Privacy Policy

For Amifar not only the care and protection of your skin is important. We also attach great importance to the protection of your personal data. That’s why we respect your privacy and want you to be able to trust us as much when it comes to data protection as when it comes to skin care.

GENERAL INFORMATION

1. General Information

The purpose of this privacy policy is to provide you with information concerning the processing of personal data when using our website and related services. This privacy policy applies to all websites or services that refer to this privacy policy.

1.1. Processing of Personal Data

Personal data (in short data) within the meaning of Art. 4 of the UK General Data Protection Regulation (UK GDPR) are all information relating to an identified or identifiable natural person, i.e., name, address, email address, telephone number, etc.

1.2. Controller

Responsible for the processing of personal data within the meaning of Art. 4 (7) UK GDPR is: Amifar Labs and Distribution UK Ltd, 20-22 Wenlock Road, London, N1 7GU, United Kingdom, Tel: +44 (0)208 144 2300. E: privacy@amifarlabs.co.uk

Specific data processing activities might occur under the responsibility of other controllers. It is indicated in the respective description of those activities below, where this is the case.

1.3. Rights of the Data

Subject As data subject affected by the data processing activity, you have the following rights with regard to your personal data in accordance with the legal provisions:

Right of access;
Right to rectification and to erasure;
Right to restriction of processing;
Right to data portability; and
Right to object.

Furthermore, you have the right to lodge a complaint with a supervisory authority concerning the processing of your personal data.

When we work on your above-mentioned right, we may ask you for proof of your identity. For more information on how we process your data, see section 3.1

1.4 Recipients

Additionally to the recipients that are listed within the recipients paragraph of each section below, we transfer the collected data to the relevant internal departments for processing and to other affiliated companies within the Amifar group or to external service providers, contract processors in accordance with the purposes required. We also forward the data to the following recipients:

Authorities: In the event of a legal obligation, we reserve the right to disclose information about you if we are required to surrender it to competent authorities or law enforcement bodies acc. to: Art. 6 (1) c UK GDPR (legal obligation).
Platform/hosting providers will have access to personal data from a third country (countries outside the European Economic Area or UK). As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.
Analytical service providers will have access to personal data from a third country (countries outside the European Economic Area or UK). As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.
IT support service providers will have access to personal data from a third country (countries outside the European Economic Area or UK). As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies. Further information can be found within the recipient’s paragraph of each section.

COLLECTION & PROCESSING OF PERSONAL DATA WHEN VISITING OUR WEBSITE

2. Collection and Processing of Personal Data when visiting our Website(s)

When visiting and using our website we already collect personal data. You can find within this section more information about website specific processes and tools especially from external partners. Further information about processes which can also occur in an offline context can be found in section 3.

2.1 Hosting

Purpose/Information:

When visiting and using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server, which are technically necessary for us to display our website to you and to guarantee stability and security.

Used Cookies/Tools: Type A. More information can be found in the “Cookies and Tools” section

Recipients:

Platform/hosting providers will have access to personal data from a third country (countries outside the European Economic Area or UK). As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.
Service Provider for IT-Support will have access to personal data from a third country (countries outside the European Economic Areaor UK). As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/international-transfers-after-uk-exit/

Further recipients can be found in the general recipients section 1.4.

Deletion:

The deletion of the log files takes place after 7 Days.

Legal basis:

Art. 6 (1) f UK GDPR (legitimate interest)

2.2 Login functionalities

This website might provide different login functionalities as described below.

2.2.1 Centralised Login Profile

Purpose/Information:

This website might provide you with a centralised login profile, if this feature is activated on this website and includes a separate consent during the registration process: When registering, Amifar Labs UK provides you with the opportunity to create an account with a password (login profile). This login profile will be created within the centralised brand login profile database and shall verify that you are the valid owner of the account and/or email address. This login database is in general only connected to the service you are registering to and handles only the verification part of your login profile.

Used Cookies:

Type A. More information can be found in the “Cookies/Tools” section

Controller:

Responsible for the centralised profile remains Amifar Labs Distribution UK Ltd in the United Kingdom.
Contact details of the data protection officer: privacy@amifarlabs.co.uk or under the registered address of the controller for the attention of the “data protection officer”.

Recipients:

Platform/Hosting provider. Transfers to third countries are possible. As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.
Further recipients can be found in the general recipients section 1.4.

Deletion / Withdrawal:

Your login profile will be automatically deleted as soon as you have deleted your account on the website, unless this conflicts with legal storage obligations or statutes of limitations. An automatic deletion of accounts in general take place after 24 months of inactivity

Legal basis: Art. 6 (1) a UK GDPR (consent; centralised login profile)

2.3 Amifar eShop

Purpose/Information: If you would like to order products in our eShop, it is required for the conclusion of the contract that you enter your personal data, which we need for the completion and execution of your order. We process the data provided by you only to process and execute your order.
In the case this website provides a dedicated eShop, the following applies:

In addition, you can voluntarily register so we can store your data for future purchases. When you create such an account on the website, the data you have provided will be stored revocably. All other data, including your user account, can always be deleted in the customer area.

We may also process the information you provide with your purchase in our web shop to send you interesting product information based on the products you have purchased in our eShop. We therefore send you information by email in context with your purchase. This is a special form of direct marketing, based on our legitimate interest in strengthening consumer loyalty by suggesting appropriate and interesting product information.

Besides that, we may also send you technical or other factual information in context with your purchase. You can object at any time to receiving such information by following the requirements as described in in Section 4

The provision of your personal data is required for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If your personal data is not provided, you cannot use the described service.

Cookie/Tools Type A. More information can be found in the “Cookies/Tools” section

Recipients

Platform/Hosting service provider
Payment service provider
Fulfilment service provider
Customer /Consumer service provider
Content management website provider

Transfers to third countries are possible. As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded, which may include the UK’s Addendum to the standard contractual clauses or the UK’s International Data Transfer Agreement. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.

Further recipients can be found in the general recipient’s section 1.4.

Deletion: If no other legal basis applies, we will delete your purchase data in accordance with retention periods under applicable commercial and tax laws.

Cookie lifetime: up to 2 years.

Maximum storage period of data: up to 14 months.

Legal basis

Art. 6 (1) b UK GDPR (when processing in the context of a contract or a situation similar to a contract)

Art. 6 (1) f UK GDPR (when processing according to the legitimate interest described above)

2.4 Ratings and Reviews

Purpose/Information: Users might have the possibility to submit ratings and reviews of products, processes or other evaluations within the scope of the website’s offers in accordance with the conditions of use. We will therefore collect the data that you have provided to us when you submit content via a rating and review.

In the case this website demands a specific consent for sensitive data we will also process sensitive information (e.g. via pictures or content description) about your health or data revealing racial or ethnic origin especially within reviews for products suitable for skin concerns.

It is our legitimate interest that users can give their free opinion about products and that those reviews can appear on third party websites in a pseudonymised manner.

We use the data you provide in order to publish and maintain your review and rating on our website in accordance with our conditions of use. Your review will be published with your nickname/pseudonym. The review might be checked before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties. More information can be found in our conditions of use.

We also use your provided data within our legitimate interest to ensure that your review is not based on fraudulent behaviour, automatic programs or bots. It is therefore possible that you will receive a verification email to validate your email address, unless you have logged in via a user account.

Cookie/Tools: Type A. More information can be found in the “Cookies/Tools” section

Recipients:

Platform/hosting provider
Consumer service provider
Fraud prevention service provider (for publication on a third-party website).
Third party websites

Further recipients can be found in the general recipients section 1.4.

Deletion / Objection: The personal data of the users will be deleted or anonymised after the deletion of the user account or after a specific request.

The personal data of the users who have only received a verification email or do not have a user account will be deleted or anonymised after the corresponding deletion request. The published reviews will usually remain visible under the published nickname/pseudonym unless you request a deletion separately.

Legal basis:
Art.6 (1) a UK GDPR in conjunction with Art. 9 (2) a UK GDPR (consent)
Art. 6 (1) f UK GDPR (legitimate interest)

2.5 Cookies/Tools

This website uses cookies or other technologies/tools like pixels, local storage, tags, IDs or external services (hereinafter referred to as “Cookies/Tools”) and are used on when visiting and using our website. Cookies are small text files that are stored by your browser on your device to save certain information or image files, such as pixels. The next time you visit our website on the same device, the information saved in the cookies will subsequently be transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”).

Through the information saved and returned, the respective website can recognise that you have already accessed and visited it with the browser you use on that device. We use this information to be able to design and display the website in an optimum way in line with your preferences. In that respect, only the cookie itself is identified on your device. Beyond this extent, your personal data will only be saved upon your express consent or if it is strictly necessary to be able to use the service offered to and accessed by you accordingly.

This website uses the following types of cookies/tools, the scope and functionality of which are explained below:

Type A: Technical/Audience Measurement – to ensure that the demanded service can be provided including basic analysis. (No consent necessary acc. to ePrivacy Directive 2002/58 EC).
Type B: Functional and Performance – Additional tools to measure the performance/attractiveness of our website and to provide further additional (personalised) functionalities.
Type C: Marketing – Cross websites tools for marketing profiling based on user behaviour.
You can find more information on in the description of the tools implemented on our websites in this privacy policy. In case this website is using a consent management platform you can additionally find further information in there.
Please note that the tools listed in the following subsection might not be constantly in use.

2.5.1 Google Analytics

Purpose/Information: This website uses Google Analytics, a web analysis service of Google Ireland Ltd. (“Google”). The configuration of Google Analytics has been modified by us to the measurement only function, unless separate consent for further advertising features has been given.

Google Analytics uses a specific form of cookie, which is stored on your computer and enables an analysis of your use of our website. The cookies set by Google Analytics for measurement are first party cookies, which means that data subjects’ cookie values will be different for each customer (i.e. there is not a single Google Analytics cookie ID that is used on all sites using Google Analytics). The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there.

Due to the IP anonymization on this website, your IP address is shortened by Google within the territory of the EU and the Treaty States of the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.
Google uses this information on our behalf to analyse your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

We use Google Analytics to analyse and regularly improve the usage of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. In addition, we gain information about the functionality of our site (for example to detect navigation problems).
In the configuration of Google Analytics, we ensured that Google receives this data as a processor and is therefore not allowed to use this data for its own purposes. The “Google Analytics Advertising Features” configuration is independent from this and is described in the appropriate section below, provided it is also used on this website.

Cookies/Tools: Type B. More information can be found in the “Cookies/Tools” section

Recipients:

Main service provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics Terms of Service: https://www.google.com/analytics/terms/gb.html, General overview on Google Analytics security and privacy principles: https://support.google.com/analytics/answer/6004245?hl=en, as well as Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Transfers to third countries are possible. As an appropriate safeguard standard contractual clauses pursuant to Art. 46 UK GDPR were concluded. For third countries/companies which fall under an adequacy decision, the adequacy decision also applies.

Further recipients can be found in the general recipients section 1.4.
Deletion/Withdrawal: You can deactivate this tool via the Cookie Settings declining the acceptance at the time of visiting our website in the Cookie disclaimer.

Cookie lifetime: up to 12 months (this applies only to cookies which have been set by this website)

Maximum storage period of data: up to 26 months.

Legal basis: Art. 6 (1) a UK GDPR (consent)

2.5.2 Google Ads

Purpose/Information: We use the services of Google Ads to draw attention to our attractive offers with the help of advertisements (so-called Google Ads) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The advertisements are delivered by Google via so-called “Ad Servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the insertion of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads stores a cookie on your device. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their device has not expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Ads customers. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognise which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically starts a direct connection to the Google server. We have no influence on the extent and the further use of the data which are raised by the use of this tool by Google and inform you therefore according to our knowledge: By the integration of Ads conversion Google receives the information that you called the appropriate part of our internet appearance or clicked an announcement of us.

If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the providers may obtain and store your IP address.

Google Ads Remarketing

We use the remarketing function within the Google Ads service. The remarketing function allows us to present to users of our website advertisements based on their interests on other websites within the Google advertising network (in Google search or on YouTube, so-called “Google ads” or on other websites). For this purpose, the interaction of users on our website is analysed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users even after visiting our website on other pages. To do this, Google stores cookies in the browsers of users who visit certain Google services or websites in the Google Display Network. This cookie is used to record the visits of these users. The number is used to uniquely identify a web browser on a particular device.

Cookies/Tools: Type C. More information can be found in the “Cookies/Tools” section

Recipients:

Main service provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Further recipients can be found in the general recipient’s section 1.4.

Deletion/withdrawal: You can deactivate this tool via the Cookie Settings declining the acceptance at the time of visiting our website in the Cookie disclaimer.

Cookie lifetime: up to 180 days (this applies only for cookies which have been set by this website).

Legal basis: Art. 6 (1) a UK GDPR (consent)

2.5.3 Google Campaign Manager

Purpose/Information:

This website also uses the online marketing tool Campaign Manager by Google. Campaign Manager uses Cookies to display ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. In addition, Campaign Manager may use cookie IDs to collect so called conversions related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser’s website with the same browser and buys something there.

Your browser automatically establishes a direct connection to the Google server once visiting our website. We have no influence on the extent and the further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating

Campaign Manager, Google receives the information that you have called the corresponding part of our Internet presence or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the providers may obtain and store your IP address.

In addition to that, Campaign Manager cookies allow us to understand whether you complete certain actions on our website(s) after viewing one of our display/video ads on Google or other platforms through Campaign Manager or clicking through one (conversion tracking). Campaign Manager uses this cookie to understand the content with which you have interacted on our website(s) in order to be able to send you targeted advertising later.
Used Cookies: Type C. More information can be found in the “Cookies/Tools” section

Recipients:

Main service provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Further recipients can be found in the general recipients section 1.4.

Deletion/Withdrawal

You can deactivate this tool via the Cookie Settings declining the acceptance at the time of visiting our website in the Cookie disclaimer.

Cookie lifetime: up to 180 days after last interaction (this applies only to cookies which have been set by this website)

Legal basis: Art. 6 (1) a UK GDPR (consent)

2.5.4 Social Plug-ins

Purpose/Information:

Social plug-ins (“plug-ins”) of social networks (Facebook, Twitter, Pinterest) are used on our websites, in particular the “Share” or “Share with friends” button of Facebook, whose website facebook.com is operated by Meta Platforms Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland. The plug-ins are usually marked with a Facebook logo.

Besides Facebook, we use plug-ins from Twitter (Provider: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103) and Pinterest (Provider: Pinterest Europe Limited, 2nd Floor, Palmerston House, Fenian Street, Dublin 2, Ireland).

For data protection reasons, we have deliberately decided against utilising direct plug-ins of social networks on our websites. Instead, we use the “Shariff” solution. With the aid of Shariff, we can determine for ourselves when and whether data is transmitted to the operator of the respective social network. For this reason, there is no automatic data transmission to social networks such as Facebook, Twitter or Pinterest once you access our website. Data will be transmitted to social networks only if you actively click on the respective social network button. In this case, your web browser starts a connection to the respective social network’s servers. By clicking on the respective button (e.g. “Pass on”, “Share” or “Share with friends”) you agree that your browser will produce a link to the respective social network’s servers and transmit usage data to the respective operator of the social network and vice versa. We have no influence upon the nature and extent of the data that is then gathered by the social networks.

The social network providers store the data collected about you as user profiles and use these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in providers to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

Recipients Main service providers:

Meta Platforms Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland
Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA
Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA.

Deletion:

The deletion is in the responsibility of the main service providers.

Legal basis: Art. 6 (1) a UKGDPR (consent)

FURTHER SERVICES OFFERED (ON- AND OFFLINE)

3. Further services offered (on- and offline)

In addition to the online use of our website, we offer various other services, for which we process your personal data also in an offline context.

3.1 Newsletter

Purpose / Information:

The newsletter contains news, offers and further information on the selected Amifar brands. By subscribing to the newsletter, you will receive in accordance with the consent you have given in each case personalised information about the products, services or suggestions for participation in promotions, such as competitions or product tests by email.

With your registration for the newsletter you will receive a newsletter tailored to your needs (if the newsletter is “personalised”, “individualised” or “customised”). We evaluate your purchase and click behaviour on our websites or within the newsletter in order to compile the information relevant to you.

In case this website offers a loyalty program, this newsletter is part of the loyalty program.

Recipients:

Platform/hosting provider
Consumer service provider
External agencies for newsletter support

Deletion / Withdrawal:

These collected data are automatically deleted after 24 months at the latest if they no longer respond to the newsletter, e.g. open (inactivity). If you no longer wish to receive the newsletter, you can unsubscribe at any time. Click on the link contained in each newsletter, you will then be guided through the unsubscribe process, or send us your withdrawal by email.

If your profile has not been verified during the so-called double opt-in process, your profile will be deleted after 6 months at the latest.

Legal basis: Art. 6 (1) a UK GDPR (consent)

3.2 Campaigns

Purpose/Information:

When you participate in sweepstakes or similar campaigns, we use the personal information you provide to conduct the campaign. Further information on the purposes can be found in the respective terms and conditions of the campaign.

Recipients:

Platform/hosting provider
Consumer service provide
Shipping service provider (e.g. for sending samples, prises)
External agencies for support in campaigns

Deletion:

Your data will be deleted after the final processing of the campaign (see terms and conditions of participation), unless this conflicts with statutory retention obligations or statutes of limitations.

Legal basis: Art. 6 (1) b UK GDPR (situation similar to a contract)

3.3 (Branded) Loyalty Program

Purpose/Information:

The purpose of this program is a personalised experience for you as a member. When you register to our loyalty program (online or offline), you will receive exclusive and personalised content, like the newsletter, product samples or special offers, e.g. by email, post, SMS or online advertising on our own or third-party channels, such as social media (e.g. Facebook). For this purpose we use the contact information you provide (e.g. email address, postal address, telephone number) and any contact information linked to your social media profiles. This contact information will be matched in hashed form with the social media providers.

To provide you with a relevant individualised experience – i.e. at the right time, through the right channel, with the content relevant to you and with the right, personalised message – we link your data and enrich it with additional information, e.g. geodata and profile data from all contact points, including websites and social media channels.

For this purpose, we also evaluate your (previous) click, email opening, purchasing and surfing behaviour on our and other websites/apps, social media sites (e.g. in the context of ads placed) or within the newsletter in order to arrange the content relevant to you. This also includes the data from the eShop, if this website provides an eShop. We can also derive your activity status from this and automatically delete your account in case of inactivity (see below). In addition, we use this data to contact you individually, taking into account purchase transactions that have already been initiated or completed. We therefore create a user profile for the compilation of personalised content.

In addition, sensitive data such as health data (allergies or skin diseases) may be collected. However, we only process these if you have agreed to this.

Finally, we also use your information to analyse and improve the effectiveness of our services. Your details will therefore be stored and used for market analysis and product information purposes. This also includes information you provide in the context of campaigns/actions.

Recipients:

Platform/hosting provider
Consumer service provider
Shipping service provider
External agencies for support in campaigns

Deletion/withdrawal/objection:

Your data will be deleted as soon as you have deleted your account/profile, unless this conflicts with legal storage obligations or statutes of limitations in order to delete your data, please log into your account and use the corresponding deletion function or send us your withdrawal of data processing by email. You can also object to individual contact methods in your account/profile by deactivating the contact method. Alternatively, you can also request this via the contact form. We automatically delete your personal data at the latest after 24 months of inactivity.

If your profile has not been verified during the so-called double opt-in process, your profile will be deleted after 6 months at the latest.

Legal basis:

Art. 6 (1) f) UK GDPR (legitimate interest: analysis and improvement of the effectiveness of our services and combination of the profile with data in our legitimate interest).

Art. 6 (1) a, Art. 9 (2) a UK GDPR (consent to a loyalty program)

3.4 Postal mailings

Purpose/Information:

As a selected customer, business partner, test person and/or consumer, you will also receive individual product information, offers, news and product samples from us by post (letter).

This is a special form of direct marketing, which is also our legitimate interest and intensifies loyalty by providing the above-mentioned persons exclusive information.

Recipients:

Platform/hosting provider
Communication service provider
Shipping service provider

Deletion / Objection:

Your data will be deleted as soon as you have unsubscribed, unless this conflicts with legal storage obligations or statutes of limitations. You can unsubscribe or object to further postal mailings as stated within the letter or in the section objection below. We further delete your personal data at the latest automatically after 24 months inactivity.
Legal basis: Art. 6 (1) f UK GDPR (legitimate interest)

3.5 Surveys

Purpose/Information:

When you participate in surveys or similar campaigns, we process the personal information for the purpose described in the consent. The collected data covers questions around the intended purpose of the survey or similar campaign, as well as additional socio-demographic information about you. You may participate without identifying yourself, unless this has been part of the consent.

For some surveys it is necessary to ensure technically that no double participation or resumption of the survey is possible. This can be done, for example, through the use of individualised links or cookies.

Cookies used: Type A. More information can be found in the “Cookies/Tools” section.

Recipients:

Platform/hosting providers
Consumer management service provider
External agencies for survey support

Deletion:

Your data will be deleted after the final processing of the survey or similar campaign (see terms and conditions of participation) unless this conflicts with statutory retention obligations or statutes of limitations. Usually, data will be deleted after two years.

Cookie lifetime: up to 180 days (this applies only to cookies which have been set by this website)

Legal basis: Art. 6 (1) a UK GDPR (consent)

OBJECTION OR WITHDRAWAL OF YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA

If you have given your consent (Art. 6 (1) a UK GDPR) to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us.

If we base the processing of your personal data on the weighing of interests (Art. 6 (1) f UK GDPR), you may object to the processing. This is the case if processing is not necessary to fulfil a contract with you, which is described by us in the description of the functions / services. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection, on the basis of which we will continue processing.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us about your objection under the above-mentioned contact details for the controller.

Additional information and references to Data Privacy policies related to this document can also be found here:

Privacy Policy

GENERAL INFORMATION

COLLECTION & PROCESSING OF PERSONAL DATA WHEN VISITING OUR WEBSITE

FURTHER SERVICES OFFERED (ON- AND OFFLINE)

OBJECTION OR WITHDRAWAL OF YOUR CONSENT TO THE PROCESSING OF PERSONAL DATA

Sign up to Amifar Labs news

About Us

Contact Us

Let us know your thoughts Contact Us

Legal