Privacy policy

The aim of this privacy policy is to inform you and the public about the type, scope and purpose of the personal data we collect, use and process and at the same time to inform you of the rights to which you are entitled.

1. definitions

Our privacy policy is based on the terms used in the General Data Protection Regulation (GDPR). When we refer to the following terms in our privacy policy, we mean the following:

• personal data
  
  Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An "identifiable" person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  
  
• Data subject
  
  A person is "data subject" if their personal data is processed by the controller.
  
  
• Processing
  
  "Processing" means any operation which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  
  
• Restriction of processing
  
  Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
  
  
• Profiling
  
  Profiling is the automated processing of personal data for the purpose of evaluating, analysing or predicting (in particular with regard to job performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location).
  
  
• Pseudonymisation
  
  Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
  
  
• Controller or controller responsible for the processing
  
  Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
  
  
• Processor
  
  Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
  
  
• Recipient
  
  Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.
  
  
• Third party
  
  Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
  
  
• Consent
  
  Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of the controller

Jet Set Beauty GmbH, represented by the managing directors Esther von Goeddaeus and Stefan von Goeddaeus
Mönichhusen 54
32549 Bad Oeynhausen

Telephone: 0800-2022600

E-mail: info@jet-set-store.de

3. collection of data and legal basis for processing

Collection of general data and information

When you access our website, information of a general nature is automatically collected. This information (so-called "server log files") includes, for example, the type of Internet browser, the operating system used, the domain name of your Internet service provider and the like. This information cannot be used to identify you personally. This information is technically necessary in order to correctly deliver the website content requested by you and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us in order to optimise our website and the technology behind it.

The following information is collected and stored when our website is accessed:

• IP address of your PC or internet-enabled device
• date of access
• Name and URL of the retrieved file,
• referrer URL
• Browser / operating system / access provider

The collection and storage of data serves the following purposes:

• Establishing a connection to the website,
• Technical use of the website,
• system security
• Administration.

Data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses an SSL-encrypted connection. TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.

Registration and ordering on our website

If you register on our website or create a user account, personal data will also be collected from you. We would like to point out that although registration may provide further access to the content of our website, it is not a mandatory requirement for using our website. Which personal data is transmitted to the data controller is determined by the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, for example a parcel service provider for postal delivery to you, who will also use the personal data exclusively for internal use attributable to the controller.

When you register on our website, the following data is collected from you and then stored by us:

• Name and address
• e-mail address
• telephone number

The purpose of data collection and storage is:

• Customer identification
• Processing and handling of the order for correspondence with you
• invoicing
• for the processing of possible claims existing liability claims, as well as the assertion of any claims against you
• Technical administration of the website
• administration

Your consent will be obtained from you during the ordering process before this data is processed.

Data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

Newsletter

If you voluntarily subscribe to our newsletter (regular promotional information e-mail with offers or other information from our company), the data you provide will be used exclusively for this purpose and will not be passed on to third parties.

This also includes information that is relevant to the service or registration. The validity of the e-mail address is checked using the so-called "double opt-in" procedure. For this purpose, the newsletter order is checked by sending a confirmation e-mail and the reply. No further data will be collected.

It is possible to unsubscribe from the newsletter (revocation of consent) at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. You will not incur any additional costs for the cancellation beyond the regular transport costs (e.g. costs for a telephone call). Data processing based on your consent is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Dispatch of the newsletter

Existing customers

We reserve the right to regularly send you offers for similar goods or services to those you have already purchased from our product range by email. In accordance with Section 7 (3) UWG, we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur transmission costs for this in accordance with the basic rates. Upon receipt of your objection, your e-mail address will be removed from the mailing list.

Contact via the website

If you send us enquiries via the contact form or by email, your details from the enquiry form or email, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and or contacting the person concerned. We do not pass this data on to third parties. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Data processing based on your consent is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. The deletion of the personal data collected for the use of the contact form takes place automatically after your enquiry has been dealt with. You have the right to withdraw your consent to data processing at any time.

Comment function in the blog on the website

When comments are made on our site, the selected user name is recorded and stored in addition to this information so that illegal content can also be prosecuted to our relief.

4. storage period

We store the personal data collected for the processing of your order and transmitted to us until the expiry of the statutory retention period. Your data will then be deleted by us unless we are obliged to do so in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

5. obligation to provide - possible consequences of non-provision

The provision of personal data is partly required by law (tax law) or may result from contractual regulations (transparency of the contractual partner). Failure to provide personal data would prevent the conclusion of a contract and will therefore not take place. Any information about the legally or contractually required provision of personal data can be obtained from the controller.

6. existence of automated decision-making

We do not use automated decision-making or profiling.

7 Routine erasure and blocking of personal data

When the storage period, which is explained in more detail under 4. above, has expired, the personal data will be routinely deleted.

8 Rights of the data subject affected by the data processing

As a data subject affected by data processing, you have the following rights

• Art. 15 GDPR: You have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• Art. 16 GDPR: You have the right to request the rectification of inaccurate or completion of your personal data stored by us;
• Art. Art. 17 GDPR: You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Art. 18 GDPR: You have the right to obtain restriction of processing of your personal data where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR;
• Art. Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to have it transmitted to another controller;
• Art. 7 para. 3 GDPR: You have the right to withdraw your consent to data processing. As a result, we may no longer continue the data processing based on this consent in the future;
• Art. 77 GDPR: You have the right to lodge a complaint about data processing with a supervisory authority at your usual place of residence or workplace or at our company headquarters (right to lodge a complaint).

9. Cookies

Use, legal basis and purpose

We use so-called "cookies" so that we can optimise the functionality and technical presentation of our website and continue to optimise it. These are small text files that are stored on your end device. With the help of these "cookies", data can be stored on your computer when you visit our website.

We also use cookies on our website that enable an analysis of the user's surfing behaviour.

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. We require cookies for the following applications: Adoption of language settings. The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

10. social media

Data processing in social media

Our company is active on various social media. In the context of communication with users, user data may be processed outside the European Union, which may result in risks by making it more difficult to enforce rights. With regard to US providers that are certified under the Privacy Shield, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.

As a rule, user data is processed for advertising and market research purposes in order to be able to create user profiles from user behaviour. The usage profiles can be used, for example, for the targeted placement of adverts. For these purposes, cookies are generally stored on the user's computer, in which the user's usage behaviour and interests are stored.

Legal basis for processing:

The legal basis for the processing of users' personal data is our legitimate interest in effectively informing users and communicating with users in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. If the users are asked by the respective providers of the platforms for consent to the data processing described above, the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.

The respective provider has the fastest access to the user data. They can take the most effective measures. The rights of the data subject can therefore be asserted most quickly directly with the providers. Otherwise, we will be happy to assist you at any time.

Details of the respective processing and the opt-out options:

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Facebook pages based on an agreement on joint processing of personal data - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Facebook

Part of our website is the integration of so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are labelled with a Facebook logo or the addition "Social plug-in from Facebook" or "Facebook Social Plugin" labelled. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

The settings options offered by Facebook to protect the privacy of the data subject are explained at https://de-de.facebook.com/about/privacy/.

Instagram

Our website includes the integration of social plugins ("plugins") from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are labelled with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there. If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

Twitter

Part of our website is the integration of so-called social plugins ("plugins") of the microblogging service Twitter, which is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are labelled with a Twitter logo, for example in the form of a blue "Twitter bird". When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through the integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in to Twitter. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you are logged in to Twitter, Twitter can directly associate your visit to our website with your Twitter account. If you interact with the plugins, for example by clicking the "Tweet" button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options to protect your privacy can be found in Twitter's data protection information: https://twitter.com/privacy If you do not want Twitter to assign the data collected via our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

The applicable data protection provisions of Twitter may be retrieved under https://twitter.com/privacy?lang=de.

YouTube

Part of our website is the integration of YouTube. This is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

As soon as you visit pages of our website equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which specific page of our website you have visited. If you are also logged into your YouTube account, you would enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this possibility of assignment if you log out of your account beforehand. Further information on the collection and use of your data by YouTube can be found in the privacy policy at www.youtube.com

The data protection provisions published by YouTube provide information about the collection, processing and use of personal data by YouTube and Google.

Pinterest

Our website contains the "Pin it" button of the social network Pinterest, which is operated by Pinterest, Inc. located at 808 Brannan St, San Francisco, CA 94103, USA. By using the "Pin it" button, Pinterest receives the information that you have visited one of our websites. If you are logged into your Pinterest account during this time, Pinterest will also be able to associate your visit with your Pinterest account. By clicking the "Pin it" button, data is transmitted to Pinterest, which is stored on servers (in the USA). If you wish to prevent this, you must log out of your Pinterest account before clicking the "Pin it" button. In order to protect your privacy, you can find further details on data collection or processing and use of your data by Pinterest as well as your legal options and setting options in Pinterest's privacy policy at: http://pinterest.com/about/privacy/</p

11. online marketing

Use of Google reCAPTCHA

We use the reCAPTCHA service of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. Your data may also be transferred to the USA. An adequacy decision by the European Commission, the "Privacy Shield", is in place for data transfers to the USA. Google participates in the "Privacy Shield" and has submitted to the requirements. By clicking on the query, you consent to the processing of your data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can find more information about Google reCAPTCHA and the associated privacy policy at: https://www.google.com/privacy/ads/

Google Analytics (with anonymisation function)

Part of our website is the integration of the Google Analytics service. This is a web analysis service provided by Google Inc ("Google"). Google Analytics uses so-called "cookies". These are small text files that are stored on your end device and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use the information obtained on behalf of the website operator to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address). your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics.

12. payment processing

PayPal

PayPal components are integrated on our website. PayPal is an online payment service provider. Payments are processed via accounts that represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit cards if a user does not have an account. An account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you use such payment options, we will pass on your personal data required for payment processing to PayPal. As a rule, the scope of the personal data passed on is as follows First name, surname, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. Personal data relating to the respective order is also required to process the purchase contract.

The purpose of the data transfer is to process the payment and to prevent fraud. We will transfer data to PayPal in particular if there is a legitimate interest in the data transfer. PayPal may transfer the personal data received to credit agencies in accordance with its own privacy policy. The purpose of this transfer is to check identity and creditworthiness. PayPal may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of PayPal. The data subject has the option of revoking their consent to the handling of personal data from PayPal at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

The data transfer to PayPal described in this section only takes place expressly if you select this payment option.

The applicable data protection provisions of PayPal may be retrieved under https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Instant bank transfer

Sofortüberweisung components are integrated on our website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung is a technical procedure by which the online retailer immediately receives a payment confirmation. This enables a merchant to deliver goods, services or downloads to the customer immediately after the order has been placed.

The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.

If the data subject selects "Sofortüberweisung" as the payment option during the ordering process in our online shop, the data of the data subject is automatically transmitted to Sofortüberweisung. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.

When making a purchase via Sofortüberweisung, the buyer transmits the PIN and TAN to Sofort GmbH. Sofortüberweisung then carries out a transfer to the online merchant after a technical check of the account balance and retrieval of further data to check the account coverage. The online merchant is then automatically notified of the execution of the financial transaction.

The personal data exchanged with Sofortüberweisung is first name, surname, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. The purpose of transmitting the data is to process payments and prevent fraud. The controller will also transmit other personal data to Sofortüberweisung if there is a legitimate interest in the transmission. The personal data exchanged between Sofortüberweisung and the controller may be transmitted by Sofortüberweisung to credit reference agencies. The purpose of this transfer is to check identity and creditworthiness.

Sofortüberweisung may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of the controller.

The data subject has the option of revoking their consent to the handling of personal data at any time from Sofortüberweisung. A cancellation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

The applicable data protection provisions of Sofortüberweisung may be retrieved under https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/.

Amazon Pay

The Amazon Payments payment method enables customers to use their payment details and payment methods stored at Amazon.de to pay in our online shops via their Amazon account.

If the Amazon Payments payment method is selected, payment is processed directly via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg. If the customer selects "Amazon Payments" as the payment method during the online ordering process, they must first log in with their Amazon account details. Amazon Payments uses the information from the customer's Amazon account to first identify the customer and then process the payment.

When paying via Amazon Payments, the general terms and conditions and the data protection provisions of Amazon Payments Europe S.C.A. apply. These can be found on the website https://payments.amazon.de

Google Pay

If you select the "Google Pay" payment method [from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google")], payment is processed via the "Google Pay" app of the respective mobile device (system requirements: at least Android 4.4 and an NFC function).

The charge is made to the payment card stored with Google Pay or a payment system verified there (e.g. PayPal). For payments of more than €25, it is necessary to unlock your mobile device beforehand using the respective verification measure.

Google then transmits the payment information stored with Google Pay in the form of a one-time valid virtual card number, which contains no information about the actual means of payment stored with Google Pay, to the seller to verify the payment.

Google Pay only acts as an intermediary for all payments. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment stored with Google Pay.

The information provided during the order process, including order information, is forwarded to Google.

The transfer and data processing takes place for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Google may collect data for each payment made via Google Pay.

This includes:

• Registration information
• Information obtained from third parties
• Transaction information

This processing is based on the legitimate interest in proper accounting, the verification of transaction data and the optimisation and maintenance of the functionality of the Google Pay service in accordance with Art. 6 para. 1 lit. f GDPR. If data is collected by other Google services, Google may merge this data with the data collected as part of the payment process.

The additional terms of use for Google Pay can be found at

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found at

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Apple Pay

If you select the "Apple Pay" payment method [from Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (hereinafter "Apple")], payment will be processed via the "Apple Pay" function of the respective end device (system requirements: macOS, iOS or watchOS).

The charge is made to a payment card stored with "Apple Pay". When making a payment, authorisation is required by the respective verification method of your end device.

Apple Pay uses security features built into your device's hardware and software to protect your transactions. According to Apple, Apple Pay is designed to protect your personal data. Apple does not store or have access to the original credit, debit or prepaid card numbers used with Apple Pay. In addition, Apple does not store any transaction data that can be used to identify you when you use Apple Pay with credit, debit or prepaid cards. Your transactions are only visible to you, the merchant or developer and your bank or card issuer.

For the purpose of payment processing, the information provided during the order process and order information is encrypted and forwarded to Apple. This encrypted data is passed on to the payment service that has been stored in Apple Pay after being re-encrypted by Apple.

Once payment has been made, Apple sends your device account number together with the transaction-specific, dynamic security code to the app or website. Neither Apple nor your device will send the actual number of your payment card to the app.

The transfer takes place for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR. If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Apple stores anonymised transaction data, including the approximate purchase amount, the approximate date and time and whether the transaction was successfully completed. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to confirm a purchase made via Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple's servers. Apple does not retain any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Select "Wallet & Apple Pay" and deactivate "Allow payments on Mac".

Further information on data protection with Apple Pay can be found at: https://support.apple.com/de-de/HT203027