DATA PRIVACY POLICY OF WAX IN THE CITY GMBH

Protecting your privacy in connection with the processing of personal data is a matter which we take very seriously.  We will collect, process, and use personal data concerning you exclusively in conformity with the principles described below and in compliance with all applicable data protection laws.

1.    Name and contact data of the controller responsible for the processing

The present privacy statement applies to the processing of data by the following controller:

WAX IN THE CITY GmbH
Linienstrasse 214
10119 Berlin, Germany

Tel: +49 (30) 8145202-0
datenschutz@wax-in-the-city.com
www.wax-in-the-city.com

(referred to hereinbelow as “WAX IN THE CITY” or “we”).

2. Collection and storage of personal data as well as the nature and form of its usage

a)    When you visit our website

When you call up the website www.wax-in-the-city.com, the browser in use on your terminal device will automatically transmit information to the server of our website.  This information will be stored temporarily in a so-called “log file.”  In the process, the following information will be collected without any further action on your part and will be stored until such time as it is automatically erased in keeping with the stipulations of data protection law:

•    The IP address of the requesting computer;
•    The date and time of access;
•    The name and URL of the retrieved file,
•    The website from which access was made (referrer URL);
•    The browser used, and possibly also the operating system of your computer as well as the name             of your access provider.

The above data will be processed by us for the following purposes:

•    To ensure that a connection to the website can be established without disruptions;
•    To ensure the user-friendly operability of our website;
•    To evaluate our systems’ security and stability, as well as
•    For additional, administrative purposes.

The legal basis for this processing is Article 6 paragraph 1 sentence 1 lit. f) of the General Data Protection Regulation (GDPR).  Our legitimate interest in this context results from the data processing purposes listed above.  In no case will we use the data for the purpose of drawing any factual conclusions about you personally.

We will also deploy cookies and analytic services when you visit our website.  Please see below for a more detailed explanation.

b)    When you register for our newsletter

Assuming you have given your express consent pursuant to Article 6 paragraph 1 sentence 1 lit. a) of the GDPR, we will use your name and your email address to regularly send you our newsletter.  Providing an email address is sufficient for purposes of receiving the newsletter.  

It is possible at any time to unsubscribe, e.g. by clicking on the link at the bottom of each newsletter.  Alternatively, you can also unsubscribe at any time by notifying us via email at info@wax-in-the-city.com.

c)    When you use our contact form

We provide you the option of getting in touch with us by means of a contact form available on our website.  You must provide a valid email address so as to let us know who the enquiry is from and to allow us to answer it appropriately.  You may also provide additional information on a voluntary basis.

The processing of data for purposes of your communication with us will be performed pursuant to Article 6 paragraph 1 sentence 1 lit. a) of the GDPR and on the basis of your voluntarily granted consent.  The personal data that we collect in connection with your use of the contact form will be erased in keeping with the applicable statutory requirements once your enquiry has been dealt with.

d)    Additional services

In order to provide you with certain services that you may request, we will require additional information from you:

  • If you use our WAXING SHOP and instruct us to send you products or credit vouchers, then the personal data concerning you – insofar as they are required to establish, substantively structure or amend the contractual relationship (existing customer data) – will be used exclusively to fulfill the sales agreements concluded between you and us, e.g. to deliver the products or credit vouchers you have ordered to the address you have provided.         
     
  • A precondition for your participation in the WAX IN THE CITY waxing-card program is that you must provide certain personal data such as your name, street address, and email address.  These personal data will be collected and processed for purposes of your participation in, and our implementation and fulfillment of, the WAX IN THE CITY waxing-card program and for the duration of such participation, implementation, and fulfillment.

The legal basis for data processing in these cases will be Article 6 paragraph 1 sentence 1 lit. b) of the GDPR.  We will collect only those data that we need to provide the respective service, respectively to fulfill your order.  We may ask you to provide additional information, but this will be voluntary on your part.

3.    Forwarding of data to third parties

The personal data concerning you will not be forwarded to third parties except for the specific purposes listed below.

We will forward the personal data concerning you to third parties only in the following cases:

  • You have granted your express consent in accordance with Article 6 paragraph 1 sentence 1 lit. a) of the GDPR to the personal data being forwarded that concern you;
  • Forwarding said data is required to safeguard our legitimate interests or the legitimate interests of a third party in accordance with Article 6 paragraph 1 sentence 1 lit. f) of the GDPR, and there is no reason to assume that you have an overriding protectable interest in not having forwarded said data concerning you;
  • Forwarding said data is mandated by law in accordance with Article 6 paragraph 1 sentence 1 lit. c) of the GDPR; or
  • Forwarding said data is lawful and required for the performance of contractual relations with you in accordance with Article 6 paragraph 1 sentence 1 lit. b) of the GDPR.

4.    Cookies

When you visit our online webpages, we will store information on your computer in the form of “cookies.”  Cookies are small files that are transferred to your browser by an internet server and that are stored on your hard drive.  A cookie serves as a repository of certain information associated with the specific terminal device you are using in each case.  This does not mean, however, that the cookie will give us direct knowledge of your identity. 

The use of cookies allows us to make our offering more user-friendly for your benefit.  Thus, we use so-called “session cookies” allowing us to determine which individual pages of our website you have visited.  These session cookies are automatically deleted once you leave our website.  To further optimize user-friendliness, we also deploy “temporary cookies,” which are stored on your terminal device for a pre-defined period.  If you return to our website at a later time in order to use our services, we will be automatically alerted to the fact that you have already visited us before and you will not have to re-input any of the information and settings you have already provided.

We also use cookies in order to collect statistical data on the usage of our website and to optimize our products and services for your benefit (see: “Analysis and Marketing Tools”).  Whenever you return to our website, these cookies will automatically alert us to the fact that you have visited us before.  These cookies will be automatically deleted after a pre-defined period.  

The data processed by means of cookies will be used for the above purposes, namely to safeguard our legitimate interests as well as those of third parties in accordance with Article 6 paragraph 1 sentence 1 lit. f) of the GDPR.

Obviously, you can also visit our webpages without accepting cookies.  If you do not wish your computer to be recognized when you pay us a subsequent visit, you can block the use of cookies by changing your browser settings to “disable cookies.”  Please consult the user instructions of your respective browser to determine the correct procedure. Please note that if you disable the use of cookies, this could impair your ability to use certain parts of our webpages.

5.    Analysis and marketing tools

a)    Deployment of Google Analytics and Google Ads Conversion

In order to allow us to properly structure and progressively optimize our webpages in line with our customers’ requirements, we take advantage of Google Analytics, a web-based analytic service provided by Google Ireland Limited (www.google.de/intl/de/about), Gordon House, Barrow St Dublin 4, Ireland (referred to hereinbelow as “Google”).  The legal basis for this usage is Article 6 paragraph 1 sentence 1 lit. f) of the GDPR.  In this context, pseudonymized user profiles are created and cookies are used.  These interests qualify as legitimate in the sense of the aforementioned statutory provision.  The cookie will generate specific information on your use of this website, for example:

•    The browser type/version;
•    The operating system being used;
•    The referrer URL (the previously visited site);
•    The hostname of the accessing computer (IP address);
•    The time of the server request.  

This information will then be sent to a Google server in the United States, where it will be stored.  An adequacy decision by the European Commission is available for the United States of America (under the EU/US Privacy Shield program) which serves to officially certify Google.  The information will be used to evaluate usage of the website, to compile reports on website activities, and to provide other services associated with usage of the website and the internet for purposes of doing market research and structuring these webpages in line with our customers’ requirements.  The information may also be transmitted to third parties, insofar as this is mandated by law or insofar as the third parties have been commissioned to collect the data.  In no case will your IP address be combined with other data held by Google.

You have the option to block the installation of cookies by adjusting the settings of your browser software accordingly.  Please note, however, that this may impair the full operability of some of the functions available on this website.  You also have the option of preventing the collection of the data regarding your usage of the website (including your IP address) which the cookie has generated, and to prevent the processing of said data by Google, namely by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially when browsers on mobile terminal devices are involved, you can also prevent the collection of data by Google Analytics by clicking on this link.  This will cause an opt-out cookie to be installed which will block any future collection of your data whenever you visit this website.  The opt-out cookie, which will be placed onto your device, will work only for this browser and only for our website.  If you delete the cookies contained in this browser, you will have to re-install the opt-out cookie.


A good place to find further information on data protection in connection with Google Analytics is in the Google Analytics Help section.

Our website also uses the online advertising service Google Ads and, in this context, the Conversion-Tracking service of Google-Analytics (which evaluates the actions you take during your visit to our website).  The data will be processed on the basis of Article 6 paragraph 1 sentence 1 lit. f) of the GDPR, in keeping with our legitimate interest in performing targeted advertising and in analyzing the effectiveness and efficiency of this advertising.  

If you have reached our website by way of a Google ad, Google Ads will store a cookie on your terminal device.  This cookie will have a limited life and will not serve to identify you personally.  If you visit certain pages of our website and the cookie has not yet expired, both we and Google will be able to discern that you clicked on the respective ad and that you were referred to our pages from there.  Each customer of Google Ads will receive a different cookie.  This precludes the possibility that cookies can be tracked via the websites of Google Ads customers.  We, for our part, will not collect and process any personal data in the course of the aforementioned advertising measures.  Instead, we will merely receive statistical analyses from Google.  These analyses allow us to determine which of the advertising measures deployed have proven the most effective.  We do not receive any additional data from the deployment of advertising measures; in particular, we are not able to use this information to identify the users.

You have the option of blocking the installation of cookies by adjusting the settings of your browser software accordingly.  Please note, however, that this may impair the full operability of some of the functions available on this website.  You may also keep personalized advertising from being sent to you by deactivating this function in Google’s advertising settings.  Instructions on how to do this are available here.

For further information as well as Google’s Privacy Policy, please navigate here.

b)    Use of Facebook Pixel and Facebook Conversion

Another resource implemented on this website is the tracking tool “Facebook Pixel” provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (referred to hereinbelow as “Facebook”).  Facebook Pixel allows interest-based advertising (“Facebook Ads”) to be presented to visitors to this website based on the information collected about their usage of this website.  These Facebook Ads are presented via the social network Facebook or when the persons targeted visit other websites that participate in the Facebook advertising network.  The legal basis for processing these data is Article 6 paragraph 1 sentence 1 lit. f) of the GDPR, which concerns our legitimate interest in performing targeted advertising and in analyzing the effectiveness of this advertising.  When the website is called up, the tool may cause certain information to be stored on your terminal device in the form of cookies and may also trigger the transmission of certain information to a Facebook server in the United States of America.  An adequacy decision by the European Commission is available for the USA (under the EU/US Privacy Shield program) which serves to officially certify Facebook.

Facebook Pixel is a program code implemented on this website.  When the website is called up, the program code may cause certain information to be stored on your terminal device in the form of cookies and may also trigger the transmission of certain information to Facebook.  This includes information that is generated for technical reasons by the Hypertext Transfer Protocol (HTTP) when the website is called up, such as your IP address, as well as additional information already stored in cookies on your terminal device, such as your Facebook user ID.  Thus, when the website is called up, Facebook can recognize that you have visited this website and which of the website’s contents you called up.  If you have a Facebook user account, Facebook will be able to match this information to your user account.  

This data analysis by Facebook allows us to follow the movements of the website’s users (User Tracking).  It also allows us to determine which users carried out a conversion, respectively action, on the website (Conversion Tracking).  The data also allow us to define target groups for targeted advertising (Re-Targeting).

For more detailed information on the collection and usage of data by Facebook, as well as on your rights in this context and the settings you can use to protect your privacy, please navigate to the Facebook Privacy Policy.

You may refuse to accept the collection of data for these purposes by installing a corresponding add-on for your browser (e.g. the “Facebook Blocker”), or by deactivating cookies in your browser/device settings.  

6.         Script and font libraries

In order to present the contents of our website in a correct and graphically appealing away across all browsers, we rely on script and font libraries such as Google Fonts and Bootstrap CDN (Content Delivery Network) provided by StackPath, LLC, 2021 McKinney Ave. Suite 1100, 75201, Dallas, TX USA).

If you have not already downloaded these libraries during your visit to another website, they will be transferred into the cache of your browser so as to obviate the need for multiple downloading.  When the script or font libraries are called up, this will automatically establish a connection to the operator of the respective library.  In the process, it is possible that the operator of these libraries may collect personal data (e.g. your IP address).

For further information, please refer to the respective privacy statements of the library operators Google and Stackpath.

7.    Security

When you visit our website, we ensure secure transmission via the commonly used SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser.  As a general rule, this will be 256 bit encryption.  You can tell that one of our webpages is being transmitted in encrypted form when the key icon or padlock icon in the lower status bar of your browser is shown as being closed.  

Aside from that, we have also taken technical and administrative safeguards to protect the personal data concerning you against loss, destruction, tampering, and unauthorized access.  All of our employees as well as all the service providers working on our behalf have been contractually pledged to observe the applicable data protection laws.  Our security safeguards are continually reviewed for improvement and our Privacy Statements are regularly revised.  Please make sure that you have access to the most current version.

8.    Rights of data subjects

You have the following rights:

  • Pursuant to Article 15 of the GDPR, you have the right to request information about the personal data concerning you that are being processed by us;
  • Pursuant to Article 16 of the GDPR, you have the right to request that any incorrect or incomplete data concerning you that are being stored by us be rectified and/or completed without undue delay;
  • Pursuant to Article 17 GDPR, you have the right to request erasure of the personal data concerning you that are being stored by us, except insofar as the processing is necessary in order to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.  If we have made public the personal data concerning you, then we are under obligation, taking account of the available technologies and technical means, to inform other controllers who collect personal data concerning you that you have requested the erasure of all links to the personal data as well as of any copies or replications of said data;
  • In accordance with Article 18 of the GDPR, you have the right to request that the processing of the personal data concerning you be restricted insofar as you contest the accuracy of the data; insofar as the data’s processing is unlawful and you oppose their erasure; insofar as we no longer require the data but you still require them in order to establish, exercise or defend legal claims; or insofar as you have objected to the processing pursuant to Article 21 of the GDPR;
  • In accordance with Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us, namely in a structured, commonly used, and machine-readable format; you also have the right to demand that said data be transmitted to another controller;
  • In accordance with Article 7 paragraph 3 of the GDPR, you have the right to withdraw consent at any time that you have previously granted.  This will mean that, effective thenceforward, we will no longer be able to perform the data processing that was based on the consent you have now withdrawn;
  • In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority.  As a general rule, you may turn to the supervisory authority that is competent either for your habitual residence or for your place of work or for our registered seat.  

8.    Right to lodge objections

Insofar as the personal data concerning you are processed on the basis of a legitimate interest pursuant to Article 6 paragraph 1 sentence 1 lit. f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to lodge an objection against the processing of personal data concerning you, provided you have grounds that arise from your particular situation or provided your objection is targeted at direct advertising.  In the latter case, you will enjoy a general right to object that we will honor without requiring you to state grounds arising from a special situation.

If you would like to exercise your right to withdraw consent or to lodge an objection, you need simply notify us accordingly by sending us an email at datenschutz@wax-in-the-city.com.

9.        Amendments to the present Privacy Statement

This Privacy Statement is currently valid.

Due to our continual enhancement of our website and the commercial offers that we make by way of the website, or due to changes in the stipulations of the law, respectively of the competent public authorities, it may become necessary to amend the present Privacy Statement.  The respectively current Privacy Statement is available for retrieval from our website and printout at any time under: https://wax-in-the-city.com/de/datenschutz-haftungsbeschraenkung.

Effective as of: August 29th, 2019