Privacy policy

We, So'ham Skin LDA, are pleased that you are visiting www.sohamskin.com (hereinafter: “our website”). The protection and security of your personal data are of the highest priority for us. These data protection notices (“Privacy Policy”) explain which personal data and other information we collect during your visit to our website, how and for what purposes we use the personal data and information and with whom we share them. In addition, we explain below your rights with regard to the processing of your personal data, such as the right to information, rectification, objection and deletion.

We will use your personal data (hereinafter: “your data”), i.e. information that allows conclusions to be drawn about you, only in accordance with the applicable data protection regulations. If we use your data for purposes other than those stated in this Privacy Policy, we will inform you separately in advance about these purposes and, where required, obtain your consent. If you have given one or more consents to data processing (e.g. with regard to a newsletter), you may revoke this consent at any time freely with effect for the future. The revocation does not incur any costs for you and has no negative consequences for you. The lawfulness of the processing of your data prior to your revocation remains unaffected.

1. General Information

1.1 Who is responsible for the use of your data?

We are the controller within the meaning of the applicable data protection law.

So’ham Skin LDA
Rua do Bairro Social 38
8670 - 440 Rogil
Portugal

NIF: 518459950

Web: www.sohamskin.com
Email: info@sohamskin.com

This means that we are responsible for the use of the data collected by us and are legally obliged to ensure that the necessary measures to protect your data are taken and that your rights are safeguarded.

1.2 Which of your data do we collect and how do we process your data?

(a) Data collection when visiting our website:

We collect information about you when you use our services, for example when you visit our website. This includes the following data:

1. Device-related information

We collect device-specific information, e.g. the model of the hardware you use, the version of the operating system, information about the mobile network you use, and data on device events such as crashes, system activity, hardware settings, browser type, browser language, date and time of your request and referral URL.

2. Your IP address

3. Location-related information

When you use our services, we collect and process information about your location if you have given your consent. We use various technologies to determine location, such as IP addresses, GPS and other sensors that provide us, for example, with information about nearby devices, Wi-Fi access points or mobile phone masts. You can also control, activate or deactivate the collection of location data at any time in the settings of your end device.

4. Cookies

When you visit our website, we collect information by using so-called cookies. See more about this below under section 2.

(b) Data of registered users:

In accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, personal data are processed if you provide them to us for the performance of a contract or when opening a customer account. Which data are collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be requested by sending a message via the contact form. We process the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked subject to tax and commercial law retention obligations and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a further legally permitted use of data has been reserved by us, about which we will inform you accordingly below.

Insofar as we analyze our data inventories in an automated manner, the legal basis for processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. This serves in particular the personalization of our offers, the development and implementation of marketing campaigns, the measurement of our business metrics, the management of our supply chains, the development of new products, price optimization, risk analysis as well as the detection and prevention of fraud cases. For these purposes, we may in particular evaluate your order history, your visit to our website (e.g. IP address, end device (desktop/mobile), products viewed, products placed in the shopping cart, search history) and your account data (e.g. name, date of birth, gender, country, language, email address, user account ID, newsletter subscriptions) and link them within the data sources of our online shop and create a uniform advertising profile.

(c) Surveys and competitions:

From time to time, we give you the opportunity to participate in surveys or competitions. If you participate, additional data may be required for participation, which will then be requested from you (e.g. your address for the purpose of prize notification as well as your email address and telephone number in order to ensure prize notification even in the event of accidentally incorrect address details, and, if applicable, your date of birth for the purpose of age verification). These data are processed in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the purpose of fulfilling the agreement regarding your participation in the specific survey or competition. Any further processing or use of your data, for example for the purpose of publishing the winner on our platform, will only take place with your consent. After completion of the survey or competition, we will delete your data unless we are entitled or obliged to continue storing or processing them on another legal basis.

(d) Contact

When contacting us (e.g. by telephone, via contact form or email), personal data are collected. Which data are collected via the contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of processing your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in processing your request pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If your contact is aimed at concluding a contract, the legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR. Your data will be deleted after final processing of your request if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent deletion.

(e) Use of your data for direct advertising

e.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking on a corresponding link that you wish to receive newsletters in the future.

By activating the confirmation link, you give us your consent to the processing of your personal data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR. When registering for the newsletter, we store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later point in time. The data collected by us when registering for the newsletter are used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message via our contact form. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to another processing of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this Privacy Policy.

e.2 Sending email newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with Section 7 para. 3 UWG, we do not need to obtain separate consent from you for this. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, no emails will be sent by us. You are also entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying us via the contact form. You will only incur transmission costs according to the basic tariffs. Upon receipt of your objection, the processing of your email address for advertising purposes will be stopped immediately.

(f) Sanctions list screening

We compare the data of our existing and future contractual partners within the scope of contract initiation (customers, suppliers, cooperation partners, applicants, employees) with the European terrorist and sanctions lists in order to comply with the requirements of the Foreign Trade and Payments Act (AWG).

The European Community (EC) has issued various regulations based on resolutions of the United Nations Security Council to combat terrorism. These regulations, in particular the EU anti-terrorism regulations 2580/2001 and 881/2002, include, among other things, financial embargoes against persons, groups of persons and companies. Persons suspected of terrorism who are listed in sanctions lists may not be provided with financial resources (so-called “provision prohibition”). Violations of these EC regulations may result in severe fines and even imprisonment for those responsible under the German AWG. In the context of our business relationship with you, we must ensure that we do not pass on any funds or goods to persons listed in sanctions lists. We will therefore compare your surname, first name and, if applicable, date of birth with the current European sanctions lists.

The legal basis for this is the legal obligation pursuant to Art. 6 para. 1 lit. c GDPR or our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in complying with the provision prohibition and avoiding sanctions under the AWG in the event of violations of the provision prohibition.

5. Transfer of personal data for order processing

(a) The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing.

(b) When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, we pass on your payment data within the scope of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal. The result of the credit check regarding the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, these are based on a scientifically recognized mathematical-statistical procedure. Address data are included in the calculation of the score values, among other things. Further data protection information, including information about the credit agencies used, can be found in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

(c) The controller has integrated components of Klarna on this website. Klarna is an online payment service provider that enables purchase on account or flexible installment payments. Klarna also offers further services, such as buyer protection or identity and credit checks. The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. If the data subject selects either “purchase on account” or “installment purchase” as the payment option during the ordering process in our online shop, data of the data subject will be transmitted to Klarna automatically. By selecting one of these payment options, the data subject consents to the transfer of personal data required for processing the invoice or installment purchase or for identity and credit checks. The personal data transmitted to Klarna generally include first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary for processing an invoice or installment purchase. Personal data related to the respective order are also necessary for processing the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiration date and CVC code, number of items, item number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on the financial situation of the data subject. The purpose of transmitting the data is, in particular, identity verification, payment administration and fraud prevention. The controller will transmit personal data to Klarna in particular if there is a legitimate interest in the transmission. The personal data exchanged between Klarna and the controller are transmitted by Klarna to credit agencies. This transmission serves the purpose of identity and creditworthiness checks. Klarna also passes on the personal data to affiliated companies (Klarna Group) and service providers or subcontractors insofar as this is necessary to fulfill contractual obligations or the data are to be processed on behalf of Klarna. To decide on the establishment, execution or termination of a contractual relationship, Klarna collects and uses data and information on the previous payment behavior of the data subject as well as probability values for their future behavior (so-called scoring). The calculation of the scoring is based on scientifically recognized mathematical-statistical procedures. The data subject has the possibility to revoke consent to the handling of personal data at any time vis-à-vis Klarna. A revocation does not affect personal data that must be processed, used or transmitted for mandatory (contractual) payment processing. The applicable data protection provisions of Klarna can be accessed at:
https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

(d) Review reminder via Judge.me: If you have given us your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR during or after your order, we will transmit your email address to the review platform Judge.me (https://judge.me/) so that it can send you a review reminder by email.

You can revoke your consent at any time by sending a message or email to the controller responsible for data processing or directly to the review platform.

6. Where are your data processed?

Your data are processed by us only within the European Union (“EU”) and the European Economic Area (“EEA”).

If personal data are exceptionally processed outside the European Union (“EU”) and the European Economic Area (“EEA”), this will only take place on the basis of appropriate confidentiality and security measures that ensure the protection of your data. We will inform you of the respective details of the transfer below at the relevant points.

6.1 How long do we store your data?

We will not store your data longer than is necessary to fulfill the respective purpose for which they were collected, unless there is a legal basis for such storage. We will then delete your data. The respective retention periods depend on the underlying purpose and the type of personal data. In particular, we store:

(a) Data that we need for the purpose of a personalized account (login data) for as long as you wish to use this account. If you no longer wish to use your account, you can request deletion, including all login data, via our contact form.

(b) Data that we use for advertising purposes (such as your email address if you register for our newsletter), unless you revoke your consent or request deletion and there are no statutory retention obligations.

(c) Your IP address for a maximum of 2 months.

(d) Cookies for a period of up to 14 months. In addition, you can delete cookies from your computer at any time.

7. Cookies

Our website uses cookies. These are small text files that are stored on your end device. A basic distinction is made between two types of cookies:

“Session cookies”: These cookies are temporarily stored on your computer or end device during your visit to our website and are deleted at the end of the browser session.

“Persistent cookies”: These cookies remain on your computer or end device for a longer period of time and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit.

If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. We inform you in advance about the use of cookies via a corresponding notice through a cookie banner. On your first visit, the cookie banner is displayed as a pop-up window on the website. Here you can activate the cookies grouped by functional categories by clicking the corresponding box. Please note that technically necessary cookies 2.(a) are already stored when accessing the website. If technically necessary cookies for our website are deactivated, not all functions of the website may be fully usable.

(a) Technically necessary cookies (“Necessary”)

The use of technically necessary cookies (“Necessary”) serves to simplify your use of our website. Some functions of our website cannot be offered without the use of technically necessary cookies. For these functions, it is necessary that your browser is recognized even after a page change. No other processing of your personal data takes place.

The legal basis for the processing of your personal data within the framework of the use of technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR. Your personal data will be deleted as soon as they are no longer required for the achievement of the purpose of their processing; this is particularly the case when leaving the website.

Cookies are stored on your computer and transmitted from there to our website. Therefore, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies in general by changing the settings in your browser. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can delete cookies that have already been stored at any time. This can also be done automatically. If technically necessary cookies for our website are deactivated, not all functions of the website may be fully usable.

(b) Functionality, website optimization, user behavior analysis and advertising cookies (“Preferences, Statistics, Marketing”)

In some cases, we work together with advertising partners who help us to make our internet offering more interesting for you. For this purpose, cookies from partner companies (third-party cookies) are also stored on your hard drive when you visit our website. “Preferences, Statistics, Marketing” cookies help us to improve the online offering and to provide you with a user-friendly service. The processing of your personal data enables us to analyze your usage behavior, optimize the user-friendliness of our website and promote sales through the sale of goods.

The legal basis for the processing of your personal data within the scope of the use of cookies for the purpose of functionality, website optimization, user behavior analysis and the display of personalized advertising is the consent you have given pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

You have the right to revoke your consent at any time with effect for the future. Your personal data will be deleted as soon as you revoke your consent or your personal data are no longer required for the achievement of the purpose for which they were collected. You can also deactivate or restrict the transmission of cookies in general by changing the settings in your browser. You can delete cookies that have already been stored at any time. This can also be done automatically.

You can also change or reset your cookie selection at any time via the following link:
https://www.sohamskin.com/cookies

Browser settings configuration

Most web browsers are preset to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. Please note, however, that you may then no longer be able to use all functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser so that it notifies you before cookies are stored. Since the different browsers may differ in their respective functionalities, we ask that you use the respective help menu of your browser for the relevant configuration options.

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you must disable the use of cookies again.

8. Use of Google Fonts

We use external fonts from Google on this website. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

These web fonts are integrated via a server call. This may also be a server of Google in the USA. In doing so, the server is informed which of our web pages you have visited. The IP address of your end device is also processed by Google.

The purpose of using Google Fonts is the uniform display of fonts. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Google contractually undertakes, on the basis of so-called EU standard contractual clauses, to comply with a data protection standard comparable to the European one when transferring data to recipients outside the European Union.

The data collected by Google through the use of Google Fonts are not processed by us.

Further information on data protection regarding “Google Fonts” can be found in the provider’s FAQ at:
https://developers.google.com/fonts/faq/privacy?hl=de

 

9. Use of Social Media

9.1 Notes on joint responsibility for Facebook Fan Page Insights

Within the scope of page insights, we ourselves receive only anonymized statistics – we have no access to personal data processed by Facebook. The processing of anonymized data by us is carried out on the basis of legal provisions that allow us to process personal data because we have an overriding legitimate interest in gaining a better understanding of the interests of visitors to our fan page (Art. 6 para. 1 lit. f GDPR). Facebook offers various community functions on fan pages that allow you to interact with other users, for example by posting contributions, leaving comments or liking or sharing posts. We point out that these areas are publicly accessible and that all personal information you post there or provide during registration can be viewed by others. We cannot control how other users of the fan pages use this information. In particular, we cannot prevent unwanted messages from being sent to you.

9.2 Pinterest

We use plugins of the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, USA (“Pinterest”).

To increase the protection of your data when visiting our website, the plugins are not fully integrated into the page. When you merely access a page of our website that contains such plugins, no connection is yet established to the servers of the provider of the respective social network. If you click on one of the “Share” buttons, a new window opens in your browser in which you can give your consent to be forwarded to the respective social network platform. With your consent, the respective URL (including IP address, browser type and browser version) is transmitted to the provider of the respective social network; the service provider’s page is then accessed, where you can, for example (after entering your login data if necessary), activate the share button.

The plugins are only activated when you click on the corresponding buttons. By activating them, you give your consent to data processing. The legal basis is therefore Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with your consent.

Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights in this regard and options for protecting your privacy can be found in Pinterest’s privacy policy:
https://about.pinterest.com/de/privacy-policy

10. Web Analytics Services

10.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”).

The legal basis for the processing of your personal data in the context of the use of Google Analytics is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Google Analytics uses so-called “cookies”, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in Europe (or in a member state of the Agreement on the European Economic Area) for anonymization of the IP address, so that personal identification is excluded. Only after anonymization of the IP address is the shortened IP address transmitted to a Google server in the USA and stored there. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage to us. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

You have the right to revoke your consent at any time with effect for the future. You can also prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
An opt-out cookie is set, which prevents the future collection of your data when visiting this website.

Alternatively, you can click on the following link to set an opt-out cookie that prevents Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again):
Google Analytics deaktivieren

Further information on data protection at Google Analytics can be found here:
http://www.google.com/analytics/terms/de.html
and here:
http://www.google.com/intl/de/analytics/privacyoverview.html

10.2 Google Tag Manager

We use the Google Tag Manager tool on our website. Google Tag Manager is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”), which allows marketers to manage website tags via an interface.

Google Tag Manager only implements tags. Tags are small code elements on the website that serve, among other things, to measure traffic and visitor behavior, record the impact of online advertising and social channels, use remarketing and target audiences, and test and optimize the website.

This means: no additional cookies are used. No personal data are collected. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not access these data. If deactivation has been carried out at domain or cookie level – in particular if you have chosen the objection solution for Google Analytics described above or made corresponding settings in your browser – this remains effective for all tracking tags implemented via Google Tag Manager.

Further information on data protection at Google can be found here:
https://www.google.com/intl/de/policies/privacy

Privacy policy for advertising:
https://www.google.de/intl/de/policies/technologies/ads

10.3 Use of chatbot

When communicating via the chat widget on the website, the service of Inbox Shopify Inc. is used. Conversation data are forwarded to Inbox servers and evaluated there. These may include, among other things, the conversation histories, first and last names and answers to questions asked in the chat. These data are required to enable personalized communication.

You can object to the processing of the data by Inbox by rejecting the privacy notice [in the chat/on the website].

11. Online Marketing

11.1 Use of Google Ads Conversion Tracking

With your consent, we use the online advertising program “Google Ads” and, within the framework of Google Ads, conversion tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Ads to draw attention to our attractive offers on external websites by means of advertising material (so-called Google Ads). We can determine how successful individual advertising measures are in relation to the data of the advertising campaigns. Our interest is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and do not serve to identify you personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on an ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that allows users to be personally identified.

We use the “Enhanced Conversions” setting. This allows us to transmit, in addition to your email address, your address as hashed (pseudonymized) data to Google in order to assign certain events on our site (so-called conversions, e.g. product purchases) to interactions with a Google Ads ad and thus measure the effectiveness of our ads and advertising campaigns. Transmission as hashes ensures that your data are not transmitted in plain text. Assignment to Google Ads ads therefore takes place only in a pseudonymized manner and no identifiable email addresses or addresses are transmitted to Google. These hashes are compared with other hashed data available to Google (in particular from clicks on Google Ads ads) and assigned in this way, without requiring knowledge of the email address or address itself. Further information on “Enhanced Conversions” from Google Ads can be found at:
https://support.google.com/google-ads/answer/9888656?hl=de

If you do not wish to participate in tracking, you can block this use by disabling the Google conversion tracking cookie via your browser settings. You will then not be included in the conversion tracking statistics. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with your consent.

Further information on Google’s privacy policy can be found at:
http://www.google.de/policies/privacy/
You can permanently block cookies for ad preferences by preventing them through your browser software settings or by downloading and installing the browser plug-in available at:
http://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

11.2 Google Remarketing

Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables advertising target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC). The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with your consent.

If you have given Google the appropriate consent in your Google account, Google links your web and app browser history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account. To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked with our Google Analytics data in order to define and create target groups for cross-device advertising. If you have not consented to the linking between your Google account and web or app browser, no ID or other data will be collected via the remarketing function. You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google account; follow this link:
https://www.google.com/settings/ads/onweb/
Further information and Google’s privacy policy can be found at:
http://www.google.com/policies/technologies/ads/

11.3 Creation of custom audiences using the pixel method and by uploading hashed email addresses on Facebook and Instagram

Within our online offering, the so-called “Facebook Pixel” of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”). If a user clicks on an advertisement placed by us that is displayed on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. If our page allows data sharing with Facebook via the pixel, this URL parameter is written into the user’s browser via a cookie that our linked page itself sets. This cookie is then read by Facebook Pixel and enables the forwarding of data to Facebook. With the help of Facebook Pixel, Facebook is able, on the one hand, to determine the visitors of our online offering as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use Facebook Pixel to display Facebook Ads placed by us only to Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on visited websites) that we transmit to Facebook (so-called “Custom Audiences”). With the help of Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear annoying. This also allows us to evaluate the effectiveness of Facebook advertising for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). The data collected are anonymous for us and do not allow us to draw conclusions about the identity of users. However, the data are stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside Facebook. Data processing associated with the use of Facebook Pixel is based on Art. 6 para. 1 sentence 1 lit. a GDPR. The information generated by Facebook is generally transmitted to a Facebook server and stored there; this may also involve transmission to Facebook Inc. servers in the USA. To object to collection by Facebook Pixel and the use of your data for the display of Facebook Ads, you can set an opt-out cookie by clicking the following link, which deactivates Facebook Pixel tracking:
https://www.dailyexclusiv-cosmetic.com/cookies

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the above link again.

In addition, with your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), we may transmit your email address in hashed form to Facebook and Instagram. This means that your email address is uploaded to both social media providers not in plain text but in encoded form. These email addresses are then assigned by the social media providers to the hash values of social media accounts maintained on their platforms. In this way, it is possible to display advertising tailored to their interests to our customers and interested parties when they visit social media platforms, for example based on their visit to our website or their order history.

11.4 Pinterest Ads

We use a “Pinterest Tag” from Pinterest Europe Ltd., 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland (“Pinterest Ltd.”) on our website. This is an individual code snippet that enables us to deploy our Pinterest campaigns as needed, further optimize them and measure their conversion. This allows us to ensure that our Pinterest Ads are displayed to Pinterest users according to their interests and to track subsequent actions by Pinterest users. In particular, the following information is processed: your IP address, device information (e.g. type, brand), the browser system used, the time of accessing our offer and the response to the respective campaign. The data processed in this context are anonymous to us and do not allow us to identify you personally. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with your consent.

Further information on the protection of your privacy and on the purpose, scope and further processing of data by Pinterest Ltd. can be found in Pinterest Ltd.’s data policy.

11.5 TikTok Pixel

Within our online offering, the so-called “TikTok Pixel” of the social network TikTok is used, which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

With the help of TikTok Pixel, TikTok is able, on the one hand, to identify you as a visitor to our online offering as a target group for the display of advertisements (so-called “TikTok Ads”). Accordingly, we use TikTok Pixel to display TikTok Ads placed by us only to TikTok users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on visited websites) that we transmit to TikTok (so-called “Custom Audiences”). In particular, the following information is processed: your IP address, device information (e.g. type, brand), the browser system used, the time of accessing our offer and the response to the respective campaign. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with your consent.

TikTok uses this data to display targeted and personalized advertising to its users and to create interest-based user profiles. With the help of TikTok Pixel, we also want to ensure that our TikTok Ads correspond to the potential interest of users and do not appear annoying. The data collected are anonymous for us and not viewable by us and are only usable by us within the framework of measuring the effectiveness of advertising placements.

In principle, your data are processed within the EU or the EEA. A corresponding data protection agreement has been concluded with TikTok for this purpose. If personal data are transferred to countries outside the EU or the EEA, this is done within the framework of the Commission’s standard contractual clauses for the transfer of personal data to third countries (i.e. standard contractual clauses). TikTok’s privacy policy can be found here:
https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

You can object to collection by TikTok Pixel and the use of your data for the display of TikTok Ads at any time via the following link:
https://www.dailyexclusiv-cosmetic.com/cookies

11.6 Content Management System (CMS)

For our website, we also use the services of Contentful GmbH, Ritterstraße 12 - 14, 10969 Berlin. Contentful is a cloud-hosted (AWS) content management system (CMS). The CMS stores all content and documents displayed on the website. When you access the website, the system also accesses Contentful’s server, whereby Contentful does not store user data in log files. The legal basis for the use of the CMS is our legitimate interest (Art. 6 para. 1 lit. f GDPR). Contentful ensures that our online offerings are optimally displayed for our users.

Further information on the purpose and scope of data collection and processing by Contentful can be found in the provider’s privacy policy at:
https://www.contentful.com/legal/de/privacy/

12. Tools and Miscellaneous

12.1 cookiebot.com

The product of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com) is used as a “cookie banner” on our website. With the “Cookiebot” function, we inform you about the use of cookies on our website and enable you to decide on their use.

If you give your consent to the use of cookies, the following data are automatically logged by cookiebot.com:

  • the anonymized IP number of the user;

  • date and time of consent;

  • browser user agent of the end user;

  • the provider’s URL;

  • an anonymous, random and encrypted key;

  • the user’s allowed cookies (cookie status), which serves as proof of consent.

The encrypted key and cookie status are stored via a cookie on the user’s end device in order to restore the corresponding cookie status during future page visits. This cookie automatically deletes itself after 12 months.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the error-free functioning of our website and in fulfilling the legal requirements of the GDPR. The data are deleted as soon as the purpose of their collection has been fulfilled.

You can prevent or terminate the installation of cookies and their storage, and thus your cookie consent, at any time by adjusting your browser settings. You can also change or reset your cookie selection at any time via the following link:
https://www.sohamskin.com/cookies

Further information on the handling of transmitted data can be found in cookiebot.com’s privacy policy:
https://www.cookiebot.com/de/privacy-policy/

12.2 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google LLC within the framework of the “Google Customer Reviews” program; the provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The program gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey from Google. If you give your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The review you submit will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard, and will also be used for Google seller ratings.

You can revoke your consent at any time by sending a message to the controller responsible for data processing or directly to Google. Further information on Google’s privacy policy in connection with the Google Customer Reviews program can be found at the following link:
https://support.google.com/merchants/answer/7188525?hl=de
Further information on Google seller ratings privacy can be found here:
https://support.google.com/adwords/answer/2375474

12.3 Trusted Shops Trustbadge

To display Trusted Shops services (e.g. trust seal, collected reviews) and to offer Trusted Shops products to buyers after an order, Trusted Shops widgets are integrated on this website. This serves to safeguard our overriding legitimate interests in an optimal marketing by enabling secure shopping pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, with whom we are jointly responsible under data protection law pursuant to Art. 26 GDPR. In the following, we inform you within the scope of this Privacy Policy about the essential contractual contents pursuant to Art. 26 para. 2 GDPR. The Trustbadge is provided within the framework of joint responsibility by a US-based CDN provider (content delivery network). An adequate level of data protection is ensured by standard data protection clauses and additional contractual measures. Further information on data protection at Trusted Shops GmbH can be found in their privacy policy.

When accessing the Trustbadge, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection, so that the stored data cannot be assigned to your person. The anonymized data are used in particular for statistical purposes and error analysis.

After completion of an order, your email address hashed via a cryptological one-way function is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. This serves to verify whether you are already registered for services with Trusted Shops GmbH and is therefore necessary to fulfill our and Trusted Shops’ overriding legitimate interests in providing buyer protection and transactional review services linked to the specific order pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If this is the case, further processing is carried out in accordance with the contractual agreement concluded between you and Trusted Shops. If you are not yet registered for the services, you will be given the opportunity to do so for the first time. Further processing after registration is also governed by the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data are automatically deleted by Trusted Shops GmbH and personal reference is no longer possible. Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing in third countries (USA and Israel) may take place. An adequate level of data protection is ensured in the case of the USA by standard contractual clauses and additional contractual measures and in the case of Israel by an adequacy decision. Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, please contact Trusted Shops GmbH first when asserting your rights or if you have questions regarding data protection, using the contact options provided in the privacy information linked above. Regardless of this, you may always contact the controller of your choice. Your request will then be forwarded to the other controller for response if necessary.

12.4 Google Maps

We use Google Maps on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Maps is a web service for displaying interactive maps in order to visually present geographical information and thereby display locations with ASAMBEAUTY products and facilitate route planning. When using Google Maps, information about your use of our website (e.g. IP address and location data) is transmitted to Google servers and stored there; this may also involve transmission to servers of Google LLC in the USA. The legal basis for processing your personal data in connection with the use of Google Maps is your consent pursuant to Art. 6 para. 1 lit. a GDPR. Google Maps are only loaded after you have given your consent. Since we integrate Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your user behavior. Google primarily uses this data to optimize its own services and to provide individual, personalized advertising. You can prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
You can also deactivate the setting of cookies on this website via the following link:
https://www.dailyexclusiv-cosmetic.com/cookies
Alternatively, you can prevent the storage of cookies by adjusting your browser software settings. Further information on the processing and use of data by Google can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de

13. Rights of the Data Subject

13. General provisions

Applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), about which we inform you below:

  1. Right of access pursuant to Art. 15 GDPR: You have in particular the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if these were not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR when your data are transferred to third countries;

  2. Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of incomplete data stored by us;

  3. Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

  4. Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request restriction of processing of your personal data as long as the accuracy of your data contested by you is being verified, if you refuse deletion of your data due to unlawful processing and instead request restriction of processing, if you need your data for the establishment, exercise or defense of legal claims after we no longer need them for the purpose, or if you have objected for reasons arising from your particular situation and it has not yet been determined whether our legitimate grounds prevail;

  5. Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

  6. Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, insofar as this is technically feasible;

  7. Right to revoke consents pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent once given to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis permitting processing without consent. Revocation of consent does not affect the lawfulness of processing carried out on the basis of consent prior to revocation;

  8. Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

14. RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15. Contact

To exercise your above rights or if you have questions or comments regarding these privacy notices or data protection in general, please contact our data protection team at
info@sohamskin.com.

16. Disclaimer for external links

Daily Exclusiv Cosmetic GmbH refers to pages with links to other pages on the Internet. For all these links, the following applies: Daily Exclusiv Cosmetic GmbH expressly declares that it has no influence on the design and content of the linked pages and therefore expressly distances itself from all content of all linked third-party pages on
https://www.sohamskin.com
and does not adopt this content as its own. This declaration applies to all links displayed and to all content of the pages to which links lead.

17. Changes to this Privacy Policy

We reserve the right to change these privacy notices at any time with effect for the future. A current version is available on our website.

18. Copyright

© So'ham – The pages of the website and their components, including images, may be protected by copyright. Use, in particular reproduction and imitation, even in part, is only permitted with the consent of So'ham Skin LDA.

Status: 12.01.2026