Privacy policy

Data protection

CL Cosmetic GmbH takes the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

The use of our website is generally possible without providing personal data.
Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible.
This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities.
Complete protection of data against access by third parties is not possible.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator.
You can find the operator’s contact details in the legal notice of this website.

How do we collect your data?

On the one hand, your data is collected when you provide it to us.
This may, for example, be data that you enter in a contact form.

Other data is collected automatically by our IT systems when you visit the website.
This is primarily technical data (e.g. internet browser, operating system or time of page view).
This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors.
Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time.
You also have the right to request the correction, blocking or deletion of this data.
You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection.
You also have the right to lodge a complaint with the competent supervisory authority.

Objection to advertising e-mails

We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material.
The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Name and address of the person responsible

CL Cosmetic GmbH
Renntalstraße 14

74360 Ilsfeld

Phone: +49 7062 9151600

Fax: +49 7062 9151610

Email: info@cl.de

Web: www.cl.de

Data Protection Officer

Fabian Henkel

Kantstrasse 14

71277 Rutesheim

Tel.
+497152 564773

Fax.
+497152 564771

Email info@externer-datenschutzbeauftragter-stutttgart.de

Basic information on the processing of personal data

In connection with the business relationship with our customers (i.e. direct customers or recipients of goods that we supply on behalf of third parties, hereinafter referred to as “customers”), we process their address, identification and contract content data as well as sales figures in the context of customer support and the provision of services and share these with third parties that we use to provide the services (e.g. delivery partners, central regulators / billing companies and other service providers, etc.).
The legal basis is Art. 6 para.
1 b) GDPR.
If the customers are natural persons, this is personal data.
This includes data such as name, address, email address, telephone/fax number, date of birth, number of people in the household and bank details, etc.

The processing is carried out for the purposes of uniquely identifying the customer and initiating, executing, managing and processing contracts, assessing creditworthiness and collateral, preparing invoices/credit notes, managing and enforcing claims, processing and documenting complaints, documenting and verifying agreements and conditions, communicating and sending product information, complying with legal regulations, data security and in the interests of comprehensive customer support.
For communication purposes, we also process the names and contact details of the customer’s contact persons.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
These are

– Browser type and browser version

– Operating system used

– Referrer URL

– Host name of the accessing computer

– Time of the server request

This data cannot be assigned to specific persons.
This data is not merged with other data sources.
We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions.
We will not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
You can revoke this consent at any time.
All you need to do is send us an informal email.
The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request).
Mandatory statutory provisions – in particular retention periods – remain unaffected.

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
No further data is collected.
We use this data exclusively for sending the requested information and do not pass it on to third parties.

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.

Google Analytics

This website uses functions of the web analysis service Google Analytics.
The provider is Google Inc,

1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”.
These are text files that are stored on your computer and enable your use of the website to be analyzed.
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

IP anonymization

We have activated the IP anonymization function on this website.
This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link.
An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics

You can find more information on how Google Analytics handles user data in the

Privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=de

Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics.
This allows reports to be created that contain statements about the age, gender and interests of site visitors.
This data comes from interest-based advertising from Google and from visitor data from third-party providers.
This data cannot be assigned to a specific person.
You can deactivate this function at any time via the ad settings in your Google account or prevent the collection of your data by Google Analytics as described in the section “Objection to data collection”

generally prohibit.

Facebook plugins (Like button)

Plugins of the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin.
Facebook receives the information that you have visited our site with your IP address.
If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile.
This allows Facebook to associate your visit to our pages with your user account.
We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.
Further information on this can be found in Facebook’s privacy policy at https://de-de.facebook.com/policy.php.

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

Twitter

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter in the process. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter’s privacy policy at https://twitter.com/privacy.

You can change your privacy settings on Twitter in the account settings under:

https://twitter.com/account/settings change.

Google+

Our pages use functions of Google+. The provider is Google Inc., 1600 Amphitheatre Parkway

Mountain View, CA 94043, USA.

Collecting and sharing information: You can use the Google+ button to publish information worldwide.
You and other users receive personalized content from Google and our partners via the Google+ button.
Google stores both the information that you have given +1 for a piece of content and information about the page you viewed when you clicked +1.
Your +1s can be displayed as references together with your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and advertisements on the Internet.

Google records information about your +1 activities in order to improve Google services for you and others.
To be able to use the Google+ button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile.
This name is used in all Google services.
In some cases, this name can also replace another name that you have used when sharing content via your Google account.
The identity of your Google profile can be displayed to users who know your e-mail address or have other identifying information about you.

Use of the information collected: In addition to the uses described above, the information you provide will be used in accordance with the applicable Google privacy policy.
Google may publish summarized statistics about the +1 activities of users or pass them on to users and partners, such as publishers, advertisers or associated websites.

Instagram

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can click on the Instagram button to use the

link the content of our pages to your Instagram profile. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

You can find more information on this in Instagram’s privacy policy:

https://instagram.com/about/legal/privacy/

LinkedIn

Our website uses functions of the LinkedIn network.
The provider is LinkedIn Corporation, 2029

Stierlin Court, Mountain View, CA 94043, USA.
Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established.
LinkedIn is informed that you have visited our website with your IP address.
If you click on the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account.
We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.

Further information on this can be found in LinkedIn’s privacy policy at:

https://www.linkedin.com/legal/privacy-policy

Pinterest

On our website, we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy in this regard can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

XING

Our website uses functions of the XING network.
The provider is XING AG, Dammtorstraße 29-32,

20354 Hamburg, Germany.
Each time one of our pages containing XING functions is accessed, a connection to XING servers is established.
To the best of our knowledge, no personal data is stored in the process.
In particular, no IP addresses are stored or usage behavior evaluated.

Further information on data protection and the XING Share button can be found in the

Privacy policy of XING at: https://www.xing.com/app/share?op=data_protection

Tumblr

Our pages use buttons from the Tumblr service. The provider is Tumblr, Inc, 35 East 21st St,

10th Floor, New York, NY 10010, USA.
These buttons allow you to share a post or page on Tumblr or to follow the provider on Tumblr.
When you visit one of our websites with a Tumblr button, the browser establishes a direct connection to Tumblr’s servers.
We have no influence on the scope of the data that Tumblr collects and transmits with the help of this plugin.
According to the current status, the IP address of the user and the URL of the respective website are transmitted.

Further information on this can be found in Tumblr’s privacy policy at:

https://www.tumblr.com/policy/de/privacy.

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile.
You can prevent this by logging out of your YouTube account.

Further information on the handling of user data can be found in the privacy policy of

YouTube at: https://www.google.de/intl/de/policies/privacy

Google Maps

This website uses the “Google Maps API” of the company Google Inc.
(Google).
When Google Maps is used, Google also collects, processes and uses data about the use of the Maps functions by visitors to the websites.
The terms of use for Google Maps can be found at Terms of Use for Google Maps.
You can find more information about Google’s privacy policy at: https://www.google.com/intl/de/policies/privacy/.

Data collection and data processing for participation in competitions

If you use the opportunity to take part in competitions on this website, the information you provide (such as first name, surname, date of birth, address, e-mail address, telephone number and details of the region) will be stored so that we can ensure your participation (prize determination, notification and sending of the prize) in the competition.
After the end of the competition and the announcement of the winners, the participants’ data will be deleted, unless there is a legal obligation to retain the data.

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator.
You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Your rights to information, rectification, blocking, erasure and objection

You have the right to receive information about your personal data stored by us at any time.
You also have the right to have your personal data corrected, blocked or, apart from the prescribed data storage for business transactions, deleted.
Please contact our data protection officer for this purpose.
You can find the contact details above under Questions to the data protection officer.

To ensure that data can be blocked at any time, this data must be kept in a lock file for control purposes.
You can also request the deletion of the data if there is no legal archiving obligation.
If such an obligation exists, we will block your data on request.

You can make changes or withdraw your consent with effect for the future by notifying us accordingly.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent.
You can withdraw your consent at any time.
All you need to do is send us an informal e-mail.
The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority.
The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based.
A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Data protection provisions Application procedure

If you apply to us, whether for an advertised position or on your own initiative, we will process your data to carry out the selection process.
It is irrelevant to us whether you apply by post, by e-mail or, if available for the respective position, by online form.

As a matter of principle, we only process the data that you yourself have transmitted to us as part of an application procedure.
Other sources may be consulted after informing and consulting with you.
For example, whether we may contact a former employer.

The legal basis for the implementation of an application procedure is §26 BDSG in conjunction with Art. 6 para.
1 lit.
b GDPR (initiation of an employment contract).
Insofar as you give us your consent to store your data for a longer period of time, this is done on the legal basis of Art. 6 para. 1 lit.
a GDPR.

Deletion periods for applicant data

We delete applicant data a maximum of 6 months after the end of the application process (once a candidate has been selected and all applicants have been informed of the outcome).
The purpose of the data processing is generally no longer given with the end of the selection process, but we have a legitimate interest (Art. 6 para. 1 lit. f GDPR) in being able to defend ourselves against any claims by rejected applicants.
If you have the impression that your interests in an immediate deletion outweigh our interests, you have the possibility to request us to do so.
We will then examine your request and provide you with feedback.

After expiry of the above-mentioned period, your data will be deleted, unless we have to defend ourselves, for example in ongoing proceedings, for example due to a complaint under the General Equal Treatment Act.
In this case, we will delete your data once the proceedings have been concluded, provided there are no statutory retention periods.

If we are allowed to store your data for a longer period of time on the basis of your consent, we will delete your data if you request us to do so and revoke your consent.
If necessary, we will also delete your data before you withdraw your consent if it is foreseeable that no position will be available.

Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services.
The new privacy policy will then apply to your next visit.

29.07.2015

CL Cosmetic GmbH, Renntalstraße 14, 74360 Ilsfeld, Tel.
07062-9151600