We hereby inform you as a consumer about the processing of your personal data by BCG Baden-Baden Cosmetics Group GmbH and the rights you are entitled to under data protection law.

 

1. Who is responsible for processing your personal data and how do you contact the data protection officer?

This data protection notice applies to data processing by: BCG Baden-Baden Cosmetics Group GmbH Im Rosengarten 7 76532 Baden-Baden Telephone: +49 7221 – 688 100 represented by: Hermann Crux You can reach our data protection officer: data protection @ bcg-cosmetics.de

 

2. For what purposes and on what legal basis is data processed?

Your data is processed for the purpose

 

• Processing your inquiries about the products we sell. This includes general inquiries, but also inquiries about intolerances when using our products. We process your name, address, email or telephone number, the content of your request and, if there are any intolerances, your health data.

 

The legal basis for processing your request is the contract concluded between us and you (Art. 6 Para. 1 lit. b) GDPR) if you purchased the product from us directly or in a store operated by us.

However, if you purchased the product to which your inquiry relates from a third party, the legal basis for data processing is Article 6 Paragraph 1 Letter f) GDPR. In this regard, BCG Baden-Baden Cosmetics Group GmbH has a legitimate interest in processing inquiries about its products.

If your request relates to an intolerance when using our products and you disclose health data to us in accordance with Art. 9 Para. 1 GDPR, the legal basis for data processing is the consent you have given (Art. 6 Para. 1 lit. a) GDPR).

 

3. Who gets your data?

Your personal data will only be forwarded within BCG Baden-Baden Cosmetics Group GmbH in order to be able to correctly process your request internally for the purposes mentioned under 2. Your data may also be forwarded internally to the finance department or customer service if you are entitled to financial compensation based on your request.

 

4. What rights do you have as a data subject?

You have the right:

 

• in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or complete personal data stored by us;
• in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is carried out to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required; in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data but you use it to assert or exercise your rights or need to defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.
• In accordance with Art. 7 Para. 3 GDPR, you can revoke your consent to us at any time. This means that we are no longer allowed to continue data processing based on this consent in the future. If you would like to make use of your revocation, simply send an email to datenschutz@bcg-cosmetics.de. In the event of a revocation, we may no longer be able to provide the agreed services or not to the desired extent;

 

 

5. Do you have the opportunity to object to the processing?

In accordance with Article 21 Paragraph 1 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 Paragraph 1 Letter f) GDPR. The person responsible, BCG Baden-Baden Cosmetics Group GmbH, will then no longer process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves our assertion, exercise or defense of legal claims. Please send your objection in writing to the address mentioned in 1. or by email to datenschutz@bcg-cosmetics.de.

 

6. Do you have the opportunity to complain?

If you believe that the processing of your personal data by us is unlawful or violates data protection law for other reasons, you can complain to a supervisory authority. You may contact a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement.

 

7. How long is your personal data stored?

Your personal data will be processed for the duration of the fulfillment of the purposes mentioned under 2. Once the purpose has been fulfilled, the aforementioned data will also be deleted, if possible by the system; Otherwise, the personal reference will be removed through anonymization and access to your data will be blocked. If you have revoked your consent in accordance with Art. 7 Para. 3 GDPR, your data will no longer be processed and will then be deleted. Likewise, your data will no longer be processed and will then be deleted if you have exercised your right to object in accordance with Art. 21 GDPR. Statutory or contractual retention periods can prevent the deletion or blocking of the data. The limitation periods can be up to thirty years due to Sections 195 ff. of the Civil Code; the regular limitation period is three years. In addition, tax, commercial, tax and other legal retention obligations must be observed. The storage/documentation periods stipulated there are six to ten years plus the statute of limitations of a further four years. In order not to violate legal regulations or lose the opportunity to enforce or defend ourselves against a claim, we reserve the right to delete the data only after the last period that legitimizes data storage has expired. 

 

8. Will your personal data be transferred to a third country?

BCG Baden-Baden Cosmetics Group GmbH does not transfer any personal data to third countries for the purpose of processing your request.

 

9. Is automated decision making or profiling taking place?

Neither automated decision-making nor profiling takes place within the scope of the data processing purposes mentioned under 2.

 

10. Are you obliged to provide your personal data?

You are neither contractually nor legally obliged to provide us with the personal data mentioned under 2. The consumer inquiry process is usually initiated by you and is therefore voluntary. If you do not wish to provide us with your personal data, BCG Baden-Baden Cosmetics Group GmbH will unfortunately not be able to process your request.