Beauty institute Faces by Clara & Kurnia
Owners Kurnia Roden and Clara Cifuentes
Karlsberg Carre 10
69469 Weinheim
Phone: +49 6201 2716751
e-mail: facesweinheim@gmail.com
We welcome you to our website. The protection of your data is very important to us. Therefore we will show you below how we process your personal data.
As a matter of principle, we process the personal data that you provide us with in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary in the context of fulfilling the contract, we also process personal data that has been taken from publicly accessible sources (e.g. commercial register, debtor lists, Internet) in a permissible manner or that has been transmitted to us by third parties (e.g. credit agencies) in a permissible manner.
This can be personal data (name, date of birth, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract period, services purchased, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising letters) and other comparable categories of personal data.
The use of our website is basically possible without the indication of personal data.
However, we would like to point out that also in this case access data is collected and stored in the server log files. These data are in particular the following data:
We evaluate this information exclusively in anonymised form to defend against attacks and to improve our services (processing of personal data within the scope of a weighing of interests in accordance with Art. 6 Para. 1 f DSGVO) and then delete it. The data cannot be traced back to your person and will not be merged with other data.
However, we reserve the right to evaluate the data subsequently if there are concrete indications of illegal use.
If you contact us by e-mail or via an offered form, we process the personal data you provide to answer your inquiry. We delete the data after the final processing of your inquiry, unless there is a contractual or legal obligation to retain the data.
In individual cases, we will obtain your consent for specific purposes expressly designated in connection with the collection of data (e.g. enquiry using a contact form, opening a customer account, ordering a newsletter).
A data processing only takes place if you give us your consent. It is possible that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.
You can revoke your given consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of revocation.
If you send us an enquiry via our contact form, we will process the data provided by you on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 a) DSGVO in order to process your enquiry. As a matter of principle, your data will be deleted after processing your enquiry, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer it to our inventory system.
You can revoke your consent at any time with effect for the future using all contact data provided.
If you have registered for our newsletter, we will process the data you have provided with your consent in accordance with Art. 6 para. 1 sentence 1 a) DSGVO in order to send you our newsletter on a regular basis. To register, it is sufficient to provide an e-mail address. All other information is provided voluntarily.
You can revoke your consent at any time with effect for the future. A link to revoke your consent can be found at the end of every newsletter e-mail. Of course you can also revoke your consent via the other contact options offered.
If a contract is concluded with us, we use personal data insofar as this is necessary for the processing of the contract or for the implementation of pre-contractual measures. The purposes of the data processing are based on the concrete contract contents, which you can find in the contract documents.
We process personal data after weighing up the interests, as far as this is necessary to protect our interests or the interests of third parties.
Examples of such purposes are:
Within the scope of your visit to our website, cookies may be used on various pages. These are text files that are placed on your computer and, among other things, enable a smooth flow of your visit to our website.
We use cookies on the basis of Art. 6 para. 1 sentence 1 f) DSGVO, whereby we hereby pursue the following legitimate interests:
The use of cookies takes place within the framework of so-called user profiles. You will be assigned a pseudonym under which the usage data is stored. Your IP address is only stored in abbreviated form, so that a personal assignment of the user profile is no longer possible.
Most of the cookies we use are deleted from your computer after closing the browser (session cookies). Other types of cookies may remain on your computer and enable us to recognize your computer during your next visit to our site by means of the user profile created (permanent cookies).
Cookies are only used on our site by ourselves and not by third parties, with the exception of third-party cookies, which are explicitly mentioned in this privacy policy. You can set your browser to notify you when you receive a cookie and decide whether to accept it, or to refuse to accept cookies in certain cases or generally. If you choose not to accept cookies, the functionality of our website may be limited.
Some of our websites include social plugins, which are deactivated by default for reasons of data protection. If a user accesses our website, no data is transmitted to the social media services (e.g. Facebook). A profile creation by third parties is thereby excluded.
Users have the possibility to activate the social plugins with one click and thus give their consent to communicate with the respective social network. If a social plugin is activated, certain data is transmitted to the respective social network, e.g. the user’s IP address, information about the browser and operating system used, the website called up, and the date and time. In the course of this communication, data is also loaded from a server of the social media provider to our website.
The respective provider of the social plugin receives information about which websites the user visits. This may happen regardless of whether the user is currently logged in to the social plugin provider (e.g. Facebook) or not. The provider may also process this data outside the European Union and may be able to create individualised user profiles. We have no influence on the type, scope and purpose of data processing by the providers of the respective social media services.
Facebook:
Our website uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
The plugins can be recognized by one of the Facebook logos or are marked with the addition “Facebook Social Plugin”. The list and the appearance of the Facebook Social Plugins can be viewed here: http://developers.facebook.com/plugins. If you call up a website of our Internet presence that contains such a plugin, your browser only establishes a direct connection with the Facebook servers when the user activates the “Facebook” button by clicking on it. The content of the plugin is then transmitted by Facebook to your browser, which integrates it into the website. By activating the plugin, Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for example, by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, it is still possible for Facebook to find out and save your IP address. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to the Facebook data protection information: http://www.facebook.com/about/privacy. If you are a Facebook member and do not want Facebook to collect data about you via our website and link it with your membership data stored on Facebook, you must log out of Facebook before visiting our website. It is also possible to block Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker”.
Google Maps: We use a plugin of the internet service Google Maps on our website. The operator of Google Maps is Google Inc, located in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View.
When you use Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the transmitted data, nor of its use by Google. The company denies in this context the connection of the data with information from other Google services and the collection of personal data. However, Google may transfer the information to third parties. If you deactivate Javascript in your browser, you prevent Google Maps from running. However, you will then not be able to use a map display on our website.
By using our website, you declare your consent to the described collection and processing of information by Google Inc. You can find out more about the data protection regulations and terms of use for Google Maps here: https://www.google.com/intl/en_en/help/terms_maps.html.
We pass on data to other third parties if and to the extent to which we have transferred the performance of tasks to them. Data is only passed on to third parties if this is necessary for the fulfilment of the assigned tasks.
We cooperate with the following companies:
The data is passed on in each case within the framework of a contract for order processing, which ensures that all data protection requirements are observed.
For payment processing within the SEPA Direct Debit Scheme, we will pass on your payment data to the credit institution commissioned with the collection.
In all other respects, data will only be passed on within the scope of the cases provided for by law, for example in the case of a legal obligation to provide information to criminal prosecution authorities.
Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfilment of contractual and legal obligations.
Personal data shall be stored at least for as long as necessary to fulfil contractual obligations and to exercise contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant within the scope of the limitation periods even after the end of the contract. In addition, data can only be deleted once any retention periods under tax and commercial law have expired.
The criteria for the duration of the storage of cookies can be found in the corresponding section.
As a person affected by the processing of personal data, you have the following rights:
You have the right to request confirmation as to whether personal data are being processed. If this is the case, you have the right to be informed about the personal data and to receive the information specified in Art. 15 DSGVO.
You have the right to ask the person responsible to correct incorrect personal data concerning you without delay and, if necessary, to complete incomplete personal data (Art. 16 DSGVO).
You have the right to demand that the person responsible for data relating to you be deleted immediately if one of the reasons listed in paragraph 17 DSGVO applies, e.g. if the data are no longer required for the purposes pursued (right to deletion).
You have the right to request the controller to restrict the processing if one of the conditions listed in Art. 18 DPA is met, e.g. if you have lodged an objection to the processing, for the duration of the controller’s examination.
You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation. The person responsible will then no longer process the personal data unless he or she can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims (Art. 21 DSGVO).
With regard to the exercise of your rights, you can contact us at any time using the contact options offered on our website.
In individual cases we process personal data in order to carry out direct advertising. In this case you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising (Art. 21 DSGVO).
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
The objection can be made at any time without formality via one of the contact options given in this data protection declaration or in our imprint.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you is in breach of the DPA (Art. 77 DPA). You may exercise this right before a supervisory authority in the Member State in which you are resident, your place of work or the place of the suspected infringement. In Baden-Württemberg, the competent supervisory authority is the State Data Protection Commissioner of Baden-Württemberg.
For further information please visit the service portal of the state of Baden-Württemberg under the following link:
Of course, you can also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the contact details given above.
Certain personal data are necessary for the execution of a contractual relationship. If you do not provide us with the data marked as required, it will generally not be possible to conclude a contract.