Order now for free!

Privacy policy

The following privacy policy applies to the use of our online offer www.giveback-cosmetics.de (Below "Website"):
We measure the data protection of great importance. The collection and processing of your personal data happens in compliance with the applicable data protection regulations, in particular the Data Protection Regulation (DSGVO).
1. Responsible
Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 no. 7 DSGVO is
Give Back UG (haftungsbeschränkt)
Managing Director: Lars Stieger
Heinrich-Kock-Weg 5
22529 Hamburg

If you want to contradict the collection, processing or use of your data by us in accordance with this privacy policy as a whole or for individual measures, you can address your contradiction to the responsible persons.
You can save and print this privacy policy at any time.

2. General purposes of processing
We use personal data for the purpose of operating the website and for the settlement of orders that come about by your order.
the shipping of newsletters, if you have subscribed to this
You want contact you

3. Which data we use and why
3.1. Hosting
The hosting services used by us serve the provision of the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services we use for the purpose of operating the website.
Here, or our hosting provider, we process inventory data, contact details, content data, contract data, usage data, meta- and communication data from customers, interested parties and visitors to this website based on our legitimate interests in an efficient and secure provision of our website acc. Art. 6 ABS. 1 p. 1 f) DSGVO IVM Art. 28 DSGVO.

3.2. Access data
We collect information about you if you use this website. We automatically capture information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, save and use data about any access to our website (so-called server log files).
Access data includes:
  • Name and URL of the retrieved file
  • Date and time of the call
  • Transferred amount of data
  • Message about successful retrieval (HTTP Response Code)
  • Browser type and browser version
  • operating system
  • Referer URL (i.e., the previously visited page)
  • Websites called by the user's system through our website
  • Internet service provider of the user
  • IP address and the inquiring provider
We use these log data without allocation to your person or other profile creation for statistical evaluations for the purpose of operating, security and optimizing our website, but also to anonymous collection of the number of visitors on our website (traffic) as well as the scope and the nature of the Use of our website and services, as well as billing purposes to measure the number of Clicks obtained from cooperation partners. Based on this information, we can provide personalized and location-related content and analyze the traffic, search and fix errors and improve our services.
This is also our legitimate interest in accordance with Art 6 (1) p. 1 f) DSGVO.
We reserve the right to check the log data later if the legitimate suspicion of illegal use exists due to concrete indications. IP addresses are stored in the log files for a limited period of time when required for security purposes or necessary for the service provision or billing of a power, e.g. B. If you use one of our offers. After termination of the order of the order or after receipt of payment, we delete the IP address if it is no longer necessary for security purposes. We also store IP addresses when we have the concrete suspicion of a criminal offense in connection with the use of our website. In addition, as part of your account, we save the date of your last visit (e.g., if register, login, click left, etc.).

3.3. Cookies
We use so-called session cookies to optimize our website. A session cookie is a small text file sent by the respective servers when visiting a website and buffered on your hard disk. This file as such contains a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser. They serve z. B. for you to use the shopping cart function over several pages.
We also use persistent cookies in a small extent (also small text files stored on your terminal) that remain on your device and enable us to recognize your browser on the next visit. These cookies are stored on your hard drive and clear after the predetermined time of alone. Your life is 1 month to 10 years. For example, we can present our offer more user-friendly, more effective and safer and provide you with information specifically for your interests on the page.
Our legitimate interest in the use of cookies in accordance with Art 6 (1) p. 1 f) DSGVO is to make our website more user-friendly, more effective and safer.

The following data and information are stored in the cookies:
  • Log-in information
  • language settings
  • Entered search terms
  • Information about the number of views of our website and use of individual functions of our website.

When the cookie is enabled, it is assigned an identification number and assigning your personal data to this identification number will not be made. Your name, your IP address or similar data that would allow the cookie assignment to you will not be inserted into the cookie. On the basis of the cookie technology, we only receive pseudonymised information, for example about which pages of our shop were visited which products were viewed, etc.
You can set your browser so that you can be informed about setting cookies in advance and decided in individual cases whether you exclude the acceptance of cookies for specific cases or generally, or that cookies are completely prevented. This can restrict the functionality of the website.

3.4. Data for the fulfillment of our contractual obligations
We process personal data, which we need to fulfill our contractual obligations, such as name, address, e-mail address, ordered products, invoice and payment data. The collection of this data is required for the conclusion of the contract.
The deletion of the data takes place after the end of the warranty periods and statutory retention periods. Data associated with a user account (see below) remain in any case for the time of guidance of this account.
The legal basis for the processing of this data is Art. 6 para. 1 p. 1 b) DSGVO, because this data is needed so that we can fulfill our contractual obligations to you.

3.5. User account
You can create a user account on our website. If you wish this, we need the personal data requested in the login. During later login, only your email or username and the password you have chosen will be needed.
For the new registration we charge master data (eg name, address), communication data (eg e-mail address) and payment data (bank details) as well as access data (username and password).
To ensure your proper login and to prevent unauthorized registrations by third parties, you will receive an activation link by e-mail after your registration to enable your account. Only after registration we store the data you transmitted permanently in our system.
You can delete a once created user account at any time by us without this other than the delivery costs after the basic rates. A message in text form to the contact data referred to in point 1 (e.g., e-mail, fax, letter) is sufficient. We will then delete your stored personal data, as far as we do not need to store them for the processing of orders or due to legal storage obligations.
Law basis for the processing of this data is your consent according to Art. 6 para. 1 p. 1 a) DSGVO.

3.6. Newlstter
To register for the newsletter, the data requested in the login process are required. Registration for the newsletter is logged. After logging in, you will receive a message to the specified email address, in which you will be asked for the confirmation of the application ("double opt-in"). This is necessary for you to register third parties with your email address.
You can at any time revoke your consent to receive the newsletter and thus unsubscribe the newsletter.
We save the credentials as long as these are needed for sending the newsletter. The logging of the application and the shipping address we store, as long as an interest in the proof of the originally given consent, which is usually the limitation period for civil claims, as a maximum of three years.
Legal basis for shipping the newsletter is your consent acc. Article 6 (1) (a) iVM Art. 7 DSGVO IVM § 7 (2) no. 3 UWG. Legal basis for the logging of the application is our legitimate interest in proof that shipping was made with your consent.
You can undo the application at any time without this other than the delivery cost after the basic rates arise. A message in text form to the contact data referred to in point 1 (e.g., e-mail, fax, letter) is sufficient. Of course, you will also find a login link in each newsletter.

3.7. Product recommendations
Regardless of the newsletter, we regularly send you product recommendations by e-mail. In this way, we will provide you with information about products from our offer, for which you might be interested in the basis of your last purchases of goods or services. We are strictly following the legal requirements. You can contradict this at any time without this other than the delivery cost after the basic tariffs arise. A message in text form to the contact data referred to in point 1 (e.g., e-mail, fax, letter) is sufficient. Of course, you will also find a logout link in each e-mail.
The legal basis for this is the statutory permit under Article 6 (1) p. 1 f) DSGVO IVM § 7 Abs. 3 UWG.

3.8. E-mail contact
If you come into contact with us (eg via contact form or e-mail), we process your information on the processing of the request as well as in the event that connection questions arise.
If data processing is carried out for the implementation of pre-contractual measures carried out at your request, or, if you are already our customer, to carry out the contract, the legal basis for this data processing Art. 6 para. 1 p. 1 b) DSGVO.
Further personal information is only processed if you consent (Article 6 (1) p. 1 a) DSGVO) or we have a justified interest in the processing of your data (Article 6 (1) p. 1 f) DSGVO) . A legitimate interest is z. B. in responding to your e-mail.

4.1. Google Analytics
We use Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files stored on your computer and enable an analysis of the use of the website through it. The information generated by the cookie via the use of this website by the site visitors is usually transferred to a Google server in the US and stored there.
This is also our legitimate interest in accordance with Art 6 (1) p. 1 f) DSGVO.
Google has undertaken to the privacy-shield agreements concluded between the European Union and the United States and certified. As a result, Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2ZT000000001L5AIAI&status=Active.
We have activated IP anonymization on this website (AnonymizeizeP). As a result, however, your IP address will be shortened by Google within Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transferred to a Google server in the US and shortened there. In our order, Google will use this information to evaluate the use of the Website by putting you on reports through the website activities and to provide us with more services associated with website usage and internet usage.
The IP address transmitted in the context of Google Analytics from your browser is not merged with other data from Google. You can prevent the storage of cookies by a corresponding setting of your browser software; However, we point out that in this case, you may not be able to use all the functions of this website in full.
You can also prevent the transfer of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of these data by Google by downloading the browser plugin available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively to the browser plugin or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that prevents the capture by Google Analytics within this website (this opt-out cookie works only In this browser and only for this domain. Delete the cookies in your browser, you must click this link again: [Google Analytics Disable]

4.2. Conversion Tracking with Google AdWords
As an AdWords customer, we also use the Google Conversion Tracking, an analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google AdWords set a cookie on your computer ("Conversion Cookie") if you have passed through a Google Display on our website. These cookies lose their validity after 30 days and do not serve personal identification. Visit certain pages of us and the cookie has not expired yet, we can and Google realize that someone has clicked on the ad and thus be forwarded to our site. Each AdWords customer receives another cookie. Cookies can not be tracked through the websites of AdWords customers. The information obtained using the conversion cookies serve to create conversion statistics for AdWords customers who have decided on conversion tracking. The AdWords customers learn the total number of users who have clicked on their display and forwarded to a conversion tracking tagged page. However, you will not receive any information that allows users to personally identify. If you do not want to participate in the tracking procedure, you can also reject the required setting of a cookie - for example via browser setting, which generally disables automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser so that cookies are blocked by the domain "GoogleAdservices.com".

4.3 Conversion tracking with Facebook
We also use the Facebook Conversion Tracking, an analysis service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Facebook Conversion Tracking is set a cookie on your computer, if you reach our website via a Facebook display. Visit certain pages of us and the cookie has not expired yet, we can and facebook realize that someone has clicked on the ad and thus has been forwarded to our site. The Facebook Conversion Tracking customers experience the total number of users who have clicked on their display and forwarded to a conversion-tracking tagged page. The collected data is anonymous for us, thus offering us no conclusions about the identity of users. However, the data from Facebook is stored and processed, so that a connection to the respective user profile is possible and Facebook can use the data for your own promotional purposes, according to the Facebook data use policy (available at http://www.facebook.com/policy.php) . If you do not want to participate in the tracking procedure, you can reject the required setting of a cookie - for example via browser setting, which generally disables automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that cookies are blocked by the domain "".

5. Storage duration
Unless specified, we store personal data only as long as this is necessary to meet the purposes pursued.
In some cases, the legislator provides for the storage of personal data, such as tax or commercial law. In these cases, the data from us is only stored for these statutory purposes, but not otherwise processed and deleted after the statutory retention period.

6. Your rights than the data processing affected
According to the applicable laws, they have different rights with regard to their personal data. If you want to assert these rights, please send your request by e-mail or by mail under clear identification of your person to the address mentioned in point 1.
Below is an overview of your rights.

6.1. Right to confirmation and information
You have the right to clearly information about the processing of your personal data.
Specifically, you always have the right to receive a confirmation from us whether you are processed on your personal data. If this is the case, you have the right to request any free information about the personal data stored to you, together with a copy of this data.
Furthermore, there is a right to the following information:
  1. the processing purposes;
  2. The categories of personal data that are processed;
  3. Recipients or categories of recipients relating to those of personal data or are not yet disclosed, especially in third countries receivers or international organizations;
  4. If possible, the scheduled duration for which the personal data is stored, or, if not possible, the criteria for determining this duration;
  5. the existence of a right to correction or deletion of the personal data relating to the person-related data or to restrict processing by the responsible or a right of opposition to this processing;
  6. the existence of a contingent complaint with a supervisory authority;
  7. If the personal data is not collected with you, all available information about the origin of the data;
  8. The existence of automated decision-making, including profiling pursuant to Art. 22 (1) and 4 DSGVO and - at least in these cases - meaningful information about the logic involved, as well as the scope and the desired effects of such processing for you.
  9. If personal data is transmitted to a third country or an international organization, they have the right to be informed about the appropriate guarantees under Art. 46 DSGVO in connection with the transmission.

6.2. Right to correction
You have the right to demand from us the correction and, if applicable, completing you on personal data.
Specifically, you have the right to request the correction from us immediately to the correction of incorrect personal data. Taking into account the purposes of processing, you have the right to complete the completion of incomplete personal data - even by means of a complementary explanation.

6.3. Right to deletion
In a series of cases, we are obliged to delete them relating to personal data.
In detail:
In accordance with Article 17 (1) DSGVO, they have the right to request from us that they shall be deleted immediately, and we are obliged to delete personal data without delay, if one of the following reasons:
1. Personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
2. They revoke their consent to which the processing in accordance with Article 6 (1) (a)) DSGVO or Article 9 (2) (a)) supported DSGVO, and lacking a different legal basis for processing.
3. In accordance with Art. 21 para. 1 DSGVO contradiction against the processing and there are no primary legitimate reasons for processing, or they lay in accordance with Art. 21 para. 2 DSGVO contradiction against the processing.
4. Personal data were improperly processed.
5. The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member States we are subject to.
6. The personal data were collected in relation to offered services of the information society in accordance with Article 8 (1) DSGVO.
If we have made the personal data public and we are committed to their deletion in accordance with Article 17 (1) DSGVO to their deletion, we meet appropriate measures, including the technical manner, taking into account the available technology and the implementation costs, to be responsible for the data processing Processing data to inform it that you have requested the deletion of all links to these personal data or copies or replication of these personal data.

6.4. Right to restriction of processing
In a series of cases, they are entitled to demand a restriction of processing their personal data from us.
In detail:
You have the right to request the restriction of processing from us if one of the following conditions is given:
1. The accuracy of personal data is denied by them, for a duration that enables us to verify the correctness of personal data,
2. Processing is unlawful and it rejected the deletion of personal data and, instead, demand the limitation of the use of personal data;
3. We no longer need the personal data for the purposes of processing, but need the data for assertion, exercise or defense of legal claims, or
4. They have appealed against processing according to Art. 21 para. 1 DSGVO, as long as it is not yet established whether the legitimate reasons of our company outweigh its outweighs.

6.5. Right to data transferability
You have the right to maintain, convey, to provide, to provide, or deliver from us to the person-related personal data.
In detail:
You have the right to obtain the personal data relating to you, which you have provided to us in a structured, common and machine-readable format, and you have the right to convey this data to another responsible person without disability, if
1. Processing at a consent in accordance with Article 6 (1) (a) DSGVO or Article 9 (2) (a) DSGVO or on a contract in accordance with Article 6 (1) p. 1 b) DSGVO and
2. The processing takes place using automated procedures.
When exercising their right to data transferability referred to in paragraph 1, they have the right to obtain that the personal data will be transmitted directly from us to another person responsible, as far as technically feasible.

They have the right to contradict them from a legitimate processing of their personal data by us if this is due to their special situation and not outweigh our interests in processing.
In detail:
They have the right to at any time for reasons resulting from their special situation against the processing of their personal data, which is carried out on the basis of Art. 6 (1) p. 1 e) or f) DSGVO; This also applies to a profiling assisted on these provisions. We do not process the personal data, unless we can prove compelling relevant reasons for the processing that outweigh their interests, rights and freedoms, or processing serves to assert, exercise or defense of legal claims.
If personal data is processed by us in order to operate direct advertising, they have the right to at any time contradict the processing of personal data for the purpose of such advertising; This also applies to profiling, as far as this is associated with such direct advertising.
You have the right to object to the processing of your specific situation for the sake of your special situation, you can object to the person-related data related to scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) DSGVO, it Unless the processing is required to fulfill a task lying in the public interest.

6.7. Automated decisions including profiling
You have the right not to be subjected to a decision based exclusively on automated processing - including profiling - based on legal effects or in a similar manner significantly impaired.
An automated decision-making on the basis of the collected personal data does not take place.

6.8. Right to revocation of a data protection agreement
You have the right to revoke a consent to the processing of personal data at any time.

6.9. Right to complaint with a supervisory authority
You have the right to complaint with a supervisory authority, especially in the Member State of your location, your workplace or the place of alleged violation, if you believe that the processing of personal data relevant to you is unlawful.

7. Data security
We are maximally endeavored to ensure the safety of your data within the scope of the applicable data protection laws and technical possibilities.
Your personal information will be encrypted with us. This applies to your orders and also for the customer login. We use the coding system SSL (Secure Socket Layer), but point out that data transmission on the Internet (e.g., during communication by e-mail) can have security gaps. A complete protection of the data before access by third parties is not possible.
To ensure your data, we maintain technical and organizational backup measures according to Art. 32 DSGVO, which we always adapt to the prior art.
We also do not guarantee that our offer is available at certain times; Faults, interruptions or failures can not be excluded. The servers we use are regularly secured carefully.

8. Disclosure of data to third parties, no data transfer to non-EU countries
Basically, we use your personal data only within our company.
If and insofar as we turn on third parties within the fulfillment of contracts (such as logistics service providers), these personal data will only receive in the scope in which the transmission for the corresponding performance is required.
In the event that we are outsourcing certain parts of data processing ("order processing"), we undertake contractor contractually to use personal data in accordance with the requirements of data protection laws and to ensure the protection of the rights of the person concerned.
A data transfer in places or persons outside the EU outside of the case mentioned in this Declaration in paragraph 4 does not take place and is not planned.

9. Data protection officer
If you still have any questions or concerns about data protection, please contact our Data Protection Officer: Data Privacy@giveback-cosmetics.com