Glow25.be – The Collagen Company

Privacy Policy

FREE SHIPPING from 50€ in DE | from 100€ in A&CH

Privacy Policy

General information
As the operator of https://www.primal-state.de/, we take the protection of personal data very seriously. We treat personal data confidentially and in accordance with the statutory data protection regulations and on the basis of this privacy policy. The legal basis can be found in particular in the General Data Protection Regulation (GDPR).

When you use this website, various personal data are processed depending on the type and scope of use. Personal data is information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly (e.g. by reference to an online identifier). This includes information such as name, address, telephone number and date of birth.

This privacy policy informs you in accordance with Art. 12 et seq. GDPR on the handling of your personal data when you use our website. In particular, it explains what data we collect and what we use it for. It also informs you how and for what purpose this is done.

Controller
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.). The controller within the meaning of the GDPR and the applicable national data protection laws as well as other data protection regulations is

Primal State Performance GmbH (hereinafter: Primal State)
Pappelallee 78/79
10437 Berlin
E-mail: [email protected]
Phone: 030 63915199

Access data and hosting
For the purpose of the technical provision of the website, it is necessary for us to process certain information automatically transmitted by your browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time you visit our website and automatically stored in so-called server log files. These are

Browser type and browser version
Operating system used
Website from which the access is made (referrer URL)
Host name of the accessing computer
Date and time of access
IP address of the requesting computer

The storage of the aforementioned access data is necessary for technical reasons in order to provide a functional website and to ensure system security.

This also applies to the storage of your IP address, which is necessary and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the above-mentioned purposes, we use server log files exclusively for the needs-based design and optimisation of our website purely statistically and without drawing any conclusions about your person. This data is not merged with other data sources, nor is it analysed for marketing purposes.

 

The access data collected as part of the use of our website is only stored for the period for which this data is required to fulfil the aforementioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.

If you visit our website to find out about our range of products and services or to use them, the basis for the temporary storage and processing of access data is Art. 6 para. 1 sentence 1 lit. b GDPR (legal basis), which permits the processing of data for the fulfilment of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All data collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope described here.

This service provider is located within a country of the European Union or the European Economic Area.

Data processing for contract processing and when opening a customer account

We collect personal data if you voluntarily provide it to us as part of your order, when contacting us (e.g. via contact form or e-mail) or when opening a customer account. Mandatory fields are labelled as such, as in these cases we require the data to process the contract or to process your contact or open the customer account and you cannot complete the order and/or open the account or send the contact without providing it. Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and processing your enquiries. After completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

Forwarding of data
In order to fulfil the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Data transfer to shipping service providers

If you have given us your express consent to this during or after your order, we will pass on your telephone number to the selected shipping service provider in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR so that they can contact you before delivery for the purpose of delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Deutsche Post AG
Data Protection Officer
Gabriela Krader, LL.M.
53250 Bonn
Germany

E-mail newsletter and postal advertising
E-mail advertising with registration for the newsletter

If you register for our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Email advertising without subscribing to the newsletter and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products to those already purchased from our range by e-mail on the basis of Section 7 (3) UWG. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers. You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic tariffs.

The newsletter is sent as part of processing on our behalf by Infusion Software, Inc. (www.infusionsoft.com), to whom we pass on your email address for this purpose. Infusion Software, Inc. is based in the USA. To ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Infusion Software, Inc. relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Infusion Software, Inc.

Postal advertising and your right to object

In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and the collected reviews as well as to offer Trusted Shops products to buyers after an order.

This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site. Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

Cookies and web analytics
We use cookies on various pages to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links

Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies 
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 
Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html
If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis

Insofar as you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR (cookie consent functionality active on our website from 25 May 2018), this website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.de), for the purpose of website analysis. Google (Universal) Analytics uses methods that enable your use of the website to be analysed, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in this context will be deleted after the end of the purpose and use of Google Analytics by us.

Google LLC has its headquarters in the USA. To ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google LLC relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google LLC.

You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This will prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be stored on your end device. If you delete your cookies, you will be asked to give your consent again.

Advertising via marketing networks
Google AdWords Remarketing

We use Google AdWords to advertise this website in Google search results and on third-party websites. If you have given us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR (cookie consent functionality active on our website from 25 May 2018), the so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. The data collected in this context will be deleted after the end of the purpose and use of Google AdWords Remarketing by us.

Any further data processing will only take place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalise ads that you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data in order to create target groups. 

Google LLC has its headquarters in the USA. To ensure compliance with the European level of data protection, including in the event of any transfer of data from the EU or the EEA to the USA and possible further processing there, Google LLC relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google LLC.

You can revoke your consent at any time with effect for the future by deactivating the remarketing cookie via this link. You can also obtain information from the Digital Advertising Alliance about the setting of cookies and make settings for this.

Pinterest conversion tracking

This website uses the conversion tracking technology of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), which enables website visitors who have already shown an interest in the website and its content/offers and are Pinterest members to also be shown relevant adverts and offers on Pinterest. For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on the pages, via which Pinterest is informed when you visit the website that you have called up the website of Primal State Performance GmbH and which parts of our offer you were interested in. For example, if you have shown an interest in subscriptions on the website, you may be shown an advert for these subscriptions on Pinterest.

You can deactivate the collection of data for the display of interest-based advertising on Pinterest at any time in your Pinterest account settings at https://www.pinterest.de/settings (there under “Customisation” the button “Use information from our partners to better tailor the recommendations and ads on Pinterest to you”) or at https://help.pinterest.com/de/article/personalization-and-data#info-ad (there deactivate the checkbox under “Deactivate customisation”).

Social Media 
Facebook Fanpage

Prima State uses the technical platform and the “Facebook” services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin, Ireland (“Meta”) for the information service offered here. 

According to the ECJ, there is joint responsibility within the meaning of Art. 26 GDPR between Meta and the operator of a Facebook fan page for the personal data processed via the Facebook fan page. For this reason, Meta and Prima State have concluded a joint controllership agreement, which you can access here.

Prima State provides you with the following information on data processing on our Facebook fan page: 

(1) Responsible persons

The processing of your personal data on Prima State’s Facebook fan page is carried out under joint responsibility with 

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin, Ireland

(2) Data processing 

When you access a Facebook fan page, the IP address of your end device is transmitted to Meta. According to Meta, this IP address is anonymised and deleted after 90 days, at least if it is a German IP address. In addition, Meta stores further information about the end devices of its users, e.g. the Internet browser used. This may enable Meta to assign IP addresses to individual users. If you are logged into your Facebook account while visiting our fan page, a cookie with your Facebook ID will be stored on your device. This cookie enables Meta to understand that you have visited our fan page and how you have used it. Meta uses this information to present you with customised content or advertising. 

If you do not want this, you should log out of your Facebook account or deactivate the “stay logged in” function. We also recommend deleting the cookies on your device and closing and restarting your browser. This process deletes Facebook information that Meta can use to establish a link to you. 

However, if you wish to use the interactive functions of our fan page, you will have to log in to Facebook again using your Facebook login information. This also enables Meta to establish a link to you again. 

Meta does not conclusively and clearly state how Meta uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Meta stores this data and whether data from a visit to the Facebook page is passed on to third parties, and we are not aware of this. In this respect, we can only refer you as a user of our fan page to Meta’s information on data protection.

The data collected about you in this context will be processed by Meta and may be transferred to countries outside the European Union. 

What information Meta receives and how it is used is described by Meta in general terms in its data usage guidelines. There you will also find information on how to contact Meta and on the settings options for adverts. 

You can find Meta’s complete data policy here:
https://www.facebook.com/about/privacy/previous 

Objection options (so-called opt-out) can be set here: https://www.facebook.com/settings?tab=ads and here http://www.youronlinechoices.com  

The transfer and further processing of users’ personal data to third countries, such as the USA, and the associated potential risks for you as a user cannot be assessed by us as the operator of the Facebook fan page.

(3) Insight function

Meta also provides a range of statistical data for Prima State as a fan page operator as part of the so-called “Insights” function.  These statistics are generated and provided by Meta. As the operator of the fan page, we have no influence on the generation of this data and, in particular, we cannot prevent this function.  As part of the “Insights” function, we are shown the following information for the categories “Fans”, “Subscribers”, “People reached” and “People interacting” for a selectable period of time:

Page activities such as page views, page previews, actions on the page; reach activities such as “likes”, people reached and recommendations, post activities such as post interactions, video views, comments, shared content.

In addition, we are provided with statistical information about the Facebook groups that are linked to our fan page.  In accordance with the Facebook terms of use, which every user has agreed to when creating a Facebook profile, we can also identify the subscribers and fans of the page and view their profiles and other information shared by them. 

 

Meta provides more information on this under the following link:
https://www.facebook.com/help/pages/insights 

Prima State uses this data, which is available in aggregated form, to make posts and activities on the fan page more attractive to users, e.g. to plan the content and timing of posts. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, namely our legitimate interest in optimising our offer.

(4) Storage period

We store the information transmitted by Meta at most for as long as your interest in deletion or anonymisation does not prevail.

 

If you no longer wish the data processing described here to take place in the future, please remove the link between your user profile and our fan page by using the “I no longer like this page” and/or “No longer subscribe to this page” functions.

(5) Your rights as a data subject


We recommend that you address any requests for information or other questions regarding your rights listed at the end of this Privacy Policy directly to Meta, as only Meta has full access to the User Data. Should you nevertheless address your enquiry to us, it will of course still be processed and also forwarded to Meta.

Integration of YouTube videos
We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with its registered office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

 

When you access the web pages of our website that are equipped with such a plugin, a connection to the YouTube servers is established and the plugin is displayed. This tells the YouTube server which of our web pages you have visited. If you are logged in to YouTube as a member, YouTube assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your YouTube user account and other user accounts of YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies. You also have the option of deactivating third-party cookies via the cookie banner integrated on our website. However, you will then no longer be able to access the corresponding content via our website.

The purpose and scope of the data collection and the further processing and use of the data by YouTube as well as your rights in this regard and setting options to protect your privacy can be found in YouTube’s data protection information: https://policies.google.com/privacy?hl=de&gl=de. 

Sending review reminders by email

Review reminder by Trusted Shops

If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will send your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) so that they can send you a review reminder by e-mail.

This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

Duration of data storage
We initially process and store your personal data for the duration for which the respective purpose of use requires corresponding storage (see above for the individual processing purposes). This may also include the periods for the initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract. On this basis, personal data is regularly deleted as part of the fulfilment of our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:

Fulfilment of statutory retention obligations

Preservation of evidence in compliance with the statute of limitations

Making contact
If you contact us via one of the contact options provided in this privacy policy or in the imprint or via our contact form, your details and the contact data you provide (e.g. name, e-mail address) will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass this data on to third parties.

We will delete your enquiry(s) and your contact details once your enquiry has been finally answered. Your data will generally be stored for 6 months and deleted after this period, unless you send us follow-up enquiries or we need to process the data for other purposes.

This data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with the consent you have given.

Data security
We protect personal data by means of suitable technical and organisational measures in order to ensure an appropriate level of protection and to safeguard the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorised access to the technical facilities used by us and to protect personal data from unauthorised access by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as the contact requests you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is therefore not possible.

  1. contact options and your rights

As a data subject, you have the following rights:

in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein

in accordance with Art. 16 GDPR, the right to demand the immediate correction of incorrect or incomplete personal data stored by us

in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary – for exercising the right of freedom of expression and information; – for compliance with a legal obligation; – for reasons of public interest or – for the establishment, exercise or defence of legal claims;

in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if – the accuracy of the data is disputed by you; – the processing is unlawful, but you refuse to delete it; – we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or – you have objected to the processing in accordance with Art. 21 GDPR;

you are entitled to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are authorised to process your personal data despite your objection. We will consider an objection to any direct marketing measures immediately and without weighing up the existing interests again.

Information about your right to object in accordance with Art. 21 GDPR
You have the right to object at any time to the processing of your data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing on the basis of a balancing of interests) or Art. 6 para. 1 sentence 1 lit. e GDPR (data processing in the public interest) if there are reasons for this arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

The objection can be made informally and should preferably be addressed to

Primal State Performance GmbH, Pappelallee 78/79, 10437 Berlin

Email: [email protected] 

in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller

in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. In particular, you can lodge a complaint with a supervisory authority. 

A list of the German data protection supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html 

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our company data protection officer.

Company data protection officer:

Fresh Compliance GmbH
Gina Bleckmann
Fürbringerstrasse 15
10961 Berlin
Phone: 030 32765751
E-mail: [email protected]

Obligation to provide data
In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to make our website available to you without restriction or answer your enquiries to us. Personal data that we do not necessarily require for the above-mentioned processing purposes is labelled accordingly as voluntary information.

Status of the privacy policy: 27.04.2023