Privacy & transparency

Privacy Policy

1. Data controller

Regine Grosch · Sole proprietor, consulting and distribution of cosmetic products
Gütersbachweg 10
75323 Bad Wildbad im Schwarzwald
Germany

Phone: +49 178 7248163
Email: reginegrosch@gmail.com

2. Principles and legal bases

We process personal data only where necessary for the operation of this website, handling enquiries, providing advice, preparing offers and fulfilling contracts, or where another legal basis applies. Depending on the processing activity, the legal basis is Article 6(1)(b) GDPR (pre-contractual steps and contracts), (c) (legal obligations), (f) (legitimate interests, including website security and general communications), or (a) (consent). Consent may be withdrawn at any time with future effect.

3. Hosting and server logs

When you visit this website, technical data such as your IP address, access time, requested URL, browser/device details and, where applicable, referrer information may be processed for secure and reliable operation and troubleshooting (Article 6(1)(f) GDPR). Our hosting provider may process these data on our behalf under Article 28 GDPR. Specific log retention periods must be confirmed with the hosting provider before publication.

4. Contact forms and non-binding enquiries

If you contact us using a form, we process the information you provide to respond, offer personal advice and, if requested, prepare an individual non-binding quotation. Sending an enquiry does not itself create a binding purchase contract.

Processing is based on Article 6(1)(b) GDPR where it concerns pre-contractual steps, or Article 6(1)(f) GDPR for general enquiries. Necessary contact details are required to respond. Data are erased once no longer needed, subject to applicable retention obligations or other lawful grounds for storage.

5. Email, telephone and WhatsApp

When you contact us by email or telephone, we process your contact details and messages to handle your enquiry or contract (Article 6(1)(b) or (f) GDPR).

If you communicate with us via WhatsApp, the relevant WhatsApp service also processes data needed to provide that communication. Depending on the service and settings, data may be transferred outside the EU/EEA. You may choose email or telephone instead. The specific WhatsApp service, provider details and data protection arrangements must be verified before this notice is published.

6. Quotations, orders and invoicing

Regine Grosch sells products on her own account. For personalised quotations and contracts, we process names, contact and delivery addresses, ordered products, payment information and related messages under Article 6(1)(b) GDPR. Legal accounting and tax obligations are based on Article 6(1)(c) GDPR.

Where necessary, delivery providers receive shipping data and banks receive payment data. Tax advisers and other legally authorised recipients may receive the data required for their tasks. Records are retained for applicable statutory periods.

7. Cookies, consent and similar technologies

Section 25 of the German TDDDG applies to storing or accessing information on users' devices. Strictly necessary operations may be exempt from consent under Section 25(2) TDDDG. Non-essential tracking and similar access generally require prior consent; any subsequent processing of personal data must also have a legal basis under the GDPR.

The actual cookies, storage technologies and consent system used by this website must be verified and documented. This notice does not claim that a particular analytics or marketing service is or is not active.

8. External links and the Déesse shop

Some clearly identified affiliate links lead to the external Déesse shop. If you follow such a link, you leave our website and the privacy notice of the shop operator applies. Purchases in that shop are not contracts with Regine Grosch. It must be checked whether any technical information is passed to the shop or other partners before the link is clicked.

9. Third-party content, analytics and social networks

The material available does not establish whether Google Analytics, other analytics tools, externally hosted fonts, maps, videos, social media widgets, CAPTCHAs or other third-party services are used on the live website. If any such services are active, this notice must be supplemented with the specific providers, purposes, legal bases, recipients, possible international transfers and consent controls before publication.

Simple links to social networks are different from automatically loaded social media plugins.

10. International data transfers

Using services with recipients outside the EU/EEA may involve international transfers. Where applicable, the requirements of Articles 44 et seq. GDPR must be met, for example through a relevant adequacy decision or appropriate safeguards. Actual transfers, particularly by messaging or third-party providers, must be checked.

11. Retention

Personal data are generally erased when no longer needed for their purpose, unless a retention obligation or another legal basis requires further storage. Accounting records, invoices and business correspondence may be subject to different statutory retention periods. Specific deletion and log periods must be confirmed against the systems in use.

12. Your rights

Subject to the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection (Article 21). You may withdraw consent at any time with future effect (Article 7(3)).

If processing is based on Article 6(1)(f), you may object on grounds relating to your particular situation under Article 21 GDPR. To exercise your rights, contact reginegrosch@gmail.com.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The relevant regional authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

13. Security and updates

The website should be delivered over encrypted HTTPS. We use appropriate safeguards within the actual technical environment. We update this notice if the legal requirements or processing activities change.

Last updated: October 2026 · Draft – technical details must be verified before publication.