Shopify International Limited, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
However, data may also be transferred to regions outside the EU/EEA. Shopify guarantees the maintenance of an adequate level of data protection for these transfers as follows:
The EU Commission has issued an adequacy decision for transfers to Canada, available at: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=DE .
For transmissions to the USA, Shopify guarantees the maintenance of an appropriate level of data protection by participating in the EU-US Privacy Shield.
Shopify is certified at: https://www.privacyshield.gov/participant?id=a2zt0000000TNSNAA4&status=Active .
If data is transmitted to Shopify subsidiaries in other third countries, Shopify guarantees that an appropriate level of data protection will be maintained through internal group agreements.
d) contact
If you contact us, we will process the following data from you for the purpose of processing and processing your request: Name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Art. 6 Para. 1 b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Art. 6 Para. 1 f) GDPR .
e) contract processing
We process your data requested during the ordering process (e.g. name, contact details, address, payment details, etc.) to process the contractual relationship between you and us.
According to Art. 6 Para. 1 b) GDPR , the legal basis for data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations according to Art. 6 Para. 1 c) GDPR .
We transmit your address data to the company commissioned with the delivery. If necessary to process the contract, we will also send your e-mail address or your telephone number to the company commissioned with the delivery to coordinate a delivery date (notification).
We transmit your transaction data (name, date of order, payment method, dispatch and/or receipt date, amount and payee, possibly bank details or credit card data) to the payment service provider commissioned to process the payment.
If you choose a payment method from the payment service provider Mollie, the payment will be processed via the payment service provider Mollie BV, Keizersgracht 216, 1015 CW Amsterdam, Netherlands, to whom we will send the information you provided during the ordering process together with the information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Article 6 (1) (b) GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Mollie and only to the extent that it is necessary for this.
f) newsletters
In order to provide you with regular information about our company and offers, we offer to send an e-mail newsletter. With your newsletter registration, we process the data you entered during registration (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration will be logged. The time of registration and confirmation as well as your IP address are affected.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 Para. 1 a) GDPR. The data processing in connection with sending the confirmation e-mail for your registration and the associated data logging takes place in accordance with Art. 6 Para.1 f) DSGVO due to our legitimate interest in proving your proper registration.
f) cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
purposes
We use technically required cookies to enable the optimal functionality of our website. These cookies make it possible, for example, to navigate on the website or to offer other basic functions of the website.
We also use optional cookies that provide us with additional information, for example to analyze data traffic or for advertising and marketing purposes.
lifespan
The cookies used remain on your end device for different lengths of time:
Session cookies: These cookies are deleted from your end device immediately after you close your internet browser.
Persistent cookies: These cookies remain on your end device even after you close your web browser and enable us, for example, to recognize you the next time you visit our website.
cookie providers
Cookies that are set directly by us are so-called first-party cookies. Third-party cookies, on the other hand, are set by third-party websites, for example when content is displayed (advertisements, images, tracking pixels, etc.).
Legal basis of data processing
In principle, the following applies: The legal basis for data processing by a cookie is your consent in accordance with Art. 6 Para. 1 a) GDPR or our overriding legitimate interests in optimizing and creating the functionality of our website in accordance with Art. 6 Para. 1 f) GDPR.
revocation and objection
If data processing takes place on the basis of your consent, you can revoke this at any time with effect for the future (so-called "opt-out"). In the case of data processing based on our legitimate interest, you can object to further data processing with effect for the future.
You can revoke your consent via the opt-out link in the section of the data protection declaration for the respective service.
Information on an objection to data processing can be found in Section 6 b) of this data protection declaration.
Browser settings cookies
In addition, you can prevent or restrict future data processing by cookies by selecting the appropriate browser settings and deactivating the use of cookies there, for example. Cookies that have already been saved can be deleted in the browser settings. Further information on the respective browser settings can be found under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/
Internet Explorer: https://support.microsoft.com/de-de/help/17442/
Google Chrome: https://support.google.com/accounts/
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191 ?
Our cookies
You can find more information on the specific cookies that are set, the purposes they serve and their lifespan in our cookie information .
h) Analysis / Marketing
aa) Google servicesWe use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. It is possible that data will also be transferred to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 in the USA. For these cases, Google LLC has submitted to the EU-US Privacy Shield.
The certification is available at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at:
https://policies.google.com/privacy?hl=de&gl=de
Google Analytics
We use the tracking tool Google Analytics from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to website use and thus improve user-friendliness.
When using Google Analytics, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
Details on the cookies used can be found in our cookie settings .
We use Google Analytics with the extension "anonymizeIp()". This shortens IP addresses within the member states of the EU or EEA. If a transmission to the Google servers in the USA takes place, the full IP address will only be transmitted and shortened there in exceptional cases. A direct personal reference is therefore generally excluded. In particular, an assignment to the accessed computer or end device of the website visitor is no longer possible.
The following data is processed through the use of Google Analytics:
- 3 bytes of the IP address of the accessed system of the website visitor (anonymized IP address),
- the website accessed,
- the website from which the user accessed the page accessed on our website (referrer),
- the sub-pages accessed from the website,
- the length of stay on the website,
- the frequency of visits to the website.
According to its own information, Google will in no case associate your IP address with other data held by Google.
The legal basis for data processing is your prior consent in accordance with Art. 6 Para. 1 a) GDPR.
withdrawal of your consent
You can revoke your consent at any time with effect for the future by adjusting the setting options at http://www.google.de/ads/preferences or by clicking on the following opt-out link: [Please insert individual opt-out link here] .
Please also note the information on the use of data by Google in the Google partner network at: http://www.google.com/intl/de/policies/privacy/partners/
Google Analytics cross-device function
In order to optimize our website, we use the Google Analytics function “cross-device tracking”. This makes it possible to process information about the use of the website across devices using a UserID. The data processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 a) DSGVO .
Google Remarketing/Retargeting
We use so-called tracking cookies from Google on our website. When you visit our site, permanent cookies store information about which products you have viewed from us and which third-party ads and pages users used to access our website. If you then visit a partner website, we can display personalized advertising for you based on the articles you have viewed.
We process the data obtained in this way on the basis of your consent in accordance with Art. 6 Para. 1 a) GDPR. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.
bb) Facebook Custom Audiences (pixels/cookies)
Use of Facebook Custom Audiences (pixels/cookies)
We use a so-called tracking pixel from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA on our website. We use Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimize the display of Facebook advertising campaigns to interested target groups.
After you click on a Facebook ad or visit our website, a cookie is stored on your end device using the pixel on our website. The cookie processes data on whether you came to our website via a Facebook ad and enables the behavior of the user to be analyzed until the purchase is completed. This allows us to track the success rate of our Facebook ad campaigns. In addition, the pixel processes data that you have visited our website and enables the advertising displayed on Facebook to be adapted to your interests.
When you visit our website, a direct connection to the Facebook servers is established via the Facebook pixel integrated on our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook. If data is transmitted to Facebook Inc. in the USA, Facebook participates in the EU-US Privacy Shield.
The certification is available at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .
Further information on data protection at Facebook can be found at: https://www.facebook.com/help/568137493302217 .
The cookies remain permanently on your end device, even after you close the web browser, and make it possible to recognize you the next time you visit our website. The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the information collected to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, it is possible for Facebook to process and store your IP address and other identification data.
You can revoke your consent to data processing by Facebook Pixel for our web domain at any time with effect for the future by clicking on the following opt-out link: [Please insert individual opt-out link here]. Please note that you will have to click the link again if you delete the cookies in your browser in the meantime. You can also prevent cookies from being set by adjusting the relevant settings in your Facebook account at https://www.facebook.com/settings?tab=ads .
The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 a) GDPR.
cc) Facebook Custom Audiences (customer list)
We use the custom audience services of Facebook Inc., 1601, Willow Road Menlo Park, CA 94025, USA (Facebook). Customer data is transmitted to Facebook in lists and to Facebook servers in the USA. The data is used to analyze user behavior on the Internet and to personalize advertising and, if necessary, linked to an existing user account on Facebook.
The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 a) GDPR .
Facebook is certified at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information at: https://www.facebook.com/privacy/explanation
You can revoke your consent at any time with effect for the future by...
dd) Newsletter registration via Facebook / Instagram
If you register for our newsletter and a product mailing via Facebook or Instagram, the data protection regulations of Facebook / Instagram also apply, which you can view under Facebook Policy . In this case, data processing is based on your express consent in accordance with Art. 6 Para. 1 a) GDPR. The consent to receive our newsletter can be revoked at any time under newsletter unsubscribe . In the event of a revocation, we will immediately stop sending the newsletter. When registering to receive the newsletter, we ask you for the following data: email address, name, address. We only use your name and address to send the sample. After the sample has been sent, we will delete your name and address.
External Content
We use dynamic content ("Content") from third parties to optimize the presentation and offering of our website. When you visit the website, a request is automatically sent to the server of the respective content provider via an interface, in which certain log data (e.g. the IP address of the user) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Google Maps
We use the Google Maps map service on our website to provide you with an interactive map. When the map is displayed, data including your IP address and your location are transmitted to and stored by Google on servers in the USA. This processing is based on our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 Para. 1 f) GDPR .
For exceptional cases in which Google transfers data to the USA, Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA has submitted to the EU-US Privacy Shield.
The certification is available at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de
bb) Integration of YouTube videos
On our website we have videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA ("YouTube"). When playing the videos, log data is transmitted to the YouTube servers in the USA.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 Para. 1 f) GDPR./b>
YouTube is certified at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information at: https://policies.google.com/privacy?hl=de&gl=de
Social Media Plugins
We use third-party plugins on our websites. This allows you to inform your contacts whether you like our website, point out content or share content. The plugins are identified by the logo of the respective third-party provider.
When you visit our site, your data will be transmitted to the respective third-party provider.
If you are also a user of a third-party provider, this data can be assigned to the corresponding user account with the provider.
This data may also be transferred to the third-party provider if you are not registered as a user with the third-party provider and do not click on the plugin on our website.
In the case of transmission without simultaneous registration with the third-party provider, however, it is not immediately possible to establish a direct personal reference to you, for example via the IP address; this would only be possible via information from your provider.
The purpose and scope of the data processing by the third-party provider can be found in the data protection information of the respective provider.
The processing of this data is based on our overriding legitimate interest in optimal marketing of our online offer in accordance with Art. 6 Para. 1 f) GDPR .
Plugins from the following providers are used on our website:
Facebook plugin from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information at: https://www.facebook.com/privacy/explanation
Google Plugin , Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Certification at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information at: https://policies.google.com/privacy?hl=de&gl=de
Instagram plugin from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Certification at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Further information at: https://help.instagram.com/155833707900388
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer, customer loyalty and customer acquisition in accordance with Art. 6 Para. 1 f) GDPR.
Duration of data storage
We only store personal data for as long as is necessary for the purposes for which it is processed or as long as you have revoked your consent. Insofar as statutory storage obligations have to be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
Your data subject rightsa) Information
Upon request, you will receive information about all personal data that we have stored about you at any time free of charge.
b) Correction, deletion, restriction of processing (blocking), objectionIf you no longer agree to the storage of your personal data or if it has become incorrect, we will, following a corresponding instruction, arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are to only process data to a limited extent in the future. You have the right to object, in particular, in cases where your data is required to perform a task that is in the public interest or is in our legitimate interest, as well as profiling based on this. You also have the right to object in the case of data processing for the purpose of direct advertising.
c) Data portabilityUpon request, we will provide you with your data in a common, structured and machine-readable format so that you can transmit the data to another person responsible if you wish.
d) Right of withdrawal for consents with effect for the futureYou can revoke your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the time of revocation.
e) Right to complainYou also have the option of complaining to a supervisory authority about your rights as a data subject:
( https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html ).
f) RestrictionsData for which we are unable to identify the person concerned, e.g. if it has been made anonymous for analysis purposes, are not covered by the above rights. Information, deletion, blocking, correction or transmission to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.
7. Exercising your rights as a data subject
If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please contact hello@ arganorganiccosmetics.com/
