Legal notice and privacy notice social media
Am Limespark 2
65843 Sulzbach / TS, Germany
Local Court / Commercial Register:
Frankfurt / Main
VAT registration number:
Responsible for the content in accordance with 18 para 2 MStV (Medienstaatsvertrag [State Media Treaty]):
Mathias Delor, Javier González, Gesine Hild, Christina Oster-Daum, Hilko Prahl, Yvonne Wutzler
Am Limespark 2
65843 Sulzbach / Ts. Germany
Despite diligent review of the contents, cosnova assumes no liability for the content of external links. The contents of the linked pages are the sole responsibility of their operators. The content of this social media presence has been carefully compiled and checked.
Despite the review of the contents, cosnova assumes no liability or responsibility for the nature or accuracy of the information on this social media site, neither expressed nor implied.
for our Facebook Page essence cosmetics and our Instagram-Channel essence_cosmetics
Latest update: October 2022
Joint controllers for certain processing of personal data in the meaning of the EU General Data Protection Regulation („GDPR“) in the context of operating the Fanpages are:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour Dublin 2
(“Meta Platforms Ireland Limited”)
As the operator of our Fanpages, we have entered into agreements with Meta Platforms Ireland Limited regarding the joint control. The relevant document, „Page-Insights Controller Addendum“, which also describes in more detail which processing activities are covered by joint control is available at:
2. Data protection officer contact
Our data protection officer is: Moritz Görmann, CTM-COM GmbH, Wilhelm-Leuschner-Straße 33, 64380 Roßdorf, Germany, Tel. +49 6154 - 57605-0, Email: m.goermann(at)ctm-com.de
3. Data processing in the context of operating the Facebook Fanpage
As the operator of the Fanpages, we use the „Insights“ function made available by Meta Platforms Ireland Limited. Through Insights, we receive statistical information from Meta Platforms Ireland Limited (e.g. total number of page views, „Likes“, page activities, etc.). We only receive this statistical information in anonymous form, which means that we cannot attribute this information to specific users who have visited our Page. We also do not have access to the data underlying these statistics. Meta Platforms Ireland Limited provides information about Insights on the page „Information about Page Insights“, which is available here:
If you interact with us through the Fanpages, and especially if you contact us, we may receive additional information from you, e.g. because of your comments or private messages which you send through the Fanpage. We may store your comments (usually in the form of screenshots) if we decide to delete or block such comments because of inappropriate or illegal content.
4. Purposes of processing
If you interact with us through the Fanpages (e.g. when you send a private message), we will process any personal data for purposes of communicating and interacting with you. We may store your comments (usually in the form of screenshots) if we decide to delete or block such comments because of inappropriate or illegal content.
5. Transfer of personal data
Meta Platforms Ireland Limited processes personal data about you which has been collected in the context of your use of the Fanpages, and may be transferred to countries outside the European Union. Meta Platforms Ireland Limited provides a general description of the personal data it collects and processes in its Data Use Policy. There, you also find information about how to contact Meta Platforms Ireland Limited and settings for advertising. This information is available at: .
We may decide to inform the competent authorities about comments with illegal content.
6. Legal Basis
We operate these Fanpages to inform about our products and to interact with you. The processing is based on our legitimate interests, Art. 6(1)(f) GDPR, to have effective communications and interactions with user and an optimized presentation of our products and services. We also rely on legitimate interests when we store comments or inform the competent authorities about comments. Or legitimate interest is the preparation for possible legal disputes and the general public’s interest having competent authorities investigate illegal behaviour. We hereby inform you about your right to object, which you have when the processing is based on Art. 6(1)(f) GDPR (see Section 7 below)
7 . Your data subject rights
(a) Right of access to information
You have the right, at any time and on request, to obtain from us information about the personal data processed by us concerning you in accordance with Art. 15 GDPR. You can send a request by post or email for this purpose to the contact address provided.
(b) Right to rectification of incorrect data
You have the right to demand that we rectify, without undue delay, the personal data that concerns you in accordance with Art. 16 GDPR if it is incorrect. Please contact us at the address provided to do so.
(c) Right to erasure
You have the right, under the conditions described in Art. 17 GDPR, to demand that we erase the personal data that concerns you. These conditions provide in particular for a right of erasure if the personal data is no longer required for the purposes for which it was collected or otherwise processed, and in cases of unlawful processing, withdrawal or the existence of an obligation to erase the data under European Union law or the law of the member state to which we are subject. To exercise your right of erasure, please contact us at the address provided.
(d) Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify its accuracy, and if the user requests restricted processing instead of erasure if there is an existing right to erasure; also if the data is no longer required for the purposes we pursue, but the user needs it to assert, exercise or defend legal claims, and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restrict processing, please contact us at the address provided.
(e) Right to data portability
You have the right to receive from us the personal data concerning you which you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. To exercise your right to data portability, please contact us at the address provided.
(f) Right to object
Under Art. 21 GDPR, for reasons arising from your particular situation, you have the right to object at any time to the processing of personal data that concerns you which is carried out on the basis of Art. 6(1)(1)(e) or (f) GDPR. We will cease processing your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
(g) Right to withdraw consent (in the event of consent having been given)
You have the right to withdraw consents given in accordance with Art. 7(3) GDPR with effect for the future. Withdrawal of consent does not affect the lawfulness of the processing carried out until its withdrawal on the basis of the consent.
(h) Right to lodge a complaint
You also have the right to lodge complaints with the data protection supervisory authorities.
The competent supervisory authority for us is:
Der Hessische Datenschutzbeauftragte (The Hessian Data Protection Commissioner)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
P.O. Box 31 63, 65021 Wiesbaden, Germany
Telephone: +49 611 14080
Fax: +49 611 1408 – 900