Data protection declaration

Dear users,

Thank you for visiting our website www.cosmea.de. We want you to feel safe and comfortable in doing so. The following data protection regulations provide information about the processing of your personal data pursuant to Article 13 GDPR (General Data Protection Regulation).

Controller

The body named in the legal notice is the controller responsible for the data capture and processing described below.

Usage data

When you visit our web pages, so-called usage data is stored temporarily on our web server as logs. This includes the IP address of your computer, date and time of access, starting website, requested URL, transferred data volume, status messages, and the browser and operating system you used.

We use this information to facilitate access to our website, to control and manage our systems and to improve the design of the web pages. In the event of attacks on our web pages and systems that represent criminal offences or impair the functionality of our web presence, we evaluate this data in order to initiate countermeasures. IP addresses are only evaluated in anonymised form. No data about persons or their individual behaviour is collected in this process.

Data transfer to third parties

Within the scope of processing pursuant to Article 28 GDPR, we transfer your data to service providers that assist us with the operation of our web pages and the associated processes. Our service providers are strictly bound by our instructions and are subject to appropriate contractual obligations, e.g. web hosting service providers.

Cookies

We use cookies on our web pages. Cookies are small files that are stored on a user’s hard drive. They allow information to be retained for a specific period and the user’s computer to be identified. We use so-called session cookies to improve user guidance and individual performance. These cookies are automatically deleted when you close your browser. No data is stored permanently on your computer.

We use session cookies on our web pages. Processing is effected on the basis of Article 6(1)(f) GDPR and in the interests of optimising and facilitating user guidance and customising the way our website is displayed.

You can set up your browser to inform you when cookies are placed. This gives you transparency about the use of cookies. You can also delete cookies at any time via the corresponding browser settings and prevent new cookies being created. Please note that certain web functions will unfortunately not work properly if cookies are deactivated.

Data security            

We take technical and organisational measures to protect your data from unwanted access. We use an encryption process for pages on which you can enter personal data. Your information is transferred from your computer to our server and vice versa over the Internet using TLS 1.2 encryption. This is indicated by a locked padlock symbol in the status bar of your browser and the address line starting with https://.

Contact form

You can contact us using our contact form. You must fill in the fields marked as mandatory to use our contact form.

We need to know your country to process complaints, especially to complete the relevant formalities for returns.

 

We use this data on the basis of Article 6(1)(f) GDPR to respond to your enquiry.

Moreover, you can decide whether you wish to provide us with further details. This information is provided voluntarily and is not essential for contact. We process your voluntary information on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Your data is only processed to respond to your enquiry. We delete your data once it is no longer required and providing there are no statutory retention obligations.

Insofar as your data submitted on the contact form is processed on the basis of Article 6(1)(f) GDPR, you can object to your data being processed at any time. You can also withdraw your consent to the processing of voluntarily provided information at any time. Please use the email address provided in the Legal Notice to do so.

Embedded Videos

On our websites we embed videos that are not stored on our servers. In order to ensure that visiting our websites with embedded videos does not automatically lead to the reloading of third-party content, in a first step we only show locally stored preview images of the videos. This does not provide the third party provider with any information.

Only after a click on the preview image, content from the third party provider is loaded. The third party provider receives the information that you have visited our site and the usage data that is technically required in this context. We have no influence on further data processing by the third party provider. By clicking on the thumbnail, you give us the consent to reload contents of the third party provider.

The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 it. a GDPR, provided that you have given your consent by clicking on the preview picture.

Third Party Provider: Adequate level of data protection: No adequate level of data protection.
YouTube / Google (USA) Revocation of consent: Revocation of consent: If you clicked on a thumbnail, the content of the third-party provider is immediately reloaded. If you do not want such reloading on other sites, please do not click on the thumbnails anymore.

Comments

You can comment on our content. You are asked to provide the following information in this context:

  • name (optional)
  • comments

Your comments will be published on our site. Please note that we check comments manually before publication, and there may be a delay before your comment is published as a result. If you provide a name (you are also welcome to use a pseudonym), this will be published next to your comment. The legal basis for this processing is Article 6(1)(f) GDPR. We are interested in facilitating an exchange of opinions.

please use the email address provided in the Legal Notice if you wish to object to the processing of personal data submitted using the comments function.

Newsletter registration and sending

You can subscribe to a newsletter on our website. We require your email address when you register for the newsletter.

The newsletter is only sent if you have given us your explicit consent pursuant to Article 6(1)(a) GDPR. Once you have subscribed to the newsletter on our website, you will receive a confirmation email to the address you have provided (double opt-in). You can withdraw your consent at any time. An easy way to do this is by using the unsubscribe link, which is provided in each newsletter, for example.

When you register for the newsletter, we also store other data besides the data already mentioned, providing this is necessary for us to verify that you have subscribed to the newsletter. This can include storing your full IP address at the time of newsletter subscription or confirmation, as well as a copy of the confirmation email we sent. The corresponding data processing is performed on the basis of Article 6(1)(f) GDPR and is done in the interest of establishing the lawfulness of sending the newsletter.

Product tests & competitions

You have the chance to test our products within the context of a competition. We only use information you provide in the context of competitions to identify and contact the winners. We only use your data on the basis of your consent (Article 6(1)(a) GDPR). The winners will be informed in writing. We will not use your data for advertising purposes.   You can withdraw your consent at any time with future effect. To do so, please send us an email to kontakt@cosmea.de. We delete this data promptly, once the prizes have been presented.

Google Analytics

We use the web analysis tool “Google Analytics” to design our websites according to your needs. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. In this way we are able to recognize returning visitors and count them as such.

Within the framework of Google Analytics, Google Ireland Limited and Google LLC (USA) support us as processors according to Art. 28 DSGVO. The data processing can therefore also take place outside the EU or EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to the processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Please take this into account if you decide to give your consent to our use of Google Analytics.

The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR or § 15 para. 3 p. 1 TMG, if you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

You cn revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.

Your rights as a user

With regard to the processing of your personal data, the GDPR grants you certain rights as a website user:

Right of access (Article 15 GDPR):

you have the right to obtain from the controller confirmation as to whether or not your personal data is being processed; where that is the case, access to the personal data and the information listed in detail in Article 15 GDPR.

Right to rectification and erasure (Article 16 and 17 GDPR):

you have the right to demand without undue delay the rectification of inaccurate personal data and, if necessary, the right to have incomplete personal data completed.

you have the right to demand the erasure of personal data without undue delay, providing one of the grounds listed in Article 17 GDPR applies, e.g. the data is no longer necessary for the purposes for which it was collected.

Right to restriction of processing (Article 18 GDPR):

you have the right to demand the restriction of processing, providing one of the conditions listed in Article 18 GDPR applies, e.g. you have objected to the processing, for the duration of any review.

Right to data portability (Article 20 GDPR):

in certain circumstances, which are detailed in Article 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to demand your data be transmitted to a third party.

Right to object (Article 21 GDPR):

if data is collected on the basis of Article 6(1)(f) (data processing for the purpose of legitimate interest), you have the right to object to the processing at any time on grounds relating to your particular situation. We will no longer process the personal data unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority

You have the right pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority if you believe that the processing of your data infringes data protection regulations. This right may be asserted in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Contact details of the Data Protection Officer

Do not hesitate to contact our Data Protection Officer for information or suggestions relating to data protection.

datenschutz nord GmbH
Konsul-Smidt-Straße 88
D-28217 Bremen

Web: www.datenschutz-nord-gruppe.de

Email: office@datenschutz-nord.de

When you contact our data protection officer, please also indicate the controller, who is named in the Legal Notice.