Privacy

Name: Aromatico
Brand: Aromatico
SKU: K000-0000-0001
Rating: 4.86 (40391 reviews)

Privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information when you use our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the website of Aromatico Heinrich Schwarz GmbH & Co. KG, which can be accessed under the domain aromatico.de and the various subdomains ("our website").

Contact details of the controller and contact person for data protection

Person in charge

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Aromatico Heinrich Schwarz GmbH & Co. KG
Löwenhof 9
28217 Bremen
DE
Phone: +49 421 9888270
E-mail address: info@aromatico.de

Data Protection Officer

HUBIT Datenschutz GmbH & Co. KG
Lise-Meitner-Str. 2
28359 Bremen
E-mail address: info@hubit.de
Website: www.hubit-datenschutz.de
Data protection telephone: 0421-33114300

General explanations of data protection

This privacy policy complies with the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a reference to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, querying, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no lawful grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and in the event of statutory retention obligations.

Disclosure of data

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or safeguarding legitimate interests) in the individual case. In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf in the context of order processing in accordance with Art. 28 GDPR, these may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.

Use of cookies

Cookies are small text files that are sent by us to the browser of your device during your visit to our website and stored there. As an alternative to the use of cookies, information may also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you return to our website and to transmit various information to us (non-necessary cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and changing your preferred settings (e.g. Country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and cannot contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

DomainNameBeschreibungSpeicherdauer.redintelligence.net8lcfmzhxc8d6_uidNicht availableapprox. 3 Monate.www.aromatico.de_pandectes_gdprNicht availableapprox. 12 months.aromatico.deadcellNot availableapprox. 1 months.doubleclick.netreceive-cookie-deprecationNot availableapprox. 6 Monate.doubleclick.nettest_cookieDieses cookie is set by DoubleClick (owned by Google) to determine whether the website visitor's browser supports cookies.10 Minutenwww.aromatico.deusm_um_rtNicht availableapprox. 12 months

Exercising the rights of data subjects

Information on the rights of data subjects

Each data subject can assert his or her rights (data subject rights) against the controller. This can be done by email, post or a form provided. Telephone inquiries are also possible. However, telephone inquiries are only accepted and not answered on the phone. The controller selects the medium (post, email, other media) and sends the data subject the answer to his or her request via this medium. Answers to inquiries about the rights of data subjects are free of charge. In the event of excessive exercise (e.g. strong accumulation) of the rights of the data subject, a fee may be charged. The response will be made within the statutory period of one month. The deadline may be extended in exceptional cases (e.g. high number of requests or high complexity of the request). The extension of the deadline must be justified. The rights of data subjects are listed below. For the sake of clarity, we have noted the rights of data subjects in bullet points. Behind each list you will find a link to detailed explanations (on the pages of HUBIT-Datenschutz).

The data subject must authenticate himself to the controller to ensure that he or she is legitimized to exercise the rights of the data subject.

On the HUBIT Data Protection website you will find a form through which you can exercise your rights as a data subject with us. Form for exercising data subject rights

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

[Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf for the purpose of the GDPR in accordance with Art. 28 GDPR.]

Purpose and legal basis

The processing is carried out to safeguard our overriding legitimate interest in displaying our website and to ensure security and stability on the basis of Art. 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.

Storage period

The aforementioned data will be stored for the duration of the display of the website [and, for technical reasons, for a maximum of [7 days]].

Contact

Type and scope of processing

On our website, we offer you the opportunity to contact us via a form provided. The information collected via mandatory fields is required to process the request. In addition, you may voluntarily provide additional information that you believe is necessary to process the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

The processing of your data by using our contact form is carried out for the purpose of communication and processing of your request on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. Insofar as your enquiry relates to an existing contractual relationship with us, the processing for the purpose of fulfilling the contract is carried out on the basis of Art. 6 (1) (b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage period

If you use the contact form on the basis of your consent, we will store the data collected from each request for a period of three years, starting with the completion of your request or until your consent is withdrawn.

[If you use the contact form as part of a contractual relationship, we will store the data collected from each request for a period of [three years] from the end of the contractual relationship.]

Contact form for applicants

Type and scope of processing

We collect and process the personal data of job applicants. Corresponding data processing may also be carried out electronically, for example when applicants submit application documents to us by e-mail or via a web form located on our website. On our website, we offer you to send us applications for advertised job offers by e-mail.

Your data will also only be stored in an applicant database beyond the current application process if you have given us your separate consent to do so.

Purpose and legal basis

The processing of your data in connection with your application is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of § 26 BDSG. In the event that your application documents are passed on to third parties, in particular to companies affiliated with us, as well as the storage of your data beyond the current application process, your data will be processed on the basis of Art. 6 (1) sentence 1 (a) GDPR. There is no legal or contractual obligation to provide your data, but the processing of your application is not possible without the provision of the information.

Storage period

We store the collected data for a period of six months from the date of filling the position.

Type and scope of processing

If you register to receive our newsletter on our website, we collect your email address [as well as your name...] and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you have to confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration within [XX hours], it will automatically expire and the data will not be processed for the purpose of sending the newsletter.

[The newsletter is sent directly by us. Your data will not be passed on to third parties or processors within the meaning of Art. 28 GDPR.]

[To send the newsletter, we use a service of the [service providers] who process your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.]

Purpose and legal basis

We process your data for the purpose of sending the newsletter on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Storage period

After registering for the newsletter, we will store the data for a maximum of [XX hours] until the confirmation of the registration. After successful confirmation, we will store your data until you revoke your consent (unsubscribe from the newsletter) [and, for technical reasons, for a maximum of [7 days].]

Registration of a customer account

Type and scope of processing

As part of the order process, we collect your personal data for the purpose of registering a customer account. You can choose whether you want to order as a guest or register a permanent user account. The information collected during registration via the mandatory fields is identical in both cases and is necessary for the processing of the order in the online shop. When registering a permanent user account, we also collect a password of your own choosing. In addition, you may voluntarily provide additional information that you believe is necessary to process the order.

Your personal data will only be passed on to third parties (e.g. shipping service providers / freight forwarders) and processors in accordance with Art. 28 GDPR if this is necessary for the processing of the order.

Purpose and legal basis

We process your personal data for the purpose of registering a customer account for the performance of a contract with you in accordance with Art. 6 (1) (b) GDPR. There is a contractual obligation to provide your data insofar as it relates to the mandatory fields, as this information is necessary to identify you as well as to perform the contract on our part. There is no legal obligation to provide the data. Without the provision of this information, it is not possible to place an order in our online shop and thus conclude a contract. There is no obligation to provide the additional voluntarily provided information. Ordering in our online shop is also possible without disclosing the voluntary information.

The supplementary processing of your password for the registration of the permanent user account is carried out for the purpose of providing a customer account and displaying your previous purchases as well as for the storage of your purchase-related data (e.g. storage of billing address, different delivery addresses) on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. By deleting your customer account, you can declare your revocation at any time with effect for the future in accordance with Art. 7 (3) GDPR.

Storage period

If you order as a guest, your personal data will be stored until your order has been fully processed (end of contract). When registering a permanent customer account, we store the purchase-related data beyond the end of the contract, until the withdrawal of your consent (deletion of the customer account). In both cases, your data will only be stored if there are statutory retention obligations (e.g. tax and commercial law).

Presence on social media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers within social networks and to offer you other ways to contact us and find out about our offers. In the following, we will inform you about which data we or the respective social network process about you in connection with the access and use of our fan pages/accounts.

Data we process about you

If you want to contact us via messenger or direct message via the respective social network, we usually process your user name, which you use to contact us, and may store other data provided by you insofar as this is necessary to process/answer your request.

The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary to protect the legitimate interests of the controller).

(Static) Usage Data We Receive from Social Networks

We receive automatically provided statistics regarding our accounts via insights functionalities. The statistics include, but are not limited to, the total number of page views, likes, page activity and post interactions, reach, video views/views, and the percentage of men/women among our fans/followers.

The statistics contain only aggregated data and cannot be related to individual persons. They are not identifiable to us in this way.

What data the social networks process about you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and no user account for the respective social network is required.

Please note, however, that when the respective social network is accessed, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no influence. Details on this can be found in the privacy policy of the respective social network (see the corresponding links above)

If you want to interact with the content on our fan pages/accounts, e.g. comment, share or like our postings/contributions and/or contact us via messenger functions, you must register with the respective social network in advance and provide personal data.

We have no influence on the data processing by the social networks in the context of your use. To the best of our knowledge, your data will be stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both inside and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.

For information on the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies in the context of registration and use of social networks, please refer to the privacy policy/cookie policy of social networks. There you will also find information about your rights and options for objection.

Facebook Page

When you visit our Facebook page, Facebook (Meta) collects, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: https://facebook.com/help/pages/insights.

Based on the statistical information transmitted, it is not possible for us to draw conclusions about individual users. We use these only to be able to respond to the interests of our users and to continuously improve our online presence and ensure the quality of these.

We only collect your data via our fan page in order to realize a possible provision for communication and interaction with us. This survey usually includes: Your name, message content, comment content and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is carried out on the basis of our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 para. 1 f) GDPR. If you, as a user, have given your consent to data processing vis-à-vis the respective provider of the social network, the legal basis for the processing extends to Art. 6 para. 1 a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access options are limited to your data. Only the provider of the social network is authorized to have full access to your data. Due to this, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effectively done directly against the respective provider.

Together with Facebook, we are responsible for the personal content of the fan page. Data subject rights can be asserted at Meta Platforms Ireland Ltd. as well as at us.

The primary responsibility for the processing of Insights data lies with Facebook under the GDPR and Facebook fulfils all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. makes the essence of the Page Insights supplement available to the data subjects.

We do not make any decisions regarding the processing of Insights data and the storage period of cookies on user devices.

Further information can be found directly on Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use, can be found in Facebook's privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies

Instagram Page

When you visit our Instagram page, Instagram (Meta) collects, among other things, your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more information on this under the following link (Note: by clicking on the following link, you will be taken to the website of the social network Facebook, also part of the Meta Group. However, the information provided via the link applies equally to the social network Instagram): https://facebook.com/help/pages/insights.

Together with Instagram, we are responsible for the personal content of the fan page. Data subject rights can be asserted at Meta Platforms Ireland Ltd. as well as at us.

The primary responsibility for the processing of Insights data lies with Instagram under the GDPR and Instagram fulfils all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. makes the essence of the Page Insights supplement available to the data subjects.

We do not make any decisions regarding the processing of Insights data and the storage period of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Further information, including on the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use, can be found in Instagram's privacy policy/cookie policy (Note: by clicking on the following link you will be taken to the website of the social network Facebook):
https://help.instagram.com/519522125107875/?helpref=uf_share
This information can also be found in the help section of the Instagram website via the following link:
https://help.instagram.com/581066165581870

Third party

Below you will find the third-party providers that are integrated into our website.

Home delivery

In order to fulfil the purchase contract, we transmit the name and address of the recipient to DPD (DPD Zentrale Wailandtstraße 1, 63741 Aschaffenburg) or DHL (DHL Paket GmbH, 53113 Bonn) as the shipping service provider in accordance with your chosen shipping method. The purpose of the data transfer is the delivery of the shipment to you and, if applicable, the return of your shipment to us on the basis of Article 6 (1) (b) GDPR.

To pay for your purchase, your chosen payment service provider will collect and process your name, card or account number and/or other data required for the payment method you have chosen on your behalf. In this respect, the data protection provisions of the payment service provider you have chosen also apply. When we receive a payment, we process the data that the payment service provider transmits to us.

The processing is carried out on the basis of Article 6 (1) (b) GDPR. We will keep this data until all mutual claims arising from the respective contractual relationship with you have been fully settled and the retention periods under commercial and tax law to which we are subject have expired.

Receivables management

If you do not pay outstanding invoices / instalments despite repeated reminders, we can transmit the data required for the execution of debt collection to a law firm for the purpose of fiduciary collection. We work together with the following partner: Blaum Dettmers Rabstein, Rechtsanwaltspartnerschaft mbB und Notare, Am Wall 153-156, 28195 Bremen. The legal basis for the transfer of data in the context of fiduciary debt collection is Art. 6 (1) (b) GDPR. The transfer of data in the context of the sale of receivables is carried out on the basis of Art. 6 (1) (f) GDPR.

Sovendus Sales

In order to select a voucher offer that is currently of interest to you, we will transmit the hash value of your e-mail address and your IP address in pseudonymised and encrypted form to Sovendus GmbH, Moltkestrasse 11, 76133 Karlsruhe (Sovendus) (Art. 6 para. 1 f GDPR). The pseudonymised hash value of the email address is used to take into account any objection to advertising by Sovendus (Art. 21 para. 3, Art. 6 para. 1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 para. 1 f GDPR). In addition, we transmit pseudonymised order number, order value with currency, session ID, coupon code and time stamp to Sovendus for billing purposes (Art. 6 para. 1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection to your e-mail address and click on the voucher banner, which is only displayed in this case, we will transmit your title, name and your e-mail address in encrypted form to Sovendus for the preparation of the voucher (Art. 6 para. 1 b, f GDPR). For further information on the processing of your data by Sovendus, please refer to the online data protection information at www.sovendus.de/datenschutz

ADCELL

Type and scope of processing

We have integrated ADCELL on our website. ADCELL is an affiliate marketing software from Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany. We use ADCELL to measure the success and bill of our affiliate partners.

ADCELL uses cookies to be able to assign visitors to our partners via affiliate links and to trace the origin of orders.

In this context, the following data is usually collected and stored: identification number of the affiliate partner, identification number of the user, information about the clicked advertising material, order and product ID, if applicable.

Your IP address and other identification features such as your user agent are also transmitted to the provider.

Purpose and legal basis

The use of ADCELL is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Firstlead GmbH. Further information can be found in the privacy policy for ADCELL: https://www.adcell.de/datenschutz.

ADITION Adserving & Targeting

Type and scope of processing

We use the ADITION Adserving & Targeting service of ADITION technologies AG, Oststraße 55, 40211 Düsseldorf, Germany, to display specific and relevant advertisements to groups of users using targeting technologies.

Web tracking technologies are used to create pseudonymised user profiles. These profiles usually cannot be merged with you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and legal basis

The use of ADITION Adserving & Targeting is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by ADITION technologies AG. Further information can be found in the privacy policy for ADITION Adserving & Targeting: https://www.adition.com/datenschutz.

AWIN

Type and scope of processing

We have integrated AWIN on our website. AWIN is an affiliate marketing software from AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany. We use AWIN to measure the success and bill of our affiliate partners.

AWIN uses cookies to be able to assign visitors to our partners via affiliate links and to trace the origin of orders.

Your IP address and other identification features such as your user agent are also transmitted to the provider.

Purpose and legal basis

AWIN is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by AWIN AG. Further information can be found in the privacy policy for AWIN: https://www.awin.com/de/rechtliches/privacy-policy.

Apple CDN

Type and scope of processing

We use Apple CDN to properly deliver the content on our website. Apple CDN is a service provided by Apple, Inc., which acts as a content delivery network (CDN) on our website.

A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Apple, Inc., Infinite Loop, Cupertino, CA 95014, United States, where your IP address and, if applicable, browser data are transmitted like your user agent. This data is processed solely for the purposes set out above and to maintain the security and functionality of Apple CDN.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in secure and efficient provision as well as the optimisation of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Apple, Inc. For more information, see the Apple CDN Privacy Policy: https://www.apple.com/legal/privacy/de-ww/.

Bing Pixel

Type and scope of processing

We use Bing Pixel from Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offerings, determine conversion rates and then optimize them. This happens especially when you interact with ads we have placed with Microsoft Corporation.

Purpose and legal basis

The use of Bing Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA takes place in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating US companies and/or their US subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision from the European Commission (including US companies that are not certified according to EU-U.S. DPF), we have agreed with the recipients of the data other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. A copy of these Standard Contractual Clauses can be viewed at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third-country transfer, we obtain your consent in accordance with Art. 49 (1) sentence 1 lit. a. GDPR, which you give via consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that there may be risks that are unknown in detail in the case of third-country transfers (e.g. data processing by security authorities of the third country, the exact scope and consequences of which we do not know for you, over which we have no influence and of which you may not become aware).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. For more information, see the Bing Pixel Privacy Policy: https://privacy.microsoft.com/en-us/privacystatement.

Casale Media

Type and scope of processing

We have integrated Casale Media on our website. Casale Media is a service provided by Casale Media, Inc. that provides targeted advertising to users. Casale Media uses cookies and other browser technologies to evaluate user behavior and recognize users. Casale Media collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. In addition, Casale Media delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Casale Media, Casale Media, Inc., 74 Wingold Avenue Toronto, Ontario M6B1P5 Canada.

Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be merged with you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and legal basis

The use of Casale Media is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Casale Media, Inc. Further information can be found in the privacy policy for Casale Media: https://casalemedia.com/legal/.

Facebook Pixel

Type and scope of processing

We use Meta Pixels from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland to create so-called Custom Audiences, i.e. to segment visitor groups of our online offerings, determine conversion rates and then optimize them. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and legal basis

Meta Pixel is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Meta Platforms Ireland Limited. For more information, please refer to the Meta Pixel Privacy Policy: https://www.facebook.com/privacy/explanation.

Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users.

Google Ads collects information about visitor behavior across different websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads may associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

The use of Google Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please see the Google Ads Privacy Policy: https://policies.google.com/privacy.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of calls to our online offer, subpages visited and the length of stay of visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Cloud Functions

Type and scope of processing

We have integrated Google Cloud Functions on our website. Google Cloud Functions is a mobile and web application development platform developed by Google Ireland Limited.

Google Cloud Functions provides us with software development kit tools and infrastructure that allow us to provide functions more easily and efficiently through application programming interfaces.

When you access our Services, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, if applicable, browser data are transmitted as your user agent.

Purpose and legal basis

The use of Google Cloud Functions is based on our legitimate interests, i.e. interest in optimising our services in accordance with Art. 6 (1) (f) GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, see the Google Cloud Functions Privacy Policy: https://policies.google.com/privacy.

Google DoubleClick

Type and scope of processing

We have integrated components from Google DoubleClick on our website. DoubleClick is a brand of Google, under which special online marketing solutions are mainly marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression, as well as with clicks or other activities.

Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick will place a cookie in your browser.

DoubleClick uses a cookie ID that is required to complete the technical process. For example, the cookie ID is needed to display an ad in a browser. DoubleClick can also use the cookie ID to record which ads have already been displayed in a browser to avoid duplication. Furthermore, DoubleClick is able to record conversions through the cookie ID. Conversions are recorded, for example, if a user has previously been shown a DoubleClick ad and subsequently makes a purchase on the advertiser's website using the same internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns you have already been in contact with on other websites. As part of this service, Google receives information about data that Google also uses to create commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information and the applicable privacy policy of DoubleClick by Google, please visit https://policies.google.com/privacy.

Purpose and legal basis

We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie serves to avoid multiple displays of the same advertisement. Every time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can visit our website without restriction, but not all functions may be fully available.

Storage period

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate users' access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, see the Google Tag Manager Privacy Policy: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Heroku

Type and scope of processing

We have integrated Heroku on our website. Heroku is a platform of Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States.

We use Heroku to develop and deliver web applications and content.

If you access content on our website, the provider may be provided with transmits your IP address and other identifiers such as your user agent.

Purpose and legal basis

The use of Heroku is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Salesforce, Inc. For more information, please see the Heroku Privacy Policy: https://www.salesforce.com/company/privacy/.

Klarna CDN

Type and scope of processing

We use Klarna CDN to properly deliver the content on our website. Klarna CDN is a service provided by Klarna Bank AB, which acts as a content delivery network (CDN) on our website.

A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Klarna Bank AB, Sveavägen 46 111 34 Stockholm, Sweden, where your IP address and, if applicable, browser data are transmitted as your user agent. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Klarna CDN.

Purpose and legal basis

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Klarna Bank AB. For more information, please refer to the privacy policy for Klarna CDN: https://klarna.com/de/datenschutz/.

Klaviyo

Type and scope of processing

We have integrated components from Klaviyo on our website. Klaviyo is a service of Klaviyo, Inc. and provides marketing automation software for marketing services and products, including SEO and content creation, lead management, newsletters, email and SMS marketing, and web analytics.

Klaviyo uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on the activity of the website. Furthermore, Klaviyo is used to store and transmit data entered in forms by means of cookies, including your IP address. In this case, your data will be passed on to the operator of Klaviyo, Klaviyo, Inc., 125 Summer Street, Boston, Massachusetts 02111, United States.

Purpose and legal basis

The use of Klaviyo is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Klaviyo, Inc. For more information, please refer to the privacy policy for Klaviyo: https://www.klaviyo.com/privacy/policy.

NEORY Marketing Cloud

Type and scope of processing

We have integrated components of NEORY Marketing Cloud on our website. NEORY Marketing Cloud is a service of NEORY GmbH and provides marketing automation and marketing analytics software for marketing services and products, including content creation, lead management, email marketing, and web analytics.

NEORY Marketing Cloud uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

In this case, your data will be passed on to the operator of NEORY Marketing Cloud, NEORY GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany.

Purpose and legal basis

The use of NEORY Marketing Cloud is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by NEORY GmbH. For more information, please refer to the NEORY Marketing Cloud Privacy Policy: https://www.neory.com/privacy.html.

PayPal

Type and scope of processing

We have integrated components from PayPal on our website. PayPal is a service of PayPal Pte. Ltd. and offers online payment solutions worldwide.

If you choose PayPal as your payment method, your data required for the payment process will be automatically transferred to PayPal Pte. Ltd., San Jose, California, US.

In this context, the following data is usually collected: name, address, company if applicable, e-mail address, telephone and mobile phone number and IP address.

Purpose and legal basis

The use of the service is based on the execution of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 (1) (b) GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is controlled by PayPal Pte. Ltd. Further information can be found in the privacy policy for PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

PubMatic CDN

Type and scope of processing

We use PubMatic CDN to properly deliver the content of our website. PubMatic CDN is a service of PubMatic, Inc., which acts as a content delivery network (CDN) on our website to ensure the functionality of other services of PubMatic, Inc. For said services, you will find a separate section in this Privacy Policy. This section is only about using the CDN.

A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of PubMatic, Inc., where your IP address and, if applicable, browser data are transmitted like your user agent. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of PubMatic CDN.

Purpose and legal basis

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by PubMatic, Inc. For more information, please see the privacy policy for PubMatic CDN: https://pubmatic.com/legal/privacy/.

SMART AdServer

Type and scope of processing

We use SMART AdServer from Horyzon Media, as an ad server for our online offering.

An ad server is a server with software that is responsible for the delivery and processing of advertisements. Data such as impressions, viewability and clicks are stored by the ad server and used for reporting purposes.

Purpose and legal basis

The use of SMART AdServer is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Horyzon Media. For more information, please see the SMART AdServer Privacy Statement: https://smartadserver.com/end-user-privacy-policy/.

Sentry

Type and scope of processing

We use Sentry from Functional Software, Inc., 132 Hawthorne St San Francisco, CA 94107, United States as a bug tracker to detect code errors at an early stage and thus ensure the technical functionality of our online offer. This collects anonymous information about the device on which the error occurred and the time when the error was detected. In some cases, user sessions can also be recorded to make it easier to fix the error. Functional Software, Inc. does not evaluate this data for advertising purposes.

Purpose and legal basis

The use of Sentry is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The exact storage period varies from case to case. Data will be deleted as soon as we have fixed the error and no longer need to see the error details. For more information on the storage period on the part of Functional Software, Inc., please refer to the Sentry Privacy Policy: https://sentry.io/privacy/.

Shopify CDN

Type and scope of processing

We use Shopify CDN to properly deliver the content on our website. Shopify CDN is a service provided by Shopify, Inc., which acts as a content delivery network (CDN) on our website to ensure the functionality of other services provided by Shopify, Inc. For said services, you will find a separate section in this Privacy Policy. This section is only about using the CDN.

A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Shopify, Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, where your IP address and, if applicable, browser data are transmitted like your user-agent. This data is processed solely for the purposes mentioned above and to maintain the security and functionality of Shopify CDN.

Purpose and legal basis

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Shopify, Inc. For more information, see the Shopify CDN Privacy Policy: https://www.shopify.com/legal/privacy.

Shopify Checkout

Type and scope of processing

We have integrated components of Shopify Checkout on our website. Shopify Checkout is a service provided by Shopify, Inc. and offers online payment solutions worldwide.

If you choose Shopify Checkout as your payment method, your information required for the payment process will be automatically transmitted to Shopify, Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

In this context, the following data is usually collected: name, address, company if applicable, e-mail address, telephone and mobile phone number and IP address.

Purpose and legal basis

The use of the service is based on the execution of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 (1) (b) GDPR.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Shopify, Inc. For more information, see the Shopify Checkout Privacy Policy: https://www.shopify.de/legal/datenschutz.

Ströer Ads

Type and scope of processing

We have integrated Ströer Ads on our website. Ströer Ads is a service provided by Ströer Media Deutschland GmbH that displays targeted advertising to users. Ströer Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Ströer Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. In addition, Ströer Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Ströer Ads, Ströer Media Deutschland GmbH, Ströer-Allee 1, 50999 Cologne, Germany.

Purpose and legal basis

The use of Ströer Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Ströer Media Deutschland GmbH. Further information can be found in the privacy policy for Ströer Ads: http://stroeer.de/service/datenschutz.html.

TRG Ads

Type and scope of processing

We have integrated TRG Ads on our website. TRG Ads is a service provided by The Reach Group GmbH that displays targeted advertising to users. TRG Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. TRG Ads collects information about visitor behavior on different websites. This information is used to optimize the relevance of advertising. TRG Ads also delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of TRG Ads, The Reach Group GmbH, Am Karlsbad 16, 10785 Berlin, Germany.

Purpose and legal basis

The use of TRG Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by The Reach Group GmbH. For more information, please see the TRG Ads Privacy Policy: https://trg.de/datenschutzerklarung/.

Trusted Shops CDN

Type and scope of processing

We use CDN to properly deliver the content of our website Trusted Shops. Trusted Shops CDN is a service of Trusted Shops GmbH, which acts as a content delivery network (CDN) on our website to ensure the functionality of other services of Trusted Shops GmbH. For said services, you will find a separate section in this Privacy Policy. This section is only about using the CDN.

A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, where your IP address and, if applicable, browser data are transmitted as your user agent. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Trusted Shops CDN.

Purpose and legal basis

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Trusted Shops GmbH. Further information can be found in the privacy policy for Trusted Shops CDN: https://business.trustedshops.de/impressum#datenschutz.

Trusted Shops Widget

Type and scope of processing

We have integrated components of Trusted Shops Widget on our website. Trusted Shops Widget is a review service that allows users to rate our services. If you rate our services, data about the service used may be transmitted to Trusted Shops GmbH to check the authenticity. Trusted Shops Widget enables us to obtain content such as reviews directly from Trusted Shops GmbH and display them on our website. For this purpose, your current IP address is usually transmitted to the service.

Furthermore, Trusted Shops Widget stores information by means of cookies in order to find out which online offers have been visited. In this case, your data will be passed on to the operator of Trusted Shops Widget, Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne.

Purpose and legal basis

The use of Trusted Shops Widget is based on Art. 6 para. 1 lit. f. GDPR to inform users about the quality of our services. If the user consents to the processing of his data, the legal basis for the processing is Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Trusted Shops GmbH. Further information can be found in the privacy policy for Trusted Shops Widget: https://business.trustedshops.de/impressum#datenschutz.

YouTube Video

Type and scope of processing

We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform that allows users to upload content, share it over the Internet, and get detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to compile reports. If a user is registered with YouTube, LLC, YouTube Video can associate the played videos with the profile.

When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and, if applicable, browser data are transmitted as your user agent.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. For more information, please see the privacy policy for YouTube Video: https://policies.google.com/privacy.

ad4mat Ads

Type and scope of processing

We have integrated ad4mat Ads on our website. ad4mat Ads is a service provided by advanced store GmbH that displays targeted advertising to users. ad4mat Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. ad4mat Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, ad4mat Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of ad4mat Ads, advanced store GmbH, Alte Jakobstraße 79-80, 10179 Berlin, Germany.

Purpose and legal basis

The use of ad4mat Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by advanced store GmbH. Further information can be found in the privacy policy for ad4mat Ads: https://www.advanced-store.com/de/datenschutz/.

twiago Ads

Type and scope of processing

We have integrated twiago Ads on our website. twiago Ads is a service provided by twiago GmbH that displays targeted advertising to users. twiago Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. twiago Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. In addition, twiago Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of twiago Ads, twiago GmbH, Gustav-Heinemann-Ufer 72b, 50968 Cologne, Germany.

Purpose and legal basis

The use of twiago Ads is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by twiago GmbH. Further information can be found in the privacy policy for twiago Ads: https://www.twiago.com/datenschutz/.

usemax advertisement

Type and scope of processing

We have integrated usemax advertisement on our website. usemax advertisement is a service provided by Emego GmbH that displays targeted advertising to users. usemax advertisement uses cookies and other browser technologies to evaluate user behavior and recognize users. usemax advertisement collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, usemax advertisement delivers targeted advertisements based on behavioral profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of usemax advertisement, Emego GmbH, Werdener Str. 36, 46047 Oberhausen, Germany.

Purpose and legal basis

The use of usemax advertisement is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TDDDG.

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Emego GmbH. For more information, please see the privacy policy for usemax advertisement: http://usemax.de/?l=privacy.

Aromatico Newsletter

Nichts mehr verpassen!

Melden Sie sich zum Aromatico Newsletter an und verpassen Sie nicht unsere neuesten Produkte und Top Angebote. Als Dankeschön erhalten Sie einen 5 € Gutschein* für Ihre nächste Bestellung per E-Mail.

* Der Aktionscode ist nur einmalig pro Kund*in einlösbar und der Mindestbestellwert ist 25 €. Sie können sich jederzeit wieder vom Newsletter abmelden. Ihnen wird jeweils ein Gutscheincode zugewiesen, den Sie einmalig einlösen können. Bei Mehrfachanmeldung wird kein neuer Code für Sie erzeugt.