Privacy policy


In this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as "data").

1. responsible for data processing

Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is

JUNGLÜCK GmbH
Keltenring 9
82041 Oberhaching
E-Mail: datenschutz@junglueck.de

2. contact details of our data protection officer


Sarah Tavčer
RMPrivacy GmbH
Große Langgasse 1A
55116 Mainz

www.rmprivacy.de

E-Mail: datenschutz@junglueck.de

3. general information on data processing

We process data as part of our business and website operations.

This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.

4. data processing


The individual data concerned, processing purposes, legal bases, recipients and any transfers to third countries are listed below:

a) Log file when visiting the website

We log your website visit. In doing so, we process

  • Name(s) of our accessed website(s),
  • Date and time of retrieval,
  • the amount of data transferred,
  • the browser type and version,
  • the operating system you are using,
  • the referrer URL (the previously visited website),
  • Your IP address,
  • the requesting provider.

The legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR.

The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.


b) Hosting via Shopify


To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.

The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 para. 1 f) GDPR.

We use Shopify Inc, 150 Elgin St., 8th Fl., Ottawa, ON K2P 1L4, Canada ("Shopify") for our hosting. It is possible that data may also be transferred to the Shopify Inc. servers in Canada.

The EU Commission has issued an adequacy decision for data transfers to Canada.


c) Making contact


If you contact us, we will process the following data from you for the purpose of processing and handling your request: Name, contact details - if provided by you - and your message with any skin condition you have indicated.


The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para . 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.

To optimize our contact with you, we use the Zendesk service of Zendesk GmbH c/o TaylorWessing, Neue Schönhauser Straße 3-5, 10178 Berlin ("Zendesk"). This may also involve data transfers to Canada and the USA. 

The EU Commission has issued an adequacy decision for data transfers to Canada. For data transfers to the USA, Zendesk ensures an adequate level of data protection through the EU standard contractual clauses and the use of Binding Corporate Rules. A copy of the relevant EU standard contractual clauses and the Binding Corporate Rules will be provided on request. Please contact datenschutz@junglueck.de for this purpose.

To create the contact form, we also use a service provided by the company 123FormBuilder SRL, Gheorghe Lazar street, no. 24, Fructus Plaza, second floor, SAD 13, Timisoara 300081, Timis, Romania, ("123FormBuilder"). This may also involve data transfers to the USA. USA.


For data transfers to the USA, 123Formbuilder ensures an adequate level of data protection via the EU standard contractual clauses and subcontractors certified under the EU Commission's adequacy decision.


d) Contact for applications

If you contact us to send us your application as an employee, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired place of work, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application request. 

The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.


Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely to assert and/or defend against claims.


For the management of our applications, we use the Personio service of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich ("Personio") to manage our applications. This may also involve data transfers to the USA.


For data transfers to the USA, Personio ensures an adequate level of data protection via the EU standard contractual clauses and subcontractors certified under the EU Commission's adequacy decision.

e) Customer account

In connection with the opening and use of a customer account, we process your inventory data (name, address, e-mail address, bank details, skin type) as well as your usage data (user name, password). This enables you to manage your orders and commissions and we can identify you as a customer. The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


f) Contract processing

We process your order data to handle the contractual relationship between you and us. We transmit your address data to the company commissioned with the delivery (DHL, GLS).

We transmit your transaction data (name, date of order, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card details if applicable) to the payment service provider commissioned to process the payment.


The legal basis for data processing is the fulfillment of our contractual obligations in accordance with Art. 6 para. 1 b) GDPRand, in individual cases, the fulfillment of our legal obligations in accordance with Art. 6 para. 1 c) GDPR

We use the service provider Billbee of Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany, to create the invoice. Your transaction and order data as well as your billing data are transmitted. 


g) Shop system and customer data management using Shopify and Business Central

To provide our store system and manage our customer data, we use Systems of Shopify Inc, 150 Elgin St., 8th Fl., Ottawa, ON K2P 1L4, Canada ("Shopify") and Microsoft Dynamics 365 Business Central from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). The data that we process as part of the provision of your customer account and the processing, we therefore process in Shopify and Microsoft systems.


Data may therefore be transferred to Canada as part of data processing at Shopify. may occur. For data transfers to Canada, there is an adequacy decision by the EU Commission.Commission.


The use of Microsoft Corporation systems results in data transfers to the USA. the USA. Microsoft is certified under the Data Privacy Framework and is therefore covered by the adequacy decision of the EU Commission. In addition, Microsoft ensures the data transfers via standard contractual clauses.


h) UpPromote

We continue to process your order data in order to determine the conversion rate of our advertising partners and to fulfill our contractual obligations to them. The legal basis for data processing is in accordance with Art. 6 para. 1 f) GDPR our legitimate interest in commissioning external advertising partners.


For this purpose, we transmit your e-mail address and your order number to the service provider UpPromote of the company Secomapp, Home City, 171 P. Trung Kính, Yên Hoà, Cầu Giấy, Hà Nội 100000, Vietnam ("UpPromote").


Data may therefore be transferred to third countries as part of data processing at UpPromote. may occur.

i) Shipping status notifications

If you would like to be informed about the status of the shipment by the shipping service provider (DHL, GLS), we will pass on your e-mail address and telephone number to the selected shipping company.


The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 a) GDPR


In order to provide you with updates on your order, we also use the GoKarla service from GoKarla GmbH, Gormannstrasse 19a, 10119 Berlin.


j) Credit check via Klarna

If this is intended for the payment method you have selected, we will carry out a credit check via Klarna. Here we transmit your name and address to a credit agency, which compares this data with your own database in order to check your creditworthiness. The credit agency then transmits the corresponding credit information to us. 

The legal basis for data processing in the case of purchase on account is our legitimate interest in accordance with Art. 6 para. 1 f) GDPR, as we make advance payments for the shipment of goods and bear the default risk. In all other cases, data processing in the context of a credit check is carried out exclusively on the basis of your prior consent in accordance with Art. 6 para. 1 a) GDPR.



k) Credit check via Mollie


If this is intended for the payment method you have selected, we will carry out a credit check via Mollie. In doing so, we transmit your name and address to a credit agency, which compares this data with your own database in order to check your creditworthiness. The credit agency then transmits the corresponding credit information to us. 

The legal basis for data processing in the case of purchase on account is our legitimate interest in accordance with Art. 6 para. 1 f) GDPR, as we make advance payments for the shipment of goods and bear the default risk. In all other cases, data processing in the context of a credit check is carried out exclusively on the basis of your prior consent in accordance with Art. 6 para. 1 a) GDPR


l) Returns processing

We use the "8returns" service of 8returns UG (haftungsbeschränkt), Lohmühlenstraße 65, 12435 Berlin to process your returns. All data necessary for processing your return will be processed (name, order data, invoice data). 

The legal basis for data processing is the fulfillment of our contractual obligations in accordance with Art. 6 para. 1 b) GDPR and, in individual cases, the fulfillment of our legal obligations in accordance with Art. 6 para. 1 c) GDPR.


m) Newsletter

In order to provide you with regular information about our company and offers, we offer to send you an e-mail newsletter. When you register for the newsletter, we process the data you entered when registering (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration will be logged. This includes the time of registration and confirmation as well as your IP address.

The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 a) GDPR. Data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 para. 1 f) GDPR on the basis of our legitimate interest in proving your proper registration.

If you give us your consent, we will also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 para. 1 a) GDPR.

To send the newsletter, we use a service provider to whom we transmit the aforementioned data.

The data is transmitted to the servers of the following service provider in the USA: Klaviyo Inc, 60 South Street, Suite 910, Boston Massachusetts, USA ("Klaviyo"). There is no adequacy decision by the EU Commission for data transfers to the USA. Klaviyo ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the corresponding EU standard contractual clauses will be provided on request. Please contact datenschutz@junglueck.de.


n) Direct e-mail advertising for existing customers

If you have placed an order with us, we will process the e-mail address you provided during registration to recommend products that match the products you have purchased. 

The legal basis for the dispatch as a result of the sale of goods or services is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in the direct advertising of our products to existing customers.


You can object to direct e-mail advertising at any time without incurring any costsother than the transmission costs according to the basic rates.

We also use a service provider to whom we transmit the aforementioned data for sending direct advertising.


The data is transmitted to the servers of the following service provider in the USA: Klaviyo Inc, 60 South Street, Suite 910, Boston Massachusetts, USA ("Klaviyo"). There is no adequacy decision by the EU Commission for data transfers to the USA. Klaviyo ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the corresponding EU standard contractual clauses will be provided on request. Please contact datenschutz@junglueck.de.


o) Direct advertising by post for existing customers

If you have placed an order with us, we will process the name and address you entered during registration to recommend products that match the products you purchased. 


The legal basis for the dispatch as a result of the sale of goods or services is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in the direct advertising of our products to existing customers. 


We use Deutsche Post as a service provider for the sending of direct mail, to which we transmit the aforementioned data.


We also use a service provider for the administration of address data, to which we transmitthe aforementioned data.


The data is transmitted to the servers of the following service provider in the USA: Klaviyo Inc, 60 South Street, Suite 910, Boston Massachusetts, USA ("Klaviyo"). Klaviyo ensures an adequate level of data protection via the standard contractual clauses of the European Commission. A
copy of the relevant EU standard contractual clauses will be provided upon request. Please contact datenschutz@junglueck.de for this purpose.


p) Customer rating after purchase

We use the TYPEFORM service of TYPEFORM, C/Bac de Roda, 163 (Local), 08018 Barcelona ("Typeform") to manage customer surveys following your purchase from us. In doing so, we process the e-mail address you provided when you made your purchase and the products you ordered from us.


The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


When using the service, hosting is provided by servers of Amazon Web Services Inc, 2021 Seventh Ave, Seattle, Washington 98121 ("Amazon"). This also involves data transfers to the USA.


Amazon is certified under the EU-US Data Privacy Framework and is therefore covered by theEU adequacy decision for the USA.


We also use a service provider to send the surveys, to whom we transmit the aforementioned data.

The data is transmitted to the servers of the following service provider in the USA: Klaviyo Inc, 60 South Street, Suite 910, Boston Massachusetts, USA ("Klaviyo"). Klaviyo ensures an adequate level of data protection via the standard contractual clauses of the European Commission. A copy of the relevant EU standard contractual clauses will be provided upon request. Please contact datenschutz@junglueck.de.


q) Feedback platform

We use the zenloop service from SaaS.group zenloop GmbH, Attilastraße 18, 12529 Schönefeld (hereinafter "zenloop")to manage the feedback after your purchase in order to analyze it and pass it on to the relevant departments .


The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


When using the service, the hosting is provided by servers of Amazon Web Services Inc, 2021 Seventh Ave, Seattle, Washington 98121 ("Amazon"). This also involves data transfers to the USA.
Amazon is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.


In addition, when using the service, hosting is provided by servers of the Google Cloud Platform, Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Dublin ("Google Cloud"). This also involves data transfers to the USA. Google Cloud is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA.


In addition, when using the service, hosting is provided by servers of Microsoft Azure Cloud Computing Services, a service of Microsoft Ireland Operations Limited, South County Business Park, One Microsoft Place, Leopardstown, Dublin 18 D18 P521 ("Microsoft"). This also involves
data transfers to the USA. Microsoft is certified under the EU-US Data Privacy Framework and is therefore covered by the EU adequacy decision for the USA
.


When using the service, the ElasticSearch service from Elasticsearch B.V., Keizersgracht 281, 1016 ED Amsterdam, Netherlands ("Elasticsearch") is used for indexing and as a search engine. Data may be transferred to Elasticsearch, Inc, 800 W. El Camino Real, Mountain View, CA 94040, USA.


Elasticsearch ensures an adequate level of data protection via the standard contractual clauses of the European Commission. A copy of the relevant EU standard contractual clauses will be provided upon request. Please contact datenschutz@junglueck.de for this.


r) Loyalty program

You can participate in a loyalty program via our store. For this purpose, your account information, your profile data and your contact information will be transmitted to Yotpo Ltd, Israel. 

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 a) GDPR


In this context, your data may also be processed in the USA, Great Britain and Israel. There is no adequacy decision by the EU Commission for data transfers to the USA and Israel. Yotpo ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided on request. Please contact datenschutz@junglueck.de.


s) Referral program

You can participate in a referral program via our store. For this purpose, your account information and your contact information will be transmitted to Yotpo Ltd, Israel.


In this context, your data may also be processed in the USA. There is no adequacy decision by the EU Commission for data transfers to the USA. Yotpo ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided on request. Please contact datenschutz@junglueck.de.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


t) Use of cookies


We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.

Information about the specific cookies we use, their providers and purposes can be found in our consent banner (see footer: "Change cookie settings"). There you can give your consent to the respective services, revoke it or adjust your settings at a later date.


Our consent banner

We use a consent banner to document your selection of certain data processing procedures and to fulfill our data protection obligations. When you visit our website, your cookie preferences are requested via a banner. We then set a cookie in which data on granted or revoked consent is stored. The data processing is carried out to fulfill our legal obligations in accordance with Art. 6 para. 1 c) GDPR.

u) Analysis / Marketing


aa) Google services 

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. It is possible that data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.

Google is certified under the EU-US Data Privacy Framework and is covered by the adequacy decision of the EU for the USA.


Google Analytics

We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to the use of the website and thus improve user-friendliness.

When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically analyzed using cookies. 

We use Google Analytics with the extension "anonymizeIp()". This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google's servers in the USA takes place, the full IP address is only transmitted and shortened there in exceptional cases. A direct personal reference is therefore generally excluded. In particular, it is no longer possible to identify the computer or end device of the website visitor. 

The following data is processed through the use of Google Analytics: 

  • 3 bytes of the IP address of the website visitor's accessed system (anonymized IP address),
  • the website accessed,
  • the website from which the user accessed the page on our website (referrer),
  • the subpages that are accessed from the website,
  • the time spent on the website,
  • the frequency with which the website is accessed.

According to its own information, Google will never associate your IP address with other Google data.


Google Remarketing / Retargeting

We use so-called tracking cookies from Google on our website. When you visit our site, permanent cookies store information about which products you have viewed on our site and which third-party advertisements and pages users use to reach our website. If you subsequently visit a partner website, we can display personalized advertising for you based on the products you have viewed on our website.


Google Ads

We use Google Ads, an online advertising program from Google, on our website. This involves so-called conversion tracking is operated. If you click on an ad placed by Google, a cookie is set.
a cookie is set. This cookie loses its validity after 30 days and is not used to personally identify users. personal identification of the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad clicked on the ad and was redirected to this page.


Legal basis and revocation

The legal basis for data processing in the context of the aforementioned Google services is your prior consent in accordance with Art. 6 para. 1 a) GDPR.

You can revoke your consent at any time with effect for the future by adjusting your preferences in our consent banner (see footer: "Change cookie settings").


bb) Meta Custom Audiences (pixels/cookies)

On our website, we use a so-called tracking pixel from Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA. We use Meta Pixel to measure the track the success of our own advertising campaigns on the Meta Platforms and to optimize the playout of meta advertising campaigns to interested target groups.


After clicking on a meta ad or visiting our website, a cookie is stored on our website using the pixel on our website, a cookie is stored on your end device. The cookie processes data about whether you have reached our website via a meta advertisement and makes it possible to track the user's
analyze the user's behavior until the purchase is completed. This allows us to track the success rate of our meta advertising campaigns. In addition, the pixel processes data about that you have visited our website and enables us to adapt the advertising displayed on meta advertising to your interests.


When you visit our website, the meta pixel integrated into our website establishes a direct connection to the Meta servers is established. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Meta in the USA.


The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with a Meta platform, Meta can assign the information collected to your account. account. For example, even if you do not have an account or are not logged in when you visit our website, it is still possible for Meta to process and store your IP address and other other identification data by Meta is possible.


The use of cookies or comparable technologies takes place with your consent on the basis of on the basis of § 25 para. 1 sentence 1 TDDDG. The legal basis for data processing is your consent according to Art. 6 para. 1 a) GDPR.


You can revoke your consent to data processing by Meta Pixel for our web domain at any time with effect for the future by changing your preferences in our consentbanner(see footer: "Change cookie settings") customize.


Meta is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.

cc) Meta Custom Audiences (customer list) 

We use the Custom Audience services of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA. Here, customer data is transmitted to Meta in lists and transferred to
Meta servers in the USA. The data is used to analyze user behavior on the Internet and to personalize and to personalize advertising and, if necessary, linked to an existing user account with Meta. user account with Meta.

The use of cookies or comparable technologies set by Meta takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG. The legal basis for data processing is Your consent in accordance with Art. 6 para. 1 a) GDPR

    You can revoke your consent at any time with effect for the future. revoked.

    Meta is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.


    dd) Microsoft Advertising (formerly Bing Ads)

    We use Microsoft Advertising on our website, an advertising service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. So-called conversion tracking is used here. If you click on an ad placed by
    Microsoft ad, a cookie is set. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user has user has clicked on the ad and has been redirected to this page. This cookie is not used to personally identify the user.

    The data collected with the help of the conversion cookie is used to compile statistics for advertising customers who have opted for conversion tracking.


    The cookies set by Microsoft or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TDDDG. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


    You can revoke your consent at any time with effect for the future by deactivating the cookie via     deactivate the cookie via your Internet browser under user settings or by changing your preferences in our consent banner     (see footer: "Change cookie settings") .


    Microsoft Ireland Operations Limited is a subsidiary of the Microsoft Group     headquartered in the USA. Data may therefore be forwardedto Microsoft Online Inc. based in the USA and processed there.


    Microsoft is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the USA.


    ee) Meta Ads

    We use Meta Ads on our website, an advertising service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. Meta Platforms Inc. 1601, Willow Road Menlo Park, CA 94025, USA. Here so-called conversion tracking is operated. If you click on an ad placed by Meta, a cookie is set. set. If the user visits certain pages of this website and the cookie has not yet expired, Meta and
    expired, Meta and we can recognize that the user clicked on the ad and was redirected to this was redirected to this page. This cookie is not used to personally identify the user
    The data collected using the conversion cookie is used to compile statistics for advertising customers who have opted for conversion tracking.


    The cookies set by Meta or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TDDDG. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


    You can revoke your consent at any time with effect for the future by deactivating the cookie via your Internet browser under user settings or by changing your preferences in our consent banner (see footer: "Cookie settings").     (see footer: "Change cookie settings") .


    Meta Platforms Ireland Limited is a subsidiary of the Meta Group with headquarters in the USA. Data may therefore be forwardedto Meta Platforms Inc. based in the USA and processed there.


    Meta is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the USA.

    ff) Clear 

    We use the tracking tool Klar from Klar Insights GmbH, Markstr. 18, 80802 Munich (hereinafter "Klar") on our website. We use Klar to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to the use of the website and thus improve user-friendliness.


    When Klar is used, the interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.


    The use of cookies or comparable technologies set by Klar takes place with your consent on the basis of Section 25 (1) sentence 1 TDDDG. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) GDPR.


    You can revoke your consent at any time with effect for the future by deactivating the cookie via your Internet browser under user settings or by adjusting your preferences in our consent banner (see footer: "Change cookie settings").


    Microsoft Ireland Operations Limited is a subsidiary of the Microsoft Group with headquarters in the USA. Data may therefore be forwarded to Microsoft Online Inc. based in the USA and processed there.


    Microsoft is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the US.


    v) External content

    We use dynamic content ("content") from third parties to optimize the presentation and offer of our website. When you visit the website, a request is automatically sent to the server of the respective content provider via an interface, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there. 


    We use external content in connection with the following functionalities:


    aa) Integration of YouTube videos

    On our website, we have integrated videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA ("YouTube") on our website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for data processing on YouTube. However, when the videos are played, log data is transmitted to YouTube's servers in the USA.


    The legal basis for the processing is your prior consent in accordance with     Art. 6 para. 1 a) GDPR.

    Google is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.


    bb) Google Fonts

    To make visiting our website attractive, we use external fonts from Google Fonts. These are loaded from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") when you visit the site. Google does not store any cookies in your browser. However, according to our information, the IP address of the user's device is transmitted to Google and stored. This processing is carried out on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Art. 6 para. 1 f) GDPR.


    It cannot be ruled out that data will be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

    Google is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.


    cc) Google Maps

    We use the "Google Maps" map service from Google on our website to provide you with an interactive map. When the map is displayed, data, including your IP address and your location, is transmitted to Google servers and stored there. The legal basis for the processing is your prior consent in accordance with Art. 6 para. 1 a) GDPR.


    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") is responsible for data processing on Maps. It cannot be ruled out that data will be transmitted to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. 

    Google is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.


    dd) Google ReCaptcha

    We use the "Google reCaptcha" captcha service from Google on our website to protect our website from interactions with bots Protect. When you visit the website, data is collected, including your IP address, the referrer URL, information about the operating system, information about cookies, mouse mouse movements and keyboard strokes as well as the duration of your visit and the settings of your device are transmitted to Google. The legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in the security of our website.


    The controller responsible for data processing is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). It cannot be ruled out that data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA takes place.


    Google is certified under the EU-US Data Privacy Framework and is therefore covered by the adequacy decision of the EU for the USA.


    ee) REVIEWS.io

    To provide product reviews on our website, we use the REVIEWS.io service provided by REVIEWS.io 2020 GmbH, Stralauer Allee 6, 10245 Berlin. Your e-mail address and the content of your review are transmitted to REVIEWS.io.


    REVIEWS.io also uses servers in the United States of America.


    Therefore, a third country transfer to the USA cannot be ruled out. There is no adequacy decision by the EU Commission for the USA. REVIEWS.io ensures an adequate level of data protection via standard contractual clauses. A copy of the corresponding EU standard contractual clauses will be provided on request. Please contact datenschutz@junglueck.de for this purpose.


    The legal basis for the processing is our legitimate interest in accordance with     Art. 6 para. 1 f) GDPR in communicating with our customers in order to improve our products.


    ff) Chatbot Zendesk

    On our website we use the Zendesk chat tool of Zendesk GmbH c/o TaylorWessing, Neue Schönhauser Straße 3-5, 10178 Berlin ("Zendesk") to enable you to contact us via live chat. chat. The following data is processed when you use Zendesk:

    • Content of the chat, 
    • Date and time of the call, 
    • Browser type/version, 
    • operating system used, 
    • URL of the previously visited website, 
    • individual user ID, 
    • Number of visits and amount of data sent. 

    The legal basis for data processing is our overriding legitimate interest in providing a simple contact optionin accordance with Art. 6 (1) f) GDPR.


    This may also involve data transfers to Canada and the USA.

    The EU Commission has issued an adequacy decision for data transfers to Canada. For data transfers to the USA, Zendesk ensures an adequate level of data protection through the EU standard contractual clausesand the use of Binding Corporate Rules. A copy of the relevant EU standard contractual clauses and the Binding Corporate Rules will be provided on request. Please contact datenschutz@junglueck.defor this purpose .


    gg) Whatsapp Business

    We use Whatsapp Business ("Whatsapp"), of Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc. 1601, Willow Road, Menlo Park, CA 94025, USA, on our website. We use Whatsapp to enable you to contact us via live chat. The following data is processed when Whatsapp is used: 

    • Content of the chat, 
    • Location data,
    • Contact information,
    • Profile information,
    • Status information,
    • Profile picture.

    The legal basis for data processing is in accordance with Art. 6 para. 1 f) GDPR our overriding legitimate interest in providing a simple means of contact.


    It is possible that data may also be transferred to Meta Platforms Inc. in the USA. There is no adequacy decision by the EU Commission for data transfers to the USA. Whatsapp ensures an adequate level of data protection via the EU standard contractual clauses. We will provide a copy of the contractual clauses on request. Please contact us at datenschutz@junglueck.de.


    hh) Hello Charles

    For marketing purposes, we use Hello Charles, a service provided by charles GmbH, Gartenstraße 86-87, 10115 Berlin, Germany (hereinafter "Charles"), to manage our marketing campaigns on Whatsapp. The following data is processed when you use our Whatsapp newsletter:

    • Surname, first name
    • e-mail address
    • Date of birth
    • Skin concern
    • Skin type
    • Orders

    The legal basis for data processing is your consent in accordance with Art. 6 para. 1 a) in conjunction with Art. 9 para. 2 a) GDPR.


    ii) Seals of payment service providers

    We use seals of the payment service "PayPal" on our website. These are loaded from the servers of PayPal (Europe) S.à r.l. et Cie, S.C.A. when you visit the website. The name of the website accessed, the date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider are transmitted to the servers of the respective provider.

    The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offer in accordance with Art. 6 para. 1 f) GDPR.

    Further information on data protection can be found at Paypal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE


    5. duration of data storage

    We only store personal data for as long as is necessary for the purposes for which it is processed or for as long as you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, regardless of the processing purposes.


    6. your rights as a data subject


    a) Information 

    On request, you can obtain information about all personal data that we have stored about you at any time and free of charge.


    b) Rectification, erasure, restriction of processing (blocking), objection

    If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law). The same applies if we are only to process data to a limited extent in future. You have the right to object in particular in cases where your data is required for the performance of a task carried out in the public interest or where the data processing is based on our legitimate interest, as well as profiling based on this. You also have the right to object in the case of data processing for the purpose of direct advertising.


    c) Right to withdraw consent with effect for the future

    You can withdraw your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the time of revocation. 


    d) Data portability 

    If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or with the aid of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can transmit the data to another controller if you wish.


    e) Restriction of processing

    Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.


    f) Exercising your rights as a data subject and right to lodge a complaint

    If you have any questions regarding the processing of your personal data, information, correction, blocking, objection or deletion of data or the wish to transfer the data to another company, please contact datenschutz@junglueck.de.


    You also have the option of complaining to a supervisory authority about your rights as a data subject.