Privacy Policy

This privacy policy applies to data processing by louiselouise Beauty GmbH, Alte Heerstr. 8, 53757 Sankt Augustin, Germany, registered with the Siegburg Local Court under HRB 17401. Managing Director: Louise Wittlich, reachable at mail@louiselouisebeauty.com.

Scope

This privacy policy informs users of this website, in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications-Telemedia Data Protection Act (TTDSG), about the nature, scope and purpose of the collection and use of personal data by the operator of this website, louiselouise Beauty GmbH.

louiselouise Beauty GmbH takes the protection of your data very seriously and treats your personal data confidentially and in accordance with statutory provisions. Please note that data transmission over the Internet may have security vulnerabilities; complete protection against access by third parties is not possible.

Your rights at a glance

As a data subject, you have the following rights with regard to your personal data:

•       the right of access to your stored data (Art. 15 GDPR);

•       the right to rectification of inaccurate data (Art. 16 GDPR);

•       the right to erasure (“right to be forgotten”), subject to statutory retention obligations (Art. 17 GDPR);

•       the right to restriction of processing (Art. 18 GDPR);

•       the right to data portability of the data you have provided to us (Art. 20 GDPR);

•       the right to object to processing based on legitimate interest, in particular for marketing purposes (Art. 21 GDPR);

•       the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR);

•       the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — see contact details at the end of this document.

To exercise any of these rights, simply contact us at mail@louiselouisebeauty.com.

Access data and server log files

louiselouise Beauty GmbH collects data on access to the website and stores it as “server log files”. This includes: the IP address of the requesting device, the time of access, the amount of data transferred in bytes, the website or application from which access occurred (referrer URL), the browser used, and the operating system used.

This data is used solely for statistical evaluation, security and improvement of the website. louiselouise Beauty GmbH reserves the right to subsequently review the server log files if there are concrete indications of unlawful use.

The legal basis for processing the IP address is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above. No direct conclusions about your identity can be drawn from this data, and we do not seek to draw any.

The data is stored for 7 days, after which the IP address is automatically deleted. For security reasons, the remaining information (without the IP address) is stored for longer and deleted after 31 days. The data in the log files is stored separately from your other data.

Cookies and similar technologies

louiselouisebeauty.com uses cookies and similar technologies, divided into two categories:

•       Strictly necessary cookies: essential for the website to function (e.g. shopping cart, customer account login, security). Their use is based on Art. 6(1)(f) GDPR in conjunction with Section 25(2) TTDSG and does not require your prior consent.

•       Non-essential cookies (analytics, marketing, social media): only set after you have given active consent via our cookie consent banner, displayed on your first visit. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.

You can accept or reject each category separately and change your choice at any time. Without your consent, no non-essential cookies are set and no data is transmitted to the third-party providers mentioned below.

Customer account

In order to place an order through this offering, each customer must create a password-protected customer account. This contains an overview of orders placed and active order processes. When you leave the online shop as a customer, you are automatically logged out.

louiselouise Beauty accepts no liability for misuse of passwords, unless such misuse is attributable to the operator itself.

Order processing

The business purpose of louiselouise Beauty GmbH is the distance selling of goods and services, as well as the series production of the goods offered for sale. In this context, we process the data required to establish, perform or terminate a contract between you and louiselouise Beauty, in particular: first name, last name, title, billing and delivery address, where applicable parcel locker and DHL customer number, email address, billing and payment data, company name and VAT number, date of birth, and, where applicable, telephone number.

We transmit the payment data required to a commissioned payment service provider, as well as to Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (https://www.shopify.com/). Shopify is also responsible for processing credit card payments; all credit card data is entered directly into Shopify's system and cannot be viewed or stored by us.

Payments via PayPal are processed by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. To process payment, we transmit your name, the invoice amount and your delivery address to PayPal, if you have chosen this payment method. Further information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

To fulfil the sales contract, we transmit your delivery address data to a logistics company we have commissioned. If shipping is not carried out by louiselouise Beauty itself but by a partner, we transmit the necessary address and order data to them. We use your email address to contact you before delivery to inform you of the delivery time.

The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract). We store the data collected until any statutory or contractual warranty rights have expired; thereafter, we retain the information required under commercial and tax law for the statutory periods (generally ten years from conclusion of the contract), with such data being processed again only in the context of a tax audit.

Make-up shade matching (photos)

If you send us photos as part of determining your make-up shade, these photos are processed solely for this purpose, based on your explicit consent (Art. 6(1)(a) GDPR).

The photos are neither shared with third parties nor used for any purpose other than personalised product recommendations.

The photos are stored for 30 days after the last interaction and then deleted, unless you request earlier deletion. You can withdraw your consent and request deletion of your photos at any time by contacting us at mail@louiselouisebeauty.com.

Processing of data for advertising purposes (existing customers)

If you have entered into a contract with us, we consider you an existing customer. In this context, in accordance with Section 7(3) of the German Act Against Unfair Competition (UWG), we may use your postal contact details and email address, without separate consent, to inform you about products or services similar to those you have already purchased.

You may object to this at any time, free of charge, separately for each communication channel and with effect for the future, by emailing or writing to the contact details above, already at the time of ordering, or via the link in each marketing communication. After your objection, the relevant address will be blocked from further use for advertising purposes; in exceptional cases, a small amount of residual mail may still be sent for a short period for technical reasons related to campaign preparation.

So that you only receive information likely to be of interest to you, we classify and supplement your customer profile using statistical and personal information (address and order data), based on our legitimate interest (Art. 6(1)(f) GDPR).

Newsletter subscription

louiselouise Beauty offers a newsletter through which we inform you about news and offers. Subscribing requires a valid email address and your explicit, separately given consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time via the unsubscribe link in each email. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Processing of contact data

If you contact louiselouise Beauty GmbH via the contact options provided, your data will be stored in order to process and respond to your enquiry. It will not be shared with third parties without your consent.

Comments and subscriptions

If you leave a comment on this website, your IP address is stored for security reasons, so that the origin of content can be traced in the event of a legal infringement. You have the option of subscribing to the website and to follow-up comments on your contribution; you will receive a confirmation email for this. No further data is collected, and the data stored is not shared with third parties. You can unsubscribe at any time.

Google Analytics

louiselouisebeauty.com uses Google Analytics (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (with additional processing by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Analytics is only activated if you have given your consent via our cookie consent banner. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.

The IP address is shortened before any storage, so that no direct personal reference remains. Data is transferred to the United States; this is based on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, as well as, on a subsidiary basis, standard contractual clauses of the European Commission.

You can withdraw your consent at any time via our cookie management tool, or prevent data collection by Google Analytics by installing the opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout?hl=en. Further information on data processing by Google: https://support.google.com/analytics/answer/6004245?hl=en

Social networks and embedded third-party content

On certain pages, we use social media plugins as well as embedded third-party content (videos, maps, fonts). To avoid transmitting data to these providers without your consent, these elements are only loaded after you have given consent via our cookie consent banner, in accordance with the case law of the Court of Justice of the European Union (Fashion ID ruling, C-40/17). As long as no consent has been given, no connection is established with these providers' servers and no data is transmitted.

Once consent has been given, the following content may be loaded:

•       Facebook and Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland): social plugins, recognisable by the corresponding logo or the terms “Like” / “Share”. Once loaded, these plugins establish a direct connection between your browser and Meta's servers, which may record your visit to this page and, if you are logged in, link it to your account. Information: https://www.facebook.com/help/186325668085084 and https://help.instagram.com/155833707900388

•       X, formerly Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA): share buttons working on the same principle. Information: https://twitter.com/privacy?lang=en

•       YouTube (Google Ireland Limited): embedded videos, using privacy-enhanced mode where technically possible. Information: https://policies.google.com/privacy

 

You can withdraw your consent for this content at any time via our cookie management tool.

Embedding of third-party content — general note

When embedding third-party content, it is technically necessary to transmit your IP address to the relevant provider so that it can display the content. We do not store your IP address for this purpose. However, third-party providers may track your browsing behaviour using cookies or similar technologies and process further technical information (browser type and version, operating system used, previously visited page, host name of the accessing device, time of access). This processing only takes place if you have given consent as described above.

Competent supervisory authority

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). The authority responsible for louiselouise Beauty GmbH is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia)

Kavalleriestr. 2-4, 40213 Düsseldorf, Germany (postal address: Postfach 20 04 44, 40102 Düsseldorf)

Phone: +49 211 38424-0 · Email: poststelle@ldi.nrw.de · www.ldi.nrw.de

Changes to this policy

We reserve the right to amend this privacy policy at any time, in compliance with applicable data protection law. The version published on our website at the time of your visit shall apply.