{"id":23311,"date":"2026-08-20T21:21:03","date_gmt":"2026-08-20T19:21:03","guid":{"rendered":"https:\/\/haarpigmentierung.de\/shop\/?page_id=23311"},"modified":"2026-09-09T01:43:10","modified_gmt":"2026-09-08T23:43:10","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/haarpigmentierung.de\/shop\/en\/data-protection\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2>General Information and Mandatory Details &#8211; Identification of the Controller<\/h2>\n<p>The controller responsible for data processing on this website is:<br \/>\nHaarpigmentierung MHS UG (haftungsbeschr\u00e4nkt)<br \/>\nManaging Director: Nicole Danelski<br \/>\nKatzbachstr. 7<br \/>\n10965 Berlin<br \/>\nGermany<br \/>\nPhone: +49 30 20847450<br \/>\nEmail: kontakt@haarpigmentierung.de<br \/>\nWebsite: https:\/\/haarpigmentierung.de<br \/>\nThe controller decides, alone or jointly with others, on the purposes and means of the processing of personal data (e.g. names, contact details, etc.).<\/p>\n<h2>Withdrawal of Your Consent to Data Processing<\/h2>\n<p>Some data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing carried out prior to the withdrawal remains unaffected.<\/p>\n<h2>Right to Lodge a Complaint with the Competent Supervisory Authority<\/h2>\n<p>As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection matters is the data protection officer of the German state in which our company is based. The following link provides a list of data protection officers and their contact details: https:\/\/www.bfdi.bund.de\/DE\/Infothek\/Anschriften_Links\/anschriften_links-node.html<\/p>\n<h2>Right to Data Portability<\/h2>\n<p>You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party. This will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.<\/p>\n<h2>Right of Access, Rectification, Restriction, Erasure<\/h2>\n<p>You have the right, under the applicable statutory provisions, to request free information about your stored personal data, its origin, its recipients and the purpose of the data processing at any time, and, if applicable, a right to rectification, restriction or erasure of this data. You may contact us at any time using the contact details provided in the legal notice regarding this and any other questions relating to personal data.<\/p>\n<h2>SSL or TLS Encryption<\/h2>\n<p>For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the &#8222;https:\/\/&#8220; prefix in your browser&#8217;s address bar and by the lock icon in the browser line.<\/p>\n<h2>Server Log Files<\/h2>\n<p>The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:<\/p>\n<ol>\n<li>Information about the browser type and version used<\/li>\n<li>The user&#8217;s operating system<\/li>\n<li>The user&#8217;s internet service provider<\/li>\n<li>The user&#8217;s IP address<\/li>\n<li>Date and time of access<\/li>\n<li>Websites from which the user&#8217;s system reaches our website<\/li>\n<li>Websites accessed by the user&#8217;s system via our website<\/li>\n<\/ol>\n<p>This data is not combined with other data sources. The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.<\/p>\n<h2>Data Transfer upon Conclusion of a Contract for the Purchase and Shipping of Goods<\/h2>\n<p>Personal data is only transferred to third parties where this is necessary for the performance of the contract. Third parties may, for example, be payment service providers or logistics companies. Any further transfer of data does not take place, or only takes place if you have expressly consented to it.<br \/>\nThe basis for this data processing is Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract or pre-contractual measures.<\/p>\n<h2>Hosting and Content Delivery<\/h2>\n<p>The website is hosted and website content is delivered using the &#8222;EC2&#8220;, &#8222;S3&#8220;, &#8222;SNS&#8220;, &#8222;Lambda&#8220;, &#8222;DynamoDB&#8220; and &#8222;Cloudfront&#8220; products of Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA (&#8222;AWS&#8220;). AWS processes and stores our web content on our behalf.<br \/>\nHosting takes place exclusively via the German AWS data centre in Frankfurt am Main.<br \/>\nAmazon.com, Inc. and certain controlled US subsidiaries, including AWS, are certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commit to complying fully with EU data protection requirements. The certification can be viewed at the following link: https:\/\/www.dataprivacyframework.gov\/s\/participant-search<br \/>\nThe use of AWS is based on our legitimate interest in a secure and efficient provision and optimisation of our online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (data processing agreement).<\/p>\n<h2>Registration on this Website<\/h2>\n<p>To use certain features (e.g. viewing your order history), you can register on our website. The data transmitted is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full; otherwise we will refuse the registration. Registering a customer account is voluntary; orders can also be placed as a guest without registration.<br \/>\nIn the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during registration.<br \/>\nThe processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing already carried out remains unaffected by the withdrawal.<br \/>\nWe store the data collected during registration for the period during which you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.<\/p>\n<h2>Contact Forms \/ Consultation Forms<\/h2>\n<p>We process and store data from our contact forms in the CRM system &#8222;Zoho CRM&#8220;, provided by ZOHO Corporation B.V, Churchilllaan 11 (17th Floor), 3527 GV Utrecht, Netherlands (hereinafter referred to as &#8222;Zoho&#8220;).<br \/>\nThe processing of the data entered in the contact form is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR) and serves to improve and speed up our customer and user service. You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal. The legality of the data processing operations carried out prior to the withdrawal remains unaffected.<br \/>\nZoho has entered into a data processing agreement with us based on the EU Standard Contractual Clauses adopted by the European Commission, in order to ensure an adequate level of data protection for any data transfers.<br \/>\nThe use of Zoho CRM is optional; if you do not agree to the collection and storage of your data in Zoho CRM&#8217;s external system, we offer you the following alternative contact options for service enquiries: by email, telephone, fax or post.<br \/>\nFurther information is available in Zoho CRM&#8217;s privacy policy: https:\/\/www.zoho.com\/privacy.html<\/p>\n<h2>Payment Service Providers<\/h2>\n<h3>PayPal<\/h3>\n<p>We use the payment service provider PayPal for payment processing, offered by PayPal (Europe) S.\u00e0.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter &#8222;PayPal&#8220;).<br \/>\nIf you select &#8222;PayPal&#8220; as your payment method during the order process, the data required for payment processing (e.g. name, address, email address, IP address, order data) will be automatically transmitted to PayPal. The transfer is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing).<br \/>\nFurther information on data protection at PayPal can be found at: https:\/\/www.paypal.com\/de\/webapps\/mpp\/ua\/privacy-full<\/p>\n<h3>Stripe<\/h3>\n<p>We use the payment service provider Stripe for payment processing (including SEPA direct debit, credit\/debit card, Google Pay, Apple Pay). The provider is Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA; for customers in the European Economic Area, payment services are provided, depending on the service used, by Stripe&#8217;s Irish group companies (including Stripe Payments Europe, Ltd. \/ Stripe Technology Europe, Ltd., Dublin, Ireland) (hereinafter &#8222;Stripe&#8220;).<br \/>\nIf you select a payment method supported by Stripe during the order process, the data required for payment processing (e.g. name, address, email address, IP address, and payment-method-specific data such as IBAN or card details) will be automatically transmitted to Stripe. The transfer is based on Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). Where data is transferred to Stripe group companies outside the European Economic Area (e.g. in the USA), Stripe ensures an adequate level of data protection through appropriate safeguards, including the EU Standard Contractual Clauses.<br \/>\nFurther information on data protection at Stripe can be found at: https:\/\/stripe.com\/de\/privacy<\/p>\n<h2>Shipping Service Providers<\/h2>\n<h3>DHL<\/h3>\n<p>We work with DHL Paket GmbH, Str\u00e4\u00dfchensweg 10, 53113 Bonn (hereinafter &#8222;DHL&#8220;) to deliver the goods you have ordered.<br \/>\nFor the purpose of delivery, we transmit the data required for this (e.g. name, delivery address and, if applicable, telephone number and email address for shipping notifications) to DHL. The transfer is based on Art. 6(1)(b) GDPR, which permits the processing of data to fulfil a contract.<br \/>\nFurther information on data protection at DHL can be found at: https:\/\/www.dhl.de\/de\/privacy\/<\/p>\n<h2>Push Notifications<\/h2>\n<p>Our website uses push services (push notifications) provided by operating system and browser manufacturers. These are short messages that can be displayed on your device&#8217;s screen and through which we inform you about new project-related content, provided you have previously given the corresponding consent on your device. We do not send you any advertising via push notifications.<br \/>\nWhen using push services, a device token from Apple or a registration ID from Google is assigned. These are encrypted, anonymised device IDs. The sole purpose of their use is to provide the push services. It is not possible to draw any conclusions about the individual user.<br \/>\nYou can turn off the receipt of push messages via your smartphone&#8217;s operating system.<\/p>\n<h2>Telephony via sipgate<\/h2>\n<p>We use sipgate, a service provided by sipgate GmbH, Gladbacher Str. 74, 40219 D\u00fcsseldorf (hereinafter &#8222;sipgate&#8220;), to handle our incoming and outgoing phone calls with prospective customers and customers. The legal basis for this is Art. 6(1) sentence 1(b) GDPR. Sipgate stores the phone numbers and call data (time and duration of the call) until we delete the data at sipgate.<br \/>\nYou can view sipgate&#8217;s privacy policy here: https:\/\/www.sipgate.de\/datenschutz<\/p>\n<h2>Email and Newsletter Delivery via Amazon Web Services (AWS)<\/h2>\n<p>Our emails (registration, account deletion confirmation, newsletter sign-up, newsletter sign-up confirmation, newsletter email, password recovery, order confirmation, shipping confirmation, contact form, and all other sales and website emails) from this website are sent via Amazon Simple Email Service (Amazon SES), a service provided by the technical service provider Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States (https:\/\/aws.amazon.com\/), to which we transmit your email address and the email content temporarily (during sending) to an AWS server (within the EU). This disclosure is based on Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly email delivery service.<br \/>\nTo protect your data, which may in part be stored in the USA, we have entered into a data processing agreement with Amazon Web Services Inc. based on the European Commission&#8217;s Standard Contractual Clauses, in order to enable the transfer of your personal data to Amazon Web Services Inc. This data processing agreement can be viewed at the following link: https:\/\/d1.awsstatic.com\/legal\/aws-gdpr\/AWS_GDPR_DPA.pdf<br \/>\nAmazon.com, Inc. and certain controlled US subsidiaries, including AWS, are also certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commit to complying fully with EU data protection requirements. The certification can be viewed at the following link: https:\/\/www.dataprivacyframework.gov\/s\/participant-search<br \/>\nFurther information on Amazon Simple Email Service as well as on data use and processing by Amazon Web Services Inc. is available at http:\/\/aws.amazon.com\/de\/ses\/ and at http:\/\/aws.amazon.com\/de\/privacy\/.<\/p>\n<h2>Data Erasure and Storage Period<\/h2>\n<p>The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may continue to take place if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.<\/p>\n<h2>Newsletter Data<\/h2>\n<p>We require an email address from you in order to send you our newsletter. Verification of the email address provided is necessary, and your consent to receive the newsletter is required. Supplementary data is not collected, or is provided voluntarily. This data is used exclusively for sending the newsletter.<br \/>\nThe data provided when subscribing to the newsletter is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw consent you have already given at any time. An informal email is sufficient to notify us of this withdrawal, or you can unsubscribe via the &#8222;unsubscribe&#8220; link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal.<br \/>\nData entered to set up the subscription will be deleted if you unsubscribe. If this data has been transmitted to us for other purposes and via other channels, it will continue to be stored by us.<\/p>\n<h2>Cookies<\/h2>\n<p>Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our offering more user-friendly, effective and secure.<br \/>\nSome cookies are &#8222;session cookies&#8220;. Such cookies are automatically deleted at the end of your browser session. Other cookies, on the other hand, remain stored on your device until you delete them yourself. Such cookies help us recognise you when you return to our website.<br \/>\nUsing a modern web browser, you can monitor, restrict or prevent the setting of cookies. Disabling cookies may result in limited functionality of our website.<br \/>\nThe setting of cookies which are necessary for the exercise of electronic communication processes or for providing certain functions you wish to use (e.g. the shopping cart) is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies to provide our services in a technically error-free and smooth manner. Where other cookies (e.g. for analytics purposes) are set, these are addressed separately in this privacy policy.<\/p>\n<h2>Web Analytics Services<\/h2>\n<h3>Google Analytics<\/h3>\n<p>Our website uses functions of the web analytics service Google Analytics. The provider of the web analytics service is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.<br \/>\nGoogle Analytics uses &#8222;cookies&#8220;. These are small text files that your web browser stores on your device and which enable an analysis of your use of the website. Information generated by the cookie about your use of our website is transmitted to and stored on a Google server. The server location is generally the USA.<br \/>\nThe setting of Google Analytics cookies is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, where applicable, our advertising.<br \/>\n<strong>IP Anonymisation<\/strong><br \/>\nWe use Google Analytics in conjunction with the IP anonymisation function. This ensures that Google shortens your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. In exceptional cases, Google may transfer the full IP address to a server in the USA and shorten it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with further services relating to website and internet usage. The IP address transmitted by Google Analytics is not merged with any other data held by Google.<br \/>\n<strong>Browser Plugin<\/strong><br \/>\nYou can prevent the setting of cookies by your web browser; however, some functions of our website may be limited as a result. You can also prevent the collection of data relating to your use of the website, including your IP address, and its subsequent processing by Google. This is possible by downloading and installing the browser plugin available at the following link: https:\/\/tools.google.com\/dlpage\/gaoptout?hl=de<br \/>\n<strong>Objection to Data Collection<\/strong><br \/>\nYou can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to our website: Disable Google Analytics.<br \/>\nDetails on how Google Analytics handles user data can be found in Google&#8217;s privacy policy: https:\/\/support.google.com\/analytics\/answer\/6004245?hl=de<br \/>\n<strong>Data Processing Agreement<\/strong><br \/>\nIn order to fully comply with statutory data protection requirements, we have entered into a data processing agreement with Google.<br \/>\n<strong>Demographic Characteristics in Google Analytics<\/strong><br \/>\nOur website uses the &#8222;demographic characteristics&#8220; function of Google Analytics. This allows us to create reports containing statements on the age, gender and interests of website visitors. This data originates from Google&#8217;s interest-based advertising as well as from visitor data from third-party providers. It is not possible to attribute this data to a specific person. You can deactivate this function at any time via the ad settings in your Google account, or by generally prohibiting the collection of your data by Google Analytics as described under &#8222;Objection to Data Collection&#8220; above.<\/p>\n<h2>Use of Tools and Other Services<\/h2>\n<h3>Google Tag Manager<\/h3>\n<p>Our website uses functions of Google Tag Manager. The provider of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.<br \/>\nGoogle Tag Manager is a solution that allows us to manage website tags via an interface on the Google website. The Google Tag Manager tool itself implements these website tags and is a &#8222;cookieless&#8220; domain that does not collect any personal data. Google Tag Manager triggers other tags, which may in turn collect data. Google Tag Manager does not have access to this data.<br \/>\nDetails on Google Tag Manager&#8217;s usage policies can be found at the following link: http:\/\/www.google.de\/tagmanager\/use-policy.html<\/p>\n<h3>Google Maps<\/h3>\n<p>Our website uses Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (&#8222;Google&#8220;).<br \/>\nThrough the use of the Google Maps web service, we can present interactive maps from Google on our website and visually display geographical information. This is done by retrieving Google Maps from a Google server in the USA, which involves the transfer of your data to Google. This concerns information about your use of our website (such as your IP address). The use of Google Maps is based on Art. 6(1)(f) GDPR and already occurs when calling up those subpages on which Google Maps is embedded. As the operator of this website, we have a legitimate interest in presenting maps to you in an interactive format on our website.<br \/>\nIf you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating Google Maps by disabling JavaScript and iframes in your browser. Google Maps can then no longer be used.<br \/>\nGoogle LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https:\/\/www.dataprivacyframework.gov\/s\/participant-search<br \/>\nFurther information on how Google handles user data can be found in Google&#8217;s privacy policy: https:\/\/www.google.de\/intl\/de\/policies\/privacy\/<\/p>\n<h3>OpenStreetMap<\/h3>\n<p>We use the map service OpenStreetMap on our website, operated by the OpenStreetMap Foundation, St John&#8217;s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (&#8222;OSMF&#8220;), together with the JavaScript library Leaflet for display purposes.<br \/>\nBy using OpenStreetMap, we are able to present interactive maps to you. This is done by retrieving map tiles from OSMF&#8217;s servers, which involves the transfer of your data (including your IP address) to OSMF. This is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in presenting maps to you in an interactive format.<br \/>\nOSMF acts as an independent controller in this regard, not as our data processor. The transfer of data to servers in the United Kingdom is based on the European Commission&#8217;s adequacy decision for the United Kingdom.<br \/>\nIf you do not agree to the transfer of your data to OSMF as part of your use of OpenStreetMap, you have the option of completely deactivating the map display by disabling JavaScript in your browser. The map can then no longer be used.<br \/>\nFurther information can be found in the OpenStreetMap Foundation&#8217;s privacy policy: https:\/\/osmfoundation.org\/wiki\/Privacy_Policy<\/p>\n<h3>Google Web Fonts<\/h3>\n<p>Our website uses web fonts from Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.<br \/>\nThe use of these web fonts allows us to present our website in the way we intend, regardless of which fonts are locally available to you. This is done by retrieving Google Web Fonts from a Google server in the USA, which involves the transfer of your data to Google. This concerns your IP address and which page on our site you visited. The use of Google Web Fonts is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and delivery of our website.<br \/>\nGoogle LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https:\/\/www.dataprivacyframework.gov\/s\/participant-search<br \/>\nDetails on Google Web Fonts can be found at: https:\/\/www.google.com\/fonts#AboutPlace:about and further information in Google&#8217;s privacy policy: https:\/\/policies.google.com\/privacy\/partners?hl=de<\/p>\n<h3>Google reCAPTCHA<\/h3>\n<p>Our website uses Google reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (&#8222;Google&#8220;).<br \/>\nGoogle reCAPTCHA is primarily used to determine whether a form is submitted by a natural person or whether it has been created through automated, machine processing and submitted for abusive purposes.<br \/>\nThe service involves the transmission of the IP address and other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in establishing individual intent in online actions and in reducing misuse and spam on parts of our website (e.g. contact forms).<br \/>\nIf you do not agree to the future transmission of your data to Google when using Google reCAPTCHA, you also have the option of completely deactivating Google reCAPTCHA by disabling JavaScript in your browser. Google reCAPTCHA, and thus also parts of the website (e.g. recaptcha-protected forms or sections), can then no longer be used.<br \/>\nGoogle LLC (the parent company of Google Ireland Limited) is certified under the EU-U.S. Data Privacy Framework (DPF) and thereby commits to complying fully with EU data protection requirements. The certification can be viewed at the following link: https:\/\/www.dataprivacyframework.gov\/s\/participant-search<br \/>\nFurther information on Google reCAPTCHA and Google&#8217;s privacy policy can be found at the following link: https:\/\/www.google.com\/intl\/de\/policies\/privacy\/<\/p>\n<h2>Use of Videos<\/h2>\n<h3>YouTube<\/h3>\n<p>Our website uses YouTube plugins for the integration and display of video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.<br \/>\nWhen you visit a page with an embedded YouTube plugin, a connection is established to YouTube&#8217;s servers. This informs YouTube which of our pages you have visited.<br \/>\nIf you are logged into your YouTube account, YouTube can directly link your browsing behaviour to your personal profile. You can prevent this by logging out beforehand.<br \/>\nThe use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.<br \/>\nDetails on how user data is handled can be found in YouTube&#8217;s privacy policy at: https:\/\/www.google.de\/intl\/de\/policies\/privacy<\/p>\n<h2>Online Marketing &#8211; Advertising and Conversion Cookies<\/h2>\n<h3>Google AdWords and Google Conversion Tracking<\/h3>\n<p>Our website uses Google AdWords. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland &#8211; on behalf of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.<br \/>\nAdWords is an online advertising programme. As part of this programme, we use conversion tracking. After clicking on an ad served by Google, a cookie for conversion tracking is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies expire after 30 days and are not used for personal identification of users. Using the cookie, Google and we can recognise that you clicked on an ad and were redirected to our website.<br \/>\nEach Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that would allow users to be personally identified.<br \/>\nIn addition, we use Google audience lists (&#8222;remarketing&#8220;) to show you relevant, interest-based advertising on other websites within the Google advertising network. Remarketing cookies remain valid for up to 13 months, and conversion tracking cookies for up to 90 days.<br \/>\nEven without your consent, Google processes an anonymised, non-personal signal value for statistical purposes (without a cookie and without attribution to your person). With your consent, we additionally transmit your email address, phone number and name in hashed (encrypted) form to Google, in order to more reliably attribute advertising conversions (&#8222;Enhanced Conversions&#8220;). This hashed customer data is deleted by Google shortly after matching.<br \/>\nThe storage of cookies and the transmission of hashed customer data are based on your consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with Google. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which Google LLC is certified.<br \/>\nDetails on Google AdWords and Google Conversion Tracking can be found in Google&#8217;s privacy policy: https:\/\/policies.google.com\/privacy<\/p>\n<h3>Facebook Retargeting and Facebook Conversions API<\/h3>\n<p>Our website uses the retargeting technology &#8222;Website Custom Audience&#8220; as well as the &#8222;Conversions API&#8220; of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (&#8222;Meta&#8220;) &#8211; on behalf of Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA.<br \/>\nThe Facebook retargeting technology allows us to show visitors who have already visited our website in the past and who are Facebook members relevant advertising and offers on Facebook via the Facebook ad network.<br \/>\nWe only use this retargeting technology, and additionally transmit your email address, phone number and name in hashed form to Meta (&#8222;Conversions API&#8220;) in order to more reliably attribute advertising actions, with your consent. Without your consent, no data is transmitted to Meta. The hashed customer data is deleted by Meta within 48 hours after matching against Meta&#8217;s own user data.<br \/>\nLegal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with Meta. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which Meta Platforms, Inc. is certified.<br \/>\nFurther information on data protection and your related configuration options can be found at: https:\/\/www.facebook.com\/settings\/?tab=ads as well as at: https:\/\/www.facebook.com\/privacy\/policy\/<br \/>\nYou can object to the future use of Facebook Website Custom Audiences via the link https:\/\/www.facebook.com\/settings\/?tab=ads as well as the link http:\/\/www.youronlinechoices.com\/de\/praferenzmanagement\/.<\/p>\n<h3>X Remarketing<\/h3>\n<p>Our website uses the remarketing technology of the platform X (formerly Twitter), provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter &#8222;X&#8220;) &#8211; on behalf of X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.<br \/>\nWith X&#8217;s remarketing function, we can target visitors to our website with advertising on the X platform based on their interests. X uses so-called &#8222;tags&#8220; for this purpose. Visits to our website and data on the use of the website are recorded using this tag and stored in cookies (including &#8222;muc&#8220;, &#8222;personalization_id&#8220;), which remain valid for up to 2 years. If you visit X at a later date, you will be shown advertisements there based on your interests.<br \/>\nThe storage of these cookies is based exclusively on your consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. A data processing agreement pursuant to Art. 28 GDPR is in place with X. The transfer of data to the USA is based on the EU-U.S. Data Privacy Framework, under which X Corp. is certified.<br \/>\nIf you do not want X to target you with interest-based advertising, you can additionally deactivate this in your X account under privacy settings (&#8222;Personalisation and data&#8220;).<br \/>\nFurther information on data protection and advertising at X can be found here: https:\/\/business.x.com\/en\/help\/ads-policies\/product-policies\/interest-based-opt-out-policy as well as in X&#8217;s privacy policy: https:\/\/x.com\/en\/privacy<\/p>\n<h3>TikTok Advertising and TikTok Events API<\/h3>\n<p>Our website uses advertising technologies from TikTok, provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (&#8222;TikTok&#8220;), together with TikTok Information Technologies UK Limited. The parent company is ByteDance Ltd., based in China.<br \/>\nWith your consent, we transmit your email address, phone number and name in hashed form to TikTok (&#8222;Events API&#8220;) in order to more reliably attribute advertising actions. Without your consent, no data is transmitted to TikTok.<br \/>\nLegal basis for the processing: consent (Art. 6(1)(a) GDPR), which can be withdrawn via the cookie settings. The transfer of data to third countries is based on your explicit consent after having been informed of the existing risks (Art. 49(1)(a) GDPR), as no adequacy decision and no certification comparable to that of the other providers named in this policy exists for TikTok\/ByteDance.<br \/>\nFurther information can be found in TikTok&#8217;s privacy policy: https:\/\/www.tiktok.com\/legal\/page\/eea\/privacy-policy\/en<\/p>\n","protected":false},"excerpt":{"rendered":"<p>General Information and Mandatory Details &#8211; Identification of the Controller The controller responsible for data processing on this website is:<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-23311","page","type-page","status-publish","hentry"],"lang":"en","translations":{"en":23311,"it":23319,"es":23316,"fr":23313,"de":3},"pll_sync_post":{},"_links":{"self":[{"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/pages\/23311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/comments?post=23311"}],"version-history":[{"count":4,"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/pages\/23311\/revisions"}],"predecessor-version":[{"id":23694,"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/pages\/23311\/revisions\/23694"}],"wp:attachment":[{"href":"https:\/\/haarpigmentierung.de\/shop\/wp-json\/wp\/v2\/media?parent=23311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}