Policies ONNI - Organic Luxury Haircare: Data protection

The person responsible for data processing is:
Paavo Commerce GmbH
Trogerstrasse, 17a
81675 Munich
shop@onni.de

We appreciate your interest in our online shop. Protecting your privacy is important to us. Here we inform you about how your data is handled.

ACCESS DATA AND HOSTING

You can visit our websites without providing any personal information. Every time a page is accessed, the web server saves a server log file, which contains data such as the requested file, your IP address, date and time of access. This data is only evaluated to ensure trouble-free operation and to improve our offering. Access data will be deleted after seven days.

Our hosting services are provided by service providers who process data on servers in the USA and other countries outside the EU. There is no adequacy decision from the European Commission for these countries, but our cooperation is based on standard data protection clauses from the European Commission. Some of our service providers use servers in countries for which the EU has determined an adequate level of data protection, such as Canada.

DATA PROCESSING

Contract processing:
When you place an order, we collect necessary personal data. Mandatory fields are marked because this data is necessary for order processing. After the contract has been processed, your data will be deleted in accordance with the statutory retention periods, unless you agree to further use.

Customer account:
With your consent, we will open and save a customer account for you. The customer account can be deleted at any time. After deletion, your data will be removed unless there is further legal permission for use.

Contact:
When you contact us, we collect data to process your request. After processing, they will be deleted unless you agree to further use.

SHIPPING PROCESSING

To fulfill the contract, we pass on your data to the shipping service provider, if necessary for the delivery of ordered goods.

DATA PROCESSING FOR PAYMENT PROCESSING

When processing payments in our online shop, we cooperate with technical service providers, credit institutions and payment service providers.

DATA PROCESSING FOR TRANSACTION PROCESSING

Depending on the payment method chosen, we transmit the data required for processing to our technical service providers, the credit institutions or the payment service provider. In some cases, payment service providers collect this data themselves. The data protection declaration of the respective service provider applies. If you have any questions, please contact us using the methods specified in this privacy policy.

DATA PROCESSING FOR FRAUD PREVENTION AND OPTIMIZATION

To prevent fraud and optimize our payment processes, we may pass on data to our service providers, who process it as part of their work for us.

IDENTITY AND CREDIT CHECK AT KLARNA

If you choose Klarna services, we ask for your consent to transmit data to Klarna for payment processing and credit checks. Klarna uses this information to make contract decisions. Your consent can be revoked at any time, which may result in restrictions on payment options. More about this in the [Klarna data protection declaration](https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy).

IDENTITY AND CREDIT CHECK AT BILLPAY (KLARNA BANK AB)

Similar conditions apply to BillPay services as to Klarna. Revoking your consent may lead to restrictions on payment options. More about this in the [Billpay data protection declaration](https://www.billpay.de/de/agb-de/).

IDENTITY AND CREDIT CHECK AT PAYONE

If you select “purchase on account” via PayOne, we also ask for your consent to the data transfer. Details can be found in the [PayOne data protection declaration](https://a.storyblok.com/f/64176/x/b6e0586777/payone-information-zu-datenrechner-gemass-art-13-dsgvo-0220-1.pdf) .

ADVERTISING BY EMAIL

EMAIL NEWSLETTER WITH SIGN UP
After you register for the newsletter, we will regularly send you information based on your consent in accordance with Art. 6 Para. 1 Sentence 1 Letter a GDPR. You can unsubscribe at any time via a link in the newsletter or by sending a message to the contact option provided in this data protection declaration. After you unsubscribe, your email address will be deleted unless you have expressly agreed to further use or there is a legally permitted use of data.

EMAIL NEWSLETTER WITHOUT REGISTRATION
If we received your email address when purchasing a product and you have not objected, we will send you offers for similar products based on Section 7 Paragraph 3 UWG. You can object to this at any time by contacting us or using the link in the promotional email.

NEWSLETTER DELIVERY
Shipping can be carried out by our service providers who use servers in the USA and other countries. There is no adequacy decision from the EU Commission for these countries, but our cooperation is based on the EU Commission's standard data protection clauses.

SENDING REQUESTS FOR REVIEW
With your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR, we ask you to rate an order. You can revoke this at any time. Review requests can be sent through our service provider Trusted Shops, which uses service providers in the USA. An appropriate level of data protection is guaranteed. Further data protection information from Trusted Shops can be found [here](https://www.trustedshops.de/impressum/#datenschutz).

COOKIES AND TECHNOLOGIES

To make our website attractive and to enable certain functions, we use technologies, including cookies. Some cookies are deleted after your browser session, while others remain persistent on your device.

These technologies collect IP address, time of visit, device and browser information and information about the use of our website. The use serves to optimize the presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

Technologies for web analysis and online marketing are also used. Further details can be found in the following sections.

You can view and adjust cookie settings for different browsers using the links provided. If you reject cookies, the functionality of our website may be affected.

COOKIE BOT

We use Cookiebot to inform you about cookies and to document your consent to data processing. Data processing is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

USE OF COOKIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES

With your consent, we use third-party technologies for web analytics and advertising purposes on our website.

ADOBE SERVICES

We use technologies from Adobe. When using these technologies, data is usually transmitted to Adobe servers in the USA.

GOOGLE SERVICES

We use technologies from Google. Data is usually sent to Google servers in the USA.

FACEBOOK SERVICES

The Facebook Pixel from Facebook Ireland Ltd collects data that is used to create user profiles using pseudonyms. Data is usually transferred to Facebook servers in the USA.

COOKIES AND TECHNOLOGIES

To make our website user-friendly, we use technologies, including cookies. Cookies are small text files that are stored on your device. Some cookies are deleted after you close your browser, while others are recognized on future visits.

These technologies collect data such as IP address, time of visit, device and browser information and your use of our website in order to ensure an optimized presentation of our offering.

We also use technologies for web analysis, online marketing and to fulfill legal obligations. You can find details about this in this data protection declaration.

Cookie settings for your browser:

- [Microsoft Edge™](https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies)
- [Safari™](https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14)
- [Chrome™](https://support.google.com/chrome/answer/95647?hl=de&hlrm=en)
- [Firefox™](https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies)
- [Opera™](https://help.opera.com/de/latest/web-preferences/#cookies)

You can revoke your consent at any time [here](https://www.onni.de/cookie). The restricted use of cookies may affect the functionality of our website.

COOKIE BOT

We use Cookiebot to inform you about cookies and technologies and to manage your consents. Cookiebot stores data such as your anonymized IP address and the date/time of your declaration for twelve months, unless you agree to longer storage.

USE OF TECHNOLOGIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES

With your permission, we use third-party technologies, including Adobe and Google, for web analytics and advertising purposes. Details about these technologies and their providers can be found in the following section.

ADOBE

We use Adobe technologies for web analysis and advertising. Data may be transferred to Adobe servers in the USA and stored there. We also use “Adobe Fonts” to display our website content.

GOOGLE

We use Google technologies, including Google Analytics, for web analysis. Data may be transferred to and stored on Google servers in the USA. IP anonymization is activated to protect your data.

Note: I have tried to streamline the text as much as possible without losing important information. Depending on the context, it may be useful to describe certain sections in more detail or add additional information.

GOOGLE FONTS
We use the script code “Google Fonts” to ensure a uniform presentation of our website. This means that data (IP address, time of visit, device and browser information) is transmitted to Google and processed by Google. We have no influence on data processing by Google.

YOUTUBE VIDEO PLUGIN
We use the YouTube video plugin to integrate third-party content in extended data protection mode. Data is only transmitted to Google and processed when you play a video.

FACEBOOK SERVICES

FACEBOOK PIXELS
We use the Facebook Pixel to collect data. The data collected is processed by Facebook and can be used for advertising purposes.

FACEBOOK ANALYTICS
We use Facebook Analytics to create statistics about visitor activities on our website.

FACEBOOK ADS
We use Facebook Ads to advertise on various platforms. Facebook is responsible for the exact implementation and placement of the ads.

SOCIAL MEDIA
SOCIAL PLUGINS
We use social buttons from various social networks. By clicking the button you will be redirected to the respective website.

ONLINE PRESENCES
When you visit our social media profiles, data can be collected and used for advertising and market research. Detailed data protection information can be found on the websites of the respective providers.

CONTACT OPTIONS AND YOUR RIGHTS

YOUR RIGHTS
As a data subject, you have rights under the GDPR, such as the right to information, correction, deletion or restriction of your data. If you are dissatisfied, you can also lodge a complaint with a supervisory authority.

Right to object
If we process your data, you have the right to object to this.