Privacy Policy

The controller responsible for personal data processed in connection with this storefront is Bergdorf Bioscience (see Impressum for address and representative).

You can reach our privacy contact at service@bergdorfbio.com.

Depending on your use of the site, we process in particular: master and contact data (e.g. name, email, address), order and payment-related data provided during checkout, account or session identifiers, technical connection data (e.g. IP address in server logs, browser type), and—where you subscribe—newsletter data.

Our affiliate program may process referral identifiers, campaign parameters and related event data to attribute commissions.

We process data to operate the shop, process orders, perform contracts with you (Art. 6 (1) (b) GDPR), comply with legal obligations such as tax or commercial record-keeping (Art. 6 (1) (c) GDPR), and safeguard IT security and fraud prevention based on our legitimate interests (Art. 6 (1) (f) GDPR).

Newsletter emails are sent only with your consent (Art. 6 (1) (a) GDPR) or another permitted basis where applicable.

We use service providers under data processing agreements where required, including: commerce platform, hosting/infrastructure, payment service providers for transaction processing, and email delivery providers or SMTP servers for transactional and newsletter messages.

Processors process data only on our instructions and under contractual safeguards.

If you arrive via an affiliate link or voucher, we may set cookies or similar identifiers and log referral events (including hashed IP addresses and user-agent data) to attribute sales and prevent abuse. This processing serves contract performance with affiliates and our legitimate interest in fairly measuring marketing performance.

You can remove cookies through your browser settings; attribution may then no longer be possible.

If you sign up for the newsletter, we store your email address and related subscription metadata in our database and may synchronize contacts with our email marketing provider’s audience features where configured. You can unsubscribe at any time using the link in each email or by contacting service@bergdorfbio.com.

We use technically necessary cookies or storage mechanisms for sessions, security, channel/locale preferences, and—where applicable—affiliate attribution. We do not use non-essential marketing cookies beyond what is described here unless we obtain separate consent where required.

We retain personal data only as long as necessary for the respective purposes, including statutory retention periods (e.g. tax and commercial law). Log data is typically kept for a limited period for security purposes unless longer retention is justified by incidents.

Subject to applicable law, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw consent at any time with effect for the future.

To exercise your rights, contact service@bergdorfbio.com. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or place of work.

If providers process data outside the European Economic Area, we rely on appropriate safeguards such as EU Standard Contractual Clauses or adequacy decisions under Art. 45 GDPR, in line with the provider’s documentation.