Skip to Content

Privacy Policy​

Personal data (hereinafter mostly referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, paragraph 1 of Regulation (EU) 2016/679, also known as the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" refers to any operation or set of operations performed on personal data, whether or not by automated means, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, as far as we decide either alone or jointly with others on the purposes and means of processing. Furthermore, we inform you below about the third-party components we use for optimization purposes and to enhance the quality of use, as far as third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the Responsible Party​

II. Rights of Users and Affected Parties​

III. Information on Data Processing​

I. Information about us as the Responsible Party​

The responsible provider of this website in terms of data protection law is:

LAMI COSMETICS SARL

[First Name, Last Name]

296, rue de Neudorf, L-2222 Luxemburg-Neudorf

L-2222 Luxemburg-Neudorf

Phone: [Phone Number]

Fax: [Fax number]

E-Mail: datenschutz@lamicosmetics.lu

The data protection officer at the provider is:

[DSB – First Name, Last Name]

Phone: [DSB – Phone Number]

Telefax: [DSB – Fax number]

II. Rights of Users and Affected Parties​

In view of the data processing described in more detail below, users and affected parties have the right

  • on confirmation of whether the relevant data is being processed, on information about the processed data, on further information about the data processing, as well as on copies of the data (see also Art. 15 GDPR);
  • for the correction or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
  • for the immediate deletion of the data concerning them (see also Art. 17 GDPR), or, alternatively, to the restriction of processing in accordance with Art. 18 GDPR, insofar as further processing is necessary under Art. 17 para. 3 GDPR;
  • on the receipt of the data concerning them and provided by them, and on the transmission of this data to other providers/controllers (see also Art. 20 GDPR);
  • to file a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider about any corrections or deletions of data or the restriction of processing that occurs pursuant to Articles 16, 17(1), and 18 of the GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and affected parties also have the right to object to the future processing of their data under Article 21 of the GDPR, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.

III. Information on Data Processing​

Your data processed during the use of our website will be deleted or blocked as soon as the purpose of storage ceases, provided that there are no legal retention obligations opposing the deletion of the data, and unless otherwise stated regarding individual processing procedures.

Subscription to Posts

If you publish posts on our websites, we additionally offer you the option to subscribe to any follow-up posts from third parties. In order to inform you about these follow-up posts via email, we process your email address.

The legal basis for this is Article 6(1)(a) of the GDPR. You can revoke your consent to this subscription at any time with future effect in accordance with Article 7(3) of the GDPR. To do this, you only need to inform us of your revocation or click the unsubscribe link included in the respective email.

Cookie Manager

To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager.

When the website is accessed, a cookie with the settings information is stored on the user's device, so that the inquiry regarding consent does not have to be made during a subsequent visit.

The cookie is required to obtain a legally compliant consent from the user.

The user can prevent or terminate the installation of cookies by adjusting the settings of their browser.

Cookies

a) Session Cookies

We use so-called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you are using. These cookies process certain information about you, such as your browser or location data or your IP address, to a specific extent.

Through this processing, our website becomes more user-friendly, effective, and secure, as the processing enables, for example, the display of our website in different languages or the provision of a shopping cart function.

The legal basis for this processing is Article 6(1)(b) of the GDPR, provided that these cookies process data for the initiation or execution of a contract.

If the processing does not serve the initiation or execution of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6(1)(f) GDPR.

Closing your internet browser will delete these session cookies.

b) Third-party cookies

If applicable, cookies from partner companies with whom we collaborate for the purposes of advertising, analysis, or the functionalities of our website may also be used with our online presence.

The details regarding this, particularly concerning the purposes and legal bases for the processing of such third-party cookies, can be found in the following information.

c) Possibility of elimination

You can prevent or restrict the installation of cookies by adjusting the settings of your internet browser. You can also delete already stored cookies at any time. However, the necessary steps and measures depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser, or contact its manufacturer or support. For so-called Flash cookies, processing cannot be prevented through the browser settings. Instead, you must change the settings of your Flash player accordingly. The necessary steps and measures also depend on the specific Flash player you are using. If you have questions, please also use the help function or documentation of your Flash player, or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.

Contact inquiries / Contact options

If you contact us via contact form or email, the data you provide will be used to process your request. Providing this data is necessary for processing and responding to your inquiry – without it, we may not be able to respond to your request or can only do so in a limited manner.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

Your data will be deleted once your request has been conclusively answered and there are no legal retention obligations opposing the deletion, such as in the case of a subsequent contract processing.

Customer Account / Registration Function

If you create a customer account with us through our website, we will collect and store the data you enter during registration (such as your name, address, or email address) solely for pre-contractual services, for contract fulfillment, or for customer care purposes (for example, to provide you with an overview of your previous orders with us or to offer you the so-called wish list function). At the same time, we will also store your IP address and the date and time of your registration. Of course, we will not share this data with third parties.

As part of the further registration process, your consent for this processing is obtained and reference is made to this privacy policy. The data collected by us will be used exclusively for the provision of the customer account.

As far as you consent to this processing, Article 6(1)(a) of the GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, then the legal basis for this processing is also Article 6(1)(b) of the GDPR.

You can revoke the consent we have been given for the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation.

The data collected in this regard will be deleted as soon as the processing is no longer necessary. However, we must observe tax and commercial retention periods.

Newsletter

If you sign up for our free newsletter, the data you provide, namely your email address and – optionally – your name and address, will be transmitted to us. At the same time, we will store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. As part of the further registration process, we will obtain your consent for the transmission of the newsletter, specifically describe the content, and refer to this privacy policy. The data collected in this process will be used exclusively for sending the newsletter – they will therefore not be passed on to third parties.

The legal basis for this is Article 6(1)(a) of the GDPR.

You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation or click the unsubscribe link included in each newsletter.

User contributions, comments, and reviews

We offer you the opportunity to publish questions, answers, opinions, or reviews on our websites, hereinafter referred to as "contributions." If you take advantage of this offer, we will process and publish your contribution, the date and time of submission, as well as any pseudonym you may have used.

The legal basis for this is Article 6(1)(a) of the GDPR. You can revoke your consent at any time with future effect in accordance with Article 7(3) of the GDPR. To do this, you only need to inform us of your revocation.

Furthermore, we also process your IP address and email address. The IP address is processed because we have a legitimate interest in taking or supporting further action if your contribution infringes on the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the potentially necessary legal defense.

Online Job Applications / Publication of Job Advertisements

We offer you the opportunity to apply with us through our website. In these digital applications, your applicant and application data will be collected and processed electronically by us for the purpose of handling the application process.

The legal basis for this processing is § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.

If a work contract is concluded after the application process, we will store the data you provided during the application in your personnel file for the purpose of the usual organizational and administrative processes – this, of course, while observing further legal obligations.

The legal basis for this processing is also § 26 para. 1 sentence 1 of the Federal Data Protection Act (BDSG) in conjunction with Art. 88 para. 1 of the General Data Protection Regulation (GDPR).

In the case of a rejection of an application, we automatically delete the data provided to us two months after the notification of the rejection. However, the deletion does not take place if the data requires a longer retention period of up to four months or until the conclusion of a legal proceeding due to legal regulations, e.g., due to the burden of proof under the AGG.

The legal basis in this case is Article 6(1)(f) of the GDPR and Section 24(1)(2) of the BDSG. Our legitimate interest lies in legal defense and enforcement.

If you explicitly consent to a longer storage of your data, for example, for your inclusion in a candidate or prospect database, the data will be processed further based on your consent. The legal basis is then Article 6(1)(a) of the GDPR. However, you can of course revoke your consent at any time in accordance with Article 7(3) of the GDPR by declaring this to us with effect for the future.

Server data

For technical reasons, particularly to ensure a secure and stable online presence, data is transmitted to us or to our web space provider by your internet browser. This so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our online presence (referrer URL), the website(s) of our online presence that you visit, the date and time of each access, as well as the IP address of the internet connection from which the use of our online presence occurs.

The data collected in this way will be temporarily stored, but not together with other data from you.

This storage is based on the legal grounds of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our online presence.

The data will be deleted no later than seven days later, unless further retention is required for evidentiary purposes. Otherwise, the data will be exempt from deletion in whole or in part until the final clarification of an incident.

Contract processing

The data you provide to take advantage of our goods and/or services will be processed by us for the purpose of contract execution and is therefore necessary. The conclusion of the contract and contract execution are not possible without providing your data.

The legal basis for processing is Article 6(1)(b) of the GDPR.

We delete the data upon complete contract fulfillment, but we must observe the tax and commercial retention periods.

As part of the contract processing, we will share your data with the transport company responsible for the delivery of goods or with the financial service provider, as far as the transfer is necessary for the delivery of goods or for payment purposes.

The legal basis for the transfer of the data is then Article 6(1)(b) of the GDPR.

Facebook

To promote our products and services as well as to communicate with interested parties or customers, we maintain a company presence on the Facebook platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.​

The Data Protection Officer of Facebook can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations in accordance with the GDPR. This agreement, from which the mutual obligations arise, can be accessed at the following link:​

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that occurs as a result and is subsequently presented is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis, communication, as well as the marketing and promotion of our products and services.​

The legal basis may also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR towards the platform operator. The user can revoke this consent at any time for the future by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.​

When accessing our online presence on the Facebook platform, user data (e.g., personal information, IP address, etc.) is processed by Facebook Ireland Ltd., the operator of the platform in the EU.

This user data is used for statistical information about the utilization of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, target users with advertisements based on their interests both within and outside of Facebook. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.

If a user contacts us via Facebook, the personal data provided at that time will be used to process the request. The user's data will be deleted by us once the user's request has been conclusively answered and there are no legal retention obligations, such as in the case of subsequent contract processing, that would prevent this.

For the processing of the data, cookies may also be set by Facebook Ireland Ltd.​

If the user does not agree with this processing, there is the option to prevent the installation of cookies by adjusting the settings of the browser. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented through the browser settings, but rather through the appropriate settings of the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.​

More information about the processing activities, their prohibition, and the deletion of data processed by Facebook can be found in Facebook's data policy:

https://www.facebook.com/privacy/explanation

It is not excluded that the processing by Meta Platforms Ireland Limited may also take place through Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Instagram

To promote our products and services as well as to communicate with interested parties or customers, we maintain a company presence on the platform Instagram.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.​

Der Datenschutzbeauftragte von Instagram kann über ein Kontaktformular erreicht werden:

https://www.facebook.com/help/contact/540977946302970

We have regulated the joint responsibility in an agreement regarding the respective obligations in accordance with the GDPR. This agreement, from which the mutual obligations arise, can be accessed at the following link:​

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data that occurs as a result and is subsequently presented is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis, communication, as well as the marketing and promotion of our products and services.​

The legal basis may also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR towards the platform operator. The user can revoke this consent at any time for the future by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.​

When accessing our online presence on the Instagram platform, user data (e.g., personal information, IP address, etc.) is processed by Facebook Ireland Ltd., the operator of the platform in the EU.

This user data is used for statistical information about the usage of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, target users with interest-based advertising both on and off Instagram. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.

If a user contacts us via Instagram, the personal data provided at that time will be used to process the request. The user's data will be deleted by us once the user's request has been conclusively answered and there are no legal retention obligations, such as in the case of subsequent contract processing, that would prevent this.

For the processing of the data, cookies may also be set by Facebook Ireland Ltd.​

If the user does not agree with this processing, there is the option to prevent the installation of cookies by adjusting the settings of the browser. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented through the browser settings, but rather through the appropriate settings of the Flash Player. If the user prevents or restricts the installation of cookies, this may result in not all functions of Facebook being fully usable.​

More information about the processing activities, their prohibition, and the deletion of data processed by Instagram can be found in Instagram's data policy:

https://help.instagram.com/519522125107875

It is not excluded that the processing by Facebook Ireland Ltd. also takes place through Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

LinkedIn

We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

In this regard, we would like to point out that there is a possibility that user data may be processed outside of the European Union, particularly in the USA. This may pose increased risks for users, as, for example, later access to user data may be more difficult. We also do not have access to this user data. Access is solely with LinkedIn.

You can find LinkedIn's privacy policy at

https://www.linkedin.com/legal/privacy-policy

Pinterest

We maintain an online presence on Pinterest to showcase our company and our services, as well as to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

In this regard, we would like to point out that there is a possibility that user data may be processed outside of the European Union, particularly in the USA. This may pose increased risks for users, as, for example, later access to user data may be more difficult. We also do not have access to this user data. Access is solely at the discretion of Pinterest.

You can find Pinterest's privacy policy at

https://policy.pinterest.com/de/privacy-policy

Twitter

We maintain an online presence on Twitter to present our company and our services, as well as to communicate with customers/prospects. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

In this regard, we would like to point out that there is a possibility that user data may be processed outside of the European Union, particularly in the USA. This may pose increased risks for users, as, for example, later access to user data may be more difficult. We also do not have access to this user data. Access is solely at the discretion of Twitter.

You can find Twitter's privacy policy at

https://twitter.com/de/privacy

YouTube

We maintain an online presence on YouTube to present our company and our services, as well as to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

In this regard, we would like to point out that there is a possibility that user data may be processed outside of the European Union, particularly in the USA. This may pose increased risks for users, as, for example, later access to user data may be more difficult. We also do not have access to this user data. The access capability lies solely with YouTube.

You can find YouTube's privacy policy at

https://policies.google.com/privacy

General linking to profiles on third-party providers

The provider includes a link to the social networks listed below on the website.

The legal basis here is Article 6(1)(f) of the GDPR. The legitimate interest of the provider lies in improving the usability of the website.

The integration of the plugins is done through a linked graphic. Only by clicking on the corresponding graphic is the user redirected to the service of the respective social network.

After the customer is redirected, the respective network collects information about the user. This initially includes data such as IP address, date, time, and visited page. If the user is logged into their account on the respective network during this time, the network operator may be able to associate the collected information from the specific visit with the user's personal account. If the user interacts with a "Share" button from the respective network, this information may be stored in the user's personal account and possibly published. If the user wants to prevent the collected information from being directly associated with their account, they must log out before clicking on the graphic. Additionally, there is the option to configure the respective user account accordingly.

The following social networks are linked by the provider:

facebook

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.

Privacy Policy: https://www.facebook.com/policy.php

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland.

Privacy Policy: https://help.instagram.com/519522125107875

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, ein Tochterunternehmen der LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Pinterest

Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

Privacy Policy: https://policy.pinterest.com/de/privacy-policy

twitter

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

Privacy Policy: https://twitter.com/privacy

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, ein Tochterunternehmen der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Privacy Policy: https://policies.google.com/privacy

“Facebook” Social Plug-in

On our website, we use the plug-in of the social network Facebook. Facebook is an internet service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you have given consent for this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website.​

Further information about the possible plug-ins and their respective functions can be found on Facebook at

https://developers.facebook.com/docs/plugins/

ready for you.

If the plug-in is embedded on one of the pages of our website that you visit, your internet browser downloads a representation of the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. Additionally, the date and time of your visit to our website are also recorded.

If you are logged into Facebook while visiting one of our websites that features the plug-in, the information collected by the plug-in about your specific visit will be recognized by Facebook. The information collected in this way may be assigned by Facebook to your personal user account there. Therefore, if you use the so-called "Like" button from Facebook, this information will be stored in your Facebook user account and may be published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your internet browser to block the loading of the Facebook plug-in.

Further information about the collection and use of data, as well as your related rights and protection options, is provided by Facebook in the following

https://www.facebook.com/policy.php

available privacy notices.​

“Twitter” Social Plug-in

On our website, we use the plug-in of the social network Twitter. Twitter is an internet service provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, hereinafter referred to as "Twitter."

If you have given consent for this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our website.​

If the plug-in is embedded on one of the pages you visit on our website, your internet browser downloads a representation of the plug-in from Twitter's servers in the USA. For technical reasons, it is necessary for Twitter to process your IP address. Additionally, the date and time of your visit to our website are also recorded.

If you are logged into Twitter while visiting one of our websites equipped with the plug-in, the information collected by the plug-in about your specific visit will be recognized by Twitter. The information collected in this way may be assigned by Twitter to your personal user account there. Therefore, if you use the so-called "Share" button from Twitter, this information will be stored in your Twitter user account and may be published on the Twitter platform. If you want to prevent this, you must either log out of Twitter before visiting our website or adjust the relevant settings in your Twitter user account.

Further information about the collection and use of data, as well as your related rights and protection options, is provided by Twitter in the

https://twitter.com/privacy

available privacy notices.​

Google Analytics

On our website, we use Google Analytics. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google."

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.

Usage and user-related information, such as IP address, location, time, or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization feature. Through this feature, Google shortens the IP address already within the EU or the EEA.

The data collected in this way is used by Google to provide us with an analysis of the visits to our website as well as the usage activities there. This data can also be used to provide additional services related to the use of our website and the use of the internet.

Google states that it does not associate your IP address with other data. Additionally, Google maintains under

https://www.google.com/intl/de/policies/privacy/partners

further data protection legal information available for you, such as options to restrict data usage.

Additionally, Google offers under

https://tools.google.com/dlpage/gaoptout?hl=de

A so-called deactivation add-on along with further information is provided. This add-on can be installed with common internet browsers and offers you additional control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. Whether and which other web analytics services we use will also be explained in this privacy policy.

Google-Maps

On our website, we use Google Maps to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google."

In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. To display our location and create directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.

If you have given consent for this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing the functionality of our website.

Through the connection established to Google, Google can determine from which website your request was sent and to which IP address the directions should be transmitted.

If you do not agree with this processing, you have the option to prevent the installation of cookies by adjusting the settings in your internet browser. Details on this can be found above under the section "Cookies".​

Furthermore, the use of Google Maps and the information obtained through Google Maps is carried out according to theGoogle-Nutzungsbedingungen https://policies.google.com/terms?gl=DE&hl=de und den Geschäftsbedingungen für Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

Moreover, Google offers under

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

provide further information.

YouTube

On our website, we use YouTube. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "YouTube."

We use YouTube in connection with the "Enhanced Privacy Mode" feature to display videos to you. In the event that you provide consent for this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the quality of our online presence. According to YouTube's information, the "Enhanced Privacy Mode" feature ensures that the data specified below is only transmitted to YouTube's server when you actually start a video.

Without this "Enhanced Privacy," a connection to YouTube's server in the USA is established as soon as you visit one of our web pages that has a YouTube video embedded.

This connection is necessary to display the respective video on our website through your internet browser. In the process, YouTube will at least collect and process your IP address, the date along with the time, and the website you visited. Additionally, a connection to Google's advertising network "DoubleClick" will be established.

If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you need to either log out of YouTube before visiting our website or adjust the relevant settings in your YouTube user account.

For the purpose of functionality and analyzing user behavior, YouTube permanently stores cookies through your internet browser on your device. If you do not agree with this processing, you have the option to prevent the storage of cookies by adjusting a setting in your internet browser. For more information, please see above under "Cookies".

Further information about the collection and use of data, as well as your related rights and protection options, is provided by Google in the

https://policies.google.com/privacy

available privacy notices.​

Use of PayPal as a payment method

If you choose to pay using the online payment service provider PayPal during your ordering process, your contact details will be transmitted to PayPal as part of the triggered order. PayPal is a service of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider as well as a trustee and offers buyer protection services.

The personal data transmitted to PayPal usually includes first name, last name, address, phone number, IP address, email address, or other data necessary for order processing, as well as data related to the order, such as the number of items, item number, invoice amount and taxes in percentage, billing information, etc.

This transmission is necessary for processing your order with the payment method you selected, particularly for confirming your identity, administering your payment, and managing the customer relationship. The transmission of your data to PayPal is therefore based on Art. 6 para. 1 lit. b GDPR.

However, please note: Personal data may also be shared by PayPal with service providers, subcontractors, or other affiliated companies, as far as this is necessary to fulfill the contractual obligations arising from your order or if the personal data is to be processed on behalf of someone else.

Depending on the payment method selected via PayPal, such as invoice or direct debit, the personal data transmitted to PayPal will be forwarded by PayPal to credit reporting agencies. This transmission is for the purpose of identity and creditworthiness verification regarding the order you placed. You can find out which credit agencies are involved and what data is generally collected, processed, stored, and shared by PayPal in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Skrill as a payment method

If you choose to pay using the online payment service provider Skrill during your ordering process, your contact details will be transmitted to Skrill as part of the triggered order. Skrill is an offering of Skrill Limited, 25 Canada Square, London E14 5LQ, United Kingdom. Skrill acts as an online payment service provider that enables cashless payments for products and services on the internet. Payments are processed through a so-called Skrill Wallet, which is equivalent to a virtual electronic wallet. Skrill also allows for virtual payments to be processed via credit cards. The so-called Skrill Wallet is managed through an email address.

The personal data transmitted to Skrill includes the purchase amount as well as the email address required for payment processing. We may also transmit other personal data to Skrill if there is a legitimate interest for the transmission.

This transmission is necessary for processing your order with the payment method you selected, as well as for fraud prevention, particularly for confirming your identity, managing your payment, and the customer relationship.

The transmission of your data to Skrill is therefore based on Art. 6 para. 1 lit. b GDPR.

However, please note: Personal data may also be shared by Skrill with service providers, subcontractors, or other affiliated companies, as far as this is necessary to fulfill the contractual obligations arising from the order or if the personal data is to be processed on behalf. Skrill may also transmit this data to credit reporting agencies under certain circumstances. This transmission serves the purpose of identity and credit verification in relation to the order placed.

You can access Skrill's privacy information at https://www.skrill.com/de/fusszeile/datenschutzbestimmungen/.

Use of instant transfer as a payment method

If you choose to pay using the online payment service provider Sofortüberweisung during your ordering process, your contact details will be transmitted to Sofortüberweisung as part of the order triggered by this payment method.

Sofortüberweisung is an offering from SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. Sofortüberweisung serves as an online payment service provider that enables cashless payment for products and services on the internet.

The personal data transmitted to Sofortüberweisung usually includes first name, last name, address, phone number, IP address, email address, or other data necessary for order processing, as well as data related to the order, such as the number of items, item number, invoice amount and taxes in percentage, billing information, etc.

This transmission is necessary for processing your order with the payment method you selected, particularly for confirming your identity, administering your payment, and managing the customer relationship. The transmission of your data to SOFORT GmbH is therefore based on Art. 6 para. 1 lit. b GDPR.

However, please note: Personal data may also be shared by Sofortüberweisung with service providers, subcontractors, or other affiliated companies, as far as this is necessary to fulfill the contractual obligations arising from your order or if the personal data is to be processed on behalf of someone else.

Under certain circumstances, the personal data transmitted to Sofortüberweisung may be forwarded by Sofortüberweisung to credit reporting agencies. This transmission is intended for identity and credit verification in relation to the order you placed.

Which data protection principles Sofortüberweisung applies when processing your data can be found in the privacy notices displayed to you during the payment process by Sofortüberweisung.

If you have any further questions regarding the use of your personal data, you can contact Sofortüberweisung via email (datenschutz@sofort.com) or in writing (SOFORT GmbH, Data Protection, Theresienhöhe 12, 80339 Munich).

Klarna „CHECK-OUT“

For the payment processing of orders through our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as "Klarna."

For this purpose, we have integrated the so-called Klarna Check-Out into the final order page of our online shop.

The legal basis is the fulfillment of the contract according to Art. 6 para. 1 lit. b.) GDPR. Furthermore, we have a legitimate interest in offering effective and secure payment options, so an additional legal basis follows from Art. 6 para. 1 lit. f.) GDPR.

By integrating Klarna, your internet browser loads the checkout page from a Klarna server. This alone transmits the operating system you are using, the type and version of your internet browser, the website from which the checkout was requested, the date and time of the request, as well as the IP address to Klarna – even without you interacting with the checkout page.

As soon as you complete the order in our online shop, the data you entered in the input fields on the checkout page will be processed by Klarna under its own responsibility for payment processing.

For the payment methods "PayPal" and "prepayment," the processing is limited to the transfer of payment data to us or PayPal without your further consent.

For the payment methods offered, "Purchase on Account," "Installment Purchase," "Credit Card," "Direct Debit," or "Immediate Transfer," the following personal data will be processed by Klarna for the purpose of payment processing as well as for identity and creditworthiness verification:

– Contact information, such as names, addresses, date of birth, gender, email address, phone number, mobile phone number, IP address, etc.

– Information on processing the order, such as product type, product number, price, etc.

– Payment information, such as debit and credit card details (card number, expiration date, and CVV code), billing information, account number, etc.

If you choose the payment method "Purchase on Account" or "Installment Purchase," Klarna collects and uses personal data and information about your previous payment behavior to decide whether the desired payment method will be granted to you. Additionally, probability values for your future payment behavior (so-called scoring) are taken into account. The calculation of the scoring is carried out based on scientifically recognized mathematical-statistical methods.

Klarna provides under

https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

further information on the aforementioned processing as well as the applicable data protection regulations are available.

LiveChat

On our website, we use the LiveChat service for analysis purposes and for our live chat system. This is a service provided by LiveChat Inc., 1 International Pl, STE 1400 Boston, MA 02110 – 2619, USA, which is operated in the European Union by LiveChat Software SA, ul. Zwycięska 47, 53 – 033 Wroclaw, Poland, hereinafter referred to as "LiveChat".

If you have given consent for this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in the effective and direct support of our customers and prospects, as well as the statistical analysis of visitor behavior for the purpose of optimizing and economically operating our online presence.

For the statistical analysis of visitor behavior and the operation of the live chat system, LiveChat stores a cookie via your internet browser on your device. This cookie processes anonymized data and creates a pseudonymized user profile. However, the data collected in this process is not used for your personal identification.

If you do not agree with this processing, you have the option to prevent the installation of cookies by adjusting the settings in your internet browser. Details on this can be found above under the section "Cookies".​

LiveChat offers at

https://www.livechatinc.com/legal/privacy-policy/#main

further information on the collection and use of data as well as your rights and options for protecting your privacy.

Newsletter via WhatsApp

You can also receive our free newsletter via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as "WhatsApp." Some of the processing of user data takes place on WhatsApp servers in the USA. Additionally, WhatsApp offers under

https://www.whatsapp.com/legal/#privacy-policy

further data protection information

To receive our newsletter via WhatsApp, you need a WhatsApp user account. Details about what data WhatsApp collects during registration can be found in the aforementioned privacy information from WhatsApp.

If you then sign up for our newsletter delivery via WhatsApp, the mobile phone number you entered during the registration process will be processed by WhatsApp. Additionally, your IP address as well as the date and time of your registration will be stored. As part of the further registration process, your consent for the sending of the newsletter will be obtained, the content will be specifically described, and reference will be made to this privacy policy.

The legal basis for sending the newsletter and the analysis is Article 6(1)(a) of the GDPR.

You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation. You can also block the receipt of the newsletter by adjusting a setting in the WhatsApp software on your device.

WhatsApp Contact

To get in touch, the provider allows the customer, among other options, to contact them via the messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as WhatsApp, a subsidiary of Facebook.

Through the user's communication with the provider via WhatsApp, both the provider and WhatsApp receive the user's mobile phone number and the information that the user has contacted the provider.

The aforementioned data is also forwarded by WhatsApp to Facebook servers in the USA and is processed by WhatsApp and Facebook in accordance with the WhatsApp Privacy Policy, which also includes processing for their own purposes, such as improving the WhatsApp service.

_____________________

The USA currently do not have an adequate level of data protection according to the views of data protection authorities. However, there are so-called standard contractual clauses:

https://faq.whatsapp.com/general/about-standard-contractual-clauses

However, these are private law agreements and therefore have no direct impact on the access capabilities of authorities in the USA.

_____________________

More information about the purpose and scope of data collection and the further processing of this data by WhatsApp and Facebook, as well as related rights and options for privacy protection, can be found in WhatsApp's privacy policy:

https://www.whatsapp.com/legal/#privacy-policy.

The legal basis for these processing activities and the transmission to WhatsApp is Article 6(1)(b) of the GDPR, insofar as the contact relates to an existing contractual relationship or serves to initiate such a contractual relationship. If the contact does not occur for the aforementioned purposes, the legal basis is Article 6(1)(f) of the GDPR. The legitimate interest of the provider lies in improving service quality.

Sample Privacy Policy the Law firm Weiß & Partner

Cancellation Policy & CANCELLATION FORM


Consumers have a right of withdrawal under the following conditions, whereby a consumer is any natural person who enters into a legal transaction for purposes that are predominantly not attributable to their commercial or independent professional activity:

A. RIGHT OF WITHDRAWAL

RIGHT OF WITHDRAWAL

You have the right to withdraw from this contract within 14 days without providing any reasons.

The withdrawal period is 14 days from the day on which you or a third party designated by you, who is not the carrier, has taken possession of the last item.

To exercise your right of withdrawal, you must inform us (Lami Cosmetics Sarl, 296, rue de Neudorf, L-2222 Luxembourg-Neudorf, Luxembourg, Tel.: +352 621 791 483, Email: office@lamilashes) of your decision to withdraw from this contract by means of a clear statement (e.g., a letter sent by post or an email). You may use the attached sample withdrawal form for this purpose, but it is not mandatory.

To maintain the cancellation period, it is sufficient that you send the notification of the exercise of the right of withdrawal before the cancellation period expires.

CONSEQUENCES OF THE WITHDRAWAL

If you cancel this contract, we will refund you all payments we have received from you, including delivery costs (except for any additional costs resulting from your choice of a delivery method other than the least expensive standard delivery offered by us), without delay and no later than fourteen days from the day on which we receive the notice of your cancellation of this contract. For this refund, we will use the same payment method you used for the original transaction, unless you have expressly agreed otherwise; in no case will you incur any fees for this refund. We may withhold the refund until we have received the goods back or until you have provided evidence that you have returned the goods, whichever is the earlier date.

You must return or hand over the goods to us without delay and in any case no later than fourteen days from the day you inform us of the cancellation of this contract. The deadline is met if you send the goods before the fourteen-day period has expired.

You bear the direct costs of returning the goods.

You are only responsible for any potential loss in value of the goods if that loss in value is due to handling them in a manner that is not necessary for examining their nature, characteristics, and functioning.

EXCLUSION OR EARLY TERMINATION OF THE RIGHT OF WITHDRAWAL

The right of withdrawal does not apply to contracts for the delivery of newspapers, magazines, or illustrated publications, except for subscription contracts.

 The right of withdrawal expires prematurely in contracts for the delivery of sealed goods that are not suitable for return for reasons of health protection or hygiene if their seal has been removed after delivery.

According to § 312g para. 2 no. 9 of the German Civil Code (BGB), there is no right of withdrawal, unless otherwise agreed, for contracts for the provision of services related to leisure activities, if the contract specifies a specific date or period for the provision. Therefore, a right of withdrawal is also excluded for contracts that involve the sale of tickets for time-bound leisure events.

GENERAL NOTES

1) Please avoid damage and contamination of the goods. Please return the goods in their original packaging along with all accessories and packaging components. If necessary, use protective outer packaging. If you no longer have the original packaging, please ensure adequate protection against transport damage with suitable packaging.

2) Please do not return the goods to us freight collect.

3) Please note that the aforementioned items 1-2 are not prerequisites for the effective exercise of the right of withdrawal.

B. CANCELLATION FORM

If you want to cancel the contract, please fill out this form fill it out and send it back.