Data privacy

Our privacy policy

Point 1

Legal information in accordance with the General Data Protection Regulation

Information according to Art. 13 GDPR

CHANNOINE would like to use this privacy policy to inform you about the type, scope and purpose of the personal data processed. Furthermore, you will be informed about your rights by means of this privacy policy.

We know that the careful handling of your personal data is very important to you and appreciate your trust that we will handle this data conscientiously.

The terms used in this declaration are based on the definitions in Art. 4 of the EU General Data Protection Regulation (GDPR).

Controller as defined by Art. 24 GDPR

CBS CHANNOINE Business Systems AG (hereinafter CHANNOINE, we or the controller)
Austrasse 73
Postfach Nr. 1
9490 Vaduz, Liechtenstein

privacy@channoine.com

Data protection officer pursuant to Art. 37 ff GDPR

CHANNOINE is a private company. To protect your data, we have appointed the following data protection officer:

KOMDAT Datenschutz GmbH
www.komdat.at
datenschutz@komdat.at

Point 2

Rights of data subjects

You have extensive rights under the General Data Protection Regulation, such as:
  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 para. 3 GDPR)
  • Right to lodge a complaint (Art. 77 GDPR)

To exercise your rights, please contact us.

We cannot process requests from data subjects without first successfully establishing your identity. For this reason, we kindly ask you to support us in establishing your identity and to enclose a copy of your ID with your request.

If you are of the opinion that the processing of your data violates data protection regulations or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent supervisory authority.

  • Responsible complaints office in AUSTRIA:
    Österreichische Datenschutzbehörde
    Barichgasse 40-42
    A-1030 Wien
  • Responsible complaints office in GERMANY:
    Bundesbeauftragte für den Datenschutz und die Informationssicherheit
    Graurheindorfer Str. 153
    DE-53117 Bonn
  • Responsible complaints office in SWITZERLAND:
    Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
    Feldeggweg 1
    CH-3003 Bern
Point 3

Data transmission/data transfer

Data transfer to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR
  • the disclosure pursuant to Art. 6 para. 1 lit. f GDPR is necessary to safeguard our operational interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR and
  • this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR.

The controller may disclose your personal data to suppliers who provide services on our behalf in accordance with our instructions.

The controller may also disclose your personal data to our affiliated companies and partners.

In addition, the Controller may disclose your personal data if we are required to do so by law, regulation or governmental authority, or if we believe that disclosure is necessary or appropriate to prevent physical harm or financial loss.

The controller reserves the right to transfer any personal data we hold about you if we sell or transfer all or part of our business or assets (including in the event of a reorganization, dissolution or liquidation).

Data transfers

The controller may also transfer your personal data to countries outside the country in which the information was originally collected. These countries may not have the same data protection laws as the country in which you originally provided the personal information. If we transfer your information to other countries, we will protect that information as described in this Privacy Policy and those transfers will be governed by applicable law.

The countries to which we transfer the personal data are

  • within the European Union or
  • outside the European Union

If we transfer personal data from the European Union to countries or international organizations outside the European Union, the transfer takes place on the basis:

  • an adequacy decision by the European Commission;
  • In the absence of such a decision, on other legally permissible grounds such as the existence of a legally binding and enforceable document between public authorities or bodies, binding corporate rules, standard data protection clauses and approved or certified codes of conduct.

In exceptional cases, data may also be transferred on the basis of Art. 49 GDPR:

  • Art. 49 para. 1 lit. a GDPR: the data subject has expressly consented to the proposed data transfer after having been informed of the potential risks of such data transfers for him/her without the existence of an adequacy decision and without appropriate safeguards,
  • Art. 49 para. 1 lit. b GDPR: the transfer is necessary for the performance of a contract between the data subject and the controller or for the implementation of pre-contractual measures at the request of the data subject,
  • Art. 49 para. 1 lit. c GDPR: the transfer is necessary for the conclusion or performance of a contract concluded by the controller with another natural or legal person in the interest of the data subject.
Point 4

Data collection and processing

Webshop / Registration

Online store orders are possible as a registered customer or in the form of GUEST orders.

If you would like to order as a registered customer in our online store, you must register before or during the ordering process and provide the personal data that we require to process your order. All mandatory information required for the processing of a contract is marked separately and all other information (e.g. company name, telephone number) is voluntary.

As a registered customer, the personal data you provide remains stored in your online user account and you can access it again for your next orders without having to enter it again. To access your user account, you must use your e-mail address and password from your registration.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • Contract fulfillment or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage period:

  • for the duration of the customer account
  • after deletion of the customer account 7 years from payment of the last invoice

 

GUEST-Order

If you do not wish to register, you have the option of placing a GUEST order. You must enter all the personal data required to process your order. Once your order has been processed, this data will not be saved for further purchases and no online account will be created. However, after completing your purchase as a GUEST, you have the option of creating a user account and registering.

Legal basis:

  • Contract fulfillment or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage period:

  • 7 years from payment of the invoice
Advertising links

If you receive an advertising link from a CHANNOINE partner and create a customer account based on this (see Registration), your customer account will be assigned a partner ID. The partner ID identifies the sender of the advertising link. You can edit this partner ID yourself at any time in your customer account.

Online-Contact Form

You can use a contact form to send us inquiries, suggestions and requests. In order to contact us, it is necessary that you provide us with your data.

You must also enter a text in the corresponding field.

You acknowledge that the aforementioned data will be processed by us for the purpose of processing or responding to your request. We cannot process your request without this information.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • If applicable, fulfillment of contract or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage period:

  • 7 years from receipt of the request
Get in touch (CHANNOINE experts in your area)

You can use a contact form to get in touch directly with a CHANNOINE partner (co-entrepreneur) in your area.

You are also welcome to specify your wishes.

We will then forward your request directly to the CHANNOINE partner of your choice. You acknowledge that your data will be processed by us for the purpose of quality control regarding the handling of your request.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • Contract fulfillment or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage period:

  • 7 years from receipt of the request
Server-Log

When you visit this website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the accessed file,
  • website of origin (referrer URL),
  • browser used and, if applicable, the operating system of your computer and the name of your access provider.

The possibility of using this data for purposes such as

  • ensuring a smooth connection to the website,
  • ensuring a comfortable use of our website
  • the evaluation of system security and stability and
  • for further administrative purposes

is currently used by us. Under no circumstances will the data collected be used to draw conclusions about your person.

Legal basis: our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR

Storage period:

  • 6 months from creation
Point 5

Newsletter - Beauty & Health Magazin

You can give your consent to receive various newsletters (also called Beauty & Health Magazine).

When registering in the webshop, you can consent to the sending of newsletters by clicking on the checkbox in the corresponding field ("Subscribe to newsletter"). You can also consent to receiving newsletters independently of registration. In this case, you must provide your title, first name, surname and email address.

You agree that the aforementioned personal data may be processed by CHANNOINE for the purpose of sending you information about offers, product innovations, competitions or similar.

CHANNOINE may arrange for your personal data to be passed on to processors. Your personal data will be processed by the processor exclusively on our instructions and for the defined purpose.

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can also cancel your newsletter subscription at any time by clicking on Unsubscribe from any newsletter/mailing.

Translated with DeepL.com (free version)

Brevo

To send our newsletter, we use the components of the mailing service provider Sendinblue GmbH - Köpenicker Strasse 126, 10179 Berlin, Germany.

Your data stored when you register for the newsletter (title, first name, surname, email address, IP address, date and time of your registration) will be transferred to a Sendinblue GmbH server in Germany and stored there.

You can find further information on data protection at: https://www.brevo.com/de/legal/privacypolicy/

Translated with DeepL.com (free version)

Double-Opt-In and logging

The registration for our newsletter takes place in a so-called double opt-in procedure. This means that you will receive an e-mail asking you to confirm your registration.

All registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address.

Statistical survey and analyses

When you access the newsletter, technical information, such as information about the browser and your system, as well as your IP address and the time of access, is initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and your reading behavior based on the retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also include determining whether the newsletter was opened, when it was opened and which links were clicked. This information can be assigned to you for technical reasons. However, it is not our intention to observe you. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • Our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR

Duration of storage:

  • Until revocation
Point 6

Cookies

Basically, we collect information when you visit our website.

This information is referred to as a "cookie". Together with the information you have provided to us, we can tailor your visits to our website even better to your needs.

"Cookies" are small files that enable CHANNOINE to store specific information related to you, the user, on your PC or digital device while you visit the websites. The website uses or sets cookies in accordance with EU and Austrian law (Art. 5 para. 3 E-Privacy Directive and § 165 para. 3 TKG 2021). Cookies help to determine the frequency of use and the number of users of the website, as well as to make the offers as convenient and efficient as possible for you. The content of the cookies used is usually limited to an identification number and usage data that cannot be traced back to the user.

It is also possible to use our services without cookies, but this may limit their use.

When using or setting cookies that contain personal data or affect privacy, CHANNOINE obtains your consent in advance, namely via your active behavior by continuing to navigate through and via our cookie banner on our website after being informed about the purposes of the cookies used and thus giving your consent to the setting of cookies.

Data protection is an essential contribution to customer satisfaction for us. You can therefore deactivate the storage of cookies in your browser, restrict them to certain websites or set your browser to notify you as soon as a cookie is sent. You can also delete cookies from your PC's hard disk at any time. Please note, however, that in this case you will have to expect a limited display of the site and limited user guidance.

You can find additional information on cookies on our cookie page

Point 7

Google Tools

Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc (hereinafter: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser add-on to deactivate Google Analytics.

The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Google Maps

This website uses the Google Maps API to display geographical information visually. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google privacy policy. You can also change your personal data protection settings there in the data protection center.

Legal basis:

  • Your consent pursuant to Art. 6 para. 1 lit. a GDPR
Point 8

Social-Media and Third-Party Tools

Appearances in social networks

We take the current discussion about data protection in social networks very seriously, as we ourselves operate sites in social networks in order to inform the users active there about our range of services. The specific social media we use for this purpose are displayed on our website using a logo. In this regard, we would like to point out that, due to current case law, we share responsibility with the respective operator of the social network within the meaning of Art. 26 GDPR. We have taken the necessary precautions for this insofar as the provider has enabled us to do so. However, the primary responsibility under the GDPR for the processing of personal data in the respective social network lies with the respective provider of the social network. In the event of the assertion of data subject rights, we note that these are best asserted with the social networks themselves. As the operator, we do not make any decisions regarding the processing of data in the social network. Only the respective provider has access to the user's data and can therefore only take direct action.

User data can be processed in social networks for advertising and market research purposes. Among other things, user profiles can be created from various user interests. The user profiles can subsequently be used, for example, to place targeted advertisements within and outside social media. For these purposes, the social medium also uses cookies in which the usage behavior and interests of the users are stored. Furthermore, these user profiles may also contain data on users as members of the respective social media, provided they are logged in to them.

For a detailed description of the respective data processing and the options for objection or revocation, please refer to the privacy policy of the respective social network.

Under certain circumstances, some social networks may process user data outside the European Union. With regard to US providers, we would like to point out that this is an unsafe third country in terms of data protection law. The respective data protection provisions of the network apply.

Embedded YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

You can find further information on data protection at "Youtube" in the provider's privacy policy at https://www.google.de/intl/de/policies/privacy/

Point 9

SSL encryption

To protect the security of your data during transmission, ...

... we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

Point 10

Modifications or additions

We reserve the right to make changes at any time and without notice.

... or additions to the information content. If sections or individual terms of this statement are not legal or correct, the content or validity of the other parts remain uninfluenced by this fact.

Status 01/2024