Privacy

Privacy policy

Foreword

This privacy policy serves to inform the users of this website about the nature, scope and purpose of the collection and use of personal data by us.

We take data protection very seriously. The processing and use of personal data by us is always confidential and only to the extent permitted by law or you have consented thereto.

However, we would like to point out that data transmission on the Internet is generally subject to security risks. Full protection against access by third parties is not feasible. If for this reason you have concerns about continuing to use our website, you can also contact us by alternative means, e.g. by post or telephone.

A. Responsible entity; contact person; data protection officer

The responsible party within the meaning of the data protection laws is:

Smoke Factory Ltd.
Schulze-Delitzsch-Str. 8A
30938 Großburgwedel

vertr. d. d. GF: Mario Rincon

If you have any questions about the processing of your personal data by us, or if you have any concerns regarding your rights as described below in this statement, please contact either the aforementioned data controller (by mail or telephone: 0511 – 51 51 020 or e-mail: info@fragrance-factory.com) or directly our data protection officer, attorney Henning Lüdecke (telephone: 0511/54304178 or e-mail: Luedecke@LFLegal.de).

B. Processing of personal data; purposes; deletion

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The use of this website is generally possible anonymously, i.e. without your personal data being processed by us. Exceptions exist only in cases where your browser transmits non-anonymous (i.e. personal) data of its own accord. Unless otherwise stated below, we rely on Article 6(1) sentence 1 b) of the General Data Protection Regulation (hereinafter only referred to as DS-GVO) as the legal basis for the processing of such personal data relating to you, because the data processing is necessary for the provision of the functionalities requested by you on this website.

When you access our website, we collect the following data, which is normally anonymous, and store and use it for a short time:

• the visited website
• Time at the time of access
• URL of the website on which the user was immediately before visiting our website
• Amount of data sent in bytes
• Browser used by the user and its version
• Operating system used by the user
• IP address used by the user

We do not use the data in any way to identify you or draw conclusions about your person. This data is stored in our server log files for a limited time. The data is only used to enable the correct display of our website, to carry out anonymous statistical evaluations, to improve our website, to detect and trace technical errors on the website if necessary and, in the event of unauthorized access or attempted access to our server(s), to initiate a derivation to personal data. We base our authorization for these cases on Article 6 (1) f) DS-GVO. After the purpose for which the data was stored has been achieved, the data is routinely deleted or, if legal regulations or legitimate concerns prevent deletion, blocked.

Personal data that you transmit to us via our website or via contact options indicated on the website will only be processed by us if it is necessary for the establishment, implementation, termination or settlement of a contractual relationship between us and you or in order to answer other inquiries from you. The following data are regularly processed by us in such cases:

• First and last name
• Address, email address, fax and/or telephone number
• Reason for contact
• Contract data
• Documents submitted by you
• Other information provided by you

As a matter of principle, we do not pass on your personal data to third parties unless you have given us explicit consent to do so. Exceptions are necessary data transfers to tax advisors and tax offices or other third parties to whom we are obligated to transfer data due to legal requirements. In the case of data transfers to such third parties, however, the scope of the transferred data is limited to the necessary minimum.

The aforementioned personal data will be deleted by us after the purpose for which they were processed has been achieved, unless we are obliged to store them for a longer period of time due to statutory retention and documentation obligations or you have consented to their storage beyond this period in accordance with Article 6 (1) sentence 1 a) DS-GVO or we need the data to protect our own legitimate interests or those of a third party and your fundamental rights or freedoms do not override our interest.

C. Cookies

This website uses cookies. These are small text files that are stored on your terminal device. Your browser accesses these files. Some of the cookies we use are deleted after you close your browser (session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address data to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

Cookies regularly serve the purpose of recognizing the user, for example, to keep a user’s shopping cart on file for a certain period of time or to display behavior-based advertising on the website. For this purpose, the information contained in the cookie is read in the event of a renewed website visit or a visit to a specific other website. This information may include statistical, but also personal data, such as the IP address of the user.

If personal data is also processed through cookies used by us, the processing is carried out in accordance with Article 6 (1) sentence 1 b) DS-GVO either for the performance of the contract or in accordance with Article 6 (1) sentence 1 f) DS-GVO to protect our legitimate interests in the best possible and user-friendly functionality of our website.

Common internet browsers offer the possibility to disallow cookies in their settings options, for example

MS Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Apple Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Note: It is not guaranteed that you will be able to access all features of this website without restrictions if you disable cookies.

D. Contact form

We offer on our website the possibility to contact us via contact form. If you use this function, we will only use the personal data you provide to process your specific request. The processing of the data entered in the contact form is thus based on your consent (Article 6(1) sentence 1 a) DS-GVO).

E. Newsletter subscription

We offer you a newsletter in which we inform you about news and current offers. If you would like to subscribe to the newsletter, you must provide a valid e-mail address. Of course, you can revoke your consent to receive the newsletter at any time. Please use the link provided in the newsletter or send a corresponding email message to the following address: info@fragrance-factory.com.

F. Rights of the user

1. Information (Art. 15 DS-GVO)

Upon request, we will provide you free of charge with information about which personal data we have processed about you, for what purpose this is done, to which categories of recipients we have disclosed the data or still intend to do so, if possible the storage period or at least criteria for determining this period and, if we have not received the data from you ourselves, about the origin of the data.

2. Rectification (Art. 16 DS-GVO)

You have the right to request us to correct incorrect or complete incomplete personal data concerning you.

3. Deletion and “oblivion” (Art. 17 DS-GVO)

Unless your request conflicts with a legal obligation to retain data or the data processing contravenes our right to freedom of expression and information, or we need the data in question to assert, exercise or defend legal claims, you have the right to have your personal data deleted without delay.

4. Restriction of processing (Art. 18 DS-GVO)

Furthermore, you have the right to restrict processing if at least one of the following conditions is met:

• If you dispute the accuracy of the personal data we process concerning you, we will restrict the processing for a period of time that allows us to verify the accuracy of the data;
• the processing is unlawful but you object to the erasure of your personal data and request instead the restriction of the use of such data;
• we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims;
• in the event that you have objected to the processing pursuant to Article 21(1) DS-GVO, as long as it has not yet been determined whether our legitimate interests outweigh yours.

5. Data portability (Art. 20 DS-GVO)

You also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that

• the processing is based on consent pursuant to Article 6(1) a) GDPR or Article 9(2) a) DS-GVO or on a contract pursuant to Article 6(1) b) DS-GVO based
• and the processing is carried out with the aid of automated procedures
• and that the rights and freedoms of other persons are not thereby impaired.

When exercising the right to data portability described above, you have the right to obtain that the personal data be transferred directly from us to another controller, to the extent that this is technically feasible.

6. Right of objection (Art. 21 DS-GVO)

In cases where we process your personal data on the basis of legitimate interests pursuant to Article 6(1) sentence 1 f) DS-GVO, you have the right to object to the data processing, provided that there are grounds for doing so that arise from your particular situation. You also have the right to object to the processing of your data if this relates to direct advertising carried out by us.

7. Right of withdrawal

In cases where we process your personal data on the basis of your consent pursuant to Art. 6 Para. 1 Sentence 1 a) or Art. 9 Para. 2 a) DS-GVO, you have the right to withdraw your consent at any time. A revocation does not affect the lawfulness of the data processed until the revocation.

8. Right of appeal (Art. 77 GDPR)

If you believe that our processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with the supervisory authority. To exercise this right, you may contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us. You can find out which state data protection supervisory authority is responsible for us at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

9. Exercise of rights

Please address any inquiries regarding the exercise of the aforementioned rights to the responsible person named in A. above.

G. Data transfer to PayPal

When paying via PayPal, the data required for payment processing will be transmitted by us to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For the purpose of checking creditworthiness, PayPal transmits data to credit agencies and receives information from them as well as, if applicable, creditworthiness information based on mathematical-statistical procedures (probability or scoring values), the calculation of which includes, among other things, address data. Details on this and on the credit agencies used can be found in PayPal’s privacy policy, which is available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE can be found.

H. Google Analytics

This website uses the “Google Analytics” service, which is provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to analyze website usage by users. The service uses “cookies” – text files that are stored on your terminal device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

IP anonymization is used on this website. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Under the terms of the commissioned data agreement, which the website operators have concluded with Google Inc. The information collected is used to analyze website usage and activity and to provide services related to internet usage.

You have the option of preventing the cookie from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all features of this website without restrictions if your browser does not allow cookies.

Furthermore, you can use a browser plugin to prevent the information collected by cookies (including your IP address) from being transmitted to Google Inc. and sent by Google Inc. be used. The following link will lead you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics

Here you can find more information about data usage by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

I. Google reCaptcha

For the purpose of data security when submitting forms, we use on these pages in certain cases the service reCaptcha of the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This serves primarily to distinguish whether the input is made by a natural person or improperly by machine and automated processing. In case of activation of IP anonymization on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The service includes the sending of the IP address and possibly other data required by Google for the reCaptcha service to Google. The deviating data protection provisions of Google Inc. apply here. More information about the privacy policy of Google Inc. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/

J. Google Web Fonts

This site uses so-called web fonts for the uniform display of fonts, which are provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a default font is used by your computer.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://www.google.com/policies/privacy/.

K. Google Maps

We use the Google Maps API on this site to visually display the location of our company and, if necessary, to help you navigate to us. When using Google Maps, Google (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) also collects, processes and uses data on the use of the Maps functions by visitors to the websites.

If you do not agree with the transmission of your data to Google in the context of the use of Google Maps, it is possible to completely disable the web service of Google Maps by turning off the application JavaScript in your browser. Google Maps and thus the map display on this website, can then not be used.

You can view Google’s terms of use at http://www.google.de/intl/de/policies/terms/regional.html. You can find more detailed information about data processing by Google in Google’s privacy policy, which you can access at http://www.google.de/intl/de/policies/privacy/ .

L. Privacy policy update

We reserve the right to adapt this data protection declaration at the appropriate times to changes in the law or changed specifications/requirements on the part of jurisdiction or the supervisory authorities. The amended privacy policy will then apply from its publication on our website. We therefore recommend that you visit this page regularly in order to be aware of any updates that may have been made.