Privacy policy

With this Privacy Policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as “data”). Personal data means any data that relates to you personally, e.g. your name, address, email address or user behaviour. This Privacy Policy applies to all data processing activities carried out by us, both within the scope of our core business activities and in relation to the online media we provide.

Who is responsible for data processing

The controller responsible for data processing is:

Schnell Cosmetics Vertriebs GmbH
Andreas Schnell
Schloßstraße 16/2
71711 Steinheim-Kleinbottwar
Germany
07148 163 12 17
info@schnell-cosmetics.de
https://schnell-cosmetics.de/imprint/

Processing of your data as part of our company’s core business activities

If you are our customer or business partner or are interested in our services, the nature, scope and purpose of the processing of your data are determined by the contractual or pre-contractual relationship between us. In this context, the data we process includes all data that you provide or have provided for the purpose of using contractual or pre-contractual services and that is required to process your enquiry or the contract concluded between you and us. Unless otherwise stated in the further provisions of this Privacy Policy, the processing of your data and its disclosure to third parties is limited to data that is necessary and appropriate for responding to your enquiries and/or fulfilling the contract concluded between you and us, safeguarding our rights and complying with legal obligations. We will inform you which data is required for these purposes before or during data collection. Where we use third-party providers to deliver our services, the privacy policies of the respective third-party providers apply.

Data concerned:

• Master data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter of the contract, contract term)

Data subjects: Prospective customers, business partners and contractual partners

Purpose of processing: Provision of contractual services, communication and responding to contact enquiries, office and organisational procedures

Legal basis: Performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legal obligation, Art. 6(1)(c) GDPR, legitimate interests, Art. 6(1)(f) GDPR

Your rights under the GDPR

Under the GDPR, you have the following rights, which you may exercise at any time by contacting the controller named in this Privacy Policy:

• Right of access: You have the right to request information from us as to whether and which data we process about you.
• Right to rectification: You have the right to request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure: You have the right to request the erasure of your data.
• Right to restriction of processing: In certain cases, you have the right to request that we restrict the processing of your data.
• Right to data portability: You have the right to request that we provide your data to you or another controller in a structured, commonly used and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is that of your usual place of residence, your place of work or our registered office.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data where we rely on our legitimate interests pursuant to Art. 6(1)(f) GDPR. If you exercise your right to object, we ask you to state your reasons. We will then cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests and rights.

Irrespective of the above, you have the right at any time to object to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the controller’s contact address stated above.

When do we delete your data?

We delete your data when we no longer require it or when you instruct us to do so. This means that, unless otherwise stated in the individual privacy notices contained in this Privacy Policy, we delete your data:

• when the purpose of the data processing no longer applies and the respective legal basis stated in the individual privacy notices therefore no longer exists, e.g. after termination of the contractual or membership relationship between us or when our legitimate interest in the further processing or storage of your data no longer applies,
• when you exercise your right to withdraw consent and no other legal basis for processing pursuant to Art. 6(1)(b) to (f) GDPR applies,
• when you exercise your right to object and there are no compelling legitimate grounds preventing deletion.

However, where we are required to retain certain parts of your data for other purposes, for example due to statutory tax retention periods or where the establishment, exercise or defence of legal claims arising from contractual relationships requires this, or where the data is required to protect the rights of another natural or legal person, we will only delete this data once the relevant periods have expired. Until these periods have expired, we will restrict the processing of this data to these purposes.

Cookies and browser storage

Our website uses cookies as well as the browser’s Local Storage and Session Storage. Cookies are small text files that are stored on the device you use. Local Storage and Session Storage also enable information to be stored in the browser.

According to the available cookie and storage report, storage on the website is used in particular by WooCommerce and Elementor.

WooCommerce

WooCommerce uses cookies on this website to collect information about the origin and progression of a website visit. According to the available report, the following cookies are set:

• sbjs_migrations: Technical data used to support migrations between different versions of the tracking function.
• sbjs_current_add: Timestamp, referring URL and landing page of the current visit.
• sbjs_first_add: Timestamp, referring URL and landing page of the first visit, provided the visitor returns within the relevant session.
• sbjs_current: Information about the origin of the current website visit.
• sbjs_first: Information about the origin of the first website visit, provided the visitor returns within the relevant session.
• sbjs_udata: Information about the visitor or the user agent used, in particular the browser and device type. The available report also lists the IP address as a possible component.
• sbjs_session: Number of page views within the session and the path of the page currently being viewed.

In the available report, these cookies are assigned to the WooCommerce product and the “Analytics” category. In particular, they are used to store information about the origin of a website visit, landing pages, page views and sessions.

Data concerned:

• Usage data, in particular page views, pages visited and landing pages
• Timestamp of the website visit
• Origin or referring URL of a website visit
• Browser and device information
• IP address, where applicable

Data subjects: Users of our website

Purpose of processing: Recording and attributing the origin and progression of website visits as well as session information.

The available cookie report does not specify a particular storage period for the WooCommerce cookies mentioned.

Elementor

Elementor is used on the website. According to the available storage report, information is stored under the name elementor in the browser’s Local Storage and Session Storage.

According to the available report, the Local Storage entry contains, among other things, information about page views and sessions. The Session Storage contains, among other things, the status of the active session.

Local Storage generally persists beyond an individual browser session until the stored data is deleted or overwritten. Session Storage is limited to the respective browser session. The available report does not clearly indicate a more specific storage period or the precise purpose of processing for the identified Elementor entries.

Web hosting

We use a provider to host our websites, whose servers store our websites and make them available for access on the internet (hosting). In this context, the provider may process all data transmitted by the browser you use that is generated when you use our websites. This includes, in particular, your IP address, which the provider requires in order to deliver our online services to the browser you use, as well as any information you enter via our website.

The provider we use may also collect the following data:

• Date and time of access to our website
• Time zone difference from Greenwich Mean Time (GMT)
• Access status (HTTP status)
• Amount of data transferred
• Internet service provider of the accessing system
• Browser type and version used
• Operating system used
• Website from which you may have accessed our website
• Pages or subpages you visit on our website

The aforementioned data is stored as log files on our provider’s servers. This is necessary to ensure the stability and security of the operation of our website.

Data concerned:

• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Delivery of our websites, ensuring the operation of our websites

Legal basis: Legitimate interests, Art. 6(1)(f) GDPR

Web host commissioned by us:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Germany
Website and privacy information: https://www.mittwald.de/

Contacting us

If you contact us by email, via social media, telephone, fax, post, our contact form or by any other means and provide us with personal data such as your name, telephone number or email address, or provide further information about yourself or your enquiry, we process this data in order to respond to your enquiry within the framework of the pre-contractual or contractual relationship between us.

Data concerned:

• Master data (e.g. names, addresses)
• Contact data (e.g. email address, telephone number, postal address)
• Content data (texts, photos, videos)
• Contract data (e.g. subject matter of the contract, contract term)

Data subjects: Prospective customers, customers, business partners and contractual partners

Purpose of processing: Communication and responding to contact enquiries, office and organisational procedures

Legal basis: Performance of a contract and pre-contractual enquiries, Art. 6(1)(b) GDPR, legitimate interests, Art. 6(1)(f) GDPR

Newsletter

We regularly send a newsletter to inform our customers, business partners and prospective customers about our offers and related news. You can subscribe to our newsletter on our website and consent to receiving the newsletter as part of the registration process. If you subscribe to our newsletter, you are required to provide your email address. We store your email address so that we can send you the newsletter.

Once you have subscribed to our newsletter, you will receive a confirmation email at the email address provided during registration as part of the double opt-in procedure. This email contains a link. By clicking on this link, you confirm that you wish to receive the newsletter. This ensures that your email address has not been misused by a third party during registration. For the same reason, we store the date and time of registration as well as the IP address assigned to you at the time of registration. We do not disclose the aforementioned data to third parties.

Data concerned:

• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked)
• Communication data (e.g. information about the device used, IP address)

Data subjects: Users of our website

Purpose of processing: Sending the newsletter and managing newsletter subscriptions

Legal basis: Consent, Art. 6(1)(a) GDPR, legitimate interests, Art. 6(1)(f) GDPR

Deletion: The email address will be deleted either if you have not clicked the confirmation link within one month of the confirmation email being sent as part of the double opt-in procedure, or immediately after you unsubscribe from our newsletter.

Withdrawal: You may withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can withdraw your consent in the following ways:

• By clicking the relevant link provided in the newsletter
• By email to: info@schnell-cosmetics.de
• Using the contact details provided in the legal notice on our website

Advertising by email, post or telephone

We process personal data for our advertising communications by email, post or telephone. You may object to receiving our advertising communications at any time or withdraw any consent previously given to receive our advertising communications. In order to be able to demonstrate, in case of doubt, that your consent existed even after your objection or withdrawal, we may store your data for up to four years after your objection or withdrawal. We will no longer use your data for any other purposes following your objection or withdrawal. If you would like us to delete your data sooner, we will do so after you have confirmed that you originally gave us your consent.

Data concerned:

• Contact data (e.g. email address, telephone number, postal address)
• Master data (e.g. names, addresses)

Data subjects: Communication partners

Purpose of processing: Direct advertising measures (marketing) by email, post or telephone

Legal basis: Consent, Art. 6(1)(a) GDPR, legitimate interests, Art. 6(1)(f) GDPR

Security measures

We also implement state-of-the-art technical and organisational security measures in order to comply with data protection legislation and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.

Validity and amendments to this Privacy Policy

This Privacy Policy is currently valid and was last updated in September 2026. Changes to legal or regulatory requirements may make it necessary to amend this Privacy Policy. 

This Privacy Policy was created with the assistance of the privacy policy generator provided by SOS Recht. SOS Recht is a service offered by Mueller.legal Rechtsanwälte Partnerschaft, a law firm based in Berlin.