Privacy Policy

Preamble

With the following data protection declaration, we would like to inform you about the types of your personal data (hereinafter also briefly referred to as "data") that we process, for what purposes, and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").

The terms used are not gender-specific.

Status: March 12, 2026

Table of Contents

Controller

VENOA Perfume
Kapellenstraße 8
41372 Niederkrüchten, Germany

Email address: info@venoaperfume.de
Phone: +49 155 65635483
Imprint: https://www.venoaperfume.de/pages/impressum

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Data Processed

  • Inventory data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta, communication, and procedural data.
  • Event data (Facebook).

Categories of Data Subjects

  • Customers.
  • Prospective customers.
  • Communication partners.
  • Users.
  • Business and contractual partners.

Purposes of Processing

  • Provision of contractual services and fulfillment of contractual obligations.
  • Contact inquiries and communication.
  • Security measures.
  • Office and organizational procedures.
  • Management and response to inquiries.
  • Feedback.
  • Marketing.
  • Profiles with user-related information.
  • Provision of our online offering and user-friendliness.
  • Information technology infrastructure.

Relevant Legal Bases

Relevant Legal Bases under the GDPR: Below you will find an overview of the legal bases of the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Furthermore, if, in individual cases, more specific legal bases are relevant, we will inform you of these in the data protection declaration.

  • Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) - The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Performance of a Contract and Pre-Contractual Inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR) - Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Legal Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National Data Protection Regulations in Germany: In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. This includes, in particular, the Federal Data Protection Act (BDSG). The BDSG contains, in particular, special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, as well as automated decision-making in individual cases including profiling. Furthermore, state data protection laws of the individual federal states may apply.

Note on the applicability of GDPR and Swiss FADP: These data protection notices serve to provide information both under the Swiss Federal Act on Data Protection (Swiss FADP) and under the General Data Protection Regulation (GDPR). For this reason, we ask you to note that due to the broader spatial application and comprehensibility, the terms of the GDPR are used.

Deletion of Data

The data processed by us will be deleted in accordance with legal requirements as soon as consents granted for their processing are revoked or other permissions cease to apply (e.g., if the purpose of processing this data has ceased to exist or they are not required for the purpose). If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted to these purposes (blocking).

This applies, for example, to data that must be retained for commercial or tax reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person. Our data protection notices may also contain further information on the retention and deletion of data that applies preferentially to the respective processing operations.

Rights of Data Subjects

Rights of data subjects under the GDPR: As a data subject, you have various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:

  • Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR.
  • Right to withdraw consent: You have the right to withdraw consent at any time.
  • Right to access: You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and further information and a copy of the data.
  • Right to rectification: You have the right to demand the completion of incomplete data concerning you or the rectification of inaccurate data concerning you.
  • Right to erasure and restriction of processing: You have the right to demand that personal data concerning you be erased without undue delay, or, alternatively, to demand a restriction of processing of the data.
  • Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
  • Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Use of Cookies

Cookies are small text files, or other storage notes, that store information on end devices and read information from end devices, e.g., to store login status, shopping carts or settings.

Information on consent: We use cookies in accordance with legal regulations. Consent is not required if the storage and reading of information are absolutely necessary to provide the users with a telemedia service explicitly requested by them.

Information on data protection legal bases: If we ask users for consent, the legal basis is Art. 6 para. 1 lit. a GDPR; otherwise, Art. 6 para. 1 lit. f GDPR (legitimate interests) or Art. 6 para. 1 lit. b GDPR (performance of contract).

Storage duration: A distinction is made between temporary (session) cookies and permanent cookies.

  • Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR); Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

Further information on processing processes, procedures and services:

  • Processing of cookie data based on consent: We use a cookie consent management procedure, within the framework of which consents are obtained, managed and documented.

Business Services

We process data of our contractual and business partners (e.g., customers and prospective customers) within the framework of contractual and comparable legal relationships as well as associated measures and within the framework of communication with the contractual partners.

We process this data to fulfill our contractual obligations and to provide our services (e.g., delivery of products, payment processing, support).

  • Types of data processed: Inventory data; payment data; contact data; contract data; usage data; meta, communication, and procedural data.
  • Data subjects: Customers; prospective customers; business and contractual partners.
  • Purposes of processing: Provision of contractual services; security measures; contact inquiries and communication; office and organizational procedures; management and response to inquiries.
  • Legal bases: Performance of contract and pre-contractual inquiries (Art. 6 para. 1 lit. b GDPR); Legal obligation (Art. 6 para. 1 lit. c GDPR); Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Further information on processing processes, procedures and services:

  • Shop and e-commerce: We process our customers' data to enable them to select and order products, as well as to process payments and deliveries.

Payment Methods

Within the scope of contractual relationships, we offer various payment options and use payment service providers for this purpose.

The data processed by the payment service providers include, among others, inventory data and payment data. The data are processed by the payment service providers and stored by them; we generally only receive confirmation of the payment.

  • Types of data processed: Inventory data; payment data; contract data; usage data; meta, communication, and procedural data; contact data.
  • Data subjects: Customers; prospective customers.
  • Purposes of processing: Provision of contractual services and fulfillment of contractual obligations.
  • Legal bases: Performance of contract and pre-contractual inquiries (Art. 6 para. 1 lit. b GDPR).

Further information on processing processes, procedures and services:

  • Apple Pay: Payment services; Service provider: Apple Inc.; Data protection declaration see website.
  • Google Pay: Payment services; Service provider: Google Ireland Limited; Data protection declaration see website.
  • PayPal: Payment services; Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A.; Data protection declaration see website.
  • Mastercard / Visa: Payment services; Service provider: respective card organizations; Data protection declarations see websites.

Provision of the Online Offering and Web Hosting

We process user data to provide them with our online services. This includes, in particular, the IP address, which is technically necessary for delivering the content to the browser.

  • Types of data processed: Usage data; meta, communication, and procedural data; content data.
  • Data subjects: Users (e.g., website visitors).
  • Purposes of processing: Provision of our online offering; user-friendliness; security measures.
  • Legal bases: Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Further information on processing processes, procedures and services:

  • Provision of online offering on rented storage space: We use storage space, computing capacity and software of a server provider (web hoster).
  • Collection of access data and log files: Access to our online offering is logged in server log files (e.g., IP address, time of access, browser, operating system). The data are usually deleted after a maximum of 30 days.

Contact and Inquiry Management

When contacting us (e.g., via contact form, email, telephone, or social media), the information of the inquiring persons will be processed to the extent necessary to answer the contact inquiries.

  • Types of data processed: Contact data; content data; usage data; meta, communication, and procedural data.
  • Data subjects: Communication partners.
  • Purposes of processing: Contact inquiries and communication; management and response to inquiries; feedback.
  • Legal bases: Performance of contract and pre-contractual inquiries (Art. 6 para. 1 lit. b GDPR); Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Presences on Social Networks (Social Media)

We maintain online presences within social networks and process user data within this framework to communicate with active users there or to offer information about us.

  • Types of data processed: Contact data; content data; usage data; meta, communication, and procedural data.
  • Data subjects: Users (e.g., website visitors, followers).
  • Purposes of processing: Contact inquiries and communication; marketing; feedback.
  • Legal bases: Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Further information on processing processes, procedures and services:

  • Instagram: Social network; Service provider: Meta Platforms Ireland Limited; Data protection declaration see website.
  • Facebook pages: Profiles within Facebook; Service provider: Meta Platforms Ireland Limited; Data protection declaration see website.
  • TikTok: Social network / video platform; Service provider: TikTok Technology Limited; Data protection declaration see website.
  • YouTube: Video platform; Service provider: Google Ireland Limited; Data protection declaration see website.

Plugins and Embedded Functions and Content

We integrate functional and content elements from third-party providers into our online offering (e.g., videos, graphics, social media plugins). In doing so, the users' IP address is processed, as this is technically necessary for the delivery of the content.

  • Types of data processed: Usage data; meta, communication, and procedural data; inventory data; contact data; content data; event data (Facebook).
  • Data subjects: Users.
  • Purposes of processing: Provision of our online offering; user-friendliness; marketing; creation of profiles with user-related information.
  • Legal bases: Consent (Art. 6 para. 1 lit. a GDPR); Legitimate interests (Art. 6 para. 1 lit. f GDPR).

Further information on processing processes, procedures and services:

  • Facebook plugins and content: Integration of content and functions from Facebook (e.g., Like button, sharing content).
  • Instagram plugins and content: Integration of Instagram content (e.g., images, videos).
  • YouTube videos: Embedding YouTube videos on our website.

Changes and updates to the privacy policy

We ask you to regularly inform yourself about the content of our privacy policy. We will adjust the privacy policy as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require an action on your part (e.g., consent) or any other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, please note that these addresses may change over time.

Created with the free privacy policy generator Datenschutz-Generator.de by Dr. Thomas Schwenke