Privacy Notice & Legal Notice

Privacy Notice & Legal Notice – essence Club

Version: September 2026

Privacy Notice

This Privacy Notice supplements the general essence Website Privacy Notice and Cookie Policy and takes precedence over them insofar as the processing of personal data in connection with the essence Club is concerned.

1. Controller & Data Protection Officer

Controller:
cosnova GmbH
Am Limespark 2
65843 Sulzbach
Email: info@cosnova.com
(“we”)

Data Protection Officer:
Moritz Görmann
CTM-COM GmbH
Marienburgstraße 27
64297 Darmstadt
www.ctm-com.de

2. Processing relating to registration and administration of your membership in the essence Club

We process the personal data that you provide during registration or otherwise enter on the website (in particular, your email address, name, date of birth, address, information about products you have purchased and the Beauty Content you have submitted) for the purposes of administering your membership in the essence Club, managing your points account and processing orders for rewards. For these purposes, we also create a customer ID for each account.

The legal basis for this processing is Article 6(1)(b) GDPR, namely the performance of the contract between you and us.

3. Processing for marketing purposes

3.1 Marketing based on your consent

If you have consented to the use of your personal data for marketing purposes, we process your email address for such purposes.

To provide you with appealing and relevant content for this purpose, we collect information about your approximate location (via your IP address) and your interests based on the content you click on and view, using personalised links, cookies and similar technologies. We also store log data, such as the IP address of your device and the date and time at which consent was given, so that we can demonstrate your consent where necessary.

The legal basis for this processing is Article 6(1)(a) GDPR. Your consent is voluntary and is not a condition of your participation in the essence Club. You may withdraw your consent at any time, for example via the unsubscribe link, the Preference Centre in your account or by emailing essenceclub@essence.eu.

3.2 Direct marketing to existing customers

Where we have obtained your email address in connection with the purchase of goods or services, we may also use your email address to send you email marketing for our own similar goods or services.

You may object at any time to the use of your email address for this form of direct marketing without incurring any costs other than the transmission costs at the basic rates. In particular, you may use the unsubscribe link in the relevant email or contact us by email at essenceclub@essence.eu.

If you object to the use of your email address for direct marketing to existing customers, we will no longer use your email address for this purpose.

4. Other processing activities

We process personal data to combat fraud and conduct that violates the essence Club Terms and Conditions of Participation. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in preventing misuse and prosecuting criminal and administrative offences.

The processing of data collected by means of cookies and similar technologies is explained in more detail in our Cookie Policy. As a rule, such processing is based on your consent, Article 6(1)(a) GDPR, unless the cookies are strictly necessary for us to provide a digital service expressly requested by you, section 25 TDDDG. As described in more detail in the Cookie Policy, you may change your cookie settings and/or delete the cookies on your device at any time.

We use processors acting on our instructions (Article 28 GDPR), in particular for hosting the website and providing certain technical services required for the provision of the essence Club.

5. Transfers to third countries

Transfers to third countries are made on the basis of adequacy decisions adopted by the European Commission, the EU-US Data Privacy Framework (where the recipient in the third country is duly certified) or the so-called EU Standard Contractual Clauses (SCCs); we will be pleased to provide further details upon request.

6. Retention period

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected.

Once the purpose no longer applies, your personal data will be deleted unless further retention is required under commercial or tax law. In that case, your data will be restricted and archived and permanently deleted once the applicable statutory retention periods have expired.

7. Your rights

You have the rights set out in section 9 of the essence Privacy Notice.

To the extent that we process your personal data for direct marketing purposes, you may object at any time to the processing of your personal data for this purpose. Following your objection, your personal data will no longer be used for these purposes.

8. Updates

Changes to our services may make it necessary to amend this Privacy Notice. Please therefore review the contents of our Privacy Notice regularly.

We will also inform you whenever the changes require action on your part (e.g. consent) or otherwise necessitate an individual notification.

Legal Notice

cosnova GmbH
Am Limespark 2
65843 Sulzbach (Taunus)
Germany

Telephone: +49 (0) 6196 / 76156-0
Fax: +49 (0) 6196 / 76156-1199
Email: info@cosnova.com
www.cosnova.com

Managing Directors:
Mathias Delor
Javier González
Gesine Hild
Dennis Martin
Thorsten Mühl
Christina Oster-Daum
Hilko Prahl
Isabelle Tambue
Stefan Weinmiller
Yvonne Wutzler

Register Court / Commercial Register:
Frankfurt am Main
HRB 54730

VAT Identification Number:
DE 813324233

Responsible for content pursuant to Section 18(2) MStV:
Mathias Delor, Javier González, Gesine Hild, Dennis Martin, Thorsten Mühl, Christina Oster-Daum, Hilko Prahl, Isabelle Tambue, Stefan Weinmiller, Yvonne Wutzler
Am Limespark 2
65843 Sulzbach (Taunus)
Germany