Skip to content

data protection

 

HAIRLIKE Distribution Service GmbH

Commercial Register: Local Court Nuremberg HRB: 15674
Max-Reger-Straße 170
D90571 Schwaig
Phone number: +49 (0)911 569 659 0
Email address: info@purhair.de

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred, and the requesting provider (access data) and documents the retrieval.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, the protection of our predominant legitimate interests in a correct presentation of our offer as part of a balancing of interests. All access data will be deleted no later than seven days after the end of your page visit.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider performs the services for hosting and displaying the website for us. This serves to protect our overriding legitimate interests in a correct presentation of our offer as part of a balancing of interests. All data collected during the use of this website or in forms provided for this purpose in the online shop, as described below, are processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing, contact establishment

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such, because in these cases we absolutely need the data for contract processing or for processing your contact, and you cannot send the order or contact request without providing them. Which data are collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing your inquiries. If you have given your consent for this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by a message to the contact option described below or via a function provided for this purpose in the customer account.

3. Data transfer

For the fulfillment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in with your access data to the payment service provider during the order process. The data protection declaration of the respective payment service provider applies in this respect.

"To be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can use the payment options offered by Klarna and to tailor the payment options to your needs. General information about Klarna can be found here. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and as stated in Klarna's Privacy Policy."

Data transfer to collection agencies

For the fulfillment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to a commissioned collection agency if our payment claim has not been settled despite a prior reminder. In this case, the claim will be collected directly by the collection agency. Furthermore, the transfer serves to protect our overriding legitimate interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as part of a balancing of interests.

4. Email Newsletter and Postal Advertising

Email advertising with newsletter registration

If you register for our newsletter, we will use the data required for this or separately communicated by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.

Postal advertising and your right to object

In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. for sending interesting offers and information about our products by mail. This serves to protect our predominant legitimate interests in advertising our customers in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as part of a balancing of interests.

The advertising mailings are carried out by a service provider on our behalf, to whom we pass on your data for this purpose.

You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and the collected reviews, as well as to offer Trusted Shops products for buyers after an order.

This serves to protect our overriding legitimate interests in optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as part of a balancing of interests. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.

Further personal data will only be transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order, or have already registered for their use. In this case, the contractual agreement between you and Trusted Shops applies.

6. Cookies

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR as part of a balancing of interests. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). You can see the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14

Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies

If cookies are not accepted, the functionality of our website may be limited.

Our Online Presence on Facebook, Instagram

Our presence on social networks and platforms serves for better, active communication with our customers and interested parties. There, we provide information about our products and ongoing special offers.

When visiting our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your end device. These cookies store the visitor behavior and interests of the users. This serves, in accordance with Art. 6 para. 1 lit. f. GDPR, to protect our overriding legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.

Insofar as the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.

For detailed information on the processing and use of data by the providers on their pages, as well as a contact option and your rights in this regard and setting options for protecting your privacy, in particular objection options (opt-out), please refer to the providers' privacy notices linked below. Should you still need assistance in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/

Data processing is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here:

https://www.facebook.com/legal/terms/page_controller_addendum

Instagram: https://help.instagram.com/519522125107875

Right to object (Opt-Out):

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875

 

Use of Microsoft Clarity

We work with Microsoft Clarity and Microsoft Advertising to better understand user behavior on our website and to continuously optimize our offer. Clarity collects technical data about the use of our website - this particularly includes mouse movements, clicks, scrolling behavior, and aggregated information in so-called heatmaps and session recordings (session replays).

Data processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in analyzing user behavior, optimizing our web offering, and for marketing purposes.

Data processing is carried out using cookies and similar technologies. The data collected in this way may be used by Microsoft, among other things, to improve its own products and services. This may lead to data processing outside the EU (e.g., USA). Microsoft is certified under the EU-US Data Privacy Framework.

Further information can be found in Microsoft's privacy policy.

 

7. Contact Options and Your Rights

As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;

in accordance with Art. 16 GDPR, the right to demand the immediate rectification of inaccurate or completion of your personal data stored by us;

in accordance with Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, unless further processing

- for exercising the right of freedom of expression and information;

- for compliance with a legal obligation;

- for reasons of public interest; or

- for the establishment, exercise or defense of legal claims

is necessary;

in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data, insofar as

- the accuracy of the data is contested by you;

- the processing is unlawful, but you object to its erasure;

- we no longer need the data, but you require them for the establishment, exercise or defense of legal claims; or

- you have objected to the processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to demand the transmission to another controller;

in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

For questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data, as well as revocation of granted consents or objection to a specific data use, please contact us directly using the contact details in our imprint.

********************************************************************

Right to object

Insofar as we process personal data as explained above to protect our overriding legitimate interests as part of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have a right to object only if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

********************************************************************

Privacy policy created with the Trusted Shops Legal Text Generator in cooperation with Wilde Beuger Solmecke Lawyers.

Name Description Category Provider Duration
_orig_referrer Allows the merchant to identify where visitors come from. Necessary Shopify 2 weeks
_landing_page Captures the visitor's landing page when they come from other websites. Necessary Shopify 2 weeks
_ab Used to control when the admin bar is displayed in the storefront. Necessary Shopify 1 year
_secure_session_id This cookie is generally provided by Shopify and is used to track a user's session during the multi-step checkout process, linking their order, payment, and shipping details. Necessary Shopify 1 day
cart Contains information about the user's shopping cart. Necessary Shopify 2 weeks
cart_sig This cookie is generally provided by Shopify and used in connection with checkout. It is used to verify the integrity of the cart and ensure the performance of certain cart operations. Necessary Shopify 2 weeks
cart_ts This cookie is generally provided by Shopify and used in connection with checkout. Necessary Shopify 2 weeks
cart_ver This cookie is generally provided by Shopify and used in connection with the shopping cart. Necessary Shopify 2 weeks
cart_currency Used after checkout to initialize a new empty shopping cart with the same currency. Necessary Shopify 2 weeks
checkout_token Used by checkout to identify the user. Necessary Shopify Session
Secure_customer_sig Unknown Necessary Not available Unknown
storefront_digest Stores a digest of the storefront password, allowing merchants to view their storefront in password protection mode. Necessary Shopify 1 year
cookieconsent_status This cookie is associated with the Consentmo GDPR Compliance app and is used to store customer consent. Necessary Consentmo 1 year
cookieconsent_preferences_disabled This cookie is associated with the Consentmo GDPR Compliance app and is used to store customer consent. Necessary Consentmo 1 day
_shopify_m This cookie is generally provided by Shopify and is used to manage customer privacy settings. Necessary Shopify 1 year
_shopify_tm This cookie is generally provided by Shopify and is used to manage customer privacy settings. Necessary Shopify 30 minutes
_shopify_tw This cookie is generally provided by Shopify and is used to manage customer privacy settings. Necessary Shopify 2 weeks
_tracking_consent Used to store a user's preferences if a merchant has set privacy policies in the visitor's region. Necessary Shopify 1 year
tracked_start_checkout This cookie is generally provided by Shopify and used in connection with checkout. Necessary Shopify 1 year
identity_state This cookie is generally provided by Shopify and used in connection with customer authentication. Necessary Not available 1 day
identity_customer_account_number Stores an identifier to facilitate login between customer account and storefront domains. Necessary Shopify 12 weeks
_customer_account_shop_sessions Used in combination with the _secure_account_session_id cookie to track user sessions for new customer accounts. Necessary Shopify 30 days
_secure_account_session_id Used to track user sessions for new customer accounts. Necessary Shopify 30 days
_shopify_country Used for Plus stores where currency/country is determined via GeoIP, to avoid further GeoIP queries. Necessary Shopify 30 minutes
_storefront_u Used to facilitate updating customer account data. Necessary Shopify 1 minute
_cmp_a Used to manage customer privacy settings. Necessary Shopify 1 day
c Unknown Necessary Shopify Unknown
checkout Used by checkout to identify the user. Necessary Shopify 21 days
customer_account_locale Used to track the customer domain locale during redirects. Necessary Shopify 1 year
dynamic_checkout_shown_on_cart Used in connection with payments. Necessary Shopify 30 minutes
hide_shopify_pay_for_checkout Set when a buyer closes the Shop Pay login window during checkout. Necessary Shopify Session
shopify_pay Used to log a buyer into Shop Pay when they return to checkout at the same store. Necessary Shopify 1 year
shopify_pay_redirect Used to speed up the checkout process if the buyer has a Shop Pay account. Necessary Shopify 1 year
shop_pay_accelerated Indicates whether a buyer is eligible to use accelerated Shop Pay checkout. Necessary Shopify 1 year
keep_alive Used when international domain redirection is enabled, to determine if the request is the first of the session. Necessary Shopify Session
source_name Used in combination with mobile apps to provide personalized checkout behavior when browsing a compatible mobile app store. Necessary Shopify Session
master_device_id Merchant authentication: permanent device identifier, public version. Necessary Shopify 1 year
previous_step Used in connection with payments. Necessary Shopify 1 year
discount_code Stores a discount code received via URL parameter to apply it at the next checkout. Necessary Shopify Session
remember_me Used in connection with payments. Necessary Shopify 1 year
checkout_session_lookup Used in connection with payments. Necessary Shopify 3 weeks
checkout_prefill Used in connection with payments. Necessary Shopify 5 minutes
checkout_queue_token Used in connection with payments. Necessary Shopify 1 year
checkout_queue_checkout_token Used in connection with payments. Necessary Shopify 1 year
checkout_worker_session Used in connection with payments. Necessary Shopify 3 days
checkout_session_token Used in connection with payments. Necessary Shopify 3 weeks
cookietest Use to ensure our systems are functioning correctly. Necessary Shopify 1 minute
order Used to allow access to the buyer's order details page. Necessary Shopify 3 weeks
identity-state Stores a hash of the OAuth flow state between redirects. Necessary Shopify 1 day
card_update_verification_id Used in connection with payments. Necessary Shopify 1 day
customer_account_new_login It is used in connection with user identification. Necessary Shopify 20 minutes
customer_account_preview It is used in connection with user identification. Necessary Shopify 7 days
customer_payment_method Used in connection with payments. Necessary Shopify 60 minutes
customer_shop_pay_agreement Used in connection with payments. Necessary Shopify 1 minute
pay_update_intent_id Used in connection with payments. Necessary Shopify 20 minutes
localization Used to localize the shopping cart to the correct country. Necessary Shopify 2 weeks
profile_preview_token Used to preview checkout customizations. Necessary Shopify 5 minutes
login_with_shop_finalize Used to facilitate login with Shop. Necessary Shopify 5 minutes
preview_theme It is used in connection with the theme editor. Necessary Shopify Session
shopify-editor-unconfirmed-settings It is used in connection with the theme editor. Necessary Shopify 1 day
wpm-test-cookie Use to ensure our systems are functioning correctly Necessary Shopify Session
_shopify_essential Contains essential information for the correct functioning of a shop, such as session and checkout information, as well as anti-tampering data. Necessary Shopify 1 year
_shop_app_essential Contains important information for the correct operation of Shop.app. Necessary Shopify 1 year
shopify_client_id Used by the website's Shopify platform to enable e-commerce functions. Necessary Shopify 1 year
_s This cookie is associated with Shopify's analytics suite. Statistics Shopify 30 minutes
_shopify_d Unknown Statistics Not available Unknown
_shopify_fs This cookie is associated with Shopify's analytics suite. Statistics Shopify 30 minutes
_shopify_s Used to identify a specific browser session/shop combination. Validity is 30 minutes after last use. Statistics Shopify 30 minutes
_shopify_sa_t This cookie is associated with Shopify's analytics suite for marketing and recommendations. Statistics Shopify 30 minutes
_shopify_sa_p This cookie is associated with Shopify's analytics suite for marketing and recommendations. Statistics Shopify 30 minutes
_shopify_y Shopify Analytics. Statistics Shopify 1 year
_y This cookie is associated with Shopify's analytics suite. Statistics Shopify 1 year
_shopify_evids Unknown Statistics Not available Unknown
__atuvc Unknown Statistics Not available Unknown
__atuvs Unknown Statistics Not available Unknown
__utma Unknown Statistics Not available Unknown
customer_auth_provider This cookie is associated with Shopify's analytics suite. Statistics Not available Session
customer_auth_session_created_at This cookie is associated with Shopify's analytics suite. Statistics Not available Session
_ga This cookie name is associated with Google Universal Analytics. Statistics Google Analytics 2 years
_gat This cookie name is associated with Google Universal Analytics. Statistics Google Analytics 1 minute
_ga_83KHNW4KY9 ID used to identify users Statistics Google Analytics 2 years
_ga_FHL8FR1WNP ID used to identify users Statistics Google Analytics 2 years
_ga_PL4L0JB0GP ID used to identify users Statistics Google Analytics 2 years
_shopify_analytics Contains analytics data for buyer interfaces such as storefront or checkout. Statistics Shopify 1 year
_clck This cookie is installed by Microsoft Clarity to store information of how visitors use a website and help in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form. Statistics Microsoft 1 year
_clsk This cookie is installed by Microsoft Clarity to store information of how visitors use a website and help in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form. Statistics Microsoft Session
_ga_K0FGQ3CG24 ID used to identify users Statistics Google Analytics 2 years
_gads Unknown Marketing Not available Unknown
IDE This domain is owned by Doubleclick (Google). The main business activity is: Doubleclick is Google's real-time advertising exchange. Marketing Google DoubleClick 2 years
GPS This cookie is associated with YouTube, which collects user data about videos embedded in websites, aggregated with profile data from other Google services, to show targeted advertising to web visitors across a wide range of their own and other websites. Marketing Youtube Session
PREF This cookie, which can be set by Google or Doubleclick, can be used by advertising partners to create an interest profile to show relevant ads on other websites. Marketing Youtube 8 months
BizoID This is a first-party cookie from Microsoft MSN to enable user-based content. Marketing LinkedIn 1 month
_fbp Used by Facebook to deliver a series of advertisement products such as real-time bidding from third party advertisers. Marketing Meta Platforms, Inc. 3 months
_fbc Unknown Marketing Not available Unknown
__adroll This cookie is associated with AdRoll Marketing Adroll Group 1 year
__adroll_v4 This cookie is associated with AdRoll Marketing Adroll Group 1 year
__adroll_fpc This cookie is associated with AdRoll Marketing Adroll Group 1 year
__ar_v4 This cookie is associated with AdRoll Marketing Adroll Group 1 year
MUID Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. Marketing Bing / Microsoft 1 year
_uetsid This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site. Marketing Bing / Microsoft 30 minutes
_uetvid This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user that has previously visited our website. Marketing Bing / Microsoft 16 days
__kla_id When Klaviyo’s JavaScript is enabled, the __kla_id cookie can track and identify site visitors through an auto-generated ID. This cookie can temporarily hold personally identifiable information. Once a visitor is identified, the cookie can pass their data into Klaviyo. Marketing Klaviyo 2 years
_gcl_au Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. Marketing Google 3 months
_tt_enable_cookie Tracking cookie used by TikTok to identify a visitor Marketing TikTok 389 days
_ttp Tracking cookie used by TikTok to identify a visitor Marketing TikTok 389 days
_shopify_marketing Contains marketing data for buyer interfaces such as storefront or checkout. Marketing Shopify 1 year
ttcsid Not available Marketing TikTok Session
ttcsid_D3SVPOJC77UB8900T2K0 TikTok conversion tracking and retargeting cookie for measuring ad performance and audience segmentation. Marketing TikTok 1|year
_gid This cookie name is associated with Google Universal Analytics. Preferences Google Analytics 1 day
__cfduid Unknown Preferences Not available Unknown
__cf_bm Cloudflare's bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. Preferences Cloudflare Session