Objectives and Responsible Entity

This privacy policy clarifies the nature, scope, and purpose of the processing (including collection, processing, and use as well as obtaining consents) of personal data within our online offerings and the associated websites, functions, and content (hereinafter collectively referred to as "online offering" or "website"). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) used to execute the online offering.

The provider of the online offering and the data protection responsible entity is:

Piroche Cosmétiques Deutschland GmbH

Am Hilschberg 13

D-66976 Rodalben

(hereinafter referred to as "provider", "we", or "us"). For contact options, please refer to our imprint.

The term "user" includes all customers and visitors of our online offering. The terms used, such as "user", are to be understood as gender-neutral.

Basic Information on Data Processing

We process personal data of users only in compliance with the relevant data protection regulations in accordance with the principles of data minimization and data avoidance. This means that user data will only be processed if there is a legal permission, particularly if the data is necessary for the provision of our contractual services and online services, or if it is legally required, or if consent is given.

We take organizational, contractual, and technical security measures in accordance with the state of the art to ensure that the regulations of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or unauthorized access.

If, within the framework of this privacy policy, content, tools, or other means from other providers (hereinafter collectively referred to as "third-party providers") are used and their registered office is located abroad, it can be assumed that a data transfer to the countries of the third-party providers takes place. The transmission of data to third countries occurs either on the basis of a legal permission, user consent, or specific contractual clauses that ensure the legally required security of the data.

Processing of personal data

The personal data will be processed, in addition to the uses explicitly mentioned in this privacy policy, for the following purposes based on legal permissions or user consents:

– The provision, execution, maintenance, optimization, and security of our services, service, and user offerings;

– Ensuring effective customer service and technical support.

We only transmit user data to third parties when this is necessary for billing purposes (e.g., to a payment service provider) or for other purposes when necessary to fulfill our contractual obligations to users (e.g., providing addresses to suppliers).

When contacting us (via contact form or email), the user's information is stored for the purpose of processing the request and in case follow-up questions arise.

Personal data will be deleted once it has fulfilled its purpose and there are no retention obligations preventing deletion.

Collection of Access Data

We collect data about each access to the server on which this service is located (so-called server log files). Access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

We use the log data without assigning it to the user's person or creating profiles in accordance with legal regulations only for statistical evaluations for the purpose of operation, security, and optimization of our online offerings. However, we reserve the right to review the log data retrospectively if there are concrete indications of a legitimate suspicion of unlawful use.

Cookies & Reach Measurement

Cookies are information that is transmitted from our web server or third-party web servers to the users' web browsers and stored there for later retrieval. Users are informed about the use of cookies in the context of pseudonymous reach measurement in this privacy policy.

Viewing this online offer is also possible without cookies. If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in their browser's system settings. Stored cookies can be deleted in the browser's system settings. Excluding cookies may lead to functional limitations of this online offer.

It is possible to manage many online advertising cookies from companies through the US site http://www.aboutads.info/choicesor the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

Google Analytics

We use Google Analytics, a web analytics service from Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the user's use of the online offer is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on activities within this online offer, and to provide us with further services related to the use of this online offer and internet usage. Pseudonymous user profiles may be created from the processed data.

We use Google Analytics only with IP anonymization enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by adjusting the settings of their browser software; additionally, users can prevent the collection of data generated by the cookie related to their use of the online service and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on data usage for advertising purposes by Google, as well as options for settings and objections, please visit Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data usage by Google when you use websites or apps of our partners"), http://www.google.com/policies/technologies/ads ("Data usage for advertising purposes"), http://www.google.de/settings/ads ("Manage information that Google uses to show you ads") and http://www.google.com/ads/preferences ("Determine which ads Google shows you").

Integration of third-party services and content

It may occur that within our online offering, content or services from third-party providers, such as city maps or fonts from other websites, are integrated. The integration of third-party content always requires that the third-party providers perceive the users' IP addresses, as they would not be able to send the content to the users' browsers without the IP address. The IP address is therefore necessary for the display of this content. Furthermore, the providers of third-party content may set their own cookies and process the users' data for their own purposes. Usage profiles of the users may be created from the processed data. We will use this content as sparingly and avoidantly as possible regarding data and will choose reliable third-party providers with respect to data security.

The following presentation provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in part already mentioned here, options for objection (so-called opt-out):

– External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). The integration of Google Fonts is done through a server call to Google (usually in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

– Videos from the "YouTube" platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

Rights of users and deletion of data

Users have the right to request free information about the personal data that we have stored about them.

In addition, users have the right to correct inaccurate data, withdraw consents, block and delete their personal data, as well as the right to file a complaint with the competent supervisory authority in the event of suspected unlawful data processing.

The data stored with us will be deleted as soon as they are no longer necessary for their intended purpose and there are no legal retention obligations preventing deletion.

Changes to the Privacy Policy

We reserve the right to change the Privacy Policy to adapt it to changed legal situations or in the event of changes to the service and data processing. This only applies to statements regarding data processing. If user consents are required or if parts of the Privacy Policy contain regulations of the contractual relationship with the users, changes will only be made with the users' consent.

Users are requested to regularly inform themselves about the content of the Privacy Policy.