Last Updated: Mai 2018
We respect privacy and your rights to control your personal data. Our principle guidelines are simple. We will be clear about the data we collect and why. Your data is sacredly protected by us. We do not and will not sell your data to third parties.
Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
This Privacy Statement (the 'Statement') explains the personal information we collect from you, either directly or indirectly, and how we use it. Personal information is any information that can be used to identify you or that we can link to you. The Statement also covers the choices you can make about the data we collect, and how you can control these decisions. It applies the European Nail Shop website, as well as other offline interactions, such as calling us by phone. Please read this Statement carefully to understand how European Nail Shop may collect, use and share your personal information. The terms 'we', 'us', or 'ENS' are each intended as reference to European Nail Shop.
The Types of Personal Information We Collect
Information you provide to us
We collect information you voluntarily provide to us, such as your name, phone number and email address; for instance, when register or when you contact our Service Team for information about ENS Products.
Information we collect automatically
We automatically collect information about you by using cookies and similar technologies when you use, access or interact with us via our websites or app. We may, for example, collect information about the type of device you use to access our websites, the operating system and version, your IP address, your general geographic location as indicated by your IP address, your browser type, the webpages you view on our websites, and whether and how you interact with content available on our websites.
Information obtained from other sources
We may receive information about you from other sources, including third parties, service partners and partners with whom we offer co-branded services or engage in joint marketing activities. We may also receive information about you from social media platforms, for instance, when you interact with us on those platforms. We protect data obtained from third parties according to the practices described in this Statement and we also apply any additional restrictions imposed by the source of data.
Information of children
ENS does not target and is not intended to attract children under sixteen. Although visitors of all ages may navigate through our website, we do not knowingly collect or request personal information from those under the age of sixteen without parental consent. If, following a notification by a parent or guardian or discovery by other means, a child under sixteen has been improperly registered on our site by using false information, we will cancel the child's account and delete the child's personal information from our records.
Customer Interactions with ENS
To make the information in this Statement easy to understand, we have highlighted different occasions when ENS could potentially collect personal information from customers. The customer interactions with ENS are broken down into the following segments:
Learning about ENS
As you gather more information about ENS, you may visit our website or contact us. Examples include browsing our website, using the regsitration form, calling our in-house sales representatives. To learn more about ENS Products, you may voluntarily provide personal information, such as your name, phone number and email address during these interactions. We may also collect information about you online via cookies or similar technologies when you visit our websites.
- We collect: name, phone number, email address, IP address, and information provided by cookies or similar technology.
- Why: We use this information to share news and products offered by ENS. Additionally, the IP address helps us to understand geographic information about our websites’ visitors better so that we can improve our websites for everyone. It is our legitimate interest to process your personal data for these purposes.
Collection and processing when using the registration form
When you use the registration form we will only collect your personal data (company data, name, phone number, email address) in the scope provided by you. The data processing is for the purpose of registration. By submitting the form you agree to the processing of your transmitted data. Processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent.You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal.
- We collect: company data, name, phone number, email address, IP address, and information provided by cookies or similar technology.
- Why: We use this information to process your registration and share news and products offered by ENS. Additionally, the IP address helps us to understand geographic information about our websites’ visitors better so that we can improve our websites for everyone. It is our legitimate interest to process your personal data for these purposes.
Customer account / buying products
When you registrate, we will collect your personal data in the scope given there. The data processing is for the purpose of registration. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing, and use of personal data for registration and orders
When you registrate or submit an order, we only collect and use your personal data where this is necessary for the fulfilment and handling of your requests. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing will occur on the basis of art. 6 (1) lit. b GDPR and is required for the fulfilment of a contract with you. We will not forward your data to third parties without your explicit consent. This only excludes our service partners which we require in order to handle the contractual relationship or service providers we use to process an order. Along with the recipients named in the clauses of this data protection declaration, these may be recipients in the following categories: Shipping providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers and dropshipping dealers. We will comply strictly with legal requirements in every case. The scope of data transmission is restricted to a minimum.
How We Use Personal Information
ENS uses the data we collect to provide you with the ENS Products and Services we offer, which includes using data of our website. We also use the data to communicate with you, for example, informing you about your account, new ENS Products or Services available, security and other types of updates.
ENS uses the data for the following purposes:
- Customer Support
- Security, Safety, and Dispute Resolution
- Business Operations
- Communication and Messages
We use data to respond to customer inquiries, diagnose Product problems, coordinate logistics and provide other customer care and support services. This processing is necessary for the performance of our agreement we have with you, as well as to serve our legitimate interest.
Security, Safety and Dispute Resolution
We use data to protect the security and safety of our ENS Products, services and our customers, to detect and prevent fraud, to resolve disputes and enforce our agreements. This processing is necessary to serve our legitimate interest.
We use data to develop aggregate analysis and business intelligence that enable us to operate, protect, make informed decisions, and report on the performance of our business. This processing is necessary to serve our legitimate interest.
Communication and Messages
Use of your email address for mailing of information
We use your email address outside of contractual processing exclusively to send you information about products and services. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.
Your data will be forwarded to a service provider for email marketing in the course of order processing. It will not be forwarded to other third parties.
Your data will be transferred to a third country, which is covered by an adequacy decision by the European Commission.
Use of your email address for mailing of direct marketing
We use your email address, which we obtained in the course of selling a good or service, for the electronic transmission of marketing for our own goods or services which are similar to those you have already purchased from us, unless you have objected to this use. You must provide your email address in order to conclude a contract. Failure to provide it will prevent the conclusion of any contract. The processing will be carried out on the basis of art. 6 (1) lit. f GDPR due to our justified interest in direct marketing. You can object to this use of your email address at any time by contacting us. You will find the contact details for exercising your right to object in our imprint. You can also use the link provided in the marketing email. This will not involve any costs other than transmission costs at basic tariffs.
To give you a better understanding of the personal information we collect and use in different occasions you may interact with ENS, please see the sections below.
How We May Share Personal Information
ENS does not and will not sell personal information about our customers. We only disclose your data as described in this Statement. We may share information with the following types of third parties.
Third Party Vendors
ENS uses a variety of third-party vendors to carry out services like websites management and hosting, shipping and email communications. We only share your personal data as necessary, such as to complete a transaction or to provide a Product or Service you have requested or authorized and only with vendors or agents working on our behalf for the purposes described in this Statement. In this case, your personal information will be shared with these agents or contractors but only for the purpose of performing services on behalf and under instructions of ENS and in accordance with this Statement. It is our legitimate interest to share information with these parties for these purposes. For questions about third-party vendors, please send an email to firstname.lastname@example.org.
Use of an external merchandise management system
We use a merchandise management system in the course of order processing for the purposes of contractual processing. For this purpose your personal data as collected in the course of the order will be sent to Mauve Mailorder Software GmbH & CO. KG Laurentiusweg 83, 45276 Essen
When legally required, strictly necessary for the performance of the services or to protect our rights, or the rights of our affiliates or users, we disclose your personal information to law enforcement authorities, investigative organizations, our affiliates or in legal proceedings.
The Legal Bases for Using Personal Information
There are different legal bases that we rely on to use your personal information, namely:
Performance of a contract
The use of your personal information may be necessary to perform the agreement you have with us. For example, to complete your purchase, to register and maintain your account, to help with delivery issues, to handle returns or to respond to your requests.
We may use your personal information for our legitimate interests. For example, we rely on our legitimate interest to analyze and improve our ENS Products and Services and the content on our website, to send you notifications about news or information about ENS Products and Services or to use your personal information for administrative, fraud detection or legal purposes.
Where we process your personal information based on our legitimate interest and no opt-out mechanism is available to you, you may exercise your right to object by sending an email to email@example.com.
Security, Storage and Retention of Personal Information We Collect
ENS is committed to protecting the security of your personal information. However, while we take reasonable precautions to guard the personal information we collect, no security system is impenetrable.
We use a variety of appropriate technical and organizational measures and industry standards to protect your personal information and help prevent information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. Additionally, we ensure that our third-party data center vendors provide adequate security measures. Additionally, your data is protected with encryption, such as Transport Layer Security (TLS), during transmission over the Internet. Moreover, your password is stored using one-way hash, which means that it cannot be recovered (or disclosed) by anyone, including ENS (it can only be reset).
You can only access your ENS account information and our service through the use of an individual user login and password. To protect the confidentiality of your personal information, you must keep your password confidential and not disclose it to any other person. Please alert us immediately if you believe your password has been misused. Additionally, always log out and close your browser when you finish your session. Please note, we will never ask you to disclose your password.
If you have any questions about the security of your personal information, you can contact us at firstname.lastname@example.org.
Personal data collected by ENS may be stored and processed in Germany, or in any other country where ENS or its affiliates, subsidiaries or service providers are located or maintain facilities. ENS has put in place adequate mechanisms to protect personal information when it is transferred internationally, for example by using the Standard Contractual Clauses as approved by the European Commission.
ENS will retain your personal information for as long as we deem it necessary to enable you to use the website and to provide services to you, to comply with applicable laws (including those regarding document retention), resolve disputes with any parties and otherwise as necessary to allow us to conduct our business. All personal information we retain will be subject to this Privacy Statement and our internal retention guidelines. If you have a question about a specific retention period for certain types of personal information we process about you, please send an email to email@example.com.
Your Rights and Choices
We want you to be in control of how your personal information is used by us. Subject to local law, you can do this in the following ways:
- You can ask us for a copy of the personal information we hold about you
- You can inform us of any changes to your personal information, or if you want us to correct any of the personal information we hold about you;
- In certain situations, you can ask us to erase, block or restrict the personal information we hold about you, or object to particular ways in which we are using your personal information; and
- In certain situations, you can also ask us to send the personal information you have given us to a third party.
Rights of the affected person
If the legal requirements are fulfilled, you have the following rights according to art. 15 to 20 GDPR: Right to information, correction, deletion, restriction of processing, data portability. You also have a right of objection against processing based on art. 6 (1) GDPR, and to processing for the purposes of direct marketing, according to art. 21 (1) GDPR.
Right to complain to the regulatory authority
You have the right to complain to the regulatory authority according to art. 77 GDPR if you believe that your data is not being processed legally.
Where we are using your personal information on the basis of your consent, you are entitled to withdraw that consent at any time. Moreover, where we process your personal information based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal information.
We rely on you to ensure that your personal information is complete, accurate and current. Please inform us promptly of any changes to, or inaccuracies of, your personal information by contacting firstname.lastname@example.org.
We will respond to your request as soon as possible but certainly within 30 days. For more information about how you can control the Communication, Information Preferences, please visit "Your Choices" sections below.
We are committed to working with you to obtain a fair resolution of any complaint or concern you may have about our use of your personal information. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to lodge a complaint with the data protection authority in your country or supervisory authority.
If you wish to access, edit or remove profile information, change your password, close your account or request deletion of your personal data, you can do it by logging in to your ENS account or sending an email to email@example.com. If you cannot access certain personal information collected by ENS via the ENS account, you can always contact us by sending an email to firstname.lastname@example.org. We will respond to any request to access or delete your personal data as soon as possible but certainly within 30 days.
Your Communication and information preferences
You can opt out of receiving direct information from ENS by unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. We respect your choice, and we will stop sending you information emails once you unsubscribe or change your communication settings.
Please note, regardless of your communication settings, we will continue to communicate with you regarding changes to terms and conditions, policy updates, ENS Product software updates, routine customer service messages such as information about current or past purchase, delivery of products, service interruptions, data breaches or other significant information about a Product you own such as discontinuation of support or safety issues.
A 'cookie' is a small data file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. The length of time a cookie will stay on your computer or mobile device depends on whether it is a "persistent" or "session" cookie. ENS uses both types of cookies. Session cookies will only stay on your device until you stop browsing. Persistent cookies stay on your computer or mobile device until they expire or are deleted. We use the following types of cookies on our website.
- Strictly necessary cookies. These cookies are essential for you to browse our website and use its features. Without these cookies, services like shopping baskets cannot be provided.
- Performance cookies. These cookies collect information about how you use our websites. This data may be used to help optimize our website and make it easier for you to navigate.
- Functional cookies. These cookies allow our websites to remember choices you make and personalize your experience. We may store your geographic location in a cookie, for instance, to ensure that we show you the websites relevant to your area.
- Third Party cookies. Third-party cookies are those placed by websites and/or parties other than ENS. These cookies may be used on our websites to improve our products or services or to help us provide more relevant advertising. These cookies are subject to the respective privacy policies for these external services, for example, Facebook Data Use Policy.
- Analytics cookies. We use analytics cookies, like those offered by Google Analytics, to help us understand things like how long a visitor stays on our websites, what pages they find most useful and how they arrived at our Shop. To learn more about Google Analytics and your data, visit this Google webpage https://support.google.com/analytics/answer/6004245.
How to control cookie settings
Most web browsers allow you to control cookies through their settings preferences. However if you limit the ability of websites to set cookies, you may impact your overall user experience. Some browsers offer a “Do Not Track” (“DNT”) signal whereby you may indicate your preference regarding tracking and cross-site tracking. Although we do not currently employ technology that recognizes DNT signals, we will only process your personal data in accordance with this Statement. Below you can learn about how to control cookie settings on popular web browsers:
- Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Safari: https://support.apple.com/kb/ph17191?locale=en_US
- Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
In addition to cookies, we sometimes use small graphic images known as 'pixels' (also known as web beacons, clear GIFs, or pixel tags). We use pixels in our email communications to you (if you have selected to receive such communications) to help us to understand whether our email communication has been viewed. We also use third-party pixels (such as those from Google, Facebook, and other advertising networks) to help us provide advertising that is relevant to your interests. Learn more about our advertising and marketing activities below.
If you have opted out of receiving communications from us, we will not use your email for interest-based advertising.
Use of Google Analytics
Use of the remarketing or "similar target groups" function by Google Inc.
Use of Google Adwords conversion tracking
Use of YouTube
Use of GoogleMaps
How to Contact Us
If you have any questions about the use of your personal information, please send an email to email@example.com.
Unless otherwise stated, Uwe W. Göldner e.Kfm. is a data controller for personal data we collect through the ENS Products and Services subject to this Privacy Statement. Our address is Zeppelinstr. 12, 73760 Ostfildern, Germany
Our data protection representative can be contacted at the following address: Zeppelinstr. 12, 73760 Ostfildern, Germany or via email at firstname.lastname@example.org.
Changes to Our Privacy Statement
ENS may modify or update this Statement when necessary to reflect customer feedback and changes in our ENS Products and Service. Please review it regularly. When we update this Statement, we will revise the 'Last Update' date at the top of the Statement. If there are material changes to the Statement or in how ENS uses your personal data, we will notify you either by posting a notice of such changes before they take effect or by directly sending you a notification. We encourage you to regularly review this Statement to learn more how ENS is using and protecting your information.
The following are basic questions you may have about our privacy statement. We encourage you to read the detailed statement above for additional details.
Why is ENS updating its privacy statement?
We now meet the high standard required by the European Union's General Data Protection Regulation (GDPR) and have updated our privacy statement to reflect that. We also continue to simplify language and remove jargon, to make our privacy statement easier to understand and read.
What is the GDPR?
The GDPR is a regulation intended to strengthen and unify data protection for everyone within the European Union (EU). The GDPR requires greater openness and transparency from companies on how they collect, store and use personal data, while also imposing tighter limits on the use of personal data. You can learn more here https://www.eugdpr.org.
How often do you anticipate updating your privacy statement?
We will update our privacy statement as necessary to ensure that our policies are in line with international regulations, our product and business practices.
What information does ENS collect about me?
ENS collects your company data, name, phone number, email address, shipping address, payment information, location data, IP address, social identifiers, data provided by cookies and similar technologies, functional data such as registration and system data, as well as additional usage data; for instance, performance and activity information.
Why does ENS need my information?
ENS uses the data we collect to provide you the best experience within products and services we offer, which includes using data to improve and personalize your order. We also use the data to communicate with you, for example, informing you about your account, new products or services available, security and other types of updates.
How is my information used?
ENS uses the data we collect for the following purposes:
- Product Improvement
- Future Product Development
- Customer Support
- Security, Safety, and Dispute Resolution
- Product Performance Analysis
- Communications and Information
How does collecting my information help ENS improve its products?
We use the information to help get your product working and to make sure that we are offering you the service options based on your needs. We also collect information about our products, so we can make improvements to eliminate potential bugs and problems. And finally, understanding how and when our customers collectively use their systems helps us design new ways to fill homes with music.
Does ENS sell information to third parties?
No. We never have. And we never will.
What are Server log files for?
You can use our websites without submitting personal data. Every time you access our website, user data is transmitted by your internet browser and stored in protocol files (server log files). This stored data includes e.g. name of the site called up, date and time of the request, amount of data transferred and the provider making the request. This data serves exclusively to ensure smooth operation of our website and to improve our offering. It is not possible to assign this data to a particular person.
How do I delete my personal data from ENS and what are the consequences?
You can always send us an email to email@example.com or contact our Customer Care team and request that your data be deleted. Please note, however, that by deleting you can't make further orders.
How long does ENS keep my information?
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use. ENS retains personal data for as long as necessary to provide the services, support your product and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these needs can vary for different data types in the context of different products or services, actual retention periods can vary significantly.
How is information stored and secured on ENS’ servers?
ENS is committed to protecting the security of your personal data. We and our providers use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use or disclosure. For example, we store the personal data you provide on computer systems that have limited access and are in controlled facilities. Any data we transmit over the internet is protected using encryption.
Is ENS using cookies or pixels to gather information?
Does ENS use interest-based advertising?
Yes. We work with third-party advertisers that utilize cookies and similar technologies to provide more relevant advertising about ENS on our website and across the internet. To provide interest-based advertising, the advertisers combine non-personal data learned about your online activities over time to customize the advertising delivered to you. We do not share your personal information to do this.
What safeguards are in place for children who have access to ENS products?
ENS does not target and is not intended to attract children. ENS does not knowingly solicit personal information from children or send them requests for personal information. Although visitors of all ages may navigate through our website, we do not intentionally collect personal information from persons under the age of sixteen. If following a notification by a parent or guardian, or discovery by other means, that a child under sixteen has improperly registered on this site by using false information, we will cancel the child's account and delete the child's personal information from our records.
How can I contact ENS if I have questions regarding ENS privacy statement?
If you have any questions about the use of your personal information, please send us an email to firstname.lastname@example.org