Privacy policy


PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Soothyn. The controller for processing personal data is the individual or legal entity that alone or jointly with others determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website for informational purposes only, i.e. without registering or otherwise providing us with information, we only collect data that your browser transmits to our server (so-called "server log files").

When you access our website, we collect the following data that is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Used browser
  • Used operating system
  • Used IP address (if applicable, in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) COOKIES

To make visiting our website attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device.

Some of the cookies we use are deleted after your browser session ends (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies).

When cookies are set, they collect and process certain user information such as browser and location data and IP address values.

Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Some cookies help simplify the ordering process by saving settings, for example by remembering the contents of a virtual shopping cart for a later visit.

If personal data is processed by individual cookies implemented by us, processing takes place in accordance with Article 6(1)(b) GDPR for contract execution or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in providing the best possible functionality of the website and a customer-friendly, effective website visit.

We may collaborate with advertising partners who help make our online offer more interesting for you. In this case, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies).

You will be individually and separately informed about the use of such cookies and the scope of the information collected in the following sections.

You can configure your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.

Each browser differs in how it manages cookie settings. You can find instructions for the respective browsers below:

Please note that the functionality of our website may be restricted if cookies are not accepted.

4) CONTACT

When contacting Soothyn (e.g. via contact form or email), personal data is collected.

The data collected in the case of a contact form is evident from the respective contact form. This data is stored and used solely for the purpose of responding to your enquiry or for contacting you and the associated technical administration.

The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR.

If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.

Your data will be deleted after the final processing of your enquiry, provided that no legal storage obligations oppose this.

5) DATA PROCESSING FOR ACCOUNT CREATION AND CONTRACT PROCESSING

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account.

The data collected is visible from the respective input forms.

The deletion of your customer account is possible at any time and can be done by sending a message to Soothyn.

We store and use the data provided by you for contract processing.

After complete processing of the contract or deletion of your customer account, your data will be blocked with respect to tax and commercial law retention periods and deleted after these periods expire unless you have expressly consented to further use of your data or we have reserved a legally permitted further use of the data about which we inform you below.

6) USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Subscription to Our Email Newsletter

If you subscribe to the Soothyn email newsletter, we will regularly send you information about our offers.

The only mandatory information required to receive the newsletter is your email address. Providing any additional data is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for newsletter delivery. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving the newsletter.

We will then send you a confirmation email requesting that you confirm your subscription by clicking on the corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR.

When subscribing to the newsletter, we store your IP address as registered by your internet service provider (ISP), as well as the date and time of subscription, to track any potential misuse of your email address at a later date.

The data collected during newsletter registration is used exclusively for promotional purposes through the newsletter.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting Soothyn.

Once you have unsubscribed, your email address will be removed from our mailing list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope as permitted by law and outlined in this Privacy Policy.

6.2 Sending Email Newsletters to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you offers via email for similar goods or services from our range.

In this case, we do not need to obtain separate consent from you where permitted by applicable law.

Data processing in this case is based on our legitimate interest in personalised direct advertising in accordance with Article 6(1)(f) GDPR.

If you initially objected to the use of your email address for this purpose, no emails will be sent.

You have the right to object to the use of your email address for advertising purposes at any time with future effect by contacting Soothyn.

Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued.

7) DATA PROCESSING FOR ORDER HANDLING

7.1 Processing of Personal Data in Order Fulfilment

We will share the personal data we collect as part of contract processing with the transport company responsible for delivery, provided this is necessary for the delivery of the goods.

Your payment data will be shared with the payment service provider responsible for processing the payment, as required.

If we use payment service providers, we will explicitly inform you about them below.

The legal basis for data transfer is Article 6(1)(b) GDPR.

7.2 Use of Payment Service Providers

PayPal

If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or—if available—purchase on account or instalment payment via PayPal, we will share your payment details with:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

This transfer is based on Article 6(1)(b) GDPR and is limited to the extent necessary for payment processing.

For payment methods such as credit card via PayPal, direct debit via PayPal, or—if offered—purchase on account or instalment payment via PayPal, PayPal may conduct a credit check.

To do so, your payment data may be transmitted to credit agencies based on PayPal's legitimate interest in determining your solvency in accordance with Article 6(1)(f) GDPR.

PayPal uses the results of the credit check to decide whether to provide the respective payment method.

The credit check may include probability values (score values). If score values form part of the credit check, they are based on a scientifically recognised mathematical-statistical method. Address data may also be included in the score calculation.

For further information regarding PayPal's processing of personal data, please refer to PayPal's Privacy Policy:

https://www.paypal.com/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if necessary for contractual payment processing.

8) CONTACT FOR REVIEW REMINDERS

Own Review Reminder

We may use your email address to send you a one-time reminder to submit a review of your order for the Soothyn review system, provided you have given us your explicit consent in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time by contacting Soothyn.