PRIVACY POLICY
Privacy Policy Sparkles & Styles
Data protection is of a particularly high priority for our company and for
the use of our website. The use of our website Sparklesandstyles.de is generally possible without providing personal data. We process
personal data of users only to the extent necessary to provide a
functional website and for the provision and delivery of our services
is required.
The processing of personal data is generally only carried out with consent
of the user. An exception to the prior consent of the user
only exists if the prior obtaining of consent is technically and actually
is not possible and the processing of the data is permitted by law.
On our website SparklesandStyles.de we present you with various articles of all kinds. Users have the opportunity to get an overview of our product range easily and without obligation
In addition, users have the option of purchasing the goods shown via the shop software integrated into our SparklesandStyles.de website. Personal data is processed for these processes; more details are provided in the following points.
1. Legal basis
To the extent that we have obtained the consent of the data subject for the processing of personal data,
data subject or we obtain it from the data subject, Art. 6
Paragraph 1 letter a of the GDPR is the legal basis for data processing.
If we are contractually bound to the data subject and the processing of
personal data is necessary to fulfil our contractual obligations,
data processing based on Art. 6 Paragraph 1 Letter b GDPR. This also applies to
Processing operations carried out in the context of the initiation of contractual relationships
are required.
To the extent that the processing of personal data is necessary to fulfill a legal obligation
Obligation to which our company is subject, Article 6 paragraph 1 letter c
GDPR as the legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or
of a third party and the interests, fundamental rights and freedoms of the
If the first-mentioned interest does not outweigh the interests of the data subject, the data will be
Basis of Art. 6 Para. 1 lit. f GDPR.
The personal data of the data subject will be deleted or blocked as soon as
the purpose of storage according to the named legal bases no longer applies.
Storage may also take place if this is permitted by the legislator by means of
Regulations to which we are subject. Blocking or deletion of the
stored data is also carried out if the standards specified by the
prescribed storage period expires, unless further storage is necessary for
fulfillment of contractual purposes is necessary.
2. Person responsible within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation and other national
Data protection laws and other data protection regulations are:
Sparkles & Styles
480261
12279 Berlin
Managing Director: Nicole Jennifer Somski
Internet: www.sparklesandstyles.de
Email: info@sparklesandstyles.de
3. Operating an online shop
We have set up an online shop on our website that allows you to
to order our goods. To carry out the order, the customer gives
When processing your order, we collect personal data which we store.
These include:
- Name first Name
- address (billing and delivery address)
- payment data
- E-mail address
The data is essential for the delivery of the goods and for the processing of your order
necessary. The legal basis for data processing is the fulfillment of (purchase)
contractual obligations pursuant to Art. 6 (1) lit. b GDPR.
In order to process the order, we must also pass the data on to third parties
be given.
These are primarily transport and parcel services that use the data for the delivery of your
You need to order goods. We currently ship with DHL.
You can find more information about DHL’s data protection policy here:
https://www.dhl.de/datenschutz
Furthermore, these are the payment service providers you selected during the ordering process.
You can find more information about PayPal’s privacy policy here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can find more information about KLARNA’s privacy policy here:
https://www.klarna.com/de/datenschutz/
The personal data collected for the order process will be deleted after
of the order. For further information on your rights, please see the last paragraph
this privacy policy.
4th newsletter
You have the opportunity to receive a free newsletter via our website
When you register for the newsletter, the data from the
You will then receive an email from us asking you to
to confirm the subscription to our newsletter. During the registration process, your email address
Address is collected. The data is processed as part of the registration process
Your consent has been obtained and reference has been made to this privacy policy, legal basis
The legal basis for processing your data is Art. 6 (1) lit. a GDPR.
If you request and/or purchase goods or services from us and provide your
If you provide an email address, we may subsequently use it to send you a
Newsletters may be used. In such a case, the newsletter will be
only sends direct advertising for its own similar goods or services.
In this case, the legal basis for sending the newsletter is Section 7 Paragraph 3 of the German Act Against Unfair Competition (UWG).
It is carried out in connection with data processing for the sending of newsletters
No transfer of data to third parties. The data is used exclusively for sending the
Newsletters. The collection of the user’s email address serves to
Newsletter delivery. The data will be deleted as soon as it is no longer needed to achieve the
are no longer required for the purpose of their collection. The user’s email address will
stored as long as the newsletter subscription is active.
Subscription to the newsletter can be cancelled by the affected user at any time
For this purpose, there is a corresponding link in every newsletter.
The termination will simultaneously give consent to the storage of the data collected during the registration process.
revoke your consent to the personal data collected.
5. Contact form and email contact
For certain offers we offer a contact form, which is used for electronic
can be used to contact you. If a user accepts this offer,
The data entered in the input mask is transmitted to us and stored. The following
Data can be entered: name, address, telephone number, email address.
Your consent will be required for the processing of the data during the sending process.
and referred to this privacy policy.
Alternatively, you can contact us via the email address provided. In
In this case, the user’s personal data transmitted with the email will
saved.
If the user so wishes, his data will be passed on to specifically designated third parties for the purpose of
Submitting an offer that was requested by the user. The
The transmission of the data serves to submit a contract offer in accordance with the
user's specifications, the legal basis for the processing of the data is Art. 6
Paragraph 1 lit. b GDPR. In other cases, the legal basis for data processing is
Consent of the user according to Art. 6 Para. 1 lit. a GDPR.
The processing of personal data from the contact form or an e-mail
serves to process the contact according to the request and specification of the
user. Other personal data processed during the sending process
serve to prevent misuse of the contact form and to ensure the security
our information technology systems.
The data transmitted by the user will be deleted after the purpose of their transmission has been achieved.
deleted. This is the case for data transmitted via contact form or email,
if the respective conversation with the user or the transfer of data to third parties
according to the user's request.
The user has the option at any time to withdraw his consent to the processing of
personal data and the storage of his personal data
It is sufficient if the user informs us verbally
or in writing; specific communication channels are not prescribed.
We recommend notification by email. All personal data that is collected during
The data we have stored when you contact us via the contact form or email will be
in this case deleted.
6. Provision of the website and creation of log files
Every time you visit our website, our system automatically records general
Information from the computer system of the calling computer.
The following data is collected:
- Information about the browser type and version used
- URL accessed by the user
- Websites from which the user's system accesses our website
- user's IP address
The data is also stored in the log files of our system. Storage
the data collected in connection with other personal data of the user
does not take place.
The legal basis for the temporary storage of data and log files is Article 6
Paragraph 1 lit. f GDPR. The temporary storage of the IP address by the system is
necessary to deliver our website to the user’s computer
The user’s IP address must be stored for the duration of the session
The log files are stored to ensure the functionality of the website
In addition, the data helps us to optimize the website and to
Ensuring the security of our information technology systems. An evaluation of
other purposes, e.g. marketing, does not take place.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
are no longer required. In the case of data collection for the provision of the website,
This is the case when the respective session ends. Generated log files are deleted after
deleted after 7 days at the latest. If storage takes place beyond this period,
The recorded IP addresses are deleted or altered so that an assignment of the
calling clients is no longer possible.
The collection of data for the provision of our website and the storage of data
in log files is essential for the operation of the website, the user has
no possibility of objection.
7. Use of cookies
Our website uses cookies. Cookies are text files that are stored on
Internet browser or from the Internet browser on the user's computer system
When a user visits a website, a cookie can be stored on the
operating system of the user. This cookie contains a
characteristic string that allows a unique identification of the browser when
allows you to access the website again.
We use cookies on our website to ensure the smooth functioning of the shop and
The data collected from users in this way will be
pseudonymized by technical precautions, an assignment of the data to a
User is therefore not possible. The data is not shared with other
personal data of the user is stored.
When accessing our website, users are informed by an information banner about the
Use of cookies for analysis purposes and to our
Privacy Policy. Cookies can be stored in the
browser settings can be prevented.
The legal basis for the processing of personal data using
Cookies is Article 6 Paragraph 1 Letter f of GDPR. Cookies are used to
to ensure the smooth functioning of the shop and our website.
Cookies are stored on the user’s computer and sent to us
The user has full control over the use of cookies
and can deactivate the use via the settings of his Internet browser or
Cookies that have already been saved can be deleted by the user at any time.
However, if cookies are deactivated for our website, this may result in restrictions on the
functioning of our website.
8. Use of social media plugins
Use of social plugins for Instagram
Our website uses Instagram plugins, which are provided by Instagram Inc. (601 Willow
Road, Menlo Park, CA, 94025, USA). The links to
the Instagram button, usually the lettering “Instagram” in conjunction with a
Pictogram of a camera in white on a colorful (yellow, red, purple) background.
The plugins will only be activated when you click on the corresponding buttons.
If they are grayed out, the plugins are inactive. You have the
Possibility to activate the plugins once or permanently.
The plugins establish a direct connection between your browser and the Instagram
servers. This only happens after the plugin has been activated. We have no influence
on the nature and extent of the data that the plugin transmits to Instagram’s servers
Further information about the Instagram plugin can be found here:
http://instagram.com/about/legal/privacy/.
The plugin informs Instagram that you as a user have visited our website
There is a possibility that your IP address will be saved. If you
If you are logged into your Instagram account while visiting this website, the
mentioned information is linked to it.
9. Rights of the data subject
If your personal data is processed, the following
Rights to:
A. Right to information
You can request confirmation from the controller as to whether
personal data concerning you will be processed by us.
If such processing takes place, you can request information from the controller via the following
Request information:
(a) the purposes for which the personal data are processed;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the
the personal data in question have been or will be disclosed;
(d) the planned duration of storage of the personal data concerning you
or, if specific information is not available, criteria for determining the
storage period;
(e) the existence of a right to rectification or erasure of the personal data concerning you
personal data, a right to restriction of processing by the
controller or a right to object to such processing;
(f) the existence of a right to lodge a complaint with a supervisory authority;
(g) all available information about the origin of the data, if the
personal data are not collected from the data subject;
(h) the existence of automated decision-making, including profiling, pursuant to
Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful
Information about the logic involved as well as the scope and the intended
effects of such processing on the data subject.
You have the right to request information as to whether the personal data concerning you
personal data to a third country or to an international organisation
In this context, you can request to be informed about the appropriate
Guarantees pursuant to Art. 46 GDPR in connection with the transmission
become.
B. Right to rectification
You have the right to rectification and/or completion of your personal data.
Controller, provided that the personal data concerning you being processed
are incorrect or incomplete. The controller must immediately correct the data
to make.
C. Right to restriction of processing
Under the following conditions, you can request the restriction of the processing of
Request personal data concerning you:
(a) if you object to the accuracy of the personal data concerning you for a period
which enables the controller to verify the accuracy of the personal data
to verify data;
(b) the processing is unlawful and you request the erasure of the personal data
and instead request the restriction of the use of personal data
demand;
(d) the controller does not use the personal data for the purposes of the processing
longer, but you require them to assert, exercise or defend claims
legal claims, or
(e) if you have objected to the processing pursuant to Art. 21 Para. 1 GDPR
and it has not yet been determined whether the legitimate grounds of the controller override
Your reasons outweigh.
If the processing of personal data concerning you has been restricted,
This data may – apart from being stored – only be used with your consent or for
Assertion, exercise or defense of legal claims or to protect the
Rights of another natural or legal person or for reasons of
important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above-mentioned requirements,
you will be informed by the controller before the restriction is lifted
becomes.
D. Right to erasure ·2 Obligation to erase
You can request that the controller delete the personal data concerning you.
personal data shall be deleted immediately and the controller shall
obliged to delete this data immediately if one of the following reasons applies:
(a) The personal data concerning you are necessary for the purposes for which they were collected
or otherwise processed are no longer necessary.
(b) You withdraw your consent on which the processing is based in accordance with Art. 6 para. 1 lit. a
or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis
for processing.
(c) You object to the processing pursuant to Art. 21 para. 1 GDPR and
there are no overriding legitimate grounds for the processing, or you object to the processing.
Art. 21 Para. 2 GDPR objection to the processing.
(d) The personal data concerning you have been processed unlawfully.
(e) The erasure of personal data concerning you is necessary to fulfil a
legal obligation under Union or Member State law
required to which the controller is subject.
(f) The personal data concerning you were collected in relation to the services
Information society services pursuant to Art. 8 Para. 1 GDPR.
exceptions
The right to erasure does not exist if the processing is necessary
(a) to exercise the right to freedom of expression and information;
(b) to fulfill a legal obligation which requires processing under the law of the
Union or Member State to which the controller is subject, or
Carrying out a task in the public interest or in the exercise of
official authority vested in the controller;
(c) for reasons of public interest in the area of public health pursuant to
Art. 9 para. 2 lit. h and lit. i and Art. 9 para. 3 GDPR;
(d) for archiving purposes in the public interest, scientific or historical
Research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the
the right referred to in paragraph (a) is likely to achieve the objectives of this
makes processing impossible or seriously compromises it, or
(e) to assert, exercise or defend legal claims.
E. Right to information
Do you have the right to rectification, erasure or restriction of processing
against the controller, the controller is obliged to inform all recipients,
to whom the personal data concerning you were disclosed,
rectification or erasure of data or restriction of processing, it
unless this proves impossible or involves disproportionate expenditure
You have the right to object to this processing by the controller.
recipient to be informed.
F. Right to data portability
You have the right to obtain from the controller the personal data concerning you that you have provided to
provided to the controller in a structured, common and
machine-readable format. You also have the right to receive this data
other controllers without hindrance from the controller to whom the
personal data provided, provided that
(a) the processing is based on consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2)
lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(b) the processing is carried out by automated means.
In exercising this right, you also have the right to obtain from the
personal data directly from one controller to another
controller, as far as this is technically feasible. Freedoms and
The rights of other persons must not be impaired by this.
The right to data portability does not apply to the processing of personal data
Data necessary for the performance of a task carried out in the public interest
or in the exercise of official authority vested in the controller
became.
G. Right of objection
You have the right, for reasons related to your particular situation,
at any time to the processing of personal data concerning you, the
based on Art. 6 (1) (e) or (f) GDPR, to object; this applies
also for profiling based on these provisions.
The controller will no longer process the personal data concerning you,
unless he can demonstrate compelling legitimate grounds for the processing which
Your interests, rights and freedoms prevail, or the processing serves the
Assertion, exercise or defense of legal claims.
If the personal data concerning you are processed for direct marketing purposes,
you have the right to object at any time to the processing of your
personal data concerning you for the purpose of such advertising; this
also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the data you
The personal data concerned will no longer be processed for these purposes.
In connection with the use of services of the
Information Society – notwithstanding Directive 2002/58/EC – your right to object
by automated means that require technical specifications
be used.
H. Right to revoke the declaration of consent under data protection law
You have the right to withdraw your consent to data protection at any time.
By revoking your consent, the legality of the processing based on the
The processing carried out before the consent was withdrawn remains unaffected.
I. Automated decision-making in individual cases, including profiling
You have the right not to be subjected to a processing based solely on automated
including profiling – based decision that is
produces legal effects on you or significantly affects you in a similar way.
This does not apply if the decision
(a) for the conclusion or performance of a contract between you and the
controller is required,
(b) pursuant to Union or Member State law to which the
controller is subject to, is permissible and this legislation is appropriate
measures to safeguard your rights and freedoms as well as your legitimate interests
contain or
(c) with your express consent.
However, these decisions must not be based on specific categories
personal data pursuant to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit.
a or lit. g GDPR applies and appropriate measures are taken to protect the rights and
freedoms and your legitimate interests.
In the cases referred to in (a) and (c), the controller shall take appropriate
measures to safeguard your rights and freedoms as well as your legitimate interests,
which includes at least the right to obtain the intervention of a person on the part of the
responsible, to present one’s own point of view and to contest the
decision belongs.
J. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy
You have the right to lodge a complaint with a supervisory authority, in particular in the
Member State of their residence, place of work or place of alleged
infringement, if you consider that the processing of personal data concerning you
personal data violates the GDPR.
The supervisory authority to which the complaint was submitted shall inform the
Complainant about the status and results of the complaint, including
Possibility of a judicial remedy according to Art. 78 GDPR.