Privacy policy

Privacy policy - Savue GmbH

We, Savue GmbH, respect the privacy of all persons who visit this website. Therefore, we would like to inform you about how we use your personal data (is all data that can be related to you personally, e.g. name, address, e-mail address, user behaviour). It is recommended that you read this privacy policy so that you understand how we use your personal data. This Privacy Policy governs the use of your personal data by us through or in connection with the Website https://www.nuicosmetics.com/ and any of its sub-sites. Other websites and portals operated by us, if any, may have privacy policies that differ from this Privacy Policy.

We comply with all applicable data security and data protection laws, including the relevant applicable EU data protection legislation. We treat your personal information confidentially and in accordance with the legal requirements. In the following, we would like to inform you about how we handle your data when you use our website.

No. 1 Contact information

a) Name and contact details of the person responsible

The person responsible for the collection, processing and use of data ("data processing") within the meaning of the General Data Protection Regulation (GDPR) is:

SAVUE GmbH

Plauener Street 163-165

13053 Berlin

represented by the managing director with sole power of representation, Ms Swantje van Uehm,

E-Mail: [email protected]

Tel: +49 30 403637630

b) Data processing when contacting us

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

The transmission of information within the scope of this website is secured by means of TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser bar.

c) Contact form

If you use the contact form on our website to send us an enquiry, we need the following information: Name and email address. In addition, you can voluntarily provide your telephone number. By sending your enquiry, you give us consent to use the data you have submitted to answer your enquiry. We will then send you a confirmation e-mail to the e-mail address you provided. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DS-GVO. In the context of your request, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect will only be used to respond to your request.

e) Other

If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

No. 2 General information on data processing

We are responsible for the data processing that takes place within the framework of the use of this website. Our employees have been obligated to maintain the confidentiality of personal data and have also been sensitised to the special importance of data protection.

You can access, print or download this data protection declaration permanently and at any time at the address https://nuicosmetics.com/pages/datenschutzerklarung print it out or download it.

1. scope of the processing of personal data

The provision of the website requires the processing of various information, including the personal date of your IP address. In addition, the extent of data processing depends on your use of the functionalities of the website, such as the contact form, and the extent to which you give us consent.

2. legal basis for the processing of personal data

This processing of your personal data is based on various legal grounds. These are presented in abstract form below.

Processing reason	Legal basis in the GDPR	Explanation
Fulfilment of contract or performance of pre-contractual measures	Art. 6 para. 1 b)/ § 26 BDSG-New	Processing only takes place to the extent that is necessary for the exercise and fulfilment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data processing by us will only take place to this extent.
Legitimate interest	Art. 6 para. 1 f)	Processing is carried out insofar as we have a legitimate interest and no conflicting overriding interests on your part are apparent. The specific interest is explained in this data protection declaration as part of the processing description.
Consent	Art. 6 para. 1 a)	Processing takes place insofar as you have expressly consented to this and on the basis of transparent information about the type and scope of the data processing. You can revoke your consent at any time. However, the processing that has taken place up to this point will not be affected by this.
Legal duty	Art. 6 para. 1 c)	Processing takes place insofar as it is necessary for the fulfilment of German or European legal obligations.

3. Data deletion and storage period

We delete your personal data as soon as the legal basis for their processing ceases to apply and there are no legal retention obligations. A retention obligation may be provided for if this is regulated by the European or national legislator in regulations, laws or other provisions to which we are subject.

4. possibility of objection and removal

Wherever data is processed on the basis of your consent or a legitimate interest on our part, you have the right to object to the processing at any time. To exercise your right to object, you can contact [email protected] to exercise your right to object. If you object to processing based on our legitimate interest, we may nevertheless continue the processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

No. 3 Your rights

If we process your personal data, you are a data subject within the meaning of Article 4 (1) of the GDPR. Therefore, you have the following rights with regard to the personal data concerning you:

Right to information according to Art. 15 DS-GVO,
Right to rectification or erasure according to Art. 16 and Art. 17 DS-GVO,
Right to restriction of processing according to Art. 18 DS-GVO,
Right to object to processing Art. 21 DS-GVO,
Right to data portability according to Art. 20 DS-GVO,
Right to revoke the declaration of consent under data protection law pursuant to Art. 7 (3) DS-GVO.

As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 DS-GVO.

If you do not agree with the way in which we process your data, please contact us at the following e-mail address: [email protected]. In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the supervisory authority responsible for you.

No. 4 Collection of personal data when visiting our website

Establish and maintain a connection to our website

If you call up our website, view it and use the functionalities offered there (mere informational use of the website without registration or other transmission of information to us), the data processing processes described below are required for their provision in order to enable correct display of the website and to ensure the permanent functionality of the information technology systems and the technology of the website as well as the security of the IT. For this purpose, personal data that your browser transmits to our server is processed by us, as described in more detail below.

Unless otherwise stated below, the data processing procedures are carried out on the legal basis of our legitimate interest (pursuant to Art. 6 (1) sentence 1 lit f) DS-GVO) in the provision of our website and its continuous improvement.

aa) Log files

In order to establish and maintain the connection when simply viewing the website, server log files that your browser transmits to us are automatically collected and stored. Specifically, the following data, which is technically necessary for the presentation and for IT security, is collected:

Your IP address / IP address used (if applicable: in anonymised form)
Date and time of the request/access
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access Status/HTTP Status Code
the files transferred and the amount of data transferred in each case (size of the files transferred during the connection)
Amount of data sent in bytes
Website from which the request comes
the browser type, the browser version
Operating system and its interface
Language and version of the browser software
the referrer URL (the previously visited page) - (source/reference)
the page visited afterwards.

The listed personal data is also stored in the server's log files. A combination of this stored data with further data from you does not take place. The storage of the IP address serves the legitimate interest of preventing improper use.

bb)Technical cookies

In addition to the aforementioned data, cookies are stored on your computer to establish and maintain the connection and use of our website. Cookies are small text files containing information that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website as a whole more user-friendly and effective. If you allow the use of cookies in your browser, this does not pose any risk to your computer. These cookies do not contain any personal data and are automatically deleted when you close your browser.

You can prevent the storage of cookies in the settings of your browser. However, the website or individual functionalities may then no longer be available to you.

This website uses the following types of cookies, the scope and functionality of which are explained below:

(1) Transient cookiesTransient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

(2) Persistent cookiesPersistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

The Flash cookies used are not collected by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your end device. These objects store the required data independently of the browser you are using and have no automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually.

b) Google Web Fonts

This site uses so-called web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 S.1 lit. f) DS-GVO. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

c) Shopify

This site uses the Shopify cloud-based service provided by Shopify Inc, 150 Elgin Street, Suite 800, Ottawa, ON K2P 1L4, Canada ("Shopify") to operate its online shop.

For this purpose, the browser you use must connect to Shopify's servers. This enables Shopify to know that our website has been accessed via your IP address. Shopify is used in the interest of an appealing presentation of our online shop. This represents a legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f) DS-GVO.

You can find more information about Shopify at https://www.shopify.de/preise#Faq and in Shopify's privacy policy: https://www.shopify.com/legal/privacy

d) Storage

Your data is stored by Shopify's data store, databases and general application. Shopify stores your data on a secure server behind a firewall. Technical session cookies are deleted as soon as you close your browser. Other cookies may remain stored for several weeks.

No. 5 Recipients of data and data transfer to third countries

a) Recipients of data

The personal data we collect from you through the website will only be transferred with processors involved in the data processing on the basis of a valid commissioning agreement.

b) Data transfer to third countries

Among other things, tools from companies based in the USA and Canada are integrated on our website. If these tools are active, your personal data may be transferred to the US or Canadian servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

In addition, in particular when using the cloud shop system Shopify, your IP address is transmitted in unabbreviated form to Canada, where it is first abbreviated (see No. 4 letter c). The recipient of the data, Shopify Inc., is certified under the decision of the Commission of the European Community of 20.12.2001 (file number C(2001)4539) in accordance with Directive 95/46/EC of the European Parliament (Commission Decision on the Adequacy of Data Protection with regard to Canada)), so that an adequate level of data protection is guaranteed.

No. 6 Further functions and offers of our website

a) General

In addition to the purely informational use of our website (within the meaning of No. 4), we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data which we use to provide the respective service and for which the aforementioned data processing principles apply.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more information on this when you provide your personal data or below in the description of the offer.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

b) Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation will affect the permissibility of the processing of your personal data after you have expressed it to us.

Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either cease or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: [email protected].

No. 7 product reviews

You can rate and comment on our products on the respective product page. Your comment will be published with your given username at the post. We recommend using a pseudonym instead of your real name. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party should object to your comment as unlawful. The legal basis for this is Art. 6 para. 1 p. 1 lit. b) and lit. f) DS-GVO. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful. We store the history of the comments anonymously.

No. 8 Use of our webshop

If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory information required for the processing of contracts is marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to comply with legal obligations.

To prevent unauthorised access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.

No. 9 Use of our newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter e-mail, by e-mail to [email protected] or by sending a message to the contact details provided in the legal notice.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. [

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.

No. 10 Use of web analytics

We would also like to collect data or use collected data to analyse your usage behaviour of the website and to improve the quality of the website itself as well as the services offered on the basis of the information obtained. For this purpose, the data in the log files are analysed and the analysis cookies described below are set. Before carrying out the analysis, we expressly ask for your consent.

The usage analysis is carried out on the basis of our legitimate interest in constantly improving the effectiveness of our website design and our range of services and adapting them to user needs. The data processing for usage analysis takes place until the time of your effective objection. The necessary data for usage analysis are stored (permanently).

In general, it should be noted that the legal basis for the processing of personal data is in particular your consent. The usage analysis that goes beyond this is carried out on the basis of our legitimate interest in constantly improving the effectiveness of our website design and our range of services and adapting them to user needs. In general, data processing for usage analysis will continue until the time of your effective objection, unless otherwise specified in detail below.

a) Use of Google Analytics

aa) This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by setting an opt-out cookie that prevents the future collection of your data when visiting our websites. The opt-out cookie is only valid in this browser and only for our websites and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
Third Party Provider Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User Terms: http://www.google.com/analytics/terms/de.html, Privacy Policy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy Policy: http://www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

No. 11 Use of social media

a) Use of social media plug-ins

aa) We currently use the following social media plug-ins: Facebook, Instagram, YouTube. The privacy policy of the respective social media provider applies to each Like, Share and Follow button. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by marking the box with its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under No.4 of this declaration is transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.

bb) We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

cc) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.

dd) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.

ee) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

ff) Addresses of the respective plug-in providers and URL with their data protection notices:

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Privacy Policy: https://www.facebook.com/privacy/explanation/;
Instagram

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Privacy Policy: https://help.instagram.com/519522125107875.

3. you tube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de.

b) Integration of YouTube videos

aa) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.

bb) By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under no. 4 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.

cc) For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

c) Integration of Google Maps

aa) On this website, we use the Google Maps service. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

bb) By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under no. 4 of this declaration will be transmitted. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.