Privacy Policy
Table of Contents
- I. General
- II. Data controller
- III. Your rights
- IV. Processing of personal data when using our website for information purposes
- V. Processing of personal data by cookies
- VI. Other features and services on our website
- VII. Making contact
- VIII. Online application
- IX. Electronic cancellation function
I. General
(1) Below, we provide information on the collection of personal data when you use our website.
(2) The term 'personal data' refers, in accordance with the definition in Article 4(1) of Regulation (EU) 2016/679 (hereinafter referred to as the 'General Data Protection Regulation' or 'GDPR' for short) all data that relates to you personally. This includes, for example, your name, address, email address and user behaviour. With regard to other terms, in particular the terms 'processing', 'controller', 'processor' and 'consent', we refer to the statutory data protection definitions set out in Article 4 of the GDPR.
(3) The Swiss Federal Act on Data Protection, hereinafter referred to as the 'DSG', also applies to matters that have an impact in Switzerland, even if they originate outside Switzerland. However, we use the terms of the GDPR consistently throughout this document. The terms used in the GDPR – 'personal data', 'processing', 'data processor', 'special categories of data' and 'data portability' – also refer, insofar as the DSG applies, to the terms 'personal data', 'processing', 'data processor', 'data transfer' and ‘personal data requiring special protection’ as defined in the DSG. In this case, the legal meaning of the terms is determined by the DSG.
(4) As a general rule, we process personal data only to the extent necessary to provide a fully functional website and the content and services we offer. The processing of personal data generally takes place only if you have given us your consent within the meaning of Article 6(1)(a) of the GDPR, or where the processing is permitted by statutory provisions, in particular by one of the legal bases set out in Article 6(1)(b) to (f) of the GDPR.
(5) Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is required by national or European regulations to which we are subject. In such cases, the data will be blocked or deleted once the retention period prescribed by the relevant regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or performance of a contract.
(6) Where we use third-party service providers for specific functions on our website or wish to use your data for marketing purposes, we will provide you with detailed information below regarding the relevant processes.
II. Data controller
(1) The data controller within the meaning of Article 4(7) of the GDPR, other data protection laws in force in the Member States of the European Union, and other regulations and provisions relating to data protection is:
4beauty digital GmbH
Managing Directors: Artur Schen, Tobias Hastenteufel, Erwin Junker
7b Stollwerckstraße
51149 Cologne
Tel.: +49 261 1349860
Email: buchhaltung@4beauty.de
Company registry court: Montabaur Local Court
Registration number: HRB 27724
(2) Further details regarding the data controller can be found in our legal notice.
III. Your rights
(1) You have the following rights in relation to your personal data:
- the right of access,
- the right to rectification and erasure,
- the right to restriction of processing,
- the right to object to the processing,
- the right to data portability.
(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
(3) Within the scope of the DSG, you also have the right to:
- Data output,
- Data destruction
IV. Processing of personal data when using our website for information purposes
(1) When you visit our website without registering or otherwise providing us with information ('informational use'), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure its stability and security: IP address, date and time of the request, time zone difference from GMT, content of the webpage, access status (HTTP status), amount of data transferred, referring website, web browser, operating system, language and browser version
(2) The aforementioned data is also stored in so-called log files on our servers. This data is not stored together with any other personal data relating to you.
(3) The collection and temporary storage of your IP address is necessary to enable our website to be displayed on your device. To this end, your IP address must be stored for the duration of your visit to our website.
(4) The storage of the above-mentioned data in log files serves to ensure the proper functioning and optimisation of our website, as well as to ensure the security of our IT systems.
(5) This data is not analysed for marketing purposes. Our legitimate interest in data processing lies in the purposes set out above. The legal basis for the collection and temporary storage of the aforementioned data and log files is Article 6(1)(f) of the GDPR. The aforementioned data used to provide our website is deleted once the relevant session has ended. The collection of the aforementioned data for the purpose of providing our website and the storage of this data in log files is strictly necessary for the operation of our website. There is no right to object.
V. Processing of personal data by cookies
(1) We use so-called cookies on our website. Cookies are small text files that are stored on the storage medium of your device – for example, on a hard drive – and through which we, as the party setting the cookie, receive certain information. Cookies cannot run programmes or transmit viruses to your device. This website uses the following types of cookies, the scope and functioning of which are explained below.
(2) Cookies stored in your web browser:
- Transient cookies: These cookies are automatically deleted when you close your web browser. This includes, in particular, session cookies. These store a so-called session ID, which allows various requests from your web browser to be associated with the same session. This enables your device to be recognised when you return to our website. Session cookies are deleted as soon as you log out or close your web browser.
- Persistent cookies: These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time via your web browser’s settings.
(3) The processing of personal data by the above cookies serves to make our website’s content as a whole more user-friendly and effective for you. Some functions of our website cannot be provided without the use of these cookies. In particular, some functions of our website require that your web browser can still be identified even after you have changed pages. If you have an account, we use cookies to identify you for subsequent visits. This means you do not have to log in again every time you visit our website. The data processed by cookies that are necessary for the provision of our website’s functions is not used to create user profiles. Where cookies are used for analytical purposes, they serve to improve the quality and user-friendliness of our website, its content and functions. They enable us to track how the website is used, which functions are accessed and how often they are used. This allows us to continuously optimise our service.
(4) Where cookies are not technically essential, we will only use them with your prior consent, which you may also withdraw at any time. The legal basis is Article 6(1)(a) of the GDPR.
(5) The cookies mentioned above are stored on your device and transmitted from there to our server. You can therefore configure the processing of data and information by cookies yourself. You can adjust the settings in your web browser to, for example, block third-party cookies or cookies altogether. In this regard, we would like to point out that you may then be unable to use all the functions of our website properly. Furthermore, we recommend that you regularly delete cookies and your browser history manually.
VI. Other features and services on our website
(1) In addition to the informational use of our website described above, we offer various services which you may use if you are interested. This usually requires you to provide further personal data. We require this data in order to provide the relevant service. The above principles on data processing apply in this regard.
(2) In some cases, we use external service providers to process this data; these have been carefully selected and commissioned by us. These service providers are bound by our instructions and are regularly monitored by us. Where personal data is disclosed to third parties in the course of services that we offer jointly with partners, you can find further information in the descriptions of the individual services below. Where these third parties are based in a country outside the European Economic Area, you can find further information on the implications of this in the descriptions of the individual services below.
VII. Making contact
(1) If you contact us by email, the personal data you provide in your email will be stored.
(2) We also provide a contact form on our website which you can use to get in touch with us. The data you enter into the form is transmitted to us and stored: title, first name, surname, email address, telephone number. .
(3) The data will be used solely to answer your enquiries. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. We also record your IP address and the time at which your enquiry was sent.
(4) The processing of the above personal data is carried out solely for the purpose of dealing with your enquiries.
(5) The processing of any further personal data collected through the use of the contact form provided on our website serves to prevent misuse and to ensure the security of our IT systems.
(6) This also constitutes our legitimate interest in processing your personal data. Where you have given us your consent for this purpose, the legal basis for the processing of this data is Article 6(1)(a) of the GDPR. Furthermore, the legal basis for the processing of this data is Article 6(1)(f) of the GDPR, in particular where you provide us with the data by sending an email. Where you intend to enter into a contract by means of your email, Article 6(1)(b) of the GDPR constitutes an additional legal basis.
(7) Subject to statutory retention periods, the data will be deleted as soon as we have finalised the processing of your enquiry. If you contact us by email, you may object to the storage of your personal data at any time. Please note that, in this case, your enquiry cannot be processed further. You may withdraw your consent or object by sending an email to the email address provided in the legal notice.
VIII. Online application
(1) On our website, we offer you the opportunity to apply for a job online. You will need to provide personal data in order to take part in the application process. This data may include, amongst other things, personal details such as your first name, surname, address, date of birth, contact details such as telephone number or email address, as well as information relating to your educational and/or professional background, such as school and employment references, details of training, work placements or previous employers. This data may be derived from an application form that you complete online on the application platform or from documents you provide, such as a covering letter, a CV, a passport photo, certificates or other evidence of professional qualifications. Data that is strictly necessary for participation in the application process is marked as ‘mandatory’. Unless a third-party provider is named in this privacy policy whose services we use to provide the online application function, no data will be passed on to third parties.
(2) We process the above data for the purpose of conducting the recruitment process. Where you have given us your consent, the legal basis for the processing of the data is Article 6(1), first sentence, point (a) of the GDPR. Where the processing of the above data is carried out for the purpose of entering into contractual relationships, the legal basis is Article 6(1), first sentence, point (b) of the GDPR.
(3) The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the event that the application process leads to an employment contract, an apprenticeship, an internship or any other form of employment relationship, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends upon receipt of a rejection letter. In this case, the data will be deleted after four weeks. The data will not be deleted if further processing and storage of your personal data is necessary in individual cases to establish, exercise or defend legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Article 6(1), first sentence, point (f) of the GDPR. The data will also not be deleted if we are obliged by law to continue storing your personal data.
(4) You may withdraw any consent you have given us at any time. You may object to the processing of your personal data at any time. In particular, you have the option to withdraw your application at any time. As part of the application process, you should only provide us with the personal data necessary for your participation in the application process and for its conduct. There is no legal or contractual obligation to provide data. However, we would like to point out that without this data, we cannot carry out the application process and will be unable to consider your application. The same applies in the event of an objection to the processing of your data. You may have the data we hold about you amended at any time.
IX. Electronic cancellation function
(1) If you contact us via the online function for exercising your right of withdrawal, the personal data you provide to us via the input form will be stored. This includes your name, the contract reference, and, where applicable (in the case of a partial withdrawal), details of the specific subject matter of the contract, as well as the information you have provided regarding your preferred method of communication.
(2) The data will be used solely for the purpose of processing the withdrawal; this is the sole purpose of the processing.
(3) We are legally obliged to provide the online function for exercising the right of withdrawal and to process any notices received via that function. The legal basis for this processing is therefore Article 6(1), first sentence, point (c) of the GDPR.
(4) Subject to statutory retention periods, the data will be deleted as soon as we have finalised the processing of your withdrawal.