Privacy Policy

Entity Responsible for the processing of data:

Geske Beauty Tech Inc.
360 NW 27th Street, Miami, FL 33127, United States
privacymanager@geske.com

Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.

1. Access data and hosting

You may visit our website without revealing any personal information. With every visit on the website, the web server automatically stores a server log file which typically contains the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data) and documents the request. This access data is analyzed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. All access data is deleted no later than thirty (30) days after the end of your visit to our website.

1.1 Hosting

The services for hosting and displaying the website are partly provided by our service providers on the basis of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

1.2 Content Delivery Network

For a shorter loading time for some offers, we use a Content Delivery Network ("CDN"). This service provides content (e.g. large media files) via regionally distributed servers of external CDN service providers. For this reason, access data will be processed on the servers of these service providers. We engage our service providers on the basis of processing on our behalf. Our service providers are located and/or use servers in countries outside the EU and the EEA. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2. Data processing for the purposes of processing the contract, establishing contact

2.1 Data processing for the purposes of performing the contract

For the purpose of performing the contract (including inquiries regarding the processing of any existing warranty and performance fault claims as well as any statutory updating obligations), we collect personal data which has been provided to us voluntarily as part of your order. Mandatory fields are marked as such where we need the data to process the order and we cannot ship the order without this information. Which data is collected can be seen from the respective input forms.

After complete processing of the order, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

2.2 Customer account

After you voluntarily give your consent by opening a customer account, we will use and store your data for the purpose of opening the customer account as well as for further future orders on our website. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

3. Data processing for the purposes of shipment

We will forward your data to the shipping company within the scope required for the shipment and delivery of the ordered goods.

Data transmission to a shipping provider for the purpose of shipment notification

Provided that you have given us your explicit consent, during or after your order, we will forward your e-mail address to the selected shipping provider in order to enable them to contact you for the purpose of shipment notification or coordination prior to shipment.

This consent may be withdrawn at any time by sending a message to the contact information described in this privacy policy or directly to the shipping provider using the contact address listed below. After consent withdrawal, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data, or we have reserved the right to use your data for other purposes which are permitted by law and about which we inform you in this privacy policy.

4. Data processing for the purposes of payment

As part of the payment process in our online shop, we work together with these partners: technical service provider, credit institution, payment service provider. Depending on the selected payment method, we forward only the data necessary for processing the payment transaction to our technical service providers or to the authorized credit institutions or to the selected payment service provider insofar as this is necessary for the payment process. This serves the fulfillment of the contract. In certain cases, payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via technical solution within the ordering process. In this respect, the privacy policy of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.

We may forward other data to our service providers, which they may use for the purpose of fraud prevention and to optimize our payment processes (e.g. invoicing, processing of contested payments, accounting support) together with the data necessary to process the payment as our processors. This serves to safeguard our legitimate interests in fraud prevention or efficient payment management that are overriding in the process of balancing of interests.

5. Marketing via E-mail

5.1 E-mail newsletter with subscription and newsletter tracking

If you subscribe to our newsletter, we will regularly send you our email newsletter based on your consent, using the data disclosed by you separately for this purpose. You can unsubscribe from the newsletter at any time. This can either be done by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the list of recipients, unless you have expressly consented to the further use of your data or we have reserved the right to use your data for other purposes that are permitted by law and about which we inform you in this privacy policy.

We evaluate your user behavior when sending the newsletter – we measure, store and evaluate opening rates and click-through rates for the purpose of designing future newsletter campaigns (newsletter tracking). For this evaluation, the emails sent contain single-pixel technologies (tracking pixels) that are stored on our website. For the evaluations, we link the following "newsletter data”:

• the page from which the page was requested (so-called referrer URL),
• the date and time of the request,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• the e-mail address,
• the date and time of registration and confirmation.

If you do not wish to receive newsletter tracking, it is possible to unsubscribe from the newsletter at any time as described above. The “newsletter data” will be stored as long as you have subscribed to the newsletter.

5.2 Newsletter mailing

The newsletter is sent to you by our service provider who processes data on our behalf and to whom we disclose your email address. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

6. General information

In order to make visiting our website attractive, enable the use of certain functions, display suitable products or for market research, we use certain technologies, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser during your next visit (persistent cookies).

When you use our online services, we use technologies that are necessary to provide certain service you have expressly requested. The storage of information in your device or access to information that is already stored in your device does not require consent in this respect.

For functions that are not necessary, the storage of information in your device or access to information that is already stored in your device requires your consent. Please note that if you do not give your consent, parts of the website may not be available for unrestricted use. Any consent you may have given will remain valid until you adjust or reset the respective settings in your device.

In addition, we use technologies to fulfill the legal obligations, which we are subject to (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in this privacy policy.

On our website, we may use other technologies, which are not listed individually in this privacy policy. Further information on these technologies and their respective legal basis can be found on the platform of our consent management service Usercentrics.

We only use technologies that are strictly necessary for the use of certain functions of our website like the shopping cart function. These technologies are used to collect and process IP addresses, time of visit, device, and browser information as well as information on your use of our website.

You can find the cookies settings for your browser by clicking on the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

You can withdraw your consent at any time by sending a message to the contact option described in the privacy policy. If cookies are not accepted, the functionality of our website may be limited.

6.1 What types of cookies are being used?

Functional cookies: These cookies are used for certain features of our website, to improve the website’s navigation or deliver customized and relevant information.

Targeting cookies: These cookies record information about your visit to the website, previously viewed pages, and links you clicked. We use this information to tailor our website and display ads which match your interests.

Marketing Cookies: These cookies record information about your visit to the website, previously viewed pages, and links you clicked. We use this information to tailor our website and displayed ads which match your interests.

Analytical / performance cookies: These cookies enable collecting anonymized data about user behavior on our website. We analyze them and recommend you products that may be interesting to you.

Essential cookies: These cookies are necessary to enable you to use our website. This includes cookies that enable you to log into the customer area or add items to your shopping cart.

6.2 Use of Usercentrics Consent Management Platform for obtaining and managing consent

On our website we use the Usercentrics Consent Management Platform ("Usercentrics") to inform you about the cookies and the technologies we use on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies. This is required to be able to prove your consent to the processing of your personal data. The consent management service Usercentrics is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, Usercentrics' web server stores a server log file, which contains your anonymized IP address, the date and time of your visit, device and browser information as well as information on your behavior. Your data will be deleted after three years, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is legally permitted and about which we inform you in this privacy policy.

6.2 Use of Google services

We use the following technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Unless otherwise specified for the specific technologies, data processing is based on an agreement concluded for the respective technology between jointly responsible. Further information about data processing by Google can be found in Google's privacy policy.

6.3 Google Analytics

For the purpose of website analytics, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which usage profiles are created using pseudonyms. Cookies can be used for this purpose. Your IP address will not be merged with other data from Google. The data processing is based on a data processing agreement with Google.

6.4 Google Ads

For advertising purposes in the Google search results as well as on the websites of third parties, the so-called Google Remarketing Cookie is used when you visit our website, which automatically enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information on your use of our website), by means of a pseudonymous cookie ID and on the basis of the pages you visit. Any further data processing only takes place if you have activated the setting "personalized advertising" in your Google account. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior when you arrive on our website via a Google Ads ad. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as a visit to a website or newsletter registration) may be collected, from which usage profiles are created using pseudonyms.

6.5 Google Tag Manager

By means of Google Tag Manager, we can manage various codes and services on our website. When implementing the individual tags, Google may also process personal data. The data processing is carried out based on an order processing agreement by Google. By using Google Tag Manager, a simplified integration of various services/technologies can be achieved.

If you do not wish to use individual tracking services and deactivate them, the deactivation remains in place for all tracking tags that are integrated by Google Tag Manager.

6.6 Use of Microsoft services

We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereafter "Microsoft"). The data processing is carried out on the basis of an agreement between jointly responsible parties. The information automatically collected by Microsoft technologies about your use of our website is usually transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. For more information about Microsoft's data processing practices, please see Microsoft's privacy policy.

For advertising purposes in Bing, Yahoo and MSN search results, as well as on the websites of third parties, the Microsoft Advertising Remarketing Cookie is used when you visit our website, which automatically enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information as well as information on your use of our website) and by means of a pseudonymous cookie ID and based on the pages you visit.

6.7 Facebook services

We use the Facebook pixel within the framework of the technologies of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook (by Meta)”) as described below. The Facebook pixel is used to automatically collect and store data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as a visit to a website or newsletter registration), from which user profiles are created using pseudonyms. For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables recognition of your browser when visiting other websites by means of a pseudonymous cookie ID. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activities and to provide other services associated with website use, in particular personalized and group-based advertising. We have no influence on data processing by Facebook and only receive statistics based on Facebook pixels. The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. Further information about data processing by Facebook can be found in Facebook's (by Meta) privacy policy.

Use of AWIN for online marketing

Through our advertising partner AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany ("AWIN"), we market space for third-party advertisements. These ads are displayed to you at various locations on this website. AWIN can use cookies to track the progress of the respective order and in particular to verify that you have clicked on the respective advertisement and then ordered the product. For this purpose, data (IP address, time of visit, device and browser information as well as information on your use of our website) is collected, transmitted to and processed by AWIN. We have no influence on this data processing. The data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.

7. Social Media

7.1 Social Plugins by Social Media Platforms

Social plugin buttons linking to social media platforms are used on our website. These are only integrated into the page as HTML links, so that no connection to the servers of the respective provider is established when our website is accessed. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser. There you can click the Like or Share button.

7.2 Our online presence on Social Media Platforms

If you have given your consent to the respective social media provider, when you visit our social media pages your data will be automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media provider, as well as a contact option and your rights and settings options for the protection of your privacy, please refer to the provider's privacy policies linked below. Should you still require assistance in this regard, please contact us.

• Facebook (by Meta): Privacy Policy
• Instagram (by Meta): Privacy Policy
• YouTube (by Google): Privacy Policy
• LinkedIn: Privacy Policy

8. Contact options and your rights

8.1 Your rights

If we process personal data as described above, you may object to such data processing with future effect. If your data is processed for direct marketing purposes, you may exercise this right at any time as described above. If your data is processed for other purposes, you have the right to object only on grounds relating to your particular situation and state of residence, as set forth below:

• Art. 21 GDPR: Right to object
• Art. 20 GDPR: Right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transmission to another controller
• Art. 77 GDPR: Right to complain to a supervisory authority

As a rule, you can contact the supervisory authority at your habitual place of residence or workplace or at our company headquarters.

8.2 State Law Protections

State law usually protects users who are residents or consumers from a particular state with certain exceptions. This Section B contains specific protections we apply under the state laws discussed below.

Some jurisdictions provide consumers or certain other users with special rights which we respect. In this document, we disclose information about certain state rights and our general privacy policy and your rights. Depending on the particular issue and situation, we protect your data under California, Colorado, Connecticut, Delaware, Nevada, Virginia, Utah, or other state privacy laws, under some aspects of U.S. federal law, and under the generally stricter European data protection law. In the interest of transparency, we state the options you have as well. In the event of conflicts between laws, we will strive to implement the stricter rules to protect your privacy and your data.

8.1.1. California Disclosure

The California Consumer Privacy Act of 2018 as amended (CCPA) gives California consumers more control over the personal information that businesses collect about them. This law secures privacy rights for California consumers, including:

• The right to know about the personal information a business collects about them, how it is used and shared, and to limit the use and disclosure of sensitive personal information
• The right to opt-out of the sale of personal information
• The right to delete and correct personal information collected from them (with some exceptions)
• The right to non-discrimination for exercising their CCPA rights
• The right to complain to the California supervisory authority

These rights overlap with those under the generally stricter rules that we practice.

8.1.2. Colorado Privacy Act

We strive to abide by the Colorado Privacy Act. Under this Act, you enjoy certain rights, including the right to opt out of the processing of personal information for targeted advertising, its sale, and certain profiling. You may authorize another person to exercise your rights. You also have the right to access your personal information, correct it, and request that we delete it.

8.1.3. Connecticut Data Privacy Law

You have the right to:

• Confirm whether or not a controller is processing your personal data and to access such personal data
• Correct inaccuracies in your personal data
• Delete personal data provided by or obtained about you
• Obtain a copy of your personal data processed by us, in a portable and, to the extent technically feasible, readily usable format
• Opt-out of the processing of personal data for purposes of targeted advertising, the sale of personal data (except as provided under Connecticut law), or profiling

8.1.4. Delaware Online Privacy

Delaware law requires that we identify the information collected, offer users an opportunity to review and change the data, describe the notification process for changes in the Privacy Policy, identify third parties to the information, and include an effective date. It also protects your rights with respect to any Do Not Track request that you may submit to us.

8.1.5. Nevada Online Privacy

We apply our Privacy Policy to comply with the terms of the Nevada online privacy statute. If you are a Nevada resident, you have the right to request certain Personal Information from us regarding the collection and sale of your Personal Information acquired through your use of the App or visit to the Site or use of our Services. You may exercise control over the use of these technologies.

If you would like to review, correct, or update your Personal Information, you may make a verifiable request to our Data Protection Officer at the following contact information:

Trusted Shops AG
Subbelrather Str. 15c
50823 Köln
Email: dsgvo@trustedshops.de
Tel: +49 221 77536 5151

Such request shall include your full name, your email address, and a Nevada postal address. We will respond to your verified request as soon as reasonably practicable, but no later than sixty (60) days after receipt. We will notify you of any delay in our response and will provide a date of our response.

8.1.6. Virginia Consumer Data Protection Act

Under Virginia law, consumers enjoy special rights to transparency, correction, deletion, requests for data, appeal, opting out of the processing and sale of personal data in addition to the terms of our general Privacy Policy. In the event that the statute applies to you, we will abide by its provisions for the enforcement and protection of your rights. In addition, we are required to perform assessments of our practices which we do.

8.1.7. Utah Consumer Privacy Act

After December 31, 2023, we will also comply with the Utah Consumer Privacy Act. Before then, your personal information is protected by the general terms of this Privacy Policy stated in Section C below.

8.1.8. Laws Effective in 2024

We update our Privacy Policy and practices regularly. In 2024, our policy will reflect new laws as they become effective in Florida, California, Washington, Oregon, Texas, Montana, Iowa, Tennessee, and Indiana and as they apply to consumers and other protected persons using our App and Sites. Before then, your Personal Information is protected by the general terms of this Privacy Policy.

8.1.9. Federal Law

Please note that we comply with federal law as well. While there presently is no general privacy law at the federal law, the Trade Commission Act prohibits unfair or deceptive trade practices, including practices that violate consumers' privacy. Similarly, privacy protection is built into the Children’s Online Privacy Protection Act requires websites and online services that target children under the age of 13 to obtain parental consent before collecting personal information from those children. We do not target such children and do not permit their use of our App and Sites.

Any inquiries to us, for the deletion, correction, revocation of consent, or required release of information to you under these laws should be directed to our data protection officer:

Trusted Shops AG
Subbelrather Str. 15c
50823 Köln
Email: privacymanager@geske.com
Tel: +49 221 77536 5151

You will need to provide your name, contact information, and a clear message in English that identifies your request so that the data protection officer can respond to you. You should disclose the state where you use our App as a consumer or resident so that we can abide by the specific rights and options that apply to you.

8.2 Termination of Data Processing

After you have exercised your right to object, we will no longer process your personal data for the purposes covered by your exercised rights unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. This does not apply to the processing of personal data for direct marketing purposes. In such a case we will terminate any processing of your personal data for any purposes.

8.4 Contact options

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, restrict or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact us directly using the contact information below:

9. Data protection Officer:

Trusted Shops AG
Subbelrather Str. 15c
50823 Köln
Email: dsgvo@trustedshops.de
Tel: +49 221 77536 5151

Entity Responsible for the processing of data is:

Geske Beauty Tech Inc.
360 NW 27th Street Miami
FL 33127
United States
Email: privacymanager@geske.com

Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.