Privacy Notice

BABOR welcomes you to our website. The protection of your personal data is important to us because we want you to feel secure during your visit to our website. For this reason, we have prepared some important information on the use of your data.

BABOR UK Ltd. whose registered office is located 7 Christie Way - Christie Fields -Manchester M21 7QY, United Kingdom and Dr. Babor GmbH & Co. KG whose registered office is located Neuenhofstr.180 - 52074 Aachen – Germany are hereinafter for the purposes of this Privacy Notice collectively referred to as “BABOR” and joint data controllers for the website www.babor.com and www.babor.co.uk.

This Privacy Policy may be updated at any time by BABOR. The date of the most recent revision will appear on this page. We suggest that you refer back to it on a regular basis.

Please note that by using the website or visiting one of our counters in participating retailer stores, you authorize BABOR to collect, record, organize, store, use and/or transfer your personal data according to this privacy policy.

• Which data do we collect and process?
  
• Use of Cookies
  
• GOOGLE ANALYTICS
  
• GOOGLE ADWORDS
  
• Social media links
  
• Contact form and email contact
  
• Registration for our Newsletter
  
• Online Shop
  
• Delivery by DHL
  
• Product advisor / Customer account
  
• General information and rights
  
• Objection
  
• Revocation of consent declarations

Data protection officer

You can contact our data protection officer with your questions regarding this data protection information or on the processing of your personal data. Our data protection officer is also available to you in matters involving requests for information, suggestions or complaints.
Email: [email protected]

Which data do we collect and process?

You can visit our website without providing personal information. However, if your browser settings are configured to allow them, our system uses 'cookies' to log each visit that you make to our site. More information about how we use cookies is set out below but this allows us to keep a record of certain information about visitors to our website such as the browser and operating system being used by the device, the date and time of the visit, the IP address, the internet service provider used, the websites that the user has previously visited and possibly information regarding the visitor's geographical location. We also keep a record of what pages of our website that you visit and how long you remain on each page. This data is used to improve the functionality of our website and to ensure that it can be used trouble-free by visitors. It also helps us to keep our technical systems secure, improve our service and enhance our presence on the web.

If you order from our webshop, register or otherwise initiate contact with us, we ask you for certain data such as, for example, your email address, invoice/delivery address and your age in order to accept and deliver your order or to respond to an enquiry that you may have. This enables you to make contact with us, subscribe to our newsletter, make purchases from the webshop and enter prize draws. The data collected for each of the aforementioned categories is used exclusively for its respective purpose.

Lawful bases for processing

The table below sets out details of each area of data processing that we carryout using personal data that we may collect from you together with the legal basis upon which we rely to lawfully process the data.

• Personal data processing activity
  Cookie data obtained when you use our website
• Lawful basis for processing
  Consent

• Personal data processing activity
  Data obtained when you place an order/make a purchase
• Lawful basis for processing
  Performance of a contract

• Personal data processing activity
  Data obtained when you contact us with a query
• Lawful basis for processing
  Consent/in order to take steps at your request prior to entering into a contact

• Personal data processing activity
  Data obtained when you subscribe to our newsletter and processed when sending the newsletter via MailChimp
• Lawful basis for processing
  Consent

• Personal data processing activity
  Data obtained and processed for our prize draws
• Lawful basis for processing
  Consent

• Personal data processing activity
  Data you provide when registering an account with us
• Lawful basis for processing
  Consent/performance of contact/ in order to take steps at your request prior to entering into a contact

• Personal data processing activity
  Data you provide that it is used by Google Analytics and Google AdWords
• Lawful basis for processing
  Consent

• Personal data processing activity
  Data you provide us with for the purposes of making payment (credit/debit card/bank details etc) that we send to our payment services provider (Evo Payments GmbH)
• Lawful basis for processing
  Performance of a contract

• Personal data processing activity
  Data you provide us with that we pass on to DHL for product delivery
• Lawful basis for processing
  Performance of a contract

• Personal data processing activity
  Data which you provide when purchasing products from us which we use to market similar products and services to you
• Lawful basis for processing
  Legitimate interests

Use of cookies

"Cookies" are small files that enable us to save specific information related to you, the user, during the time that you spend visiting our website. Cookies help us to determine how often you visit our website and the number of visitors to our website. This information helps us to design the offerings that we make available to our users on the website.
We use both "session cookies", which are stored exclusively for the duration of your use of our website, as well as "permanent cookies", in order to collect information from computers that repeatedly access our website. This allows us to offer you an optimal user experience by enabling us torecognise you as a repeat visitor and to present you with new and diverse contenteach time you visit. . The content of a permanent cookie is limited to an identification number. Name, IP address or other information on your true identity is not stored and we do not create individual profiles on your user activity.

You can still access our offers without enabling cookies. You can also deactivate the saving of cookies in your browser under Extras/Internet options, or limit it to certain websites or adjust your browser in such a manner that it notifies you as soon as a cookie is sent. You can also delete cookies at any time from your device. Please note, however, that not allowing cookies could limit our ability to provide you with an optimal user experience on our website.

GOOGLE ANALYTICS

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses cookies, text files that are stored on your computer and which enable an analysis of the use of the website by you. The information produced by the cookie on your usage of this website is sent to Google and their servers based in the United States of America (USA) and stored there. This involves sending a shortened version of your IP address to Google's servers. Google uses this information on our behalf to evaluate your use of the website, or in order to prepare reports on website activities and to provide additional services associated with the use of the website. The IP address sent by your browser in connection with Google Analytics is not combined with other data from Google. You can prevent the saving of cookies through a corresponding setting of your browser software; however, we advise you that in this case, you may not be able to fully use all functions on our website. In addition, you can prevent the recording of the data (including your IP address) produced by the cookie and based on your use of the website by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (https://tools.google.com/dlpage/gaoptout?hl=en).

GOOGLE ADWORDS

Along with Analytics, our website also uses the service Google AdWords. Google AdWords is an online advertising program provided by Google.

In connection with the use of Google AdWords, we use so-called conversion tracking. If you click on one of the ads placed by Google, a cookie for conversion tracking is saved on your computer/device. These cookies are deleted after 30 days, contain no personal data and do not personally identify you. The information obtained with the assistance of the conversion cookie serve the purpose of producing conversion statistics for AdWords customers who have selected to allow conversion tracking.

You can prevent the storage of cookies through a corresponding setting in your browser software; however, in this case, you may not be able to fully use all functions on our website. You can deactivate interest-related ads on Google as well as interest-related Google ads in the Web (within the Google Display network) in your browser in that you activate the “Off” button under http://www.google.de/settings/ads. Further information on your related settings options and data protection by Google can be found under https://policies.google.com/privacy?hl=en.

International transfer of personal data

The following table sets out details of when we transfer your personal data to countries outside of the European Economic Area (EEA) and the safeguards we use to protect your personal data.

• Data transferred to (organisation)
  Google Inc
• Data transferred to (country where organisation located)
  United States of America
  Gordon House, Barrow Street, Dublin 4, Irland
• Safeguards used
  EU-US Privacy Shield / DSGVO

• Data transferred to (organisation)
  Mailchimp
• Data transferred to (country where organisation located)
  United States of America
• Safeguards used
  EU-US Privacy Shield

Social media links

Our website contains links with which we forward you to the official Babor pages of the social media platforms Facebook (www.facebook.com/baborUK), Instagram (www.instagram.com/baborofficial/) and Youtube (www.youtube.com/user/BABORCosmetics).

Contact form and email contact

You can initiate contact with us in numerous ways through our website. We offer you comprehensive personal support via our contact form. Depending on the enquiry, we ask you, via the respective contact form, to provide your title, first and last names, your email and postal address(if applicable), and certain product application information.

Upon sending the message, additional data is transmitted to us. This includes your IP address as well as the date and time. This data is captured as a consequence of sending us a message via the internet.

Alternatively, it is possible to initiate contact via the email address [email protected]. In this event the personal data of the user are saved and used by our employees to initiate contact with you at your request. There is no disclosure of this particular data to third parties.

If you wish for us to contact you by telephone, it will be necessary for you to provide us with your telephone number which we will use for the purposes of telephoning you at your request and in order to respond to your query.

All data collected upon initiating contact with us will be used to respond to your enquiry. It will not be used for entering into a sales conversation or otherwise for promotional purposes.

Other data processed during the dispatching process serve the purpose of preventing misuse of the contact form and to secure the security of our information systems.

We will gladly provide you with information on the data we store about you. Further information can be found under the section “General Information” of this Privacy Notice.

Subscription to our Newsletter

Our website provides an opportunity to subscribe to our free Newsletter which we send by email.

Our Newsletter provides you with information on current products, trends, prize draws and other news.

Data that you put into the sign-up screenwill be transmitted to us. This includes your title,first and last names in order to enable us to address you personally. Along with the subscription for the Newsletter, additional system information is transmitted to us, such as IP address, time and date.

With the confirmation “Newsletter subscription”, you consent to the use of your email address being used as the recipient address for our Newsletter. You receive a so-called “Double-Opt-In” email in which you are asked to confirm the subscription by clicking on a LINK so that we can be certain that you have ordered the Newsletter. If the LINK has not been clicked after 2 days, all registration data is deleted.

The Newsletter is sent weekly. For special campaigns such as Glamour Shopping Week and Black Friday, up to 6 Newsletters are sent monthly.

The dispatch is performed by MailChimp, with whom your email address and additional information for the dispatching and analysis of the Newsletter are stored. MailChimp's servers are located in the United States of America. See more information above for details of the safegaruds we use to transfer your data outside of the European Economic Area (EEA).

You can withdraw consent for the dispatching of the Newsletter at any time in the future. A Link for unsubscribing is found in every Newsletter and on our website: https://uk.babor.com/newsletter/unsubscribe

Online Shop

If you submit an order to our Online Shop, we require some data from you in order to deliver and invoice the goods.

We also use a service provider in the settlement of your orders when using certain methods of payment such as MasterCard, Visa Card and PayPal in that we make available the payment information of the order and the service provider provides the settlement of payment. Our service provider for payment is: EVO Payments International GmbH is a limited liability company under German law with its head office in Cologne. It is licensed as a payment service by the BaFin (Bundesanstalt für Finanzdienstleistungsaufsicht, Graurheindorfer Straße 108, 53117 Bonn, Germany) and registered in the Commercial Register of the Local Court Cologne under the number HRB 78863. The VAT identification number is DE243740140. Questions on data protection can also be directed to our partner under: [email protected]. More information: https://www.evopayments.eu/datenschutz/

Settlement data on orders can be provided to third parties to the extent necessary for the purpose of debt collection. In particular, we reserve the right to assign our receivable to a collection agency or to engage one with the collection of our receivable. We also retain the right to provide information on outstanding payments to credit agencies. Naturally this is done at all times under strict observance of statutory provisions.

Your address and order data are processed by us for our own marketing purposes. This is done on the basis that it is within our legitimate interests to market our services by sending you information about similar products and services. Naturally you can object to the processing or use of your personal data for promotional purposes at any time via a formless notification addressed to [email protected]

Delivery by DHL

We work together with service providers in order to send the goods, and provide them with certain order and delivery data and, if applicable, of payment. This includes, in particular, your name and delivery address.

In order to improve our delivery services, our service provider DHL provides you with a comprehensive service for package tracking, changes in the storage location and delivery notification. For this purpose we provide your email address in addition to the delivery data to DHL.

Via an email to you, we provide you with the shipment number of your package directly after dispatch of the goods.

The email address for DHL package tracking is used only for the individual order process; an objection to further uses is not necessary.

The DHL notification service can be deactivated at any time in the future by contacting DHL https://nolp.dhl.de/nextt-online-public/sendEmail.do

Product advisor / Customer account

In addition, you have the option to use our digital product advisor. In order to determine your skin type and provide a corresponding product recommendation, we will ask you about the following characteristics:

General information and rights

You can request a confirmation from us as to whether we process your personal data. Subject to certain conditions, you can request a restriction on or cancellation of the processing your data.

As a user, you can terminate your customer account at any time and have your data deleted if no Online Shop purchases have been made or other contractual agreements have been reached with us. If the data has been used to complete a purchase in the Online Shop, deletion is possible only if the storage period based on contractual and/or statutory obligations has expired.

Upon enquiry, we will of course inform you whether and which of your personal data is stored by us. In this event we require adequate proof that you are entitled to receive this information (authentification). In this way we avoid third parties gaining access to your data. We make an on-going effort to ensure the correctness and currentness of your data. If, however, inaccurate information has been stored, please inform us so that we can promptly correct this. For certain data you can do this yourself in the customer portal or in your customer account.

At all times you have the right to request information on your personal data stored by us.

In addition, you can exercise your statutory rights directly with us or submit a complaint to a supervisory authority such as the Information Commissioner's Office (ICO) if you reside in the United Kingdom.

In compliance with data protection regulations, we will delete your personal data if it is no longer necessary for us to retain it based on the purposes for which it was obtained and if there is no other legal requirement for us to retain it. In some cases prescribed by statute (e.g. statutory retention obligations) your data can be blocked rather than deleted.

The General Data Protection Regulation provides you with the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object to processing.

Objection

At any time you can object to certain uses of your data, in particular use for promotional purposes or for the production of user profiles. A notification sent to [email protected] is sufficient.

Revocation of consent declarations

You can revoke your data protection consent at any time. The revocation will not affect the lawfulness of the processing performed on the basis of the consent up until the time of the revocation. If your revocation concerns personal data in connection with contact initiation (Chat / Service etc.) the conversation cannot be continued after the revocation.