DATA PROTECTION DECLARATION AND CONSENT

Table
1. Objective and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Cookies & Range Measurement
6. Google Analytics
7. Google Re/Marketing Services
8. Facebook Social Plugins
9. Facebook Remarketing
10. Newsletter
11. Integration of third-party services and content
12. User rights and deletion
13. Changes to the Privacy Policy

1. Objective and responsible body

This Data Protection Declaration clarifies the nature, scope and purpose of the processing (e.g. collection, processing and use as well as obtaining consents) of personal data within our online offer and the websites, functions and contents associated with it (hereinafter referred to as “Online Offer” or “Website”). The privacy policy applies independently of the domains, systems, platforms and devices used (e.g. desktop or mobile) on which the online offer is executed.

Provider of the online offer and the data protection responsible body is Für-Immer-Schön Beauty Clinic, owner: Dr. Pehböck Daniel and Dr. Julia Cordin, Dorfstrasse 10, 7563 Samnaun (hereinafter referred to as “provider”, “we” or “us”). For the contact possibilities we refer to our imprint

The term “user” includes all customers and visitors to our online offer. The terms used, such as “users”, are gender-neutral.

2. Basic information on data processing

We process personal data of the users only in compliance with the relevant data protection regulations in accordance with the requirements of data economy and data avoidance. This means that the data of the users will only be processed in the presence of a legal permission, in particular if the data is necessary for the provision of our contractual services as well as online services, or are required by law or in the presence of consent.

We take organisational, contractual and technical security measures in accordance with the state of the art in order to ensure that the provisions of the data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

Insofar as content, tools or other means are used by other providers (hereinafter collectively referred to as “third-party providers”) within the scope of this data protection declaration and whose registered office is abroad, it must be assumed that a data transfer to the resident states of the third-party providers takes place. The transfer of data to third countries is carried out either on the basis of a legal authorisation, the consent of the users or special contractual clauses that ensure a legally required security of the data.

3. Processing of personal data

In addition to the use expressly stated in this Privacy Policy, the personal data will be processed for the following purposes on the basis of legal permission or consent of the users:
– the provision, execution, maintenance, optimization and security of our services, services and user services;
– Ensuring effective customer service and technical support.

We only transmit the data of the users to third parties if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes, if these are necessary to fulfil our contractual obligations towards the users (e.g. address communication to suppliers).

When contacting us (via contact form or email), the user’s details are stored for the purpose of processing the request and in the event that follow-up questions arise.
Personal data will be deleted if they have fulfilled their purpose and there are no retention obligations to be erased.

4. Collection of access data

We collect data about each access to the server on which this service is located (so-called server logfiles). The access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We use the log data without assignment to the person of the user or other profiling according to the legal regulations only for statistical evaluations for the purpose of operation, security and optimization of our online offer. However, we reserve the right to check the log data retrospectively if there is a legitimate suspicion of illegal use on the basis of concrete indications.

5. Cookies & Range Measurement

Cookies are information that is transmitted from our web server or third-party web servers to the users’ web browsers and stored there for later retrieval.

The viewing of this online offer is also possible without cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional limitations of this online offer.

Cooky Policy and Browser Settings Change: https://fuerimmerschoen.ch/cookie-policy/

It is possible to manage many online ad cookies from companies via the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet usage. Pseudonymous user profiles of the users can be created from the processed data.

We only use Google Analytics with IP anonymization enabled. This means that the IP address of the users is truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user’s browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google’s use of data for advertising purposes, settings and objections, please visit Google’s websites: https://www.google.com/intl/de/policies/privacy/partners (“Data usage by Google when you use our partners’ websites or apps”), http://www.google.com/policies/technologies/ads (“Data Use for Advertising Purposes”), http://www.google.de/settings/ads(“Manage information that Google uses to show you advertisements”) and http://www.google.com/ads/preferences (“Determine what advertising Google shows you”).

7. Google Re/Marketing Services

We use the marketing and remarketing services (short “Google Marketing Services”) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).

Google’s marketing services allow us to display ads for and on our website in a more targeted way to present users only with ads that potentially meet their interests. For example, if users are shown ads for products they are interested in on other websites, this is called “remarketing”. For these purposes, when google calls up our and other websites on which Google marketing services are active, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as “web beacons”) are integrated into the website. With the help of these, an individual cookie, i.e. a small file, is stored on the user’s device (instead of cookies, comparable technologies can also be used). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user visited, which content he is interested in and which offers he has clicked on, as well as technical information about the browser and operating system, referring websites, visit time as well as further information on the use of the online offer. The IP address of the users is also recorded, whereby we inform google analytics that the IP address is truncated within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transmitted to a Google server in the USA and shortened there. The IP address will not be merged with the user’s data within other Google offers. This information may also be linked to such information from other sources. If the user then visits other websites, the ads tailored to him or her may be displayed according to his or her interests.

The data of the users are processed pseudonymously within the framework of the Google marketing services. This means that Google, for example, does not store and process the user’s name or e-mail address, but processes the relevant data cookie-related within pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for a specific identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by “DoubleClick” about the users is transmitted to Google and stored on Google’s servers in the USA.

Among the Google marketing services we use is the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer will receive a different “conversion cookie”. Cookies cannot be tracked through AdWords customers’ websites. The information collected using the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers will learn the total number of users who clicked on their ad and been redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

We include third-party ads based on Google’s “DoubleClick” marketing service. DoubleClick uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the Internet.

We also include third-party ads based on Google’s “AdSense” marketing service. AdSense uses cookies that enable Google and its partner websites to display ads based on users’ visits to this website or other websites on the Internet.

Another Google marketing service we use is the “Google Tag Manager”, which allows other Google analytics and marketing services to be integrated into our website (e.g. “AdWords”, “DoubleClick” or “Google Analytics”).

For more information about Google’s use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads, Google’s privacy policy is available at https://www.google.com/policies/privacy.

If you wish to object to the collection by Google Marketing Services, you can take advantage of the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.

8. Facebook Social Plugins

Our online offer uses social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins are recognizable by one of the Facebook logos (white “f” on blue tile, the terms “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user calls up a feature of this online offer that contains such a plugin, his device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated by the user into the online offer. User profiles of the users can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore informs the users according to our state of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the rights and setting options for the protection of the privacy of users, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his/her member data stored on Facebook, he must log out of Facebook before using our online offer and delete his cookies. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

9. Facebook Remarketing

Within our online offer, facebook ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland( “Facebook”) are used. With the help of the Facebook pixel, It is possible for Facebook to determine the visitors of our offer as the target group for the display of advertisements, so-called “Facebook ads”. Accordingly, we use the Facebook pixel to display the Facebook ads we have placed only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixel, we want to ensure that our Facebook ads meet the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing if users have been redirected to our website after clicking on a Facebook ad.

The Facebook pixel is directly integrated by Facebook when we access our websites and can store a so-called cookie, i.e. a small file, on your device. If you then log in to Facebook or visit Facebook in the logged-in state, the visit to our offer will be noted in your profile. The data collected about you is anonymous to us, so we do not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible. The processing of the data by Facebook takes place within the framework of Facebook’s data usage policy. Accordingly, you will learn more about how the remarketing pixel works and, more generally, how Facebook ads are used in Facebook’s data usage policy: https://www.facebook.com/policy.php.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To do this, you can go to the page set up by Facebook and follow the instructions for the settings of usage-based advertising: https://www.facebook.com/settings?tab=ads or explain the objection via the US site http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

10. Newsletter

With the following instructions we clarify the contents of our newsletter as well as the registration, shipping and statistical evaluation procedure as well as your rights of objection. By subscribing to our newsletter, you agree to the receipt and the procedures described.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “Newsletter”) only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. In addition, our newsletters contain the following information: our products, offers, promotions and our company.

Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in procedure. I.e. You will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes storing the login and confirmation time, as well as the IP address. The changes to your data stored by the shipping service provider will also be logged.

Shipping service provider: The newsletters are sent by means of “Mailchimp” (hereinafter referred to as “Shipping Service Provider”). The data protection regulations of the shipping service provider can be viewed here: https://kb.mailchimp.com/accounts/management/about-mailchimp-the-eu-swiss-privacy-shield-and-the-gdpr.

The e-mail addresses of our newsletter recipients, as well as their other data described in the context of these notices, are stored on the servers of the shipping service provider. The shipping service provider uses this information for sending and evaluating the newsletters on our behalf. Furthermore, according to its own information, the shipping service provider may use this data to optimize or improve its own services, e.g. for the technical optimization of the shipping and presentation of the newsletters or for economic purposes, in order to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write them themselves or to pass them on to third parties.

Registration details: To register for the newsletter, it is sufficient to provide your e-mail address.

Statistical survey and analysis – The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file, which is retrieved from the server of the shipping service provider when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected first. This information is used to improve the technical requirements of the Services on the basis of the technical data or the target groups and their reading behaviour on the basis of the polling locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention, nor that of the shipping service provider, to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Cancellation/revocation – You can cancel the receipt of our newsletter at any time, i.e. revokeyourd your consents. At the same time, your consents to its dispatch by the shipping service provider and the statistical analyses expire at the same time. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to cancel the newsletter can be found at the end of each newsletter.

11. Integration of third-party services and content

It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated within our online offer. The integration of third-party content always presupposes that the third-party providers perceive the IP address of the users, since they could not send the content to the user’s browser without the IP address. The IP address is therefore required for the presentation of this content. Furthermore, the providers of the third-party content can set their own cookies and process the data of the users for their own purposes. User profiles of the users can be created from the processed data. We will use this content as economically and as economically as possible, as well as select reliable third-party providers with regard to data security.

The following presentation provides an overview of third-party providers and their contents, together with links to their data protection declarations, which contain further information on the processing of data and, in some case, possible objections (so-called opt-out):

– Google, Inc.,https://www.google.com/fonts https://www.google.com/fonts external fonts (“Google Fonts”). The integration of the Google fonts takes place by a server call to Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

– Maps of the Google Maps service provided by the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

– Videos of the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

12. User rights and deletion of data

Users have the right, upon request, to receive information free of charge about the personal data that we have stored about them.

As a person concerned, you have the following rights:
• pursuant to Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• pursuant to Article 16 GDPR, the right to request immediate correction of inaccurate or complete your personal data stored by us;
• pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
– the exercise of the right to freedom of expression and information;
– to fulfil a legal obligation;
– for reasons of public interest, o-the
– to assert, exercise or defend legal claims
is necessary;
• pursuant to Article 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
– the accuracy of the data is disputed by you;
– the processing is unlawful, but you refuse to delete it;
– we no longer need the data, but you need it to assert, exercise or defend legal claims, or
– you have objected to the processing in accordance with Article 21 GDPR;
• pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• the right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
Apply

The data stored by us will be deleted as soon as they are no longer necessary for their purpose and the deletion is not precluded by legal retention obligations.

13. Changes to the Privacy Policy

We reserve the right to change the Privacy Policy to adapt it to changes in legal situations, changes to the Service and data processing. However, this only applies with regard to declarations of data processing. If user consents are required or if components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only take place with the consent of the users.
Users are asked to inform themselves regularly about the content of the data protection declaration.