Privacy policy

Information on the handling of personal data

We are very pleased about your interest in our website - and thus in our company. The protection of your private rights and freedoms is very important to us; we only use your data for the purposes intended. Since it is important to us that you are aware at all times of the extent to which we collect, use and, if necessary, transfer your data to third parties, we will provide you with the following comprehensive information on the processing of your personal data collected by us or stored by us.

Visiting our website is generally possible without providing (personal) data; if there are exceptions to this for selected services, we will explain these in the following chapters. When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and any other data protection regulations.

Name and address of the controller

neubourg skin care GmbH
Stefan Lang
Mergenthalerstr. 40
48268 Greven
Germany

Phone: +49 2571-5740-0
E-mail: datenschutz@neubourg.com
Website: https://allpresan.com

Name and address of the data protection officer

Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster


Data protection team for general data protection inquiries:
Team e-mail: dsb.nsc@cortina-consult.de
Website: https://www.cortina-consult.com

Actuality of the privacy policy

To ensure that we always have up-to-date data protection information in connection with the services of our website, we use the CLOUD DSE service of Cortina Consult GmbH, Hafenweg 24 in 48155 Münster. In this process, the contents of our privacy policy are hosted on the servers at Cortina Consult and managed centrally. Necessary changes are implemented promptly by Cortina Consult and immediately displayed via direct integration on our website.

Rights of data subjects

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

Right to information

This requirement concerns in particular information on the following details of data processing:

  • Processing purposes
  • Data categories
  • Recipients or categories of recipients, if applicable
  • If applicable, the planned storage duration or the criteria for determining this duration.
  • Note on the respective right of correction, deletion, restriction or objection
  • Existence of the right to complain to a supervisory authority
  • If applicable, origin of the data (if not collected from you)
  • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
  • If applicable, (planned) transfer to a third country or international organization
Right to rectification

We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

Right to erasure (right to be forgotten)

Provided that the processing is no longer necessary and one of the following conditions is met:

  • Discontinuation of the purpose of processing
  • Withdrawal of their consent and absence of any other legal basis for processing
  • Objection to processing without an important reason to the contrary
  • Unlawful processing
  • Required to fulfill a legal obligation
  • Data collection was carried out in accordance with Art. 8 (1) GDPR
Right to restriction of processing

Provided that one of the following conditions is met:

  • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
  • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
  • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
  • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
Right to data portability

If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

Right to object

If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

Automated decisions in individual cases including profiling

If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

Right to complain to a supervisory authority

A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

General information on data processing on the website

The following information applies to the data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the relevant sections.

Data security information

We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all dangers is not possible.

Our legitimate interest

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.

General deadlines for data deletion

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

Deletion or blocking of personal data

We store your personal data only for the period required to fulfill the specified purpose. After the purpose no longer applies and after expiration of any existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.

Collection of general data and information

As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:

Data collected

Purpose of the survey

browser types and versions usedcorrect display of the page content
Operating system used, visitor origin (referrer, e.g. Google), subpages clicked onOptimization of our website content as well as our advertising
Date and time of access to the website as well as IP address and internet service provider of the visitorEnsuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse

Other data and information for security in the event of attacks

Providing relevant information to law enforcement agencies in the event of a cyberattack

Obligation to provide personal data

Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:

Nature or purpose of the processing

Need

Conclusion of a sales contract (e.g. your address)Fulfillment of the contractual obligation (e.g. delivery of the goods to your address)
In the employee context (e.g. transmission of data to the tax office)Compliance with legal requirements (e.g. tax regulations)

Information about specific data processing on the website

If applicable, in deviation from or in addition to the above-mentioned general information, you will find details of the individual data processing on our website below.

Applications and application procedure
Purpose of processingApplicant data is collected, processed and used for the purpose of selecting potential employees.
Legal basis (according to Art. 6 / 9 GDPR)
  • Implementation of pre-contractual measures (Art. 6 para. 1 b)
  • Recipient (if applicable)The data will not be passed on to third parties and/or to a third country.
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)Forwarding does not take place and is not planned.
    If known: Duration of data storageThe personal data of applicants whom we do not hire will be stored for the period required for possible legal claims (e.g. under the General Equal Treatment Act (AGG)) (maximum 6 months) and then immediately destroyed or deleted.
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityFor a smooth application process, it is necessary that you provide us with the requested information truthfully.
    Consequences of non-compliance (in case of failure to provide the required data)Failure to do so (i.e. failure to provide the required data) may mean that an employment contract cannot be concluded with you.
    If applicable, existence of an automated decision-making processIn this context, we do not use automated decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)As a rule, the data originates from the data subject themselves; however, it may also originate from third parties.
    Where applicable, categories of personal data (if not collected directly from the data subject).Master data, contact data, application data
    Change of purpose if necessaryIf we take you on as an employee after the application process has been completed, the purpose for processing the relevant data will change: in this case, the data will be used in future to implement and maintain the employment relationship.
    Newsletter
    Purpose of processingProvision of information in the form of electronic circulars
    Legal basisConsent (Art. 6 para. 1 lit. a GDPR)
    Recipient (if applicable)none
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThere is no obligation to provide personal data. Newsletters are sent exclusively after registration via a double opt-in procedure (voluntarily given and revocable informed consent pursuant to Article 6 (1) a DSGVO) or after a purchase contract has been successfully concluded and the e-mail address has been collected in this process (pursuant to Section 7 (3) UWG).
    Consequences of non-compliance (in case of failure to provide the required data)Non-compliance (i.e. not providing the required data) would result in the newsletter not being delivered to you.
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data comes from the data subject himself.
    Change of purpose, if applicablenone
    Cookies

    We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
    Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
    We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
    It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.

    Web tracking technologies - managed with Usercentrics

    To manage all cookies, website and tracking technologies that require consent or opt-out in a privacy-compliant manner, we use the Consent Management Platform of Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, with which we have integrated the following services:

    Registration for events of the Allpresan Academy
    Purpose of the processing of general data
    Data typePurpose of the survey
    Customer numberUnique identification of the customer account
    Date of birth, title, surname, first name, job titleIssuance of a certificate
    Address, e-mail address, phone numberRegistration and, if applicable, billing of the respective event
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Fulfillment of a contract (Art. 6 para. 1 b)
  • Recipient (if applicable)Organizer other than the responsible party, if applicable
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThe data (in the mandatory fields) must be provided as part of the underlying contract.
    Consequences of non-compliance (in case of failure to provide the required data)Participation in the respective event is not possible without the relevant data.
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Change of purpose if necessarynone
    Become a partner - neubourg.com
    Purpose of the processing of general data
    Data typePurpose of the survey
    Phone numberFor short-term clarifications, e.g. in the event of non-delivery of parcels or anomalies
    Date of birthFor personal identification in the event of telephone queries
    Website / voluntaryFor cross-checking in case there are discrepancies in the data provided
    VAT ID / voluntaryFor double insurance of your trade status
    Job title / voluntaryTo prove which of our products are suitable for you
    Fax number To send fax documents
    Legal basis (according to Art. 6 / 9 GDPR)
  • Fulfillment of a contract (Art. 6 para. 1 b)
  • Protection of legitimate interests (Art. 6 para. 1 f)
  • Recipient (if applicable)none
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessitynone
    Consequences of non-compliance (in case of failure to provide the required data)none
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Student Registration
    Purpose of the processing of general data
    Data typePurpose of the survey
    Training occupation, name of the school, address of the school, start and end of the training, upload of the school certificate.For proof of training status
    Address, name, first nameFor the processing of sales contracts and deliveries
    Phone numberFor short-term clarifications, e.g. in the event of non-delivery of parcels or anomalies
    E-mail addressUser access and communication to the account (e.g. password reset).
    Date of birthFor personal identification in the event of telephone queries
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Informed consent (Art. 6 para. 1 a)
  • Fulfillment of a contract (Art. 6 para. 1 b)
  • Protection of legitimate interests (Art. 6 para. 1 f)
  • Recipient (if applicable)Parcel service provider,Logistics service provider,Payment service provider
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityThere is no obligation.
    Consequences of non-compliance (in case of failure to provide the required data)Without the data provided, the data processing described cannot be carried out.The creation of a student account is not possible.
    If applicable, existence of an automated decision-making processAutomated decision-making does not take place and is not planned.
    If applicable, origin of the data (if not collected directly from the data subject)The data comes from the data subject himself.
    Change of purpose if necessarynone
    Opt outYou can request the deletion of your data at any time by e-mail.
    Participation "Allpresan on TV" competition
    Purpose of the processing of general data
    Data typePurpose of the survey
    E-mail address, last name, first name, title, photo of the purchase receipt, age query: of age.Contact by e-mail, participation in the sweepstakes, verification of age of majority, confirmation of Allpresan product purchase.
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Fulfillment of a contract (Art. 6 para. 1 b)
  • Recipient (if applicable)none
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityWithout the data, participation in the competition cannot take place.
    Consequences of non-compliance (in case of failure to provide the required data)Without the data, participation in the competition cannot take place.
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data usually originates from the data subject, but may also originate from third parties.
    Change of purpose if necessarynone
    WhatsApp Messenger service via Userlike
    Purpose of the processing of general data
    Data typePurpose of the survey
    All data disclosed by the users themselves.Providing a communication channel to answer questions from users, customers or interested parties.
    Legal basis (according to Art. 6 / 9 DSGVO)
  • Protection of legitimate interests (Art. 6 para. 1 f)
  • Recipient (if applicable)Userlike UG (haftungsbeschränkt) Probsteigasse 44-46 50670 Cologne, Germany
    If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees)A data transfer to a third country does not take place and is not planned.
    If known: Duration of data storageSee General deadlines for data deletion
    Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessityWithout the data in question, it is not possible to carry out the aforementioned processes.
    Consequences of non-compliance (in case of failure to provide the required data)Without the data in question, it is not possible to carry out the aforementioned processes.
    If applicable, existence of an automated decision-making processIn this context, we do not use automatic decision-making.
    If applicable, origin of the data (if not collected directly from the data subject)The data comes from the data subject himself.
    Change of purpose if necessarynone
    Contact form

    Data type

    Salutation, first name, last name, postal code, e-mail address, if applicable information in free text field, street (optional), house number (optional), city (optional)


    Purpose of the survey

    When communicating and/or cooperating with us, e.g. by e-mail, via a contact form on our website, via a data exchange platform, whether as a consumer, test person, business partner or customer, the data you provide (your e-mail address, your name and telephone number, if applicable, or the personal data provided within the communication) will be stored by us, e.g. in order to answer your questions or to comply with the communication required for our business purposes.
    Regarding the cooperation with our suppliers, we have implemented an internal evaluation process, which is in our legitimate interest to improve the business relationship by developing an "action plan".
    Here, we usually only process information about the company, but conclusions about you as a contact person are possible if the communication with suppliers is examined with regard to response times, reliability and transparency.
    We may ask you, if you contact us as a consumer by telephone, whether the telephone call may be recorded for quality assurance and training measures. If you agree to the recording, we will process all information that you share with us during the call (communication content, possibly also sensitive (health) data, as well as your phone number and other personal data)
    When processing the data that arises during communication, we have a legitimate interest in processing the data in accordance with legal requirements, for internal review or in accordance with the respective communication request.
    The provision of your personal data is necessary for the performance of the contract or a situation similar to a contract. You are not obliged to provide your personal data. If you do not provide your personal data, you will not be able to use the described service.


    Legal basis (according to Art. 6 / 9 DSGVO)

    • Safeguarding legitimate interests (Art. 6 para. 1 f)
    • Fulfillment of legal obligations (Art. 6 para. 1 c)
    • Implementation of pre-contractual measures (Art. 6 para. 1 b)


    Recipient (if applicable)

    In order to combat terrorism, we are required by law to carry out a comparison with sanctions lists. Therefore, we also process your data to comply with legal requirements for matching against these lists. Furthermore, we process your data within the Beiersdorf Group for the prevention and investigation of criminal offenses and other misconduct, the assessment and management of risks, for internal communication, and for relevant administrative purposes. If an affiliated company reports a need to work with you as a supplier, we will share our experience of working with the affiliated company. If you are a business partner, we will check your data against published lists of misleading suppliers (e.g. World Intellectual Property Organization and Bundesanzeiger Verlag GmbH warning lists) to make an informed decision about any payments. In addition, we regularly check your creditworthiness in certain cases (e.g. when concluding contracts). Our legitimate interest here is to minimize the financial risk. To this end, we work with credit agencies (e.g. Creditreform Hamburg von der Decken KG, Wandalenweg 8-10, 20097 Hamburg and Bisnode D

    If applicable, intention of forwarding to a third country or int. organization

    Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. For third countries/companies for which an adequacy decision exists, the adequacy decision also applies. In addition, binding internal data protection regulations were approved at a platform/hosting service provider.


    Duration of data storage

    We delete the data generated in this context after storage is no longer required, unless there are legal retention obligations or statutes of limitations must be observed. In the case of consumer inquiries that are processed via our internal consumer management tool, the personal data is usually deleted after one year if no other legal retention periods apply. In deviation from this, the data will be kept longer if the data is required for the assertion, exercise or defense of legal claims.