Privacy
​
We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified. Your data will be protected within the framework of the legal regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Below you will find information about which data is recorded during your visit to the homepage and how it is used:
Information about the collection of personal data and contact details of the person responsible
1.1 Is the person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR)
Crystal Beautiful - Auf dem Pfade 6 - D-44979 Bochum - Germany
Tel: (00) 49 689 00 3456, email: crystalbeautifulshop@gmail.com.
The person responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.2 The person responsible has not appointed a data protection officer for his company.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), we use an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https: //" and the lock symbol in your browser line.
Data collection when you visit our website
If you visit our website without registering or otherwise providing us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the individual websites:
• The individual pages of our website (URL)
• Date and time at the time of access
• Amount of data sent in bytes
• Source / reference from which you came to the page
• Browser used
• Operating system used
• IP address used
The processing takes place in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. Server log files that have not been anonymized are automatically deleted after 30 days at the latest.
Our website is stored by a hosting service provider who provides us with infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services. We have concluded an order processing contract with them. The data processing takes place for the purpose of guaranteeing the operational readiness of our internet presence, in which we have a legitimate interest, Art. 6 Abs. 1 lit.f GDPR.
In addition, the server log file data is also collected by third-party providers (see below).
Cookies
We use so-called cookies on our website. These are small text files that are stored on your device. If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. In some cases, the cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website).
The session cookies we set are deleted after the end of the browser session, i.e. after you close your browser.
If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR either to carry out the contract or in accordance with Art. 6 Paragraph 1 lit. f GDPR to safeguard our legitimate interests the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
Please note that you can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:
• Internet Explorer: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari: https://support.apple.com/kb/ph21411?locale=de_DE
• Opera: http://help.opera.com/Windows/10.20/de/cookies.html
A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the following US websites:
http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/
Electronic contact
If you contact us electronically (e.g. by email), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. Without this mandatory information, we cannot process your request. All other details are optional.
The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit.f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Paragraph 1 lit. b GDPR. The legal basis for your voluntary information is Article 6 (1) (a) GDPR.
Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.
To carry out our e-mail communication, we have commissioned a service provider who provides us with infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services. We have concluded an order processing contract with them. The data processing takes place for the purpose of guaranteeing the operational readiness of our e-mail communication, in which we have a legitimate interest, Art. 6 Abs. 1 lit.f GDPR.
Integration of further tools
5.1 Google Web Fonts
We use so-called web fonts provided by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer.
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
Tracking via the provider Google AdWords
As an AdWords customer, we use Google Conversion Tracking, an analysis service from Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). Google AdWords places a cookie on your computer ("conversion cookie") if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of ours and the cookie has not yet expired, we and Google can recognize that someone clicked on the ad and was redirected to our site. Every AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not want to take part in the tracking process, you can also refuse the setting of a cookie required for this - for example via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the googleadservices.com domain.
5.2 Google Maps
Our website uses Google Maps (API) from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (Google). Google Maps is a web service for displaying interactive (country) maps in order to visually display geographic information. When you use this service, you will be shown our location and any journey will be made easier.
When you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This happens regardless of whether Google provides a user account that you are logged into or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in accordance with Article 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research and / or the needs-based design of its website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
If you do not agree to the future transmission of your data to Google as part of the use of Google Maps, you can also completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at http://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl /de_US/help/terms_maps.html You can find detailed information on data protection in connection with the use of Google Maps on the Google website (“Google Privacy Policy”): http://www.google.de/intl/de/policies / privacy /
Affected Rights
6.1 As a data subject, you have the following rights:
• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 GDPR;
• Correction: You have the right to immediately request the correction of incorrect personal data concerning you. The requirements for this can be found in Art. 16 GDPR;
• Deletion: You have the right to request the immediate deletion of personal data relating to you. The requirements for this can be found in Art. 17 GDPR;
• Restriction of processing: You have the right to request that the processing of your personal data be restricted. The requirements for this can be found in Art. 18 GDPR;
• Data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to have this data transmitted by us to another person responsible. The requirements for this can be found in Art. 20 GDPR;
• Revocation of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR. The data processing until the revocation remains lawful. The revocation is only valid for the future. The requirements for this can be found in Art. 7 (3) GDPR;
• Complaint: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. The requirements for this can be found in Art. 77 GDPR.
6.2 RIGHT TO OBJECT
YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR SPECIAL SITUATION, AT ANY TIME AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU, WHICH WE PROCESS ON THE BASIS OF OUR PRIVILEGED LEGAL INTEREST IMPLEMENTING EFFECT FOR THE FUTURE. YOU WILL FIND THE REQUIREMENTS FOR THIS IN ART. 21 GDPR.
Storage period of personal data and deletion
Unless a different storage period is mentioned above, we store the data as long as it is necessary for its intended purpose and statutory retention requirements exist. According to legal requirements, the storage takes place for 6 years according to § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) as well as for 10 years according to § 147 Abs. 1 AO (books, records, management reports, Accounting documents, commercial and business letters, documents relevant for taxation, etc.).
After the retention period has expired, the corresponding data is routinely deleted, provided that it is no longer required to fulfill or initiate a contract and / or we have no legitimate interest in further storage.
Changes to this data protection declaration
This data protection declaration is currently valid and was last updated in May 2018.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can call up and print out the current data protection declaration on the website at any time.
​