NextGen Beauty GmbH (referred to below as “we”) appreciates your interest in our company and our products. It is therefore important to us that you feel safe when you visit our website (referred to below as: “Website”), also in terms of the protection of your personal data.
With this Privacy Policy we aim to inform you about the category, scope and purpose of the personal data processed by us when you use our Website, including all the sub-pages. Personal data is any data that can be related to you personally, e.g. name, address, email addresses and user behaviour.
You can also read, save and print out this Privacy Policy as a complete document.

Contents of the Privacy Policy
Please click on the following links to go directly to the corresponding topics.
1. Information about the controller and data protection officer
2. Collection and processing of personal data when you visit our Website
3. Sharing personal data in general
4. Sharing personal data with third parties; social plug-ins
5. Our presence on social media
6. Evaluation of usage data (“tracking”) and usage-related information (“(re)targeting”)
7. Your data subject rights
8. Updating the Privacy Policy

1. Information about the controller and data protection officer
(a) Controller
The controller as defined in the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection legislation is:
NextGen Beauty GmbH
Am Limespark 2
65843 Sulzbach / TS.
Germany
Telefon: +49(0)6196 / 76156-0
E-Mail: hello(at)NextGenBeauty.com
You can find more information about us in the provider information [www.nextgenbeauty.com].
(b) The controller’s data protection officer is:
Moritz Görmann
CTM-COM GmbH
Marienburgstraße 27
D-64297 Darmstadt
Telefon: +49 6151 394272
Fax: +49 6151 394277
www.ctm-com.de

2. Collection and processing of personal data when you visit our Website
If you use the website for information purposes only, i.e. if you do not send us information in any other way, we only collect the personal data that your browser sends to our server. We collect the following data which is technically necessary for us to display our Website in the version and language suitable for you to ensure stability and security, and to prepare general reports about the use of our Website (the legal basis is Art. 6(1)(1)(f) GDPR):
– IP address
– date and time of the request
– content of the request (specific page)
– website from which the request originates
– browser
– operating system
The above data will be deleted promptly if it is no longer required for the above purposes, and no later than 30 days after we have collected it.
If you provide us with further personal data, e.g. in the course of registration, a contact form, survey, sweepstakes or for the performance of a contract, we will use this data for the purposes specified, for customer administration and – where necessary – for processing and accounting for any business transactions, in each case to the extent required for this purpose.
If you contact us by email (e.g. to the address given above), the personal data transferred with your email will be stored. The data will not be shared with third parties. The data will be processed exclusively for purposes of processing the conversation.
The legal basis for the processing of data transmitted in the course of sending a message is Art. 6(1)(1)(b) and (f) GDPR. This data will be used solely for processing the contact; this also includes our necessary legitimate interest in processing the data within the meaning of Art. 6(1)(1)(f) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected, which is the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified.

3. Sharing personal data in general
(a) Sharing with service providers
We sometimes use service providers bound by instructions for certain data processing activities. Without exception, these are service providers that are bound by instructions and process the data on our behalf and according to our instructions.
(b) Disclosure to public authorities, injured parties and for legal action
If it is required for the clarification of an illegal or fraudulent use of our Website or for legal prosecution, personal data will be forwarded, where applicable, to the prosecution authorities and to injured third parties. However, this only occurs if there are indications of illegal or fraudulent behaviour.
A transfer can also take place if this serves to enforce the terms of use or other agreements. We are also legally obliged to provide information to certain public bodies on request. These are criminal prosecution authorities, authorities that pursue administrative offences that are subject to fines and the tax authorities.
(c) Transfers in the context of company transactions
In the course of the further development of our business, the structure of our company may change due to changes in legal form, the establishment, purchase or sale of subsidiaries, parts of companies or components. In case of such transactions, customer information may be shared with the acquirer or legal successor, together with the part of the business to be transferred.
Whenever personal data is disclosed to the extent described above, we ensure that this is done in accordance with this Privacy Policy and the applicable data protection law.
(d) Sharing with recipients outside the EU
It is possible that we may transfer personal data to countries outside the EU (“third countries”). Any transfer of data to a recipient in a third country will take place in compliance with the applicable data protection law. Where the European Commission has not determined that an adequate level of protection exists in a third country, we will provide appropriate safeguards to ensure that your data is adequately protected. This can be done in particular by concluding data processing agreements which contain EU standard data protection clauses and which, in the opinion of the European Commission, provide adequate safeguards (available at: http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm). Please contact us for further details.
(e) Consentmanager
We have integrated the consent management tool “consentmanager” (www.consentmanager.net) by Jaohawi AB
(Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our
website in order to request consent for data processing, the use of cookies or
comparable functions. With the help of the “consentmanager”, you have the
option of providing or refusing your consent to certain functionalities on our
website, e.g. for the purpose of integrating external elements, statistical
analysis, range measurement and personalised advertising. With the help of the
“consentmanager”, you can provide or refuse your consent for all functions, or
provide your consent for individual purposes or individual functions. You can
also change the settings you have made retrospectively. The purpose of the
integration of a “consentmanager” is to allow the users of our website to
decide on the things referred to above and, in the context of the further use
of our website, to offer the possibility of changing settings that have already
been made. In the course of the use of the “consentmanager”, personal data is
processed as well as information about the devices used, such as the IP address.The legal basis for the processing is Art. 6 para. 1 S. 1 lit. c in
conjunction with Art. 6 para. 3 S. 1 lit. a in conjunction with Art. 7 para. 1
of the GDPR.
4. Sharing personal data with third parties; social plug-ins
(a) General
Our Website may also contain offers from third parties. If you click on such an offer, we will transfer data to the respective provider to the extent required (e.g. information that you have found this offer with us and, where applicable, further information that you have already provided for this purpose on our Website).
(b) Social plug-ins
When using so-called “social plug-ins” of social networks such as Facebook or Twitter on our website, we integrate them as follows:
When you visit our website, the social plug-ins are deactivated, i.e., no transmission of any data to the operators of these networks takes place. If you want to use one of the networks, click on the respective social plug-in to establish a direct connection with the server of the respective network.
If you have a user account with the social network and are logged in there at the moment of activating the social plug-in, the network can assign your visit to our website to your user account. If you want to avoid this, please log out of the network before activating the social plug-in.
When you activate a social plug-in, the network transmits the content that becomes available as a result directly to your browser, which integrates it into our website. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on this platform are governed exclusively by the privacy policy of the respective network.
When you click on the link to an offer or activate a social plug-in, personal data may be transferred to providers in countries outside the European Economic Area that do not ensure an “adequate level of protection” for the processing of personal data from the perspective of the European Union (“EU”) in line with EU standards. Please keep this in mind before clicking on a link or activating a social plug-in and thereby triggering a transfer of your data.
The social plug-in will remain active until you deactivate it or delete your cookies.
(c) Instagram
Furthermore, plugins from the social network Instagram (“Instagram”) are integrated on this website. Instagram is a subsidiary of Facebook Ireland Limited (Ireland). You can recognize the Instagram plugin by the “Instagram button” on our site. If you click the “Instagram button” while you are logged into your Instagram account, you can link the content of our pages on your Instagram profile. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please refer to Instagram’s privacy policy: https://instagram.com/about/legal/privacy.

5. Our presence on social media
We also maintain corporate presences on social networks such as Instagram to which we link on our Website. When you access the relevant networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply, over which we have no influence. When you do so, data may also be processed outside the European Union.

6. Evaluation of usage data (“tracking”) and usage-related
information (“(re)targeting”)(a) General your interests and thus improve our service for you. We use so-called tracking
technologies to identify usage preferences and particularly popular areas of
the website. We use so-called (re)targeting technologies so that we can tailor our
online marketing (e.g., banner advertising) more specifically to your
usage-based interests. When you visit other websites that collaborate with the
providers of these (re)targeting technologies, these are read and used in order
to provide you with information that is as interest-related as possible.

When the above technologies are used, cookies on our website and (in the
case of retargeting) on third-party websites record your interest in our
products and services. This involves the use of random identifiers (so-called
cookie IDs) and similar technologies, which we do not connect with your name,
address, or similar information even when this information is known to us
(e.g., from an existing contractual relationship), unless you have consented to
this.

(b) Google Analytics (basic version)

For the purpose of designing the website in line with requirements and
continuously optimising it on the basis of Art. 6, para. 1, S 1 lit. f of the
GDPR, we use the basic version of Google Analytics, a web analysis service of
Google Ireland Limited. (“Google”). Google Analytics uses cookies
(text files) which are stored on your computer and allow us to analyse your use
of the website. Google will use this information on our behalf to evaluate your
use of the website and to compile reports about website activity. Google
processes the data collected through the use of the “basic version” of Google
Analytics exclusively on our instructions and for our purposes. Insofar as data
collected via Google Analytics is used for Google’s advertising technologies
(e.g. Google Remarketing) and in this case is also processed by Google for its
own purposes and/or the purposes of third parties, such processing will only
take place if you have given your consent to the use of such advertising
technology on the website.

This website uses Google Analytics with the extension “_anonymizeIp()”.
This enables IP addresses to be further processed in a shortened form, thus
excluding the possibility of the shortened addresses being personally
identifiable. You may refuse the use of cookies by selecting the appropriate
settings on your browser. However, please note that if you do so, you may not
be able to use the full functionality of this website. You can also prevent the
collection by Google of data generated by the cookie and relating to your use
of the website (including your IP address), and the processing of this data by
Google, by downloading and installing the browser plug-in available under the
following link: http://tools.google.com/dlpage/gaoptout.

In the exceptional cases in which personal data is transferred to the
USA, we have agreed so-called standard contractual clauses with Google Ireland
Limited. The legal basis for the use of Google Analytics is Art. 6 para. 1 S.1
lit. f of the GDPR.7. Your data subject rights
(a) Right of access to information
You have the right, at any time and on request, to obtain from us information about the personal data processed by us concerning you in accordance with Art. 15 GDPR. You can send a request by post or email for this purpose to the contact address provided.
(b) Right to rectification of incorrect data
You have the right to demand that we rectify, without undue delay, the personal data that concerns you in accordance with Art. 16 GDPR if it is incorrect. Please contact us at the address provided to do so.
(c) Right to erasure
You have the right, under the conditions described in Art. 17 GDPR, to demand that we erase the personal data that concerns you. These conditions provide in particular for a right of erasure if the personal data is no longer required for the purposes for which it was collected or otherwise processed, and in cases of unlawful processing, withdrawal or the existence of an obligation to erase the data under European Union law or the law of the member state to which we are subject. To exercise your right of erasure, please contact us at the address provided.
(d) Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify its accuracy, and if the user requests restricted processing instead of erasure if there is an existing right to erasure; also if the data is no longer required for the purposes we pursue, but the user needs it to assert, exercise or defend legal claims, and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restrict processing, please contact us at the address provided.
(e) Right to data portability
You have the right to receive from us the personal data concerning you which you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. To exercise your right to data portability, please contact us at the address provided.
(f) Right to object
Under Art. 21 GDPR, for reasons arising from your particular situation, you have the right to object at any time to the processing of personal data that concerns you which is carried out on the basis of Art. 6(1)(1)(e) or (f) GDPR. We will cease processing your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
(g) Right to withdraw consent (in the event of consent having been given)
You have the right to withdraw consents given in accordance with Art. 7(3) GDPR with effect for the future. Withdrawal of consent does not affect the lawfulness of the processing carried out until its withdrawal on the basis of the consent.
(h) Right to lodge a complaint
You also have the right to lodge complaints with the data protection supervisory authorities.
The competent supervisory authority for us is:
Der Hessische Datenschutzbeauftragte (The Hessian Data Protection Commissioner)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
P.O. Box 31 63, 65021 Wiesbaden, Germany
Telephone: +49 611 14080
Fax: +49 611 1408 – 900
Email: poststelle@datenschutz.hessen.de
Internet at: http://www.datenschutz.hessen.de

8. Updating the Privacy Policy
Latest update of this Privacy Policy: August 2021. Changes to our offer may also make it necessary to amend this Privacy Policy. Please inform yourself regularly about the content of our Privacy Policy. We will also inform you as soon as the changes require your cooperation (e.g. consent) or another specific notification.