Our website uses “Matomo” (formerly “Piwik”), a web analytics service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo stores cookies on your terminal device that enable an analysis of your use of our website. The information collected in this way is stored exclusively on our server, namely the following data:
- two bytes of the IP address of the user’s calling system
- the web page called up
- the website from which the user accessed the accessed website (referrer)
- the subpages accessed from the accessed website
- the time spent on the website
- the frequency with which the website is accessed
Our website uses Matomo with the setting “Anonymize Visitors’ IP addresses”. This means that IP addresses are processed in abbreviated form, thus excluding the possibility of direct personal references. The software is set so that the IP addresses are not stored in full, but 2 bytes of the IP address are masked (e.g. 192.168.xxx.xxx). In this way, an assignment of the shortened IP address to the calling computer is no longer possible. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
Legal basis for the processing of personal data
The legal basis for the processing of the user’s data is Art. 6 para. 1 lit. f DSGVO or § 15 para. 3 TMG.
Purposes of processing
We use Matomo to analyze the use of our website and individual functions and offers in order to continuously improve the user experience. Through the statistical evaluation of user behavior, we improve our offer and make it more interesting for visitors.
Possibility of objection and removal
Google Tag Manager
Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The tool itself (which implements the tags) does not store any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.
Information of the third party provider
Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with this service provider as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
Art. 6 (1) f DSGVO (legitimate interest).
Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Scope of processing
We use the function ‘anonymizeIP’ (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
During your website visit, the following data is collected, among other things:
- The pages you visit, your “click path”
- Achievement of “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases)
- Your user behavior (for example, clicks, dwell time, bounce rates)
- Your approximate location (region)
- Your IP address (in shortened form)
- Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)
- Your internet service provider
- The referrer URL (via which website/ via which advertising medium you came to this website)
Purposes of the processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your (pseudonymous [NOT USING USER ID]) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.
Transmission to third countries
A transfer of data to the USA cannot be ruled out.
The data sent by us and linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by
not giving your consent to the setting of the cookie or
downloading and installing the browser add-on to disable Google Analytics here.
You can also prevent the storage of cookies by selecting the appropriate settings on your browser software. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites.
Legal basis and revocation option
for this data processing is your consent, Art.6 Abs.1 S.1 lit.a DSGVO.
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. Click here.
Google Ads Conversion Tracking
Google Ads Conversion
We use Google Ads Conversion to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or user clicks, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers’ websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
Google Ads Remarketing
Google Ads Remarketing
We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called “Google Ads” or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.
More information regarding data safety at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. You can also visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
Transfers to third countries are possible. So-called standard contractual clauses according to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.
You can prevent participation in this tracking process in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will prevent you from receiving third-party ads; b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin; c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin, e) by means of appropriate cookie settings. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
Lifetime of cookies: up to 180 days (this only applies to cookies set via this website).
This website uses the so-called “Facebook Pixel” of the social network “Facebook” of Facebook Inc. (“Facebook”) for the following purposes:
A. Facebook (Website) Custom Audiences
We use the Facebook Pixel for remarketing purposes in order to be able to address you again within 180 days. This enables users of the website to be shown interest-based advertisements (“Facebook Ads”) when they visit the social network “Facebook” or other websites that also use the procedure. We thereby pursue the interest of displaying advertisements that are of interest to you in order to make our website or offers more interesting for you.
B. Facebook Conversion
In addition, with the help of the Facebook Pixel, we want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel, we can track the effectiveness of the Facebook Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called “conversion”).
We are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) for the collection and transfer of data as part of this process. This applies for the following purposes:
- The creation of individualized or appropriate ads, as well as for their optimization.
- The delivery of commercial and transactional messages (e.g. via Messenger).
The following processing operations are therefore not covered by joint processing:
- Processing that occurs after collection and transmission is the sole responsibility of Facebook.
- The creation of reports and analyses in aggregated and anonymized form is carried out as part of commissioned processing and is therefore our responsibility.
For shared responsibility, we have concluded a corresponding agreement with Facebook, which can be accessed here: https://www.facebook.com/legal/controller_addendum
. This sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to joint responsibility. The contact details of the responsible party, as well as of Facebook’s data protection officer, are available here: https://www.facebook.com/about/privacy
We have agreed with Facebook that Facebook can be used as a contact point for the exercise of data subjects’ rights (see section 1.3 ). This is without prejudice to the competence of the data subject rights. More information on how Facebook processes personal data, including its legal basis and further information on data subjects’ rights can be found here: https://www.facebook.com/about/privacy. We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO. Information on the data security conditions can be found here: https://www.facebook.com/legal/terms/data_security_terms and on processing operations based on standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We also share the collected data with the respective internal departments for processing, as well as with other affiliated companies within the Beiersdorf Group or with external service providers, order processors (e.g. platform, hosting, support, and analysis service providers) in accordance with the required purposes (to perform ad playout and analysis). Platform/hosting service providers receive access to personal data from a third country (countries outside the European Economic Area). So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service providers as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
Deactivation of the “Facebook Custom Audiences” function is available here and for logged-in users at https://www.facebook.com/settings/?tab=ads#.