Information on the collection of personal data
1.1 General information
We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data is any information that can be used to identify you personally.
1.2 Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Private Label Cosmetic Company GmbH Gaußstraße 13 D-85757 Karlsfeld, Germany +49 (0) 8131 / 390 – 02 info@plcc-gmbh.deThe controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3 Data Protection Officer
External Data Protection Officer Dr. Sebastian Kraska Marienplatz 2 80331 Munich, Germany +49 (0) 8131 / 390-269 info@plcc-gmbh.com1.4 SSL/TLS encryption
For security reasons and to protect the transmission of personal data and other confidential content, such as enquiries submitted to us, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.
Data collected when you visit our website
When you use our website for information purposes only and do not register or otherwise provide information to us, we collect only the data that your browser transmits to our server in so-called server log files. The following data may be collected for technical purposes in order to display the website:
- The page or file accessed
- Date and time of access
- Amount of data transferred
- Referring page or source
- Browser used
- Operating system used
- IP address used, where applicable in anonymised form
Processing is carried out on the basis of Article 6(1)(f) GDPR and our legitimate interest in ensuring the stability, security and functionality of the website. The data is not used for other purposes unless there are specific indications of unlawful use.
Cookies and similar technologies
We use cookies and similar technologies on our website. Cookies are small text files stored on your device. Some cookies are deleted when you close your browser, while others remain stored for a defined period and allow your browser to be recognised on a later visit.
Cookies that are technically necessary for the operation of the website may be used on the basis of Article 6(1)(f) GDPR. Optional cookies and technologies that are used for analytics, marketing or comparable purposes are activated only where the required consent has been obtained in accordance with Article 6(1)(a) GDPR. You may withdraw or adjust your consent at any time with effect for the future via the cookie settings available on this website.
You can also configure your browser to inform you whenever cookies are set, to accept cookies individually or to refuse cookies in certain cases or in general. Disabling cookies may restrict the functionality of this website.
Cookie settings
The specific cookies, providers, purposes, storage periods and legal bases applicable to this website should be displayed in the consent management platform and kept up to date.
Contacting us
When you contact us, for example by email or through a contact form, personal data is collected. The data collected depends on the information you provide and the fields used in the relevant form. We process this information solely to respond to your enquiry and to manage the associated communication.
Processing is based on our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. Where your enquiry is related to entering into or performing a contract, Article 6(1)(b) GDPR serves as an additional legal basis.
Once your enquiry has been fully processed, your data will be deleted unless statutory retention obligations apply or another legal basis permits continued storage.
Your rights as a data subject
Subject to the applicable legal requirements, you have the following rights:
- Right of access pursuant to Article 15 GDPR
- Right to rectification pursuant to Article 16 GDPR
- Right to erasure pursuant to Article 17 GDPR
- Right to restriction of processing pursuant to Article 18 GDPR
- Right to notification pursuant to Article 19 GDPR
- Right to data portability pursuant to Article 20 GDPR
- Right to withdraw consent pursuant to Article 7(3) GDPR
- Right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR
Right to object
Where we process personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
If you exercise this right, we will stop processing the relevant data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time. After you object, the data will no longer be processed for direct marketing.
Retention periods for personal data
The retention period for personal data is determined by the applicable legal basis, the purpose of the processing and, where relevant, statutory retention periods such as commercial and tax retention obligations.
Once the applicable retention period has expired, the relevant data is routinely deleted unless it is still required for the performance or initiation of a contract, for compliance with a legal obligation, or where we have another legitimate basis for continued storage.
