Version 2 / Status as of 31.01.2022
1. Information about the collection of personal data
1.1 Below we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behavior.
Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is
Beauty Travels 24
Derya and Halit Gezer GbR
Herrenstraße 14
D-76437 Rastatt
Phone: (07222) 931 99 0
Fax: (07222) 931 99 24
Email: info@beautytravels24.de
1.2 When you contact us in general via email or through a contact form, the data you provide (your email address, possibly your name and your phone number) will be stored by us in order to answer your questions. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a GDPR. If the information serves to fulfill a contract to which you are a party or to carry out pre-contractual measures, then the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
We will delete the data that arises in this context as soon as the storage is no longer necessary, or restrict the processing if legal retention obligations exist.
We point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of the data from access by third parties is not possible.
1.3 In part, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.
1.4 If a mediation contract comes into effect, further data is usually collected and processed. Of course, we will inform you in advance concretely and in detail about the handling of this data.
2. Collection of personal data when visiting our website
2.1 When using the website purely for informational purposes, meaning when you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data:
IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transmitted
Website from which the request originates
Browser type, including language and version used
Operating system and its interface
Websites accessed from the user’s system through our website.
The data is stored in the log files of our system. These data are not stored together with other personal data of the user.
2.2 Legal basis for the collection and storage of data in accordance with Art. 6 para. 1 lit. f GDPR.
2.3 The data is technically necessary for us to display our website and to ensure stability and security. The storage in log files occurs to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.
Our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR also lies in these purposes.
2.4 The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session is ended. In the case of data storage in log files, this will occur after a maximum of seven days. Further storage is possible. In this case, the IP addresses will be deleted or anonymized, so that an assignment of the requesting client is no longer possible.
2.5 The above-described collection and storage of data is necessary for the operation of the website. Therefore, you have no right to object. If you do not agree with this, we recommend leaving the website.
3. Collection of additional personal data when visiting our website through cookies
3.1 In addition to the data previously mentioned, communicated to our server by your browser, cookies are stored on your computer while you use our website.
Cookies are small text files that are stored on your hard drive assigned to the browser you are using, through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the overall internet offering more user-friendly and effective, as well as to analyze user behavior on our website.
When you access our website, you will be informed about the use of cookies by an info banner and referred to this privacy statement.
3.2 There are different types of cookies, the scope and functionality of which are explained below.
There are so-called “session cookies.” These are automatically deleted when you close the browser. They store a so-called session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
Additionally, there are persistent cookies, which are automatically deleted after a predetermined period, which may vary depending on the cookie. You can delete the cookies at any time in your browser's security settings. We do not use persistent cookies!
3.3 The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for processing personal data using cookies for analytical purposes is Art. 6 para. 1 lit. a GDPR, provided that you have given your consent in this regard.
3.4 The purpose of using cookies is to simplify the use of websites for users. We use both technically necessary cookies and those that enable the analysis of users' browsing behavior on our website. The cookies are used to enable functions of the website and possibly to identify you on subsequent visits or to capture, for example, a language setting.
The use of analytical cookies is intended to improve the quality of our website and its content.
Through the analytical cookies, we learn how the website is used and can continuously optimize our offerings. The collected data used for analyzing browsing behavior is pseudonymized through technical measures. Therefore, the data can no longer be assigned to the user accessing it. The data is not stored together with other personal data of the users.
In these purposes, our legitimate interest in processing personal data under Art. 6 para. 1 lit. f GDPR also lies.
3.5 Cookies are stored on your computer and transmitted to our site from it.
As a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, not all functions of the website may be fully used.
4. Use of Social Media Plugins
4.1 We are also present on the following social media services: Facebook, Google+, Twitter, and Instagram. However, we do not use any so-called "plug-ins" from these providers, but only simple links to the various pages.
4.2 According to information from the providers, no data is transferred to them when you visit our pages. Only when you follow the link will the provider receive data from you and (in the case of US providers in the USA) store it.
We have no influence on the collected data and data processing operations, nor do we know the extent of data collection, the purposes of processing, or the storage periods.
4.3 Addresses of the respective providers and URLs with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; more information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other, and www.facebook.com/about/privacy/your-info.
Facebook has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/.
Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy.
d) Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA
help.instagram.com/155833707900388/
To our knowledge, Instagram has not submitted to the EU-US Privacy Shield.
5. Use of Blog Functions
5.1 In our blog, where we publish various contributions on topics related to our activities, you can leave public comments. Your comment will be published with your specified username along with the post. We recommend using a pseudonym instead of your real name. Providing a username and email address is required; all other information is voluntary. When you leave a comment, we will also store your IP address, which we will delete after one week. The storage is necessary for us to defend against liability claims in cases of potential publication of unlawful content. We need your email address to contact you if a third party should contest your comment as unlawful.
5.2 Legal bases are Art. 6 Abs. 1 S. 1 lit. b and f DS-GVO.
5.3 Comments are not checked before publication. We reserve the right to delete comments if they are contested as unlawful by third parties.
6. Use of our customer chat
6.1 This website uses technologies from JivoSite Inc., 525 W. Remington Drive, Sunnyvale, CA 94087, USA, (www.jivochat.com) to collect and store anonymized data for the purpose of web analysis and operating the live chat system to respond to live support inquiries. Anonymized data can be used to create usage profiles under a pseudonym. Cookies may be used for this purpose. We have already explained what cookies are above in Section 3.
6.2 According to the provider, the data collected with jivochat technologies will not be used to personally identify the visitor to this website without the separately granted consent of the affected person and will not be merged with personal data about the bearer of the pseudonym.
6.3 To avoid the storage of jivochat cookies, you can configure your internet browser to prevent any cookies from being stored on your computer in the future or to delete cookies that have already been stored. However, disabling all cookies may result in some functions on our websites no longer being executable.
7. Use of WhatsApp Business Data Transmissions
7.1 The personal data (e.g. name, phone number,
email address, address, treatment) for communication regarding the preparation, information, or consultations of organizational services using the instant messaging service
"WhatsApp" of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland, will be processed.
7.2 By continuing to access or use WhatsApp in accordance with the WhatsApp Terms after the above-mentioned effective date, you consent to this supplement for data transmissions.
7.3 If this is relevant to the rights and obligations of WhatsApp LLC under the clauses or this supplement for data transmissions, you agree that WhatsApp LLC is entitled to invoke the Business Terms provisions as if it were a party to this agreement. Although WhatsApp LLC is a party to this supplement for data transmissions, it is only to acknowledge and obtain the benefit of the provisions of this supplement for data transmissions and to accept its incorporation into the clauses on the basis set out in this supplement for data transmissions.
8. Use of Google Analytics
8.1 This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a server of Google in the USA and stored there. In the case of activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and there shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website usage and internet usage to the website operator.
The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.
8.2 You can prevent the storage of cookies by adjusting the settings of your browser software; however, we point out that you may not be able to use all the functions of this website to their full extent in this case. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.
8.3 This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are processed in a shortened form, making it impossible to relate them to individuals. To the extent that the data collected about you has a personal reference, this will be immediately excluded and the personal data will be deleted promptly.
8.4 We use Google Analytics to analyze and regularly improve the use of our website. Through the statistics obtained, we can improve our offerings and make them more interesting for you as a user. For exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
8.5 Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: www.google.com/analytics/terms/en.html, Overview of data protection: www.google.com/intl/en/analytics/learn/privacy.html, as well as the Privacy Policy: www.google.com/intl/en/policies/privacy.
8.6 This website also uses Google Analytics for cross-device analysis of visitor flows, which is conducted via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My Data", "Personal Data".
9. WebFonts
9.1 Google Web Fonts
This page uses so-called Web Fonts provided by Google Inc. (“Google”) for the uniform representation of fonts. The integration of these Web Fonts is done via a server call, usually a server from Google in the USA. This transmits to the server which of our internet pages you have visited. The IP address of the browser of the visitor's device is also stored by Google. However, Google states that no cookies are set or visitor data (neither IP address, browser version, nor other personal information) is linked with any other data when loading the fonts.
When you access a page, your browser loads the necessary Web Fonts into its browser cache to display texts and fonts correctly. If your browser does not support Web Fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy: www.google.com/policies/privacy/
10. Content Delivery Network
10.1 We use a so-called CDN, i.e. a "Content Delivery Network". This is a network of geographically distributed servers connected via the Internet, which provides content - especially large media files. A CDN helps us in quickly delivering data, especially when there are a high number of requests.
10.2 We use MaxCDN. This is a service of NetDNA, LLC, which is part of the StackPath, LLC group.
10.3 By visiting the website, the provider receives information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in section 1 of this statement is transmitted. This occurs to our knowledge regardless of whether you have a user account with the provider that you are logged in to, or if there is no user account. If you are logged in with the provider, your data will be, to our knowledge, directly associated with your account. If you do not wish for this association with your profile, you must log out before activating the button. The provider stores your data as usage profiles and uses it for advertising purposes, market research, and/or tailored design of its website. Such evaluation is particularly carried out for the provision of tailored advertising. You have the right to object against the formation of these user profiles, whereby you must address your objection to the provider.
10.4 Further information on the purpose and scope of data collection and its processing by the provider can be found in the provider's privacy policies. There you will also find further information on your rights and options regarding the protection of your privacy.
Information from the third party: StackPath, LLC, 2021 McKinney Ave., Suite 1100, Dallas, TX 75201, USA, Fax: 001-323-843-9584.
Overview of data protection: www.stackpath.com/privacy-statement/
The provider processes your personal data also in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework
11. Embedding YouTube videos
11.1 We have integrated YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website. All of these are embedded in the 'enhanced privacy mode', meaning that no data about you as a user is transmitted to YouTube when you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission.
12.2 By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in clause 1 of this declaration is transmitted. This happens regardless of whether YouTube provides a user account that you are logged into or whether there is no user account. If you are logged into Google, your data will be directly associated with your account. If you do not wish for the association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for advertising purposes, market research, and/or for tailoring its website to your needs. Such evaluation particularly occurs (even for non-logged-in users) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must address YouTube to exercise this right.
13.3 For more information about the purpose and scope of data collection and its processing by YouTube, you can refer to the privacy policy. There you will also find additional information about your rights and options for protecting your privacy: www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
12. Integration of Google Maps
12.1 On this website, we use the services of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
12.2 By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in point 1 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly linked to your account. If you do not wish this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such evaluations are particularly conducted (even for non-logged-in users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; in this case, you must contact Google to exercise this right.
12.3 Further information on the purpose and scope of data collection and its processing by the plugin provider can be found in the provider's privacy policies. There you will also find additional information about your rights in this regard and options for setting up protections for your privacy: www.google.de/intl/en/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework
13. Data protection during applications and the application process
13.1 We collect and process the personal data provided by applicants when submitting an application for the purpose of carrying out the application process. Processing may also occur electronically. This is particularly the case when you submit the relevant application documents electronically, for example via email or through a web form available on the website.
13.2 The legal basis for the use is Article 6(1)(a) and (b) of the GDPR.
13.3 If an employment contract is concluded with you, we will store the transmitted data for the purpose of processing the employment relationship in compliance with the legal regulations.
If no employment contract is concluded, the application documents will be deleted six months after the rejection is sent, unless there are other legitimate interests of the data controller that prevent deletion. Other legitimate interest in this sense is, for example, an obligation to provide evidence in a proceeding under the AGG.
14. Your rights
14.1 You have the following rights regarding your personal data with respect to us:
Right of access, meaning you can request detailed information from us about the stored data. For details, we refer to Art. 15 GDPR.
Right to rectification or erasure, meaning you can request the rectification or completion of personal data or the deletion of your personal data. For this, we additionally refer to Art. 16 and 17 GDPR.
Right to restriction of processing, meaning restricted processing, e.g., until the accuracy of a claim for rectification can be verified, instead of your right to deletion, when the data is no longer with us, but is still needed for certain purposes by you, or when it is not yet clear whether, despite an objection to the processing (see item 4), processing can still take place in individual cases due to conflicting interests. For details, we refer to Art. 18 GDPR.
Right to data portability, meaning the right to receive your personal data in a common format, for example as a computer file. For details, we refer to Art. 20 GDPR.
14.2 You also have the right to lodge a complaint with a data protection supervisory authority (e.g., the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, “www.baden-wuerttemberg.datenschutz.de”) about the processing of your personal data by us.
14.3 If you have given consent to the processing of your data, you can revoke it at any time, Art. 7 (3) GDPR. Such revocation affects the lawfulness of the processing of your personal data from the time you expressed it to us.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. For your objection to advertising or for any other questions regarding the collection, processing, or use of your personal data, requests for information, rectification, blocking, or deletion of data, as well as the withdrawal of consent given, please contact the contact details provided in Section 1.
14.4 To the extent that we base the processing of your personal data on a balancing of interests, you can object to the processing, Art. 21 GDPR. This is the case when the processing is not necessary for the fulfillment of a contract with you, which we will specify in the following description of the functions. In exercising such an objection, we ask for the reasons why we should not process your personal data as we have done. In the event of a justified objection, we will review the situation and either cease or adjust the data processing or demonstrate to you our compelling legitimate grounds on the basis of which we continue the processing.
