PRIVACY POLICY

We, the ASAM Betriebs-GmbH, are pleased about your visit to https://www.asam-cosmetics.com/?lang=en  (in the following: “our website“). The protection and security of your personal data is our highest priority. This privacy policy (“Privacy Policy“) explains what personal data and other information we collect during your visit to our website, how and for what purposes we use the personal data and information and with whom we share it. In addition, we hereby inform you of your rights in relation to the processing of your personal data, such as the right to information, correction, objection and deletion. We only use your personal data (hereinafter referred to as “your data“), i.e. information that allows conclusions to be drawn about you, in accordance with the applicable data protection regulations. In case we use your data for purposes other than those stated in this Privacy Notice, we will inform you about these purposes separately in advance and, if necessary, obtain your consent. If you have given one or more consent(s) for data processing (e.g. regarding a newsletter), you can freely revoke this consent(s) for the future at any time. The revocation does not incur any costs for you and has no negative consequences for you. The legality of the processing of your data before your revocation remains unaffected in this case.

1. General information

1.1 Who is responsible for the use of your data?

We are responsible (Data Controller) in terms of data protection law.

ASAM Betriebs-GmbH
Altenzeller Weg 23
92339 Beilngries-Aschbuch
Web: https://www.asam-cosmetics.com/?lang=en
E-Mail: sales@asam-cosmetics.com

This means that we are responsible for the use of the data we collect from you and are legally obligated to ensure that the necessary measures are taken to protect your data and to safeguard your rights. 

1.2 Which of your data do we collect and how do we process your data?

Depending on the information you provide to us, we collect the following data:

(a) Data collection when you visit our website:

We collect information about you when you use our services, for example when you visit our website. This involves the following data:

  1. Device related information

We collect device-specific information, such as the model of hardware you are using, version of the operating system, information about the mobile network you are using and data about device events such as crashes, system activity, hardware settings, browser type, browser language, date and time of your request and referral URL.

If you use our services, we collect and process information about your location in the case of your consent. We use various technologies to determine your location, such as IP addresses, GPS and other sensors that provide us with information about nearby devices, WLAN access points or cell towers. You can also check, activate or deactivate the collection of location data at any time in the settings of your terminal device.

When you visit our website, we collect information by using so-called cookies. See more about this below under 2.

(b) Direct communication

When you contact us (e.g. by telephone, contact form or e-mail), we collect personal data. Which data are collected via the contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of processing your request or for contacting you and the related technical administration. The legal basis for the processing of the data is our legitimate interest in processing your request in accordance with Art. 6 I 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the legal basis for processing is Art. 6 I 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry if it is clear from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

(b) Application possibility

You can apply to us by e-mail or in the career portal. If you apply by e-mail, we collect and store the data you send us by e-mail. We process your data only for the purpose of processing your application. Your data will not be passed on to third parties when you apply by e-mail. The career portal is operated by Ströer SE & Co. KGaA, Ströer Allee 1, 50999 Cologne, Germany. You will find further information on data protection at Ströer in the career portal. The legal basis for the processing is Art. 88 (1) GDPR in conjunction with. § Section 26 (1) BDSG. If, in the event of a rejection, you give us permission to continue storing your data so that we can return to your application in the future, if necessary, the legal basis is Art. 6 (1) a) GDPR. If we are unable to offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. § 15 AGG. The start of the deadline is the receipt of the rejection letter.

If you have given us permission to include you in our applicant pool, we will store your data for a maximum of two years. Only the departments involved in the decision (responsible HR or specialist departments, management) will receive your data. 

In addition, we may be obliged by law, official or court order to transmit your data to public authorities (e.g. public prosecutor’s office, police, supervisory authorities, tax office, social security institutions, etc.). Other data recipients may be those bodies for which you have given us your consent to transfer data.

1.3 For what purpose and on what legal basis do we collect your data?

We use your data for the following purposes and on the following basis:

(a) To perform the contract to which you are a party or to perform pre-contractual obligations to you:

(b) On the basis of our legitimate interest:

(c) On the basis of legal obligations:

(d) On the basis of your consent:

1.4 Where is your data processed?

Your data will only be processed by us within the European Union (“EU”) and the European Economic Area (“EEA”). An exception is the analysis service Google Analytics of Google Inc. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. The laws for the protection of personal data in the USA may differ from the protection within the EU and may only provide a lower level of protection. If personal data is processed by Google in the USA, this will take place on the basis of appropriate confidentiality and security measures that ensure the protection of your data. Your data will only be processed by us within the European Union (“EU”) and the European Economic Area (“EEA”).

1.5 How long do we store your data?

We will not store your data for longer than is necessary to fulfill the respective purpose for which it was collected, unless there is a legal basis for such storage. We will then delete your data. The respective retention periods depend on the underlying purpose and the type of personal data. In particular, we store

2. Cookies

When you visit or open our website, we collect information about you by using cookies. Cookies are small text files that allow your browser to be recognized and that are sent to your computer or mobile device. We use cookies to provide you with a user-friendly and secure website and to tailor our services to your needs and interests, e.g. show you ads on our website that are tailored to you (e.g. as banner ads).

These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with your declared consent pursuant to Art. 6 para. 1 lit. a DSGVO or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.

Browser settings configuration

Most web browsers are preset to automatically accept cookies. However, you can configure your respective browser so that it only accepts certain cookies or not at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since the various browsers can differ in their respective modes of operation, we ask you to use the respective help menu of your browser for the corresponding configuration options.

The deactivation of the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate the use of cookies again.

3. Web analysis services

3.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”). The legal basis for the processing of your personal data within the scope of the use of Google Analytics is the consent you have declared in accordance with Art. 6 I 1 lit. a GDPR.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually sent to a Google server in Europe (or in a member state of the European Economic Area Agreement) to make the IP address anonymous, so that no personal reference can be made. Only after the IP address has been anonymized is the shortened IP address transmitted to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide us with additional services related to the use of the website. The IP address transmitted by your browser in the context of Google Analytics is not combined with other data from Google.

You have the right to withdraw your consent at any time with effect for the future. You can also prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie is set to prevent the future collection of your data when you visit this website.

Further information on data protection at Google Analytics can be found here http://www.google.com/analytics/terms/de.html 

and here http://www.google.com/intl/de/analytics/privacyoverview.html.

3.2 Google Fonts

a) Type and scope of data processing   

We use external fonts from Google Fonts on this website. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

We embed Google Fonts locally, i.e. on our own server. This avoids a connection to Google servers in the USA and a transfer and storage of personal data to or on Google servers in the USA. 

b) Purpose and legal basis        

The purpose of using Google Fonts is the uniform presentation of fonts. The legal basis is Art. 6 para. 1 lit. f) DS-GVO.

c) Right of objection      

You have the right to object to the creation of user profiles.

3.3 Google reCAPTCHA

a) Type and scope of data processing

We use reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

This service enables Google to determine which website is sending a request and from which IP address you are using the so-called reCAPTCHA input box.

In addition to your IP address, Google may collect other information necessary to provide and guarantee this service. 

b) Purpose and legal basis    

The purpose of using Google reCAPTCHA is to ensure data security during the transmission of forms.

This serves above all to differentiate whether the input is made by a natural person or whether it is misused by mechanical and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

The legal basis is Art. 6 par. 1 lit. f) GDPR. Our legitimate interest lies in the security of our internet presence and in the defence against unwanted, automated access in the form of spam.

c) Storage period

The stored data will be deleted as soon as they are no longer needed for our purposes.

d) Right to object 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

If you do not wish your data to be collected by Google via our website, so-called opt-out cookies can also be used. These prevent future processing of your personal data when you visit our website. In order to prevent the processing of your personal data across different systems, you must use the opt-out cookie on all systems used.

For more information see Google’s privacy policy: https://policies.google.com/privacy?hl=en

4. Rights of the data subject

4.1 General provisionsgen

The applicable data protection law grants you comprehensive data protection rights (rights of information and intervention) towards the person responsible for the processing of your personal data, about which we inform you below: Datenschutzrecht gewährt Ihnen gegenüber dem Verantwortlichen hinsichtlich der Verarbeitung Ihrer personenbezogenen Daten umfassende Betroffenenrechte (Auskunfts- und Interventionsrechte), über die wir Sie nachstehend informieren:

4.2 RIGHT OF OBJECTIONCHSRECHT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS DATA PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE STOP THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5. Contact

To exercise your rights above, or if you have any questions or comments about this privacy statement or about data protection in general, please contact our data protection team: privacy@asam-cosmetics.com 

You can also contact our data protection officer at georg.schroeder@legaldata.law .

6. Exclusion of liability for external links

Die ASAM Betriebs-GmbH verweist auf Seiten mit Links auf andere Seiten im Internet. Für alle diese Links gilt: Die ASAM Betriebs-GmbH erklärt auASAM Betriebs-GmbH refers to pages with links to other Internet sites. The following applies to all these links: ASAM Betriebs-GmbH expressly declares that it has no influence whatsoever on the design and content of the linked websites and therefore expressly distances itself from all content of all third-party websites linked to https://www.asam-cosmetics.com  and does not adopt this content as its own.  This declaration applies to all displayed links and to all contents of the pages to which links lead.

7. Changes to this privacy policy

We reserve the right to modify this privacy policy at any time with effect for the future. A current version is available on our website.

8. Copyright

©ASAM Betriebs-GmbH – The pages of the website and their components including the illustrations may be protected by copyright. The use, in particular the duplication and imitation, even in extracts, is only permitted with the permission of ASAM Betriebs-GmbH.