Privacy Policy
1. What is the purpose of this Privacy Policy?
This Privacy Policy sets out what personal data we process in what way and for what purposes.
With this Privacy Policy we inform you about how and why we collect, process and use your personal data. It is important for us that you understand:
- which personal data we collect about you;
- the purpose for which we use your personal data;
- how long we keep your personal data;
- who has access to your personal data; and
- what rights you have in relation to your personal data.
Below you will find the corresponding notes and explanations. For further details, please refer to the table at the end of this Privacy Policy. If you have any questions, please do not hesitate to contact us. You can find our contact details in section 2.
2. Who are we?
For each data processing activity, a specific company (the so-called ‘data controller’) is responsible for ensuring data protection. It is this entity that determines the purposes and means of the processing activity. In principle, the following entity (‘we’ or ‘us’) is the data controller in accordance with this Privacy Policy:
Rosso Image Consulting
Papieri-Ring 19, 6330 Cham (CH)
info@youlooklikeyou.com
3. What do “personal data” and “processing” mean?
“Personal data” means all information relating to a specific natural person, i.e. a human being. This includes, for example, the following information, provided it can be related to a specific natural person:
- contact information, e.g. name, address, e-mail address, telephone number.
- additional personal information, e.g. gender, date of birth and age, profession.
- transaction data, e.g. order information, purchase history, preferences and affinity with certain product categories.
- personal preferences, e.g. clothing or lifestyle habits.
- logs showing the user’s visits to our websites.
We do not necessarily process all the personal data mentioned in this paragraph. You will find specific information on the personal data we process in section 5 and in the table at the end of this Privacy Policy.
“Processing” means any operation or set of operations performed on personal data. This includes, for example, the following actions:
- collection, archiving and storage;
- organisation, arrangement and administration;
- adaptation and modification;
- retrieval and consultation;
- use and application;
- disclosure;
- alignment and combination;
- restriction;
- erasure and destruction; and
- transfer and dissemination.
4. To whom and for what is this Privacy Policy addressed?
This Privacy Policy applies to any processing of personal data in connection with all our business activities in all our areas of activity. Additional Privacy Policies may apply to certain services. If so, we will inform you of these provisions in an appropriate manner.
This Privacy Policy applies to the processing of personal data of all “data subjects”. The following persons are examples of data subjects:
- People who write to us or contact us in any other way;
- customers or potential customers;
- participants in customer events;
- visitors to our website;
- recipients of our information and marketing communications;
- participants in competitions, contests and surveys;
5. What personal data do we process and for what purposes?
Depending on the occasion and purpose, we process very different personal data. You will find more details in this section and in the table at the end of this Privacy Policy:
- Communication: We process personal data when you contact us or when we contact you, e.g. when you write or call us. Normally, we only need information such as your name and contact details and the content and time of relevant messages. We use this data to provide you with information, process your request and communicate with you.
- Purchase of goods and services: we also receive and process personal data if you use our services, e.g. if you purchase goods or services from us. We need, for example, your name and contact details, information about the goods or services you order and means of payment. We process your personal data, e.g. for processing orders and contracts, including sending order and shipping confirmations, delivery confirmations, delivery and invoicing. From this, we may also derive information about your preferences and affinity for certain products or services. This information helps us to provide you with specific information on offers and to tailor our general offerings more precisely to the needs of our customers.
- Customer events: when we organise customer events (such as courses and promotional events), we also process personal data. This data includes the name and address of participants or interested parties and, other data depending on the event, e.g. date of birth. We process this information for the purpose of holding customer events, but also to make direct contact with you and to attract your interest in our products and services.
- Information and direct marketing: We process personal data in many ways, including for information and marketing purposes. If, for example, you subscribe to a newsletter, we will, for example, process your contact details, details on your habits, preferences and information on the use of the newsletter and products you have previously purchased, in order to get to know you better and attract your interest in our products.
- Visiting the website; using apps: when you visit our websites, we process personal data. The processing depends on the offer and functionality of the website. This data includes, for example, log data, information about the time of access to our website, the duration of the visit and the pages visited. We use this data for IT security reasons, but also to improve the user-friendliness of the website and its functions. We also use ‘cookies’, which are small text files that are stored temporarily or permanently on your device when you visit our website. Cookies are often necessary for the functionality of the website. Others are used to personalise the offer. We also use analytical tools such as Google Analytics. These tools allow us to assess user behaviour on the respective websites. Finally, we may use functionality from providers such as Facebook, which may involve the processing of user data by the provider in question. Please refer to the table at the end of this Privacy Policy for further details. There you will also learn how to prevent these processing activities.
- Competitions, contests and surveys: From time to time we also organise competitions, contests and surveys. In this case, we process your contact data and information about your participation for the purpose of carrying out the competitions, contests and surveys, as well as the contributions you provide. Further details can be found in the respective conditions of participation.
- Business partners: We cooperate with various companies and business partners, e.g. suppliers, business customers for goods and services, cooperation partners and service providers (e.g. IT service providers). We also process the personal data of contact persons of these companies, e.g. name, function and title, as well as delivery and payment information.
- Protection of rights: We process personal data in various situations in order to protect our rights, e.g. to assert claims in and out of court and before local and foreign authorities or to defend ourselves against claims. For example, we may clarify the prospects of a trial or submit documents to an authority. Authorities may also request us to disclose documents containing personal data.
The table at the end of this Privacy Policy describes in more detail what types of personal data we collect about you, how and for what purposes they are used, on what legal basis and whether you are obliged to provide us with personal data.
6. With whom do we share your personal data?
We have access to your personal data to the extent necessary for the purposes described. We act in accordance with our instructions and are bound to confidentiality and secrecy when handling your personal data.
We may also disclose your personal data to third party service providers who perform certain business operations on our behalf, in particular:
- IT services, e.g. services in the areas of data storage (hosting), cloud services, sending e-mail newsletters, data analysis, etc.
- Consultancy services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel selection and placement.Consultancy services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel selection and placement.
- transport and logistics services, e.g. for the shipment of goods ordered.consulting services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel selection and placement.
There are also other cases in which we may disclose your personal data. For example, we may disclose your personal data to third parties (e.g. authorities) if this is required by law. We also reserve the right to process your personal data in order to comply with a court order or in order to assert or defend legal rights or if we deem it necessary for other legal reasons.Transport and logistics services, e.g. for the shipment of goods ordered.Consultancy services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel selection and placement.
7. Do we disclose your personal information abroad?
Recipients of your personal data (section 6) may be located abroad, including outside the EU or EEA. If we disclose your personal data to a recipient in a third country, we will take appropriate measures to ensure the protection of your personal data. To this end, we enter into data transfer agreements based on EU standard contractual clauses. You can access a copy here.
8. Do we perform profiling or make automated individual decisions?
“Profiling” means any form of automated processing for the purpose of analyzing or predicting certain personal aspects. We may perform such profiling for the purposes outlined in Section 5. For example, we analyze your purchasing behavior, use of our website and, based on this, make assumptions about your personal interests, preferences, affinities and habits. This profiling helps us better tailor our offerings to your individual needs. It also supports our cybersecurity. In order to improve the quality of our analyses, we may also link personal data that comes from different sources, such as data collected offline and online, as well as data collected through our different services or data we receive from other companies. “Automated individual case decisions” are decisions that are made fully automatically, i.e. without any relevant human influence, and that have adverse legal or other similar negative effects on you. In principle, we do not make individual automated decisions. We will inform you separately in case we need to use automated individual decisions in individual cases.
9. How do we protect your personal information?
We apply appropriate technical and organizational security processes to safeguard the security of your personal information and to protect it from unauthorized or unlawful processing and to prevent the risk of loss, unintentional alteration, unintentional disclosure, or unauthorized access. However, the electronic transfer of information specifically involves security risks that cannot be completely excluded. If you transfer information in this way, you do so at your own risk.oHow do we protect your personal information?
10. How long do we keep your personal data?
We retain your personal data for as long as it is not necessary for the purposes for which the information was collected. In addition, we retain your personal data as long as we have a legitimate interest in retention, for example, if we need your personal data for the fulfillment of contractual obligations to enforce or defend against claims, for archival purposes and to ensure cybersecurity, or in the event of a pending statute of limitations. We also retain your personal data for as long as they are subject to a legal retention obligation. Other documents need to be retained only for a short period, as in the case, for example, of records of certain Internet processes (log data).
11. How do we handle children’s personal data?
We do not process personal data of children. Should this nevertheless be necessary, we pay special attention to the protection of children, and if we process children’s personal data on the basis of consent, we seek the consent of parents or legal representatives. If consent for a child has been given by the parents or legal representative, the adult person is free to revoke that consent at a later time.
12. What are your rights in relation to the processing of your personal data?
You can object at any time to the processing of your personal data or freely revoke your consent to the processing of your personal data. There is a right of objection in particular against data processing in the context of direct advertising, which includes profiling insofar as it is related to such direct marketing. If you withdraw your consent or effectively object to further processing for a specific purpose, we may no longer process your personal data for the corresponding purposes.
Inoltre, l’utente dispone dei seguenti diritti:
Rights
Description
Notes
You have the right to request, at any time and free of charge, access to your personal data stored and processed by us. This gives you the opportunity to check what personal data we process about you and to verify that it is used in accordance with applicable data protection regulations.
In some cases, the right to information may be limited or excluded, in particular:
- If you have not been able to identify yourself sufficiently;
- to protect the rights and freedoms of others (e.g., confidentiality obligations or data protection rights of third parties);
- In case of excessive exercise of the right of access (alternatively, we may require payment for the information); or
- Whether a complete provision of information would generate disproportionate effort.
You have the right to have incorrect or incomplete personal data corrected and to be informed of such correction.
You have the right to have your personal data deleted. You can request the deletion of your personal data if:
- You have the right to have your personal data deleted. You can request the deletion of your personal data if:
- The user has effectively withdrawn his or her consent or has effectively objected to the processing.
- Personal data are processed illegally.
In individual cases, the right to erasure may be excluded, particularly if the processing is necessary:
- for the exercise of freedom of expression and information.
- For the performance of a legal or public interest task.
- for the establishment, exercise or defense of a right in court.
Under certain circumstances, you have the right to request that the processing of your personal data be restricted. This may mean, for example, that personal data will not be (at least temporarily) further processed or that personal data that has been published will be (at least temporarily) removed from a website.
You have the right to receive, free of charge, personal data concerning you provided to us in a commonly used, machine-readable format, provided:
- the specific data processing is based on the user’s consent or is necessary for the performance of the contract; and
- Processing is carried out by automated means.
Depending on the individual case, the user’s personal data may be transferred to the user or directly to another data controller.
You have the right to lodge a complaint with a competent supervisory authority about the way we handle or process your personal data.
13. What else needs to be considered?
Legal basis: the GDPR/LPD requires us to inform about the relevant legal basis for our data processing activities. In the table at the end of this Privacy Policy you will find information on the legal basis on which we usually base our respective data processing activities. Due to the complexity of many data processes, however, it cannot be excluded that other legal bases may also apply in individual cases, depending on the circumstances.
Obligation to provide personal data: the GDPR/LPD also requires that you be informed if you are obliged to provide your personal data because of a legal or contractual requirement or because the data is necessary to enter into a contract. We must also inform you about the possible consequences if you fail to provide such data. The corresponding information is also given in the table at the end of this Privacy Policy. As a general rule, disclosure of personal data is voluntary.
Third-party personal data: you may wish or need to provide us with third-party personal data. We would like to emphasize that in this case you are required to inform the data subjects about such disclosure of data and this Privacy Policy. You are also required to obtain the consent of the data subject for such disclosure.
14. Changes to this Privacy Policy
We may change this Privacy Policy from time to time if we change our data processing activities or if new legislation becomes applicable. In general, a data processing activity is subject to the version of the Privacy Policy in effect at the beginning of the relevant processing.
Table: Reason for data collection; Scope, purpose and obligation to make data available; Legal basis for processing
Contents:
- Communication with us
- Purchase of goods and services
- Participation in customer events
- Portals, e-newsletters and direct marketing
- Visiting our website (in general)
- Visiting our website (cookies in general)
- Visiting our website (user behavior analysis)
- Using our applications
- Participation in competitions, contests and similar events
- Contact with our company as a business partner
- Compliance with legal requirements
- Protection of rights
In this table you will find detailed information about the individual purposes of processing, the personal data processed for those purposes, the applicable legal bases, and whether you are obliged to provide us with the personal data in question. Please note that in many cases it is not possible to provide a complete list. For more information on the individual stages of data processing, please contact us using the contact details provided in Section 2.
Reason for data collection
Personal data subject to processing
Purpose of processing and obligation to make data available
Legal basis for processing
We collect personal data when you contact us in writing, electronically, or by telephone. We process contact and communication data, including in particular the following personal data:
- Your name.
- Depending on the type of communication, your contact information such as mailing address, e-mail address, and phone number.
- content and time of communication.
In this context, we process your personal data for the following purposes:
- Customer service and maintenance; General communication with you: it is important to us that you can contact us and report your concerns.
- Quality assurance: any recording of conversations helps us analyze and improve our processes.
Of course, you are not obliged to provide us with specific information. However, we can often answer your questions only if you provide us with some minimal details.
Data processing is part of our legitimate interests, as it enables us to improve the quality of our services, avoid errors in our processes, and achieve greater customer satisfaction.
If you contact us to enter into a contract, our legal basis is the performance of the contract or the taking of pre-contractual measures.
When you shop with us, we process personal data in connection with your purchasing and payment behaviour. This includes, in particular, the following personal data that may be sensitive:
- Your name.
- Your contact details, including delivery and billing address.
- information on the products ordered by the user;
- Payment information.
We may also evaluate purchasing and behavioural information and link it to other personal information we have collected about you (e.g. your purchasing habits).
In this context, we process your personal data for the following purposes:
- Processing: We process your personal data so that we can register your purchases and deliver the products when ordered.
- Customer service.
- Information on user purchasing behaviour: we analyse the purchasing behaviour of our customers and derive information from this which we take into account to improve our services.
You are not obliged to provide us with personal data when you make purchases. However, orders, the purchase of services and the purchase of certain goods are not possible without the processing of personal data by us. Purchases in online shops also require the processing of necessary personal data.
The legal basis of our processing is the performance of the contract.
The processing of information about your purchasing behaviour is based on legitimate interests. Through the personal data collected we can adapt our services better and more specifically to your needs and interests and expand and improve our offer.
We process personal data when we invite you to customer events. In particular, this includes the following personal data:
- Your name.
- your contact details.
- your participation or non-participation;
- in addition, event-specific data, such as your date of birth.
We may also evaluate your personal data and combine it with other personal data we have collected about you (e.g. your shopping habits, clothing preferences).
We process your personal data to invite you to our events and to find out which customer events you are interested in. In this way, we can draw your attention specifically to customer events that we hope will be of interest to you.
Participation in customer events is voluntary, but usually not possible without the processing of personal data.
We process your personal data after you have given us your consent to inform you about relevant customer events or if you have registered for one of our customer events.
The processing referred to on the left is also in our legitimate interest, because it enables us to get in touch with you personally and to get to know you better. This enables us to better tailor our services to your needs and interests and to expand and improve our services.
When you register on our portals, subscribe to an electronic newsletter or purchase products from us, we process the following personal data in particular:
- Your name.
- your contact details.
- your e-mail address.
- information whether the user has consented to receive newsletters or has submitted an objection.
We may also process information on your use of the portals and electronic newsletters; this includes in particular the following personal data:
- which services you use on our portals.
- receipt of the newsletter.
- whether and when you opened and forwarded the newsletter.
- Link you clicked on (destination, date and time).
We may also evaluate your personal data and combine it with other personal data we have collected about you (e.g. your shopping habits, clothing preferences, see section 8 on profiling).
We process your personal data in order to send you the electronic newsletter. We process personal data relating to your use of the portals and the electronic newsletter in order to get to know you better and to be able to tailor our services more specifically to you.
This data processing is voluntary for you. However, if you do not provide us with your personal data, in particular your e-mail address, we will not be able to offer you this service.
You may revoke your consent or object to electronic newsletters and other direct marketing activities at any time by unsubscribing from the service. For the newsletter, you can revoke your consent via a link included in each electronic newsletter, or contact us (section 2).
The processing of your personal data for the newsletter is based on your consent given to us when you subscribe to the newsletter.
All other processing mentioned on the left is in our legitimate interest, because it allows us to get in touch with you personally and to get to know you better. This allows us to better tailor our services to your needs and interests and to expand and improve our services.
Whenever you access our websites, for technical reasons, your browser transfers certain data to us and stores it in log files. This includes, for example, the following usage data:
- IP address and device-specific information, such as the device’s MAC address.
- the content consulted and the date and time of the visit to the website.
In this context, we process your personal data for the following purposes:
- Making the website available: The logging of certain log files is mandatory in connection with the making available of the website.
- Website management: processing log files helps us maintain and correct errors, ensure the security of our website and combat fraud.
- Individualisation and optimisation of the website: We want to design our website as individual and user-friendly as possible. To this end, we store individual settings, e.g. whether the user has already called up the website in question, which settings (e.g. language settings) were made at that time and which functions were used.
The processing of log files is in our legitimate interest.
This website uses cookies and similar functions. Cookies are small files that your browser automatically creates and which are stored on your device when you visit our website. On the one hand, we use session cookies in which we store a unique identification number, a so-called session ID, and information about the origin and storage period of the cookie. These cookies are deleted after a visit to our website. On the other hand, we use permanent cookies that remain stored even after the end of the respective browser session. These cookies are used to recognise a visitor on a subsequent visit.
We use cookies for the following reasons:
- Cookies help us to guarantee and safeguard the various functions and services of our website.
- Storing cookies enables us to facilitate the use of our website and to make the functionality as user-friendly as possible, for example by saving language settings or entries for the duration of a browser session.
- In addition, cookies serve to tailor our online services to your needs. By collecting and evaluating information about the general usage and behaviour of visitors to our website and the devices used for this purpose, we can provide you with targeted goods and services and other information that may be of particular interest to you.
You are not obliged to accept the cookies we use. You can configure your device (tablet, PC, smartphone, etc.) so that a message appears before a new cookie is created. This allows you to refuse cookies. You can also delete cookies from your terminal. In addition, you have the option of preventing the collection of data generated by the cookie (including the IP address) and the processing of this data by downloading and installing an appropriate browser add-on.
However, refusal or deactivation of cookies may mean that you cannot use all the functions of the website.
The use of necessary cookies serves our legitimate interests. Some cookies are necessary, for example, to save individual settings or to offer shopping carts. This personalisation is also in the interest of our website visitors.
Our legal basis for statistical and marketing cookies is the consent provided via the cookie banner when you access this website. You can change or revoke your consent at any time by clicking on the link ‘Change your consent’ or ‘Revoke your consent’.
On our website we use Google Analytics, an analytics service of Google, Inc. Google Analytics uses cookies to enable an analysis of the use of the website. General information on cookies can be found in this table under ‘Visiting our website (cookies in general)’. In this way, information is stored about the user’s behaviour on our website and the device used (PC, tablet, smartphone, etc.).
This information is stored on a Google server in the USA. However, your IP address will first be shortened in the EU or EEA. Only in exceptional cases will the full IP address be transmitted to the USA. Google Analytics also makes it possible to assign data, sessions and interactions on multiple end devices to a pseudonymous user ID and thus to analyse the activities of an unknown user on multiple devices. For more information, please see Google’s Terms of Use and Privacy Policy.
Providers often do not receive any personal data, but may record the use of the website in question by the user. These records may be linked to information from other websites using the same service. The behaviour of a particular user may be recorded on several websites and devices. The respective provider may also use this data for its own purposes, e.g. for personalised advertising.
This information is used to better understand the use of our website and to improve its content, functionality and user-friendliness. For example, we can see which pages most visitors come from, which pages are visited most often and which pages most visitors leave us from.
You can prevent the use of Google Analytics by installing an add-on for your browser.
Our legal basis for statistical and marketing cookies is the consent provided by you via the cookie banner when you first access this website. You may change or revoke your consent at any time by clicking on the ‘Change consent’ or ‘Revoke consent’ link.
We collect personal data when you participate in competitions, contests and surveys (‘event’). The scope of personal data processed may vary depending on the event. The personal data that will be processed include in particular the following:
- Your name.
- Your date of birth.
- Your contact details.
- the fact that you participate.
- the result of participation.
- the input provided.
- event-related correspondence, if applicable.
Further details can be found in the relevant conditions of participation.
We may also evaluate your personal data and combine it with other personal data, such as non-personal statistical information and other personal data that we have collected about you, in order to derive information about your preferences and affinities for certain products or services.
We will process your personal data in order to carry out the respective event and to inform the winner. With your consent, we will also use your name and contact details for analysis and marketing purposes. For this purpose, we may combine your information with other non-personal and personal data that we have stored about you.
Participation in such events is voluntary, but it is not possible unless it involves the processing of personal data.
The legal basis for our processing is the performance of a contract – in this case, the conditions of participation. If we ask you for separate consent for a specific processing, your consent will be the legal basis for that processing.
If you work for a company that supplies or purchases goods or services from us or otherwise cooperates with us, we process your personal data, such as:
- Your name.
- your position, your title, your sector of activity.
- of your professional career.
- your interactions with us.
- information on results and payments.
Personal data are processed for the following purposes:
- to check whether we obtain services from or provide them to your company, or whether we want to and can cooperate with your company (e.g. during suitability tests, conflict of interest checks, etc.);
- to check whether your company offers the required security standards, e.g. whether it will process personal data on our behalf.
- to schedule the working hours of our employees and, if necessary, of you or your company’s employees.
- for the purpose of executing contracts with the user company.
- for monitoring and evaluating performance.
- for the preparation and processing of acquisitions and sales of companies and similar transactions.
You are not obliged to provide us with personal data. However, if you do not wish to provide us with the requested personal data, we may not be able to work with you. In exceptional cases we are even legally obliged to process such personal data. We will always point out where this is the case.
We base our processing on the fact that we are authorised to process your personal data for the performance of a contract.
The processing mentioned is also in our legitimate interest because it enables us to use external services and thus increase our efficiency.
To fulfil legal obligations, we may have to or want to process personal data. This happens, for example, if an authority requests documents containing your name and contact details or if we conduct an investigation. We may also conduct internal investigations as part of which your personal data may be processed.
In particular, we process your personal data for the following purposes:
- fulfilment of legal obligations, including orders of a court or authority.
- preventive measures to ensure compliance.
- measures to detect and clarify abuses.
Processing for the above purposes is necessary for the fulfilment of legal obligations and legitimate interests.
Protection of Rights
We process personal data in order to protect our rights, e.g. to assert our rights in court, in or out of court and before local and foreign authorities or to defend ourselves against claims. For example, we may clarify the prospects of a trial or submit documents to an authority. Authorities may also ask us to disclose documents containing personal data. In addition to the contact data of the persons concerned, we process other personal data depending on the constellation, e.g. information on processes that have given rise to or could give rise to litigation. This may also include sensitive personal data.
We process this personal data for the following purposes:
- Clarification and enforcement of our rights, which may also include claims by companies affiliated to us and our contractual and business partners.
- Defence against claims against us, our employees, our affiliated companies and our contractual and business partners.
- Clarification of process perspectives and other legal, economic and other issues.
- Participation in proceedings before local and foreign courts and authorities.
Processing for the above purposes may be necessary for the performance of contracts. It is also within the scope of our legitimate interests.
