Thank you for visiting our website www.cosmea.de. We want you to feel safe and comfortable in doing so. The following data protection regulations provide information about the processing of your personal data pursuant to Article 13 GDPR (General Data Protection Regulation).
The body named in the legal notice is the controller responsible for the data capture and processing described below.
When you visit our web pages, so-called usage data is stored temporarily on our web server as logs. This includes the IP address of your computer, date and time of access, starting website, requested URL, transferred data volume, status messages, and the browser and operating system you used.
We use this information to facilitate access to our website, to control and manage our systems and to improve the design of the web pages. In the event of attacks on our web pages and systems that represent criminal offences or impair the functionality of our web presence, we evaluate this data in order to initiate countermeasures. IP addresses are only evaluated in anonymised form. No data about persons or their individual behaviour is collected in this process.
Data transfer to third parties
Within the scope of processing pursuant to Article 28 GDPR, we transfer your data to service providers that assist us with the operation of our web pages and the associated processes. Our service providers are strictly bound by our instructions and are subject to appropriate contractual obligations, e.g. web hosting service providers.
We use session cookies on our web pages. Processing is effected on the basis of Article 6(1)(f) GDPR and in the interests of optimising and facilitating user guidance and customising the way our website is displayed.
We take technical and organisational measures to protect your data from unwanted access. We use an encryption process for pages on which you can enter personal data. Your information is transferred from your computer to our server and vice versa over the Internet using TLS 1.2 encryption. This is indicated by a locked padlock symbol in the status bar of your browser and the address line starting with https://.
You can contact us using our contact form. You must fill in the fields marked as mandatory to use our contact form.
We need to know your country to process complaints, especially to complete the relevant formalities for returns.
We use this data on the basis of Article 6(1)(f) GDPR to respond to your enquiry.
Moreover, you can decide whether you wish to provide us with further details. This information is provided voluntarily and is not essential for contact. We process your voluntary information on the basis of your consent pursuant to Article 6(1)(a) GDPR.
Your data is only processed to respond to your enquiry. We delete your data once it is no longer required and providing there are no statutory retention obligations.
Insofar as your data submitted on the contact form is processed on the basis of Article 6(1)(f) GDPR, you can object to your data being processed at any time. You can also withdraw your consent to the processing of voluntarily provided information at any time. Please use the email address provided in the Legal Notice to do so.
You can comment on our content. You are asked to provide the following information in this context:
- name (optional)
Your comments will be published on our site. Please note that we check comments manually before publication, and there may be a delay before your comment is published as a result. If you provide a name (you are also welcome to use a pseudonym), this will be published next to your comment. The legal basis for this processing is Article 6(1)(f) GDPR. We are interested in facilitating an exchange of opinions.
please use the email address provided in the Legal Notice if you wish to object to the processing of personal data submitted using the comments function.
Newsletter registration and sending
You can subscribe to a newsletter on our website. We require your email address when you register for the newsletter.
The newsletter is only sent if you have given us your explicit consent pursuant to Article 6(1)(a) GDPR. Once you have subscribed to the newsletter on our website, you will receive a confirmation email to the address you have provided (double opt-in). You can withdraw your consent at any time. An easy way to do this is by using the unsubscribe link, which is provided in each newsletter, for example.
When you register for the newsletter, we also store other data besides the data already mentioned, providing this is necessary for us to verify that you have subscribed to the newsletter. This can include storing your full IP address at the time of newsletter subscription or confirmation, as well as a copy of the confirmation email we sent. The corresponding data processing is performed on the basis of Article 6(1)(f) GDPR and is done in the interest of establishing the lawfulness of sending the newsletter.
Product tests & competitions
You have the chance to test our products within the context of a competition. We only use information you provide in the context of competitions to identify and contact the winners. We only use your data on the basis of your consent (Article 6(1)(a) GDPR). The winners will be informed in writing. We will not use your data for advertising purposes. You can withdraw your consent at any time with future effect. To do so, please send us an email to email@example.com. We delete this data promptly, once the prizes have been presented.
We use the web analysis tool “Google Analytics” to improve the needs-based design of our web pages. Google Analytics creates usage profiles based on pseudonyms. During this process, permanent cookies are stored on your end device which we then read. This enables us to recognise and count repeat visitors.
Data is processed on the basis of your consent pursuant to Article 6(1)(a) GDPR provided that you have given your consent via our banner.
You can withdraw your consent at any time. Please follow this link to do so and alter the corresponding settings via our banner.
In the context of Google Analytics, Google assists us as a processor pursuant to Article 28 GDPR. The data processing can also occur outside the EU and the EEA. With regard to Google, an adequate level of data protection pursuant to Article 45(1) GDPR can be assumed, due to participation in the Privacy Shield and due to the use of standard EU contractual clauses pursuant to Article 46(2)(c) GDPR.
Your rights as a user
With regard to the processing of your personal data, the GDPR grants you certain rights as a website user:
Right of access (Article 15 GDPR):
you have the right to obtain from the controller confirmation as to whether or not your personal data is being processed; where that is the case, access to the personal data and the information listed in detail in Article 15 GDPR.
Right to rectification and erasure (Article 16 and 17 GDPR):
you have the right to demand without undue delay the rectification of inaccurate personal data and, if necessary, the right to have incomplete personal data completed.
you have the right to demand the erasure of personal data without undue delay, providing one of the grounds listed in Article 17 GDPR applies, e.g. the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing (Article 18 GDPR):
you have the right to demand the restriction of processing, providing one of the conditions listed in Article 18 GDPR applies, e.g. you have objected to the processing, for the duration of any review.
Right to data portability (Article 20 GDPR):
in certain circumstances, which are detailed in Article 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to demand your data be transmitted to a third party.
Right to object (Article 21 GDPR):
if data is collected on the basis of Article 6(1)(f) (data processing for the purpose of legitimate interest), you have the right to object to the processing at any time on grounds relating to your particular situation. We will no longer process the personal data unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
You have the right pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority if you believe that the processing of your data infringes data protection regulations. This right may be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
Contact details of the Data Protection Officer
Do not hesitate to contact our Data Protection Officer for information or suggestions relating to data protection.
datenschutz nord GmbH
When you contact our data protection officer, please also indicate the controller, who is named in the Legal Notice.