Privacy Policy

1. Information on the Collection of Personal Data and Contact Details of the Responsible Party

1.1 Introduction
Thank you for visiting our website and showing interest in HER ESSENCE. This Privacy Policy explains how we handle your personal data when you use our website. Personal data refers to any information that can personally identify you.

1.2 Responsible Party
The responsible party for data processing on this website under the General Data Protection Regulation (GDPR) is HER ESSENCE. The responsible party is the natural or legal person who decides the purpose and means of processing personal data.

1.3 SSL/TLS Encryption
To protect your data during transmission, we use SSL/TLS encryption. You can identify encrypted connections by the "https://" prefix and the lock symbol in your browser's address bar.

2. Data Collection When Visiting Our Website

When you visit our website without registering or providing information, we only collect data that your browser transmits to our server (server log files). This includes:

Visited webpage
Date and time of access
Amount of data sent in bytes
Source/reference (referrer URL)
Browser used
Operating system used
IP address (anonymized if possible)

Processing is done per Article 6(1)(f) GDPR to ensure the stability and functionality of our website. No further use or sharing of this data occurs unless illegal use is suspected.

3. Cookies

To enhance your experience on our website, we use cookies:

3.1 Types of Cookies

Session Cookies: Deleted after you close your browser.
Persistent Cookies: Remain on your device for a specific period, enabling us to recognize your browser on your next visit.

3.2 Purpose of Cookies

Simplify processes, e.g., saving cart contents for later visits.
Provide personalized user experiences.

3.3 Third-Party Cookies

We may collaborate with advertising partners who place third-party cookies on your device.

3.4 Managing Cookies

You can configure your browser to notify you about cookies, allow or block them, or delete existing cookies. Note that blocking cookies may reduce the functionality of our website.
Browser-specific cookie settings:

4. Contacting Us

When you contact us (e.g., via form or email), we collect your personal data to process your inquiry.

Legal Basis: Article 6(1)(f) GDPR (legitimate interest).
Purpose: Responding to inquiries.
Data is deleted after your request is fully resolved unless legal retention requirements apply.

5. Data Processing for Account Registration and Contract Fulfillment

When you register for an account or place an order, we process your data to fulfill the contract per Article 6(1)(b) GDPR. Your data is stored until the contract is completed and subsequently deleted after tax or legal retention periods expire.

6. Use of Data for Direct Marketing

6.1 Newsletter
If you subscribe to our newsletter, we process your email address to send you updates. A confirmation email (double opt-in) ensures your consent. You can unsubscribe anytime via the link in the newsletter or by contacting us.

6.2 Existing Customers
If you've purchased from us, we may email you offers related to your previous purchases based on our legitimate interest under Article 6(1)(f) GDPR. You can opt-out anytime by contacting us.

7. Data Processing for Order Fulfillment

We share necessary data with shipping and payment service providers (e.g., PayPal, SOFORT) to complete your order.

Legal Basis: Article 6(1)(b) GDPR.
Refer to respective payment provider privacy policies for details.

8. Use of Social Media Plugins

To protect your data, social media plugins (e.g., Facebook, Instagram) are integrated using "Shariff" solutions. No connection to third-party servers is made unless you actively interact with these plugins.

9. Online Marketing and Analytics

9.1 Google Analytics
We use Google Analytics to analyze user behavior. Data collected is anonymized and processed under Article 6(1)(f) GDPR. You can opt out via browser settings or plugins (Google Opt-out Tool).

9.2 Facebook Pixel
With your consent, we use Facebook Pixel to track conversions for advertising purposes. You can opt out through Digital Advertising Alliance.

10. Retargeting and Remarketing

We use remarketing tools like Google AdWords and Facebook to display personalized ads. These tools use cookies to track user behavior and optimize advertising campaigns.

11. Rights of Data Subjects

Under GDPR, you have the following rights:

Access: Request details about your data.
Correction: Update incorrect or incomplete data.
Deletion: Request deletion of your data.
Restriction: Limit the processing of your data.
Objection: Object to data processing based on legitimate interest.
Data Portability: Transfer your data to another provider.
Complaint: File a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@heressence.com.

12. Retention Period

We retain personal data only as long as necessary to fulfill legal, contractual, or marketing obligations. Afterward, data is securely deleted unless legal retention periods apply.

For questions regarding this Privacy Policy, please contact us at privacy@heressence.com.