DATA PRIVACY POLICY OF WAX IN THE CITY GMBH

We care about protecting your privacy while processing your personal data. We collect, process and use your personal data strictly in accordance with the data processing principles set out below and in com-pliance with the applicable data privacy legislation.


1. Name and address of the controller

This data security information applies to data processing by:

WAX IN THE CITY GmbH
Linienstrasse 214
10119 Berlin

Phone: +49-30-8145202-0
datenschutz@wax-in-the-city.com
www.wax-in-the-city.com

(hereinafter: "WAX IN THE CITY" or "we")
 
2. Collection and storage of personal data and nature and purpose of their use

a) When visiting our website

When accessing the www.wax-in-the-city.com website, the browser installed on your end device will automatically send information to our website server. This information is stored temporarily in a so-called log file. During the course of this procedure, the following information is collected without any action on your part and saved until the time of automatic deletion, in accordance with the applicable data privacy regulations:

  • the IP address of the requesting computer,
  • date and time of access,
  • name and URL of the retrieved file,
  • website from which access is made (referrer URL)
  • the browser used, and – where applicable – your computer's operating system and the name of your internet access provider.

The data mentioned above is processed by us for the following purposes:

  • to ensure smooth website connection,
  • to ensure the convenient use of our website,
  • to evaluate the system security and stability, and
  • for additional administrative purposes.

The legal basis upon which the processing of data will be carried out is Article 6 (1) 1st sentence, sub-paragraph f of the General Data Protection Regulation (GDPR). Our legitimate interest is based on the data collection purposes listed in the foregoing. We never use the data collected for the purpose of drawing conclusions about you as an individual.

In addition, we use cookies and analytical services every time our website is accessed. More details are provided below.

b) When registering for our newsletter

Provided you have given your express consent in accordance with Article 6 (1) 1st sentence subpara-graph a of the General Data Protection Regulation (GDPR), we will use your name and email address for sending you our regular newsletter. To receive our newsletter, all we need is your email address.

You may unsubscribe at any time, e.g. by clicking on the link at the end of each newsletter. You may also address your request to unsubscribe by email to info@wax-in-the-city.com.

c) When using our contact form

You may contact us at any time by using the contact form provided on our website. All we need is a valid email address allowing us to identify the inquiry's origin and to respond. The provision of any addition-al information is entirely voluntarily. 

The processing of data for contacting purposes pursuant Article 6 (1) 1st sentence subparagraph a, General Data Protection Regulation (GDPR), is performed after you have given your voluntary consent. The personal data collected by us for contacting purposes will be deleted in accordance with the law after completion of your request.

d) Additional services

For some of our services we may require additional information from you in order to provide the de-sired service.

  • When you use our WAXING SHOP and instruct us to send you products or gift certificates, we use your personal data, to the extent that it is required to initiate, define or modify our contrac-tual relationship (user-related data), exclusively for the purpose of fulfilling purchase agree-ments concluded between us, for example in order to deliver products or gift certificates or-dered by you to the address you have indicated. 
  • As a prerequisite for participating in our WAX IN THE CITY Waxing Card Program, we need personal data such as your name, address, and email address. This personal data will be col-lected and processed for the purpose and duration of your participation in the WAX IN THE CITY Waxing Card Program and for the administering and completion thereof.

The legal basis upon which the processing of data will be carried out in these cases is Article 6 (1) 1st sentence subparagraph b of the General Data Protection Regulation (GDPR). We collect only the data required for rendering a particular service or for processing your order. Any additional information we may request of you will be of a strictly voluntary nature.

3. Disclosure of data

There will be no transmission of your personal data to third parties for purposes other than those speci-fied in the following.

We will not disclose your personal data to third parties unless:

  • you have given your explicit consent in accordance with Article 6 (1) 1st sentence subpara-graph a of the General Data Protection Regulation (GDPR),
  • the disclosure of data in accordance with Article 6 ( 1) 1st sentence subparagraph f of the Gen-eral Data Protection Regulation (GDPR) is required for the protection of our legitimate interests or the legitimate interests of a third party and if there is no reason to believe that you have a predominantly legitimate interest in the non-disclosure of your data,
  • there is a legal obligation to disclose your personal data in accordance with Article 6 (1) 1st sen-tence subparagraph c of the General Data Protection Regulation (GDPR), and 
  • such disclosure is permissible by law and necessary, in accordance with Article 6 (1) 1st sen-tence subparagraph b of the General Data Protection Regulation (GDPR) for the performance of contractual relationships with you.


4. Cookies

When you visit our websites, we will save information on your computer in the form of cookies. Cookies are small files which are transmitted from an internet server to your browser and saved on your hard disk. The cookie contains information relating to a specific end device. This does not mean, however, that we are obtaining immediate knowledge of your identity from cookies.

On the one hand, we use cookies to make it more convenient for you to use our offerings. That is why we use so-called session cookies to find out if you have already visited individual pages of our website be-fore. The session cookies are automatically deleted when leaving our website. To further optimize the user-friendliness of our website, we also use temporary cookies which are saved on your end device for a defined period of time. When you return to our website to use our services, these cookies enable us to automatically recognize that you have visited us before and identify your preferred entries and settings, to save you from having to enter them again.

On the other hand, we use cookies to collect statistical data on the use of our website and to evaluate this data with a view to further optimize our offerings for you (see “Analytics Tools”). When you return to our website, these cookies enable us to automatically recognize that you have visited us before. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required both for protecting our and third-party legitimate interests in accordance with Article 6 (1) 1st sentence, subparagraph f of the General Data Protection Regulation (GDPR).

You may certainly visit our websites without accepting cookies. If you do not want your computer to be recognized when revisiting our websites, you may refuse to accept cookies by changing your browser settings to "Reject cookies". To find out how to do this, please refer to the instruction manual of your browser. However, rejecting the use of cookies may lead to restrictions on the use of certain areas of our websites.

5. Use of Google Analytics

For personalizing and continuously optimizing our websites we use Google Analytics, a web analysis service by Google Inc. (www.google.de/intl/en/about) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: "Google"), in line with Article 6 (1) 1st sentence, subparagraph f of the General Data Protection Regulation (GDPR). For this purpose, the system creates pseudonymized usage profiles and uses cookies. These interests can be considered as legitimate within the meaning of the aforementioned regulation. The cookie-generated information on your use of this website, such as

  • browser type/version,
  • operating system used,
  • referrer URL (the website previously visited),
  • host name of the accessing computer (IP address),
  • time of server inquiry,

is transmitted to and stored on one of Google's servers in the USA. Google will use this information to evaluate the use of the website, to produce reports on website activities, and to provide other services related to the use of the website and of the internet for the purposes of market research and personal-ized design of these websites. Google may also transfer this information to third parties where required to do so by law, or where such third parties process this data on Google's behalf. Google will never asso-ciate your IP address with any other data held by Google.

You may refuse the installation of cookies by selecting the appropriate settings on your browser soft-ware; however, please note that if you do this you may not be able to use the full functionality of this website. Additionally, you may prevent the sharing of data generated by the cookie and related to your use of the website-related data (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.

As an alternative to the browser add-on, especially for browsers on mobile end devices, you may addi-tionally prevent the collection of your data by Google Analytics by clicking this link . This sets an opt-out cookie which prevents the future collection of your data when visiting this website. The opt-out cookie will be valid only for this browser and only for our website and will be saved on your device. If you de-lete the cookies on this browser, you will need to set the opt-out cookie again.

For more information on data privacy protection in the context of Google Analytics please go to Google Analytics Help.

6. Security

While visiting our website, you will be protected by standard SSL security technology (Secure Socket Layer) in combination with the highest level of encryption supported by your browser. This level usual-ly involves 256-bit encryption. To find out whether the transmission of a single page of our website is encrypted, check your browser's bottom status bar to see if the key or lock symbol is displayed as closed.

Moreover, we have taken a number of technical and administrative precautions in order to protect your personal data against loss, destruction, tampering, and unauthorized access. All our staff members and third-party service providers working for us are obliged to comply with applicable data privacy laws. Our security precautions are subject to continuous improvement and our data privacy policies are con-stantly being revised and upgraded. Please make sure that you are using the most current version.

7. Rights of data subjects

You have the right:

  • according to Article 15 of the GDPR to obtain access to your personal data processed by us;
  • according to Article 16 of the GDPR to obtain, without undue delay, the rectification of your in-accurate and the completion of your incomplete personal data stored by us;
  • according to Article 17 of the GDPR to obtain the deletion of your personal data stored by us without undue delay, except to the extent the processing of this data is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defense of legal claims. If we have made your personal data public, we are under obligation – with due consideration of the technologies and technical possibilities available – to inform the data controllers processing your personal data that you have demanded the deletion of all links to this personal data or to copies or replications thereof;
  • according to Article 18 of the GDPR to obtain restriction of processing your personal data where one of the following applies: if the accuracy of the personal data is contested by you; if the pro-cessing is unlawful and if you oppose the erasure of the personal data and request the re-striction of their use instead; if we no longer need the personal data for the purposes of pro-cessing, but if you require them for the establishment, exercise or defense of legal claims; or if you have, according to Article 21 of the GDPR, objected to such processing;
  • according to Article 20 of the GDPR to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to demand transmission of this data to another controller;
  • according to Article 7 (3) of the GDPR to withdraw your consent given to us earlier at any time. As a consequence, our processing of your data based on that consent will no longer be permit-ted for the future.
  • according to Article 77 of the GDPR to lodge a complaint with a supervisory authority. You can normally lodge a complaint with the supervisory authority in charge of your habitual residence, your place of work , or our place of business.


8. The right to object

If your personal data is processed on the basis of legitimate interests according to Article 6 (1) 1st sen-tence, subparagraph f of the General Data Protection Regulation (GDPR), you have the right, according to Article 21 of the GDPR, to object to the processing of your personal data on grounds relating to your particular situation or if you object to the processing for direct marketing purposes. In the latter case, you have the general right to object and your objection will be implemented by us without the need of indicating a specific situation.

If you wish to exercise your right to object or withdraw, simply send an email to datenschutz@wax-in-the-city.com.

9. Changes to this data privacy policy

This data privacy policy is currently valid.

The ongoing development of our website and its offerings or changes in statutory or official regulations may necessitate changes to this data privacy policy. The latest version of our data privacy policy is available for download and printing at https://wax-in-the-city.com/en/data-privacy-disclaimer at all times.


Revised: May 9, 2018