Data protection

The protection of your personal data is important to us.

With our data protection declaration, we inform you about the type, scope and purpose of the personal data we collect, process and use.

In addition, you can also see your rights in connection with the processing of your personal data by us in the text below.

At the end of the privacy policy, we have explained some of the terms we use to help you understand the privacy policy.

1. name and contact details of the responsible person

First of all, we would like to introduce ourselves as the party responsible for processing your personal data. The website www.ZMILE-cosmetics.de is operated by us, the

BriConti GmbH

Bahnhofstrasse 14

21493 Moehnsen

Germany

Phone: +49 4159 - 8106 - 0

Fax: +49 4159 - 8106 -162

E-mail: info@briconti.de

We are responsible for the collection, processing and use of your personal data that may be collected from you when you visit our website. If you have any questions about this, please contact us using the above contact details.

2. name and contact details of our data protection officer

Data Protection Officer: Ralph Hellwig (hellwig@thb-recht.de)

Mr Hellwig will be happy to answer your questions and suggestions regarding data protection.

3. data processing when visiting our website

The use of our website is generally possible without the active provision of personal data. However, every time our website is accessed, i.e. even for purely informational use, various data and information is collected by us for technical reasons and stored in so-called log files or server log files (log files) on the server used by us. This is only the personal or person-related data that your browser transmits. We host our website with an external service provider. Our hoster is the service provider Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103 in the USA. We have concluded a contract data management agreement with Webflow. Information on Webflow's privacy policy can be found at the following link: https://webflow.com/privacy 10.

The legal basis for processing your data to fulfil a contract with you as a potential and/or existing customer is Art. 6 para. 1 lit. b DSGVO, the provision of our online offer in general is based on Art. 6 para. 1 lit. f DSGVO.

Captured and stored:

- the IP address (Internet Protocol address),

- the date and time of access to our website,

- the browser software/browser types (computer programs for displaying web pages) used to access our website, as well as their versions and language,

- the operating system accessed by our system and its interface,

- the Internet service provider (ISP) of the accessing system,

- Content of the request (content of the specific pages accessed),

- the amount of data transferred in each case,

- Access status/HTTP status code (response delivered by the server to each HTTP request, representing the status of the request),

- the website from which our website is accessed,

- Time zone difference from Greenwich Mean Time (GMT).

The storage of the IP address - even for a short period of time - is technically necessary due to the way the internet works. However, before we process and store your IP address, it is shortened and only used in this unrecognisable (anonymous) form. The complete IP address is not stored. An assignment to you is no longer possible after the shortening.  

The other information and data mentioned above will not be used by us to draw conclusions about you or to identify you. Data that makes it possible to identify you personally will be anonymised as soon as possible.  

The data and information listed above are collected by us exclusively to display our website to you and to ensure its stability and security and to optimise our website in this respect. The collection of the aforementioned data therefore serves the purpose of improving the data security of the programmes and systems used by us. In addition, we use the data for the anonymous, statistical evaluation of your movements on our website.  

The log files are stored separately from your other personal data that you may have provided to us yourself during your visit to our website and are not merged with this data. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The legal basis for the collection of the aforementioned data is our legitimate interest in the functionality and security of our website. In addition, we have a legitimate interest in using the anonymous or anonymised data to evaluate user behaviour on our pages in order to be able to assess the effectiveness of our website design and structure.  

4. use of Google Analytics and Google Ads

This website uses Google Analytics, a web analytics service, and Google Ads, an advertising service. The Google LLC California, service provider is Google Ireland Ltd Gordon House Barrow Street Dublin for Ireland.

By using these Google offers, it is possible to assign data sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse the activities of your usage across devices.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. If you have activated your IP anonymisation, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in this context will not be merged with other Google data. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. At the same time, Google will be able to recognise your internet browser. If you search for certain pages on the website and the cookie stored on your computer has not yet expired, Google will be able to recognise that you have clicked on our advertisement and have been redirected to this page. A different cookie is assigned to each of our customers. In this way, the cookies cannot be tracked via the websites of Google Add customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on this evaluation, we can see which of the advertising measures used are particularly effective. We cannot identify you on the basis of this data or even recognise your personal data in this respect. We have no influence on the scope and further use of the data collected by Google through the use of this tool.

With the remarketing function of Google Ads, we can present you with advertisements based on your interests when you visit other websites. To make this possible, Google analyses your interaction with our website. This allows Google to show you targeted ads when you visit other websites that are connected to the Google advertising network. All this is made possible by the cookies stored on your computer.

This purpose is also our legitimate interest in this data processing. The legal basis for the use of Google Analytics and Google Ads is Section 15 (3) TMG and Article 6 (1) f DSGVO. The data sent by us and linked to cookies user recognition (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month. You can find more information on the terms of use and data protection at http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing tools.google.com/dlpage/gaoptout. Optout cookies prevent the future collection of your data when visiting this website. To prevent Google Analytics and Google Ads from collecting data across different devices, you must opt out on all systems used. You can replace the opt-out cookie and deactivate Google Analytics and Google Ads by clicking on the corresponding cookie setting when visiting our site.

5. contact via contact form or email

If you send us a message using our contact form or write to us directly by email, you give us your name and email address. Without this, we would not be able to answer your question. We store both until your question is answered. Then we delete your name and email address. You can also ask us to delete your data before, but then we cannot answer your question any further. We do not pass on your data. You can see your other rights in the privacy policy. It also states who is responsible and who you can complain to if something is not right. The legal basis for the receipt and storage of your name and email address is Art. 6 para. 1 b DSGVO.

6. your rights

You have the rights described below with regard to your personal data. To exercise these rights, please contact us or our data protection officer using the contact details above.

The right of confirmation and information

You can request confirmation as to whether we are processing your personal data.

If we process personal data about you, you have the right to information about the following points:

- the processing purposes

- the categories of personal data that are processed,

- the recipients or categories of recipients to whom the personal data are disclosed, in particular in the case of recipients in third countries or international organisations,

- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,

- the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing,

- the existence of a right of appeal to a supervisory authority,

- if the personal data are not collected from the data subject, any available information on the origin of the data,

- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

The right to rectification

You have the right to request that we correct any inaccurate personal data relating to you without undue delay.

Furthermore, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

The right to erasure

You can request that personal data concerning you be deleted immediately. In this case, we are obliged to delete personal data immediately if one of the following reasons applies:

- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

- You withdraw your consent on which the processing was based and there is no other legal basis for the processing;

- You object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing;

- the personal data have been processed unlawfully;

- the deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject;

- the personal data have been collected in relation to information society services offered in accordance with Article 8(1).

If we are obliged to erase in accordance with the aforementioned principles and we have made your personal data public, we will take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the other data controllers that process the personal data that you have requested that they erase all links to, or copies or replications of, that personal data.

The right to restrict processing

Under the following conditions, you have the right to demand that we restrict the processing of your personal data, namely if:

- the accuracy of the personal data is contested by you for a period of time that enables us to verify the accuracy of the personal data;

- the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;

- we no longer need the personal data for the purposes of processing, but you require it for the assertion, exercise or defence of legal claims, or

- you have objected to the processing as long as it has not yet been determined whether our legitimate grounds outweigh yours.

The right to data portability

You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.

In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

- the processing is based on consent or on a contract and

- the processing is carried out with the aid of automated procedures.

When exercising your right to data portability, you have the right to have your personal data transferred directly from one controller to another controller where this is technically feasible.

Right to object to data processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of your consent or on the basis of our legitimate interest; this also applies to profiling.

After your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes, unless the processing is necessary for the performance of a task carried out in the public interest.

Right to withdraw consent

If you have given us your consent to the processing of your personal data (e.g. for a newsletter mailing), you also have the right to revoke this consent at any time with effect for the future. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of appeal to a supervisory authority

In addition, you have the right to lodge a complaint against us with a data protection supervisory authority if you believe that our processing of your personal data violates applicable data protection law. The supervisory authority responsible for us is the

Marit Hansen, ULD - Independent Centre for Data Protection Schleswig-Holstein

E-mail: mail@datenschutzzentrum.de

PO Box 71 16

24171 Kiel

Phone: 0431 988-1200

Fax: 0431 988-1223

7. cookies

We use so-called cookies on our websites.

Cookies are small text files that are sent to your browser by our server the first time you request our website through you or your browser together with the requested website. Your browser stores the cookie(s) on the hard drive of your end device.

Cookies cannot be used to transfer malware or viruses to your end device, run programs or open pop-up windows. They are also not used to send spam.

Rather, cookies are used to obtain certain information.

We use this data and the cookies we use to make our website more effective, secure and user-friendly overall and, for example, to find out whether a pop-up window has already been displayed to you. In addition, we keep web statistics with the help of cookies. With the help of this information, we evaluate the effectiveness of our advertising measures, improve our marketing campaigns and tailor our product offers to the users of our websites.

At no time will the data be merged with your personal data.

We use the following types of cookies on our websites, to the extent described and with the designated functions.

- Transient cookies (temporary use/storage), these are "short-lived" cookies that are automatically deleted when you close your browser (closing all windows) or log out of your account with us.

We use so-called "session cookies" in particular. Session cookies generate or store a "session ID" (session ID). This is a randomly generated string of characters that makes it possible to assign various requests from your browser (calls to our website and its sub-pages) to a session. In this way, we distinguish you from other users of our website and can recognise your computer or your browser when you return to our website.

The session cookies ensure, for example, that goods that you have placed in the shopping basket remain in the shopping basket even if you continue to browse our websites.

If you close the browser, the browser window or call up another website, the shopping basket is reset. The goods already placed in the shopping basket would have to be placed in the shopping basket again on a later visit.

- Persistent cookies (time-limited use/storage), these have the inherent property that they delete themselves after a fixed period of time. The duration can vary depending on the cookie.

We use this type of cookie, among other things, to enable goods that you have placed in your shopping basket to continue to be displayed in the shopping basket even after you have left our website or closed the browser. This increases the usability and efficiency of our website and allows you to continue shopping without having to search for the previously selected goods again and place them in the shopping cart.

In addition, we use persistent cookies/persistent cookies to save settings you have made on our website (e.g. language, font size, colour design) so that you do not have to make these settings again when you visit us again.

We also use persistent cookies in the form of analytical and performance cookies. These cookies provide us with anonymised data about the usage behaviour of you or other visitors to our site. This data is analysed and used by us to optimise the functionality of our website, to better tailor our range of products to the user's interests and to determine whether, where and when problems occur when calling up our website. Furthermore, they enable us to check whether our advertisements are successful. Due to the anonymous collection of the data, it is not possible for us to combine your usage behaviour with your personal data that may have been collected during your visit to our website.

OR

The anonymised usage behaviour data is not merged with any personal data that may have been collected during your visit to our website.

If you have a customer account with us, we also use cookies that enable us to recognise you on subsequent visits to our website, so that you do not have to log in again each time you visit.

If you do not wish cookies to be stored in general or individual cookies to be stored on your end device, you can configure your browser settings according to your preferences via the corresponding menu item.

At this point we would like to point out that this may mean that not all functions of our websites are available or can be used.

(Persistent) cookies that are stored on your end device over the course of the respective session can - in addition to the option of blocking them - also be removed from your end device, regardless of whether their use is limited or unlimited in time.

To do this, you can call up the corresponding functions in your browser and delete the history.

Flash cookies can be prevented by installing an appropriate "add-on", e.g. "Better Privacy" for Mozilla Firefox or the Adobe Flash Killer Cookie for Google Chrome.

By selecting private mode in your browser, you can prevent the setting or use of HTML5 Storage Objetcs.

In general, we recommend that you regularly delete your browsing history and cookies.

Legal basis for the use

There is a legitimate interest for us in the use of cookies. On the one hand, this applies to cookies that are necessary for the use of the functions of our website (e.g. shopping cart function), as these are required for the functionality and the best possible provision of our services.

We also have a legitimate interest in using the other cookies we use in order to use them to analyse the use of our websites and the original page from which you accessed our websites, etc. and to evaluate the advertising media and measures we use and to adapt them to user behaviour and make them more effective.

8. social networks and social media plug-ins

We maintain profiles on social networks. These are currently Instagram and Tiktok. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.

If you visit one of our profiles on social networks, we are jointly responsible with the operator of the social network. You can therefore assert your rights both towards us and towards the social network. You can find the responsible persons of the social networks below. Please note that this is nevertheless a data transfer to a third country (USA) that is not safe from a data protection point of view. We cannot or cannot fully comprehend the data processing carried out by the social networks in the context of your entries there, in particular also your consent there. For further information, please refer to the terms of use and data protection provisions there.

We currently use the following social media plug-ins: (Instagram, TikTok). When you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the logo of the button. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request came, browser, operating system and its interface, language and version of the browser software are transmitted. According to the respective providers, the IP address is anonymised immediately after collection. However, by activating the plug-in, the aforementioned personal data is initially transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies whose data you do not wish to exchange via your browser's security settings before clicking on the button or manually entering the link.

We have no influence on the data and data processing procedures collected in this way, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares your contact publicly. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.

For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their data protection notices:

Instagram

Our Instagram presence can be accessed via the button or at https://www.instagram.com/ZMILE.cosmetics/.  

For users outside the USA and Canada, Instagram is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dichblin 2, Ireland ("Facebook Ireland"). For users in the USA and Canada, Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA, is the operator of Instagram.

For more information, please see Instagram's privacy policy at https://help.instagram.com/155833707900388.

TikTok

Our TikTok presence is available under the corresponding button or at https://www.tiktok.com/@ZMILE.cosmetics.

For users within the European Economic Area and Switzerland, TikTok is operated by TikTok Technology Limited 10 Earlsfort Terrace, Dichblin, D02 T380, Ireland ("TikTok Ireland") and the United Kingdom by TikTok Information Technologies UK Limited, One London Wall, 6th Floor, London, England, EC2Y 5EB ("TikTok UK"). For users in the USA, TikTok Inc, 5800 Bristol Parkway, Culver City, CA 90230, USA is the operator of TikTok. For all other users outside the European Economic Area, the United Kingdom, Switzerland and the USA, TikTok Pte. Ltd, 1 Raffles Quay, #26-10, South Tower, Singapore is the operator of TikTok.  

For more information, please see TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy?lang=en#privacy-eea (for users within the European Economic Area, the United Kingdom and Switzerland), https://www.tiktok.com/legal/privacy-policy?lang=en#privacy-us (for users within the United States) and https://www.tiktok.com/legal/privacy-policy?lang=en#privacy-row (for all other users outside the European Economic Area, the United Kingdom, Switzerland and the United States).

‍9. integration of the Trusted Shops trustbadge / other widgets

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings) and to offer Trusted Shops products to shoppers after they have placed an order. This serves to protect our legitimate interests in optimal marketing by enabling secure shopping, which prevail in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with which we are jointly responsible for data protection pursuant to Art. 26 DSGVO. In the following, we inform you about the essential contractual contents according to Art. 26 Para. 2 DSGVO within the framework of this data protection notice.

Within the framework of the joint responsibility between us and Trusted Shops, you should preferably contact Trusted Shops with data protection questions and to assert your rights using the contact options specified in the data protection information. Irrespective of this, however, you can always contact the responsible person of your choice. If necessary, your inquiry will then be forwarded to the other responsible party for a response.

9.1 Data processing when integrating the trust badge/other widgets

The trust badge is provided by a US CDN provider (content delivery network). An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures.

When theTrustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to you personally. The anonymized data is used in particular for statistical purposes and for error analysis.

9.2.Data processing after order completion

After order completion, order information (order total, order number, purchased product, if applicable) as well as your email address, which is hashed using a cryptological one-way function, are transmitted to Trusted Shops. The legal basis is Art. 6 para. 1S. 1 lit. f DSGVO. This serves to check whether you are already registered for services at Trusted Shops and is therefore necessary for the fulfillment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional evaluation services pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO. If this is the case, further processing will take place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you will be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops and a personal reference is then no longer possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f DSGVO for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual measures and in the case of Israel by an adequacy decision. For more information, please click here.

10. explanation of terms

The following definitions are based on the General Data Protection Regulation (GDPR) of the European Union (Regulation EU 2016/679 of the European Parliament and of the Council).

"Person in charge"

The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

Thus, the controller is in principle the natural person or the undertaking which, alone or together with others, determines the purposes and methods of the processing of personal data.

"personal data"

Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data includes first and last name, address, telephone number, email address, date of birth, etc., as well as the IP address used, information about the devices you use, voice recordings, your customer card number, your account data, your credit card numbers, as well as, for example, physical characteristics such as your gait or your appearance.

"Processing"

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Your data is also processed, for example, when you present your customer card at the checkout as part of the payment process or make a payment with your EC card.

"Third"

Third party means any natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

"Restriction of processing"

Restriction of processing is the marking of stored personal data with the aim of restricting your future processing.

"Pseudonymisation"

The processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information is called pseudonymisation. This additional information is. In addition, technical and organisational measures shall be taken to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Consent"

Consent is understood to be any voluntary, specific, informed and unambiguous expression of will in the form of a declaration or other unambiguous affirmative act by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

11. raffles

On the basis of Article 6 para. 1 b DSGVO, we process your personal data (depending on the game age, email address, account name at Tik Tok, Instagram, -name, first name, address) for the purpose of conducting a sweepstake. We and the companies commissioned by us use this data only for the sweepstakes.

In case of a win, we will inform you according to the terms and conditions (via email, Tik Tok or Instagram). Only then you have to give us your name and address. A transfer of data or disclosure of personal data to third parties will take place to the agency entre nous GmbH, Stahltwiete 23, 22761 Hamburg. info@entrenous.agency . (entre nous) will take place. In connection with this competition, Entre Nous has access to the user names participating in this competition and, in the event of a win, to the data required for postal delivery of the prize (name, address). If necessary, we will then pass on your address to the shipping service provider. You have the right to obtain information about the personal data we have stored about you. You also have the right to have them corrected. You have the right to data portability according to Article 20 DSGVO.

If you no longer wish to participate in the competition (see above), please contact ZMILE Cosmetics, GF Joachim Bitter, Michaela Wegner, Bahnhofstraße 14, 21493 Möhnsen, to object to the use of your data and to have your personal data deleted immediately. We will then delete your data that we have stored for the purpose of the competition. In this case, you will no longer participate in the competition. You can also assert all other rights in this way.

Your data will be deleted by us in any case as soon as the draw has taken place. In the event of a win, your data will be deleted as soon as we have successfully informed you and the delivery of the prize has been successfully completed in accordance with the conditions of participation. The personal data of our winners will not be published.