Privacy policy

How personal data is processed on crespinegel.com. This is a translation; in case of doubt the German version prevails.

1. Controller

netHEAVEN GmbH
An der Favorite 4
55131 Mainz, Germany
Email: [email protected]
Phone: +49 6131 9727501

2. Hosting

This website is served through Cloudflare Pages, a service of Cloudflare, Inc. This processes in particular your IP address, the pages requested, access times, data volumes transferred and browser, device and connection information.

The purpose is the provision, security and troubleshooting of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the site securely and reliably.

Cloudflare operates a global network and processes data outside the European Union, in particular in the United States. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; to the extent transfers are covered by that certification they rely on the adequacy decision under Art. 45 GDPR. Otherwise the standard contractual clauses under Art. 46 GDPR apply. You may request a copy of the safeguards using the contact details above.

The retention period for Cloudflare server logs and the contracting Cloudflare entity have not yet been conclusively confirmed. This privacy notice will be completed accordingly.

3. Enquiries sent through the form

The country pages on this site let you send us an enquiry. Name and email address are required; phone number, organisation, your stated role and your message are optional. The country you selected and the language of the page are transmitted as well. Before sending, the form checks that you have confirmed this privacy notice.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or steps prior to entering into one, otherwise Art. 6(1)(f) GDPR — our legitimate interest in handling business enquiries. For the disclosure described in section 4 we additionally rely on your consent under Art. 6(1)(a) GDPR, which you give when submitting the form and may withdraw at any time with effect for the future.

Health data. The form expressly asks you not to write to us about your health or medical history. We do not need it in order to answer you. If you send such information nonetheless, we process it solely to answer your enquiry on the basis of your explicit consent under Art. 9(2)(a) GDPR and delete it once your matter is closed.

Providing your details is voluntary. Without a name and an email address we cannot reply to you.

Enquiry data is deleted once the matter has been dealt with, unless retention obligations apply. Business and tax records are retained for the statutory periods under German commercial and tax law; the legal basis for that is Art. 6(1)(c) GDPR.

4. Disclosure to the responsible company and to distribution partners

Crespine Gel is distributed in different countries through different companies and distribution partners. So that your enquiry can be answered, we pass it to the team responsible for handling your enquiry and, where necessary, to the relevant distribution partner.

What is passed on is what you entered: name, email address, and where given phone number, organisation, role and your message, together with the country you selected.

Recipients outside the EU. Distribution partners are also located in countries outside the European Union and the European Economic Area for which the European Commission has not issued an adequacy decision.

The requirements for disclosure to distribution partners outside the EU and EEA have not yet been conclusively confirmed. Such disclosure requires a separate data protection assessment.

5. Brevo (delivery of enquiries)

We use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) to deliver your enquiry by email. The sender address used is [email protected]; your email address is set as the reply-to address so that we can answer you directly.

Brevo processes this data on our behalf under Art. 28 GDPR and stores it in the European Union. Where Brevo engages sub-processors or transfers data to third countries, this follows the safeguards described in its data processing agreement. Further information: Brevo privacy policy.

6. Cookies and YouTube videos

This website uses no analytics or advertising trackers of its own. On video pages, we load the YouTube player only when you explicitly activate it. The preview image and transcript are served by this website. Until activation, this player makes no connection to YouTube.

After activation, the player loads through youtube-nocookie.com. Google then receives information including your IP address, browser and device details, and video playback activity. Privacy-enhanced mode does not mean that no data is processed or browser storage used. Processing outside the EU is possible.

You can remove the player using “Close”; this does not retrieve data already transmitted. The transcript remains available without YouTube. Further information: Google privacy policy and YouTube privacy-enhanced mode.

7. Your rights

Subject to the statutory conditions you have the right of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing carried out beforehand.

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation.

To exercise your rights please write to [email protected]. You also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or of the alleged infringement.