Logo essence
data protection policy - Shine Extreme 


cosnova gmbh, am limespark 2, 65843 sulzbach (hereinafter referred to as "essence cosmetics") organises the competition in the on the essence TikTok account (https://www.tiktok.com/@essence.cosmetics) which is subject to the following conditions: conditions of entry (hereinafter referred to as "competition"):  https://raffle.essence.eu/TikTokRaffleShineExtreme/terms-and-conditions

this data protection policy provides information regarding the processing of personal data in the context of the execution of the competition. personal data includes all information referring to identified or identifiable natural persons (hereinafter referred to as "data subjects").
regardless of the execution of the competition, data of the participants is processed as registered users of the platform TikTok. further information to this topic is available in the data protection policy of TikTok, which can be accessed here: https://www.tiktok.com/legal/privacy-policy . the data protection policy regarding the social media presences of the controller can be found in the data protection policy of the controller (particularly under "8. Our presence in social media") which can be accessed here: https://www.essence.eu/legal/

controller
controller in terms of the general data protection regulations (hereinafter referred to as "GDPR") and other national data protection acts of the member states as well as other regulations pertaining to data protection is:
cosnova gmbh
am limespark 2
65843 sulzbach
cosma@essence.eu
Laura Basmer
+49 6196 76156 1296

data protection officer
the data protection officer of the controller is:
Moritz Görmann
CTM-COM GmbH
Wilhelm-Leuschner-Strasse 33
64380 Roßdorf
Phone: 06154 - 57605-0
Fax: 06154 - 57605-29
www.ctm-com.de
extent and purpose of data processing
when participating in the competition, we initially process the following data from the participants:

Public profile information on TikTok (e.g. profile picture, biography,...)
we process the above-mentioned data of the participants for the execution of the competition, particularly to determine and notify the winners.
if the above-mentioned data is not provided, the participation in the competition and the contact to determine the winner are not possible.
following the determination of the winner, the following data is requested from the winner via private message :
first and surname
address (street, postcode, city)
this data is only required to dispatch the prize.
the dispatch of the prize is not possible if this data is not provided.
legal basis for data processing
the data processing of the participants of the competition explained in this data protection policy serves the purpose of fulfilling an agreement. legal basis for the data processing is thus Article 6 (1) lit. b) GDPR.
recipient of the data
essence does not share participants' data with third parties unless this is necessary to complete the competition.
Partly essence uses external service providers to process your data. these were carefully selected and commissioned by essence, are bound to the instructions of essence and are regularly checked.
any transfer of the personal data of essence to third parties occurs exclusively to the service providers involved in the prize processing and dispatch, such as companies commissioned with packaging and dispatch of the prizes.
duration of storage
the criteria for the duration of the storage of personal data is the respective statutory retention period (particularly § 257 HGB (German Commercial Code) 147 AO (Fiscal Code). upon expiration of the deadline, the respective data is routinely erased if it is no longer necessary to comply with or initiate the agreement. if data is processed in the context of the competition which is not subject to the retention period, it is deleted upon execution of the competition.
rights of the data subject
the participants, as data subjects, have the following rights towards essence with regard to the personal data concerning them:
right of access
right to rectification or erasure
right to restriction of processing
right to object against processing
right to data portability.
in the event the data subject has given consent, the data subject has the right to withdraw his or her consent at any time. the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
each data subject is furthermore entitled to lodge a complaint at the data protection supervisory authority regarding our processing of your personal data