Legal notice and privacy notice social media

Imprint

cosnova GmbH
Am Limespark 2
65843 Sulzbach / TS, Germany

Telephone: +49 (0) 6196 / 76156-0
Fax: +49 (0) 6196 / 76156-1199
E-mail: info@cosnova.com
www.cosnova.com

General Management:
Mathias Delor
Javier González
Gesine Hild
Dennis Martin
Thorsten Muehl
Christina Oster-Daum
Hilko Prahl
Stefan Weinmiller
Yvonne Wutzler

Local Court / Commercial Register:
Frankfurt / Main
HRB 54730

VAT registration number:
DE 813324233

Responsible for the content in accordance with 18 para 2 MStV (Medienstaatsvertrag [State Media Treaty]):
Mathias Delor, Javier González, Gesine Hild, Dennis Martin, Thorsten Muehl, Christina Oster-Daum, Hilko Prahl, Stefan Weinmiller, Yvonne Wutzler
Am Limespark 2
65843 Sulzbach / Ts. Germany

Despite diligent review of the contents, cosnova assumes no liability for the content of external links. The contents of the linked pages are the sole responsibility of their operators. The content of this social media presence has been carefully compiled and checked.

Despite the review of the contents, cosnova assumes no liability or responsibility for the nature or accuracy of the information on this social media site, neither expressed nor implied.

Privacy Notice

for our Facebook Page essence cosmetics and our Instagram-Channel essence_cosmetics

Latest update: March 2024

In this Privacy Policy, we provide information about certain processing of personal data when you use the essence cosmetics Facebook Page and/or our Instagram Channel essence cosmetics (together „Fanpages“).

The information in this document enhances our general Privacy Policy which is available at: Data Protection

1. Controller

Joint controllers for certain processing of personal data in the meaning of the EU General Data Protection Regulation („GDPR“) in the context of operating the Fanpages are:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour Dublin 2
Ireland
(“Meta Platforms Ireland Limited”)

and

cosnova GmbH
Am Limespark 2
65843 Sulzbach, Germany
E-mail: info@cosnova.com
(“cosnova” or “we”)

As the operator of our Fanpages, we have entered into agreements with Meta Platforms Ireland Limited regarding the joint control. The relevant document, „Page-Insights Controller Addendum“, which also describes in more detail which processing activities are covered by joint control is available at:
https://www.facebook.com/legal/terms/page\_controller\_addendum.

2. Data protection officer contact

You can contact Meta Platforms Ireland Limited’s data protection officer at: https://www.facebook.com/help/contact/540977946302970

Our data protection officer is: Moritz Görmann, CTM-COM GmbH, Wilhelm-Leuschner-Straße 33, 64380 Roßdorf, Germany, Tel. +49 6154 - 57605-0, Email: m.goermann(at)ctm-com.de

3. Data processing in the context of operating the Facebook Fanpage

As the operator of the Fanpages, we use the „Insights“ function made available by Meta Platforms Ireland Limited. Through Insights, we receive statistical information from Meta Platforms Ireland Limited (e.g. total number of page views, „Likes“, page activities, etc.). We only receive this statistical information in anonymous form, which means that we cannot attribute this information to specific users who have visited our Page. We also do not have access to the data underlying these statistics. Meta Platforms Ireland Limited provides information about Insights on the page „Information about Page Insights“, which is available here: https://www.facebook.com/legal/terms/information\_about\_page\_insights\_data

Informationen regarding Meta Platforms Ireland Limited’s use of cookies is available at: https://www.facebook.com/policies/cookies/.

Further information about Meta Platforms Ireland Limited’s processing of personal data is available in Meta Platforms Ireland Limited’s Data Use Policy: https://www.facebook.com/about/privacy/.

If you interact with us through the Fanpages, and especially if you contact us, we may receive additional information from you, e.g. because of your comments or private messages which you send through the Fanpage. We may store your comments (usually in the form of screenshots) if we decide to delete or block such comments because of inappropriate or illegal content.

4. Purposes of processing

We operate the Fanpages to inform about our products and to communicate with you. For this purpose, we also use the data made available through „Insights“. This data helps us to understand your interests and to better reach our audience. We can advertise based on interests and to publish more relevant content on our Fanpages. Further information about us and our products is available at Home; our general Privacy Policy is available at Data Protection.

You have the right to declare an opt-out to Meta Platforms Ireland Limited and influence which advertising you will see as a Facebook user: <https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com>. Further settings can be changed here: https://www.facebook.com/help/contact/367438723733209

If you interact with us through the Fanpages (e.g. when you send a private message), we will process any personal data for purposes of communicating and interacting with you. We may store your comments (usually in the form of screenshots) if we decide to delete or block such comments because of inappropriate or illegal content.

5. Transfer of personal data

Meta Platforms Ireland Limited processes personal data about you which has been collected in the context of your use of the Fanpages, and may be transferred to countries outside the European Union. Meta Platforms Ireland Limited provides a general description of the personal data it collects and processes in its Data Use Policy. There, you also find information about how to contact Meta Platforms Ireland Limited and settings for advertising. This information is available at: http://en-gb.facebook.com/about/privacy.

Meta Platforms Ireland Limited’s full Data Use Policy is available at: https://en-gb.facebook.com/full\_data\_use\_policy.

In the context of the joint control, we do not receive any personal data from Meta Platforms Ireland Limited. Other personal data obtained through the Fanpage is processed in accordance with our general Privacy Policy. We may decide to inform the competent authorities about comments with illegal content.

6. Legal Basis

We operate these Fanpages to inform about our products and to interact with you. The processing is based on our legitimate interests, Art. 6(1)(f) GDPR, to have effective communications and interactions with user and an optimized presentation of our products and services. We also rely on legitimate interests when we store comments or inform the competent authorities about comments. Or legitimate interest is the preparation for possible legal disputes and the general public’s interest having competent authorities investigate illegal behaviour. We hereby inform you about your right to object, which you have when the processing is based on Art. 6(1)(f) GDPR (see Section 7 below)

7. Chatbots (Chatfuel)

cosnova may use a chatbot provided by 200 LABS, INC., d/b/a Chatfuel, 490 Post Street, Ste. 526, San Francisco, CA 94102, United States of America.

We use Chatfuel for purposes of communication via Instagram [and Facebook Messenger]. We and Chatfuel will use the data you provide as part of the communication, as well as log data, such as your browser, device information and the website from which the request came in. We will also analyze user activity, and information available from Instagram, such as Instagram name, Instagram handle, avatar, Instagram follower count, whether you follow our Instagram account or whether we follow yours, and whether you are a verified user. Since the communication will take via tools provided by Meta Ireland Limited, Meta Ireland Limited will also obtain all data generated as part of the communication with Chatfuel.

Chatfuel’s Privacy Policy is available at: https://chatfuel.com/files/PrivacyPolicy-EU.pdf. This document also contains additional information about international transfers, which are based on Standard Contractual Clauses

8. Your data subject rights

(a) Right of access to information

You have the right, at any time and on request, to obtain from us information about the personal data processed by us concerning you in accordance with Art. 15 GDPR. You can send a request by post or email for this purpose to the contact address provided.

(b) Right to rectification of incorrect data

You have the right to demand that we rectify, without undue delay, the personal data that concerns you in accordance with Art. 16 GDPR if it is incorrect. Please contact us at the address provided to do so.

(c) Right to erasure

You have the right, under the conditions described in Art. 17 GDPR, to demand that we erase the personal data that concerns you. These conditions provide in particular for a right of erasure if the personal data is no longer required for the purposes for which it was collected or otherwise processed, and in cases of unlawful processing, withdrawal or the existence of an obligation to erase the data under European Union law or the law of the member state to which we are subject. To exercise your right of erasure, please contact us at the address provided.

(d) Right to restriction of processing

You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify its accuracy, and if the user requests restricted processing instead of erasure if there is an existing right to erasure; also if the data is no longer required for the purposes we pursue, but the user needs it to assert, exercise or defend legal claims, and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restrict processing, please contact us at the address provided.

(e) Right to data portability

You have the right to receive from us the personal data concerning you which you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. To exercise your right to data portability, please contact us at the address provided.

(f) Right to object

Under Art. 21 GDPR, for reasons arising from your particular situation, you have the right to object at any time to the processing of personal data that concerns you which is carried out on the basis of Art. 6(1)(1)(e) or (f) GDPR. We will cease processing your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

(g) Right to withdraw consent (in the event of consent having been given)

You have the right to withdraw consents given in accordance with Art. 7(3) GDPR with effect for the future. Withdrawal of consent does not affect the lawfulness of the processing carried out until its withdrawal on the basis of the consent.

(h) Right to lodge a complaint

You also have the right to lodge complaints with the data protection supervisory authorities.

The competent supervisory authority for us is:

Der Hessische Datenschutzbeauftragte (The Hessian Data Protection Commissioner)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
P.O. Box 31 63, 65021 Wiesbaden, Germany
Telephone: +49 611 14080
Fax: +49 611 1408 – 900
Email: poststelle@datenschutz.hessen.de
Internet at: http://www.datenschutz.hessen.de