"Personal data" refers to all details about your personal or factual circumstances. This includes all information that allows conclusions to be drawn about your identity (e.g., name, address, email address, bank details, etc.).

The collection, storage, and processing of personal data is governed exclusively by applicable law. We are committed to handling the data you provide responsibly and with the utmost care.

The "SmileSecret" website and our systems are protected by technical and organizational measures against the loss, destruction, access, alteration, or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all threats is not possible.

2. Purposes of processing your personal information

We process personal information to operate, provide, and improve the services we offer to our customers. We use the data we receive from you to:

- To provide you with our services, including to grant you access to your profile and our website,
- To identify you as a registered user when you log in to our website and visit it again,
- to process payments,
- to offer logistics services including shipment tracking,
- improve the website and our services,
- To answer your questions and provide appropriate customer services,
- To send you our newsletter,
- To recommend personalized offers to you on the website,
- to enable our social sharing features; this includes providing you with the option to connect with members of your network who are both SmileSecret customers and one or more social networks,
- to carry out various internal business activities, such as data analysis, controls, monitoring and preventive measures to protect against fraud, developing new products and services, improving or revising the website or our services, identifying usage trends, determining the effectiveness of our advertising campaigns, and conducting and expanding our business activities,
- to ensure compliance with legal regulations and procedures as well as the requirements of public and government authorities, applicable industry standards and our internal policies,
- enforce our general terms and conditions,
- to protect our business activities or those of our affiliated companies,
- to protect our rights, privacy, safety or property and/or those of our affiliates, you or others,
- to allow us to pursue available legal remedies and to limit any damages that we may incur.

We will also use this information in other ways, for which we will provide separate information at the time of collection.

3. Data collection when visiting our website

When using our website for purely informational purposes, i.e., when the user does not register or otherwise provide us with information, we only collect data that the browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

4. Newsletter / Revocation of consent for newsletter

On the Smile Secret website, users are given the opportunity to subscribe to our company's newsletter. The input form used for this purpose determines which personal data is transmitted to the controller when subscribing to the newsletter.

Smile Secret GmbH & CO. KG informs its customers regularly by means of a newsletter about company offers. The newsletter of our company can generally only be received by the data subject if 
a) the data subject has a valid e-mail address and 
b) the data subject registers for the newsletter.

For legal reasons, a confirmation email using the double opt-in procedure will be sent to the email address entered by the data subject for the first time for newsletter subscription. This confirmation email serves to verify whether the owner of the email address, as the data subject, has authorized receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace the (possible) misuse of the data subject's email address at a later date and therefore serves to legally protect the controller.

The personal data collected when registering for the newsletter will be used exclusively to send our newsletter. Furthermore, newsletter subscribers may be informed by email if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes to technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be canceled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for sending the newsletter can be revoked at any time. A corresponding link for the purpose of revoking the consent can be found in every newsletter. Furthermore, it is possible to unsubscribe from the newsletter at any time directly on the website of the controller or to communicate this to the controller in another way.

You can revoke your consent to receive the newsletter at any time with effect for the future by declaring your revocation to the provider using the following contact details:

Email: info@smilesecret.de

SHOPHEROES LIMITED

SUITE C, LEVEL 7, WORLD TRUST

TOWER, 50 STANLEY STREET,

CENTRAL HONG KONG

There are no costs for revoking your consent to receive the newsletter, except for the transmission costs according to the respective basic tariff of your telephone/internet provider.

SMS notification

Text Marketing and Notifications: By subscribing to text notifications, you agree to receive recurring automated marketing messages from all companies within the SHOPHEROES LIMITED umbrella brand at the phone number provided. Consent is not a condition of purchase. Reply STOP to unsubscribe. Reply HELP for help. Message and data rates may apply. See our Privacy Policy and Terms of Use for more information.

5. Data processing when opening a customer account and for contract processing

According to Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time and can do so by sending a message to info@smilesecret.de. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data as permitted by law, about which we will inform you accordingly below.

To process your order, we work with service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information. The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

6. Integration of Facebook

We offer you the opportunity to recommend offers, products, promotions, and news via Facebook. For this purpose, we use social plugins from Facebook. These services are provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook).

If you are logged into Facebook during your visit to smilesecret.de, Facebook can associate the pages you visit with your Facebook account. When you interact with the social plugins (clicking, etc.), the information generated by the interaction is transmitted to Facebook and stored there. You can prevent this by logging out of Facebook before visiting our website.

It's also possible to block Facebook social plugins altogether. There are browser extensions (e.g., the Facebook Blocker ) available for this purpose, which you must install and activate for your browser.

Facebook’s privacy policy and other settings options for protecting your privacy can on Facebook can be accessed (http://de-de.facebook.com/about/privacy/).

7. YouTube plugin

This website uses plug-ins from YouTube. These services are provided by YouTube, LLC, Cherry Ave., United States (YouTube), represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (Google).

When the website is loaded in your browser, the code of the "YouTube" button is retrieved directly from a YouTube/Google server by your browser and embedded into the "SmileSecret" website that appears in your browser. Therefore, we have no influence on the amount of data retrieved by YouTube/Google.

According to Google, this collects information about the page you viewed when you clicked the YouTube button, including the web address, your IP address, and other browser-related information. Google standardized its privacy policies as of March 1, 2012. The current privacy policy no longer contains any information about the use of the YouTube button.

If you are logged in to your YouTube account, the collected information will be assigned to your account/Google account. When you interact with the YouTube plug-in (clicking, etc.), the information generated by the interaction is transmitted to YouTube/Google and stored there. You can prevent this by logging out of YouTube before visiting our website.

Google claims that it does not record your internet visits or permanently store your browsing history, nor does it evaluate your visit to a page with a YouTube button in any other way. However, Google does temporarily store some data about your visit, usually for about two weeks, for system maintenance and troubleshooting purposes. This data is not structured according to individual profiles, user names, or URLs. .

Further information on the purpose and scope of the collection, storage and processing of your data by YouTube/Google as well as settings can be found here: https://policies.google.com/privacy?hl=de&gl=de .

Please also inform yourself there, as the privacy policies of Google products are regularly updated and adapted due to expanded functionality.

8. Instagram Plugin

This website uses Instagram plugins. These services are provided by Instagram, LLC, 1601 Willow Rd., Menlo Park, CA 94025, United States.

When the website is loaded in your browser, the Instagram plugin code is retrieved directly from an Instagram server by your browser and integrated into the "SmileSecret" website that appears in your browser. Therefore, we have no influence on the amount of data retrieved by Instagram.

Further information on the purpose and scope of the collection, storage and processing of your data by Instagram as well as settings can be found here: https://help.instagram.com/519522125107875?helpref=page_content .

Please also inform yourself there, as the privacy policies of the Instagram products are regularly updated and adapted due to expanded functionalities.

9. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. Google will anonymize your IP address (so-called IP masking) so that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the provider, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the provider with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de) .

Further information about Google Analytics can be found here provided: https://support.google.com/analytics/answer/6004245?hl=de.

10. Use of Google AdWords

The SmileSecretMedical website uses the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine the success of individual advertising measures in relation to the data from the advertising campaigns. This is our interest in showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can opt out of this use by easily deactivating the Google Conversion Tracking cookie in your browser's user settings. You will then not be included in the conversion tracking statistics.

You can find further information about Google’s privacy policy at the following internet address: https://policies.google.com/privacy?gl=de.

11. Cookies

Cookies are small pieces of information that a website stores on the hard drive of your computer, tablet, or smartphone. Please note that HTML5 introduced the Web Storage feature, which is similar to cookies and, for this reason, we will refer to it as a cookie.

Cookies contain information that the website uses to improve the efficiency of communication between you and your web browser. Cookies identify your computer or device, not you as a specific user.

We use session cookies, persistent cookies, session cookies for HTML5 sessionStorage and HTML5 localStorage, and HTML5 sessionStorage objects, which are temporary and are deleted when you close your web browser. Persistent cookies are stored for a longer period of time and remain on your computer until deleted. Persistent cookies expire or delete themselves after a certain period of time, which is determined by the cookie, but are renewed each time you visit the website. HTML5 localStorage objects are persistent and remain on your computer until deleted.

You can prevent cookies from being set by configuring your internet browser to delete all cookies when you close the browser window. You can also delete the cookies stored on your computer at any time. Further information about cookies, including the dangers of cookies, can be found at the following link on the website of the Federal Office for Information Security.

Cookies are used for the following purposes:

Generating statistics: for measuring website traffic, such as the number of website visitors, which domain visitors come from, which pages they visit on the website and which geographical areas the visitors are located in.

Monitoring website performance and your use of our website: to monitor website performance, our applications and infrastructure, and how you use our website.

Login processes and improving the functionality of our website: to optimize your experience on the website, which includes remembering your username and password when you return to the website and remembering your browser and preferred settings (e.g. your preferred language).

We also use cookies to display relevant ads on the website, including interest-based ads that we think may be of interest to you. We use third parties to deliver these ads when you visit the website and other websites. These third parties may use cookies alone or in conjunction with web beacons and other tracking technologies to collect information about your use of our website and other websites.

12. Legal basis for processing

Art. 6 (1) (a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 (1) (b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. In that case, processing would be based on Art. 6 (1) (d) GDPR. Ultimately, processing operations could be based on Art. 6 (1) (f) GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal grounds if the processing is necessary to protect the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override them. We are permitted to carry out such processing operations in particular because they were specifically mentioned by the European legislator. In this respect, the legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 GDPR).

13. Legal obligation to disclose personal data to third parties

We would like to point out that we are legally obliged to pass on your personal data to third parties in certain cases (e.g. in the case of law enforcement measures).

14. Your rights

We would like to briefly inform you about the data protection rights you can exercise against us:

Right to information and disclosure

You have the right to receive information about the personal data we have stored about you at any time. Please send us an email to info@smilesecret.de. 

Right to rectification

SHOPHEROES LIMITED may only process accurate personal data about you. If you discover – for example, by exercising your right to information – that any information about you is inaccurate or has become inaccurate, we are generally obligated to correct it immediately. 

Right of deletion

If you would like to delete your account, please send us an email to info@smilesecret.de from the email address you used to register with us. Please also include your full name.

Right of objection

If you have a legal right to object to the data processing described in this privacy policy, we will inform you of this at the appropriate point. You also have the option of conveniently exercising your objection at the relevant points.

You generally have the right to object to (further) data processing in the case of processing based on the legal basis of “legitimate interest” and in the case of processing based on consent.

Right to lodge a complaint with the supervisory authorities

You have the right to file a complaint with a data protection authority. You can do this, for example, with the data protection authority responsible for your place of residence or federal state, or with the data protection authority responsible for us. This is the Berlin Commissioner for Data Protection and Freedom of Information.

Data portability

You also have the right to receive data that you have provided to us in a structured, common and machine-readable format or - where technically feasible - to request that the data be transmitted to a third party.

15. Further information on data protection at “SmileSecretMedical”

Your trust in the protection of your personal data when you visit our website is very important to us. Therefore, we are always available to answer any questions you may have regarding the collection, storage, and processing of your personal data. If you have any questions that this privacy policy could not answer, you can contact us at any time at info@smilesecret.de.

16. Messengerpeople

By sending a start message, I agree to the internal data protection regulations of (SmileSecretMedical) .
In particular, in accordance with Art. 6 (1) (a) GDPR, I consent to my personal data (first and last name, telephone number, Messenger ID, IP address, profile picture, and message history) being stored, processed, and used in connection with the use of the respective messenger service to send messages to me. An active account with the respective provider is required to use the messenger service.
I am also aware that ( SmileSecretMedical) uses MessengerPeople GmbH, Seidlstraße 8, 80335 Munich as a technical service provider and processor to provide this service.
My consent to the processing of personal data is freely revocable at any time; a corresponding notification to ( SmileSecret Medical) is sufficient. Further information can be found in the respective privacy policies of ( SmileSecret Medical) , the messenger services, and MessengerPeople GmbH.

As of August 1, 2023