Privacy policy
Unless otherwise stated below, providing your personal data is neither required by law or contract nor necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only where no other statement is made regarding the processing described below. “Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing personal information. Whenever you access our website, your internet browser transmits usage data to us or our web host / IT service provider, where it is stored in log files. Stored data includes the name of the requested page, date and time of access, IP address, volume of data transferred and requesting provider. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring trouble-free website operation and improving our services.
Contact
Controller
Please contact us if you wish. The controller is Birgit Eckmann, Schulze-Delitzsch-Straße 3, 46244 Bottrop, Germany, telephone 02045410643, info@primo-aroma.de.
Unsolicited contact by customers via email
If you initiate business contact by email, we collect your personal data (name, email address, message) only to the extent you provide it. Processing serves to handle and answer your enquiry. If contact concerns pre-contractual steps, such as advice about a prospective purchase or preparing a quotation, or an existing contract between us, processing is based on Article 6(1)(b) GDPR.
If contact is for other reasons, processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Article 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data is subsequently deleted subject to statutory retention periods, unless you consent to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message) only to the extent you provide it, for the purpose of contacting you. If contact concerns pre-contractual steps, such as advice about a prospective purchase or a quotation, or an existing contract between us, processing is based on Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and answering your enquiry. You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data is then deleted subject to statutory retention periods unless you consent to further processing and use.
Customer account · Orders
Customer account
When you open an account, we collect personal data to the extent specified there. Processing improves your shopping experience and simplifies order handling. It is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before withdrawal. Your account will then be deleted.
Collection, processing and disclosure of personal data for orders
When you place an order, we collect and process personal data only insofar as necessary to fulfil and handle the order and your enquiries. Providing the data is necessary to conclude the contract; otherwise no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary to perform a contract with you.
Data may be disclosed to the shipping companies and dropshipping providers you select, payment providers, order-processing service providers and IT service providers. We strictly comply with legal requirements in every case and limit transmission to the minimum necessary.
Advertising
Use of your email address for newsletters
Independently of contract performance, we use your email address solely for our own advertising through newsletters if you expressly consent. Processing is based on Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Unsubscribe using the link in the newsletter or by contacting us. Your address will then be removed from the mailing list.
Payment providers
Use of PayPal
All PayPal transactions are subject to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. These are small text files stored in or by the internet browser on a user's computer. When a user visits a website, a cookie may be stored on the operating system. It contains a characteristic string enabling the browser to be uniquely identified on a return visit.
Cookies are stored on your computer, giving you full control over their use. By selecting the appropriate browser settings, you can receive notice before cookies are set, decide individually whether to accept them and prevent storage and transmission of their data. Stored cookies can be deleted at any time. Please note that you may then be unable to use all website functions fully.
The following links explain how to manage and disable cookies in major browsers:
- Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in this policy, we use only technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you change pages and offer services. Certain functions cannot be offered without cookies because the browser must be recognised after a page change.
The use of cookies or comparable technologies is based on section 25(2) TTDSG. Processing of your personal data is based on Article 6(1)(f) GDPR and our overriding legitimate interest in optimal website functionality and user-friendly, effective services. You may object at any time on grounds relating to your particular situation.
Plug-ins and other features
Use of YouTube
We use the YouTube video embedding function provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). YouTube is affiliated with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The function displays YouTube videos in an iframe on the website, with “enhanced privacy mode” enabled. YouTube therefore does not store information about visitors. Information is transmitted to and stored by YouTube only when you watch a video. Your data may be transferred to the USA. There is no European Commission adequacy decision for the USA. Transfers are based, among other things, on standard contractual clauses as appropriate safeguards, available at https://policies.google.com/privacy/frameworks.
Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in designing the website according to needs and intended audiences. You may object at any time on grounds relating to your particular situation. Further information on data collection and use by YouTube and Google, your rights and privacy options is available at https://www.youtube.com/t/privacy.
Data subject rights and retention
Retention period
After the contract has been fully performed, data is initially retained for the warranty period, then subject to statutory retention periods, particularly tax and commercial requirements, and deleted when these expire unless you consent to further processing and use.
Your rights
Where the legal requirements are met, Articles 15 to 20 GDPR grant rights of access, rectification, erasure, restriction of processing and data portability. Article 21(1) GDPR also grants a right to object to processing based on Article 6(1)(f) GDPR and to processing for direct marketing.
Right to complain to a supervisory authority
Under Article 77 GDPR, you may complain to a supervisory authority if you consider that processing of your personal data is unlawful.
Right to object
Where processing described here is based on our legitimate interests under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation, with effect for the future. Following an objection, processing stops unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims.
Last updated: 06.08.2022