Data protection

Data protection

The person responsible for data processing is:

Thuhang Weickert

Suitbertusstr. 93

40223 Düsseldorf

info@xpressdnails.de

Thank you for your interest in our online shop. Protecting your
Privacy is very important to us. In the following we will inform you in detail about the handling of your data.

  1. Access data and hosting

You can visit our website without giving any personal information.
Each time a website is called up, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.

These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6 Para. 1 S. 1 lit. All access data will be deleted no later than seven days after the end of your visit to the website.

Third party hosting services
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. All data that are collected as part of the use of this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is located in a country outside the European Union for which the European Commission has determined an adequate level of data protection by resolution.

2. Data collection and use for contract processing, establishing contact and opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (e.g. using the contact form or email). Mandatory fields are marked as such, because in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without them. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR to process contracts and to process your inquiries.
Insofar as you have given your consent to this in accordance with Art. 6 Para. 1 S. 1 lit.
by deciding to open a customer account, we will use your data for the purpose of opening a customer account. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that is permitted by law and about which we will inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided in the customer account.

3. Data transfer

In order to fulfill the contract in accordance with Art. 6 Paragraph 1 Sentence 1 lit.
Delivery of ordered goods is required. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

Data transfer to shipping service providers
If you have given us your express consent during or after your order
We give consent on the basis of this in accordance with Art. 6 Para. 1 S. 1
lit. a GDPR send your email address and telephone number to the selected
Shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination.

4. Email newsletters and postal advertising

E-mail advertising with registration for the newsletter
If you register for our newsletter, we will use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit.

You can unsubscribe from the newsletter at any time and you can either use a
Message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

E-mail advertising without registering for the newsletter and your right to object
If we receive your e-mail address in connection with the sale of a product or service and you have not objected, we reserve the right to offer you regular offers on products similar to those already purchased on the basis of Section 7 (3) UWG , to be sent from our range by e-mail. This serves to safeguard our predominantly legitimate interests in addressing our customers for advertising purposes.
You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided in the advertising e-mail without incurring any costs other than the transmission costs according to the basic tariffs.

The newsletter is processed on our behalf by a
Service provider to whom we will pass on your e-mail address for this purpose.

This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be found here
[https://www.privacyshield.gov/list] can be viewed. Because of this
Agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

Postal advertising and your right to object
In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in addressing our customers with advertising in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR.

5. Use of data for payment processing

Hire purchase
When selecting the payment method "hire purchase" and granting the data protection consent required for this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, personal data (first name, last name, address, email, telephone number, date of birth, IP address, gender) together with the data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time) for the purpose of processing this payment method to our
Partner Klarna Bank AB, Sveavägen 46, 111 34 Stockholm.

To check the identity or creditworthiness of the customer, our partner carries out queries and information on publicly accessible databases and credit agencies. The providers from whom information and, if necessary, creditworthiness information are obtained on the basis of mathematical-statistical procedures, as well as further details on the processing of your data after transmission to our partner Klarna Bank AB, please refer to their data protection declaration, which you can find here: https://www.klarna.com/de/datenschutz/

Our partner Klarna Bank AB uses the information received about the statistical probability of default in payment for a balanced decision on the establishment, implementation or termination of the contractual relationship. You have the opportunity to express your point of view by contacting our partner Klarna Bank AB and to contest the decision.

The consent given in the order process to the transfer of data can be revoked at any time, even without giving reasons, with effect for the future.

6. Cookies and web analysis

To make visiting our website attractive and to use certain
To enable functions to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. Cookies are small text files that are automatically saved on your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). You can see the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

Internet Explorer ™
[https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies]
Safari ™ [https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14]
Chrome ™ [https://support.google.com/chrome/answer/95647?hl=de&hlrm=en]
Firefox ™ [https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen]
Opera ™ [https://help.opera.com/de/latest/web-preferences/#cookies]
If you do not accept cookies, the functionality of our website may be restricted.

Insofar as you have given your consent to this in accordance with Art. 6 Para. 1 S. 1 lit.
this website also uses the so-called DoubleClick cookie as part of the application of Google Analytics (see below) for advertising purposes, which enables your browser to be recognized when you visit other websites. The information automatically generated by the cookie about your visit to this website is usually transferred to a Google server in the USA and stored there. The IP address is activated by activating IP anonymization on this website before it is transmitted within the
Member States of the European Union or in other contracting states of the Agreement on the European Economic Area, abbreviated. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Google will use this information to generate reports on website activity
compile and to provide other services related to website usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. After the purpose and the end of the use of Google DoubleClick by us, the data collected in this context will be deleted.

Google Double Click is an offer from Google Ireland Limited, one after the other
company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de).
As far as information is transferred to Google servers in the USA and there
is the American company Google LLC under the
EU-US Privacy Shield certified. A current certificate can be found here [https://www.privacyshield.gov/list] can be viewed. Based on this agreement between the USA and the European Commission, the latter has an appropriate one for companies certified under the Privacy Shield
Data protection level determined.

You can revoke your consent at any time with effect for the future,
by using the DoubleClick cookie via this link
[https://adssettings.google.com/authenticated?hl=de] deactivate. Besides
you can contact the Digital Advertising Alliance
[https://www.aboutads.info/] inform about the setting of cookies and
Make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for website analysis. the
Web analysis service is an offer from Google Ireland Limited, one based on Irish
Legally incorporated and operated company headquartered at Gordon House,
Barrow Street, Dublin 4, Ireland (www.google.de [http://www.google.de]). this
serves to safeguard our predominant in the context of a weighing of interests
legitimate interests in an optimized presentation of our offer
Art. 6 Para. 1 S. 1 lit.f GDPR. Google (Universal) Analytics uses methods that enable your use of the website to be analyzed, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating the IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data. After the purpose and end of the use of Google Analytics by us, the data collected in this context will be deleted.

As far as information is transferred to Google servers in the USA and there
is the American company Google LLC under the
EU-US Privacy Shield certified. A current certificate can be found here
[https://www.privacyshield.gov/list] can be viewed. Because of this
Agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

You can record the data generated by the cookie and your use of the
You can prevent website-related data (including your IP address) from being sent to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
[https://tools.google.com/dlpage/gaoptout?hl=de]

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you will have to click the link again.

Insofar as you have given your consent to this in accordance with Art. 6 Para. 1 S. 1 lit.
this website also uses Google Signals. This is an extension function of Google Analytics, which is a so-called "Cross-Device
Tracking "enables. This means that as far as your internet-enabled devices are linked to your Google account, Google reports on usage behavior
(especially the number of users across all devices), even if you have your
Change device. For this purpose, Google uses data insofar as you have the
Have activated the setting "personalized advertising" in your Google account.
We do not process personal data in this respect
instead, we only receive statistics based on Google Signals.
You can revoke your consent at any time with effect for the future,
by downloading the browser plug-in available under the following link
and install: https://tools.google.com/dlpage/gaoptout?hl=de
[https://tools.google.com/dlpage/gaoptout?hl=de] . This will make the capture
prevents the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google. In addition, you can use the setting "personalized advertising"
Deactivate in your Google account. Details can be found here
[https://support.google.com/ads/answer/2662922?hl=de].

7. Online Marketing

Google Ads remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous CookieID and based on the pages you have visited. This serves to safeguard our predominantly legitimate interests in the optimal marketing of our website in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. After the purpose and end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.

Any further data processing will only take place if you
have agreed to Google that your web and app browsing history from
Google is linked to your Google Account and information from your Google Account is used to personalize the ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google
Analytics data to target audience lists for cross-device remarketing
create and define. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups.

Google Ads is an offer from Google Ireland Limited, one under Irish law
registered and operated company located at Gordon House, Barrow
Street, Dublin 4, Ireland (www.google.de [http://www.google.de]).
As far as information is transferred to Google servers in the USA and there
is the American company Google LLC under the
EU-US Privacy Shield certified. A current certificate can be found here
[https://www.privacyshield.gov/list] can be viewed. Because of this
Agreement between the US and the European Commission has the latter for
Companies certified under the Privacy Shield have found an adequate level of data protection.

You can use the remarketing cookie via this link
[https://adssettings.google.com/authenticated?hl=nl] deactivate. Besides
you can contact the Digital Advertising Alliance
[https://www.aboutads.info/] inform about the setting of cookies and
Make settings for this.

Live chat tool Userlike
If you use the live chat tool to contact us, the data you voluntarily enter there (name, email address, message) will be used in accordance with Art. 6 Para. 1 S. 1 lit. Processed by us as part of contract processing. In addition, the use of this tool serves to safeguard our predominantly legitimate interests in effective and improved customer communication in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR. The data will then be deleted.
As part of processing on our behalf, the third-party provider provides
Userlike provides us with the services to provide the live chat tool. All data that is collected when using the chat tool is processed on its servers.

Adobe Typekit
The script code "Adobe Typekit" from Adobe is on this website
Systems Incorporated 345 Park Avenue San Jose, CA 95110-2704, USA (hereinafter: Adobe). This serves to safeguard our predominantly legitimate interests in a uniform presentation of the content on our website in accordance with Art. 6 Para. 1 lit. f) GDPR. This framework creates a link between that of you. used browser and the servers of Adobe. This gives Adobe knowledge that our website has been accessed via your IP address. Adobe is certified under the EU-US Privacy Shield. A current certificate can be found here [https://www.privacyshield.gov/list] can be viewed. On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield. You can find more information about data processing in the context of Adobe Typekit in the data protection information
[https://www.adobe.com/de/privacy/policies/typekit.html] from Adobe.

8. Social media

Our online presence on Facebook, Instagram, Pinterest

Our presence on social networks and platforms serves a better,
active communication with our customers and interested parties. There we provide information about our products and current special promotions.
When you visit our online presence in social media, your data can be used for
Market research and advertising purposes are automatically collected and stored. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your device. The visitor behavior and the interests of the user are stored in these cookies. According to Article 6 Paragraph 1 lit. If you are asked for consent (consent) to data processing by the respective social media platform operator, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
As far as the aforementioned social media platforms have their headquarters in the USA
The following applies: For the USA there is an adequacy decision by the
European Commission. This goes back to the EU-US Privacy Shield.
A current certificate for the respective company can be found here
[https://www.privacyshield.gov/list] can be viewed.
The detailed information on the processing and use of the data by the
Providers on their pages as well as a contact option and your related
Rights and setting options to protect your privacy, in particular
Opposition options (opt-out), please refer to the links below
Data protection information from the provider. Should you still need help with this
you can contact us.

Facebook: https://www.facebook.com/about/privacy/
[https://www.facebook.com/about/privacy]
The data processing takes place on the basis of an agreement between
jointly responsible according to Art. 26 GDPR, which you can find here
[https://www.facebook.com/legal/terms/page_controller_addendum] can see. Further information on data processing when visiting a Facebook fan page (information on Insights data) can be found here
[https://www.facebook.com/legal/terms/information_about_page_insights_data].

Instagram: https://help.instagram.com/519522125107875
[https://help.instagram.com/519522125107875]

Pinterest: https://about.pinterest.com/de/privacy-policy
[https://about.pinterest.com/de/privacy-policy]

Opposition option (opt-out):

Facebook: https://www.facebook.com/settings?tab=ads
[https://www.facebook.com/settings?tab=ads]

Instagram: https://help.instagram.com/519522125107875
[https://help.instagram.com/519522125107875]

Pinterest: https://www.pinterest.de/settings [https://www.pinterest.de/settings]

9. Sending evaluation reminders by email

Review reminder by Klaviyo
If you have given us your express consent during or after your order
You have given your consent in accordance with Art. 6 Paragraph 1 Clause 1 lit.
we send your email address to Klaviyo, 225 Franklin St, Boston, MA 02110
(www.klaviyo.com) so that they can email you a review reminder
sends.

This consent can be given at any time by sending a message to the address described below
Contact option or directly to Klaviyo can be revoked.

  1. Contact options and your rights

As a data subject, you have the following rights:

  • In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;

  • In accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us;

  • In accordance with Art. 17 GDPR, you have the right to have your stored data deleted by us
    to request personal data, unless further processing * to exercise the right to freedom of expression and information;
    *
    to fulfill a legal obligation;
    *
    for reasons of public interest or
    *
    to assert, exercise or defend legal claims
    is required;

  • according to Art. 18 GDPR the right to restrict the processing of your
    to request personal data if * you dispute the correctness of the data;

    • the processing is unlawful, but you refuse to delete it;

    • we no longer need the data, but you need them to assert, exercise or defend legal claims or

    • You have lodged an objection to the processing in accordance with Art. 21 GDPR;

  • In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;

  • According to Art. 77 GDPR the right to complain to a supervisory authority.
    As a rule, you can contact the supervisory authority of your usual for this
    Place of residence or place of work or our company headquarters.

For questions about the collection, processing or use of your personal information
Data, for information, correction, restriction or deletion of data as well as revocation of granted consent or objection to a certain use of data, please contact us directly using the contact details in our imprint.

Right to object
Insofar as we process personal data as explained above in order to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, you can object to this processing with effect for the future.
If the processing is carried out for direct marketing purposes, you can do so
Exercise right at any time as described above. As far as the processing to others
Purposes, you only have a right of objection if there are reasons that arise from your particular situation.

After exercising your right of objection, we will no longer process your personal data for these purposes unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing requires the assertion, exercise or defense of Serves legal claims.

This does not apply if the processing is carried out for direct marketing purposes. Then we will no longer process your personal data for this purpose.