Privacy Policy

Effective: May 2026

This Privacy Policy explains how we process personal data in connection with our B2C online shop at https://shopping.landsberg.eu .

1. Controller for data processing

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Landsberg First Class Aesthetics / Landsberg Ltd.
Pjazza Tigne, Tigne Point, Tas-Sliema, TP01, Malta
Email: customerservice@landsberg.eu

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When you access our website, we automatically collect information that your browser transmits to our server. This information is necessary to enable the use of our website and to ensure its stability and security.

 
• IP address
 
• Date and time of the request
 
• Time difference to Greenwich Mean Time (GMT)
 
• Content of the request (specific page)
 
• Access status/HTTP status code
 
• Amount of data transferred
 
• Website from which the request originates
 
• Browser type, operating system and its interface, as well as language and version of the browser software

The legal basis for this data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision, stability and security of our website.

b) When placing orders in the B2C online shop

When you place an order in our B2C online shop, we process the data required to handle the contract. This includes in particular name, billing and delivery address, email address, payment and order information, as well as the products you ordered.

The processing is carried out for the performance of the purchase contract, payment and shipping processing, customer communication, and compliance with legal retention obligations. The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR.

c) When using our institute locator and Google Maps

To provide our institute locator, we use Google Maps, a service provided by Google LLC. To use the functions of Google Maps, your IP address and, where applicable, additional location information may be transmitted to Google.

Details on data processing by Google can be found at: https://policies.google.com/privacy

d) When using our contact form and newsletter

As part of inquiries or when signing up for our newsletter, we may process the following data in particular:

 
• Name
 
• Email address
 
• Phone number, if provided
 
• Content of your inquiry or message

The processing is carried out to handle your inquiry or to send our newsletter. Depending on the context, the legal basis is Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR or, in the case of consent-based newsletter distribution, Art. 6(1)(a) GDPR.

3. Affiliate program and customer assignment to Landsberg partners

We operate an affiliate program for our B2C online shop. This enables selected Landsberg business partners, in particular cosmetic institutes, hotels, SPA operators, practices or comparable partners, to recommend customers to our B2C online shop.

If you visit our shop via a partner link, a QR code or on the recommendation of a Landsberg partner, or if you state when entering the shop that you are already a customer of a specific institute, hotel, practice or other Landsberg partner, we may assign you to that partner.

The assignment serves to correctly allocate orders to the respective partner, calculate partner commissions, and provide partners with a clear overview of the orders assigned to them.

For this purpose, the following data may be processed in particular:

 
• Name or customer name
 
• Order date
 
• Order number or internal assignment number
 
• Order status
 
• Net goods value relevant for commission
 
• Information on assignment to a partner
 
• Any information you have provided yourself as part of the partner lookup

The partner assigned in each case may be shown limited information about the orders assigned to them in the partner portal. This is done solely to the extent necessary to ensure traceability of customer assignment and partner remuneration.

No full payment data, full address data, phone numbers or sensitive personal data are passed on to partners.

The processing is carried out to implement the affiliate program and to safeguard our legitimate interests in fair, transparent and traceable cooperation with our business partners pursuant to Art. 6(1)(f) GDPR. Where processing is necessary for handling your order, it is additionally based on Art. 6(1)(b) GDPR.

You may object to the processing of your data in the context of partner assignment at any time for reasons arising from your particular situation. Please contact customerservice@landsberg.eu.

4. Use of third-party services

a) Shopify

Our online shop is operated on the Shopify platform. Shopify processes personal data for the technical provision of the shop and for processing orders. Further information can be found at: https://www.shopify.com/legal/privacy

b) HubSpot

We use HubSpot as a CRM system and for marketing automation. Data may be processed to handle customer inquiries, analyze customer interactions, and optimize our service. Details can be found at: https://legal.hubspot.com/de/privacy-policy

c) UpPromote / affiliate program

We use UpPromote for the technical implementation of our affiliate program. UpPromote supports us in managing partner links, QR codes, customer assignments, orders and partner commissions.

In particular, technical assignment data, information about partners, information about orders and commission-relevant data may be processed. The processing is carried out to provide the affiliate program technically, correctly assign orders and calculate partner commissions.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in running a fair and transparent affiliate program. Where processing is necessary in connection with your order, it is additionally based on Art. 6(1)(b) GDPR.

d) Meta / Facebook Pixel

We may use Meta or Facebook technologies to track visitor behavior on our website and deliver targeted advertising. Details can be found at: https://www.facebook.com/policy.php

e) Google Tag Manager, remarketing and Google Analytics

To optimize our website and marketing activities, we may use Google Tag Manager, Google Remarketing and Google Analytics. Analysis may be carried out on the basis of cookies or similar technologies. Details on data processing by Google can be found at: https://policies.google.com/privacy

f) Hosting

Our website is hosted on the servers of technical service providers. Where necessary, they act on the basis of data processing agreements pursuant to Art. 28 GDPR.

5. Cookies and similar technologies

We use cookies and similar technologies to technically provide our website, improve your user experience, process orders correctly, measure marketing measures and technically implement the affiliate program.

You can specify in your browser settings which cookies you want to accept or block. Where cookies or comparable technologies are not technically necessary, they are only used in accordance with the applicable consent or cookie settings.

6. Disclosure of data

Your personal data will only be transferred to third parties if:

 
• you have given your express consent (Art. 6(1)(a) GDPR),
 
• this is necessary for the performance of a contract (Art. 6(1)(b) GDPR),
 
• there is a legal obligation (Art. 6(1)(c) GDPR), or
 
• this is necessary to protect legitimate interests (Art. 6(1)(f) GDPR).

As part of our affiliate program, limited information about orders may be passed on to the respective Landsberg partner assigned to the order or displayed in the partner portal, insofar as this is necessary for running the affiliate program, customer assignment and calculation of partner commissions.

7. Storage period

We store personal data only for as long as necessary for the respective purposes or as long as statutory retention periods apply. Order and billing-related data may be stored for the legally required periods due to commercial and tax law requirements.

Data in connection with the affiliate program is stored as long as necessary for running, reviewing and settling the affiliate program and for clarifying any queries.

8. Your rights

Under the statutory conditions, you have the following rights:

 
• Right to access your stored data (Art. 15 GDPR)
 
• Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
 
• Right to erasure of your data (Art. 17 GDPR)
 
• Right to restriction of processing (Art. 18 GDPR)
 
• Right to data portability (Art. 20 GDPR)
 
• Right to object to processing (Art. 21 GDPR)
 
• Right to withdraw consent already given with effect for the future

Please direct your inquiries to: customerservice@landsberg.eu

9. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

10. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy in the event of changes to our services, our data processing or the applicable legal situation. The current version can always be found on our website.

Landsberg B2C Shop – Privacy Policy