 |
This data protection policy gives the visitor to this website a detailed description about the nature, scope and purpose of the processing of personal data within this online presence and external online appearances - if any - such as social media appearances.
Terms
Personal Information means information of any kind that relates to and can be associated with an identified or identifiable natural person. Such data include, for example, name, location (for example, via the IP address), online identification (for example, via cookies), but also data that indicate the economic, cultural or religious identity.
Processing refers to the handling of this data, especially when using automated procedures. Also, the manual use of such data, such as using an e-mail address in the mail program, is considered processing in terms of data protection law.
The person responsible is the natural or legal person who, alone or in concert with others, manages the processing. This applies in particular to the decision for which purpose and by what means the processing is carried out.
In principle, Article 4 of the General Data Protection Regulation (German: Datenschutz-Grundverordnung)(DS-GVO) regulates the exact definitions.
Responsible in terms of data protection is:
Herbalist & Doc Gesundheitsgesellschaft mbH
Stolzingstr. 24
13465 Berlin
Germany
Commercial register: Berlin, Amtsgericht Berlin HRB 61711
Steuer ID DE 812 207 536 or 27/19/9567
Dr. Joerg Gruenwald
Tel: +49 173 2500396
info@herbalist-doc.com
|
|
Processed data
The following data is processed on this website
- Usage data (eg visited pages of this website, loaded documents and access times)
- Communication data (for example, device / browser information, IP addresses, location of the user based on the IP address)
Purpose of processing
- Offering an online presence, its features and content
- Safety measures
- Reach measurement, marketing and offer improvement
Legal basis
Art. 13 DS-GVO obliges the operator of a website to mention the legal basis of data processing. The legal basis for obtaining consent is set out in Art. 6 para. 1 lit. Art. 6 para. 1 lit. b DS-GVO regulates the processing for the fulfillment of our services and the execution of contractual measures as well as the answering of inquiries. Art. 6 para. 1 lit. c DS-GVO explains the legal basis for processing in order to fulfill our legal obligations and Art. 6 (1) lit. f DS-GVO regulates the processing for the protection of our legitimate interests. Processing of other personal data is regulated by Art. 6 para. 1 lit. d DS-GMO.
Safety measures
The operator of this website regularly adjusts his privacy policy as far as changes in data processing make it necessary. If the visitor requires consent, users will be notified accordingly.
Order processing
Should access by third parties be necessary for the processing of the data, this is done only on the basis of the DS-GVO. Art. 6 para. 1 lit. b DS-GVO allows the data to be transmitted to third parties, if this is necessary for the provision of the service of this website (eg financial service providers). Unless there is a legal obligation to provide such transmission and the legitimate interest of the operator of this website is contratry(eg security checks of the website or hosting the website), such a transfer takes place only with the consent of those concerned.
Transfers to third countries
If data is transmitted to and processed in a third country, it will only do so if it is to fulfill the contractual obligations based on your consent, a legal obligation or a legitimate interest of the website operator. A third country is a country that does not belong to either the European Union (EU) or the European Economic Area. If processing in third countries is necessary, this is done in accordance with Art. 44 ff. DS-VGO. The processing is carried out with a data protection level according to EU regulations, possibly also with other contractual obligations.
Rights of users
The user of this website has the right as an affected person to request information about whether and how his data are processed (Art. 15 DS-GVO). According to Art. 16 DS-GVO, the user has the right to complete or correct this data should incorrect data be stored.
According to Art. 17 DS-GVO the website visitor has the right to delete data stored about him. Also, a user may request that processing be restricted (Art. 18 DS-VGO).
According to Art. 20 DS-GVO the user of the website has the right to receive a copy of the stored data.
Finally, every website visitor has the right to file a complaint with the competent supervisory authority in accordance with Art. 77 DS-GVO.
Withdrawal right
According to Art. 7 para. 3 DS-GVO, visitors to this website may revoke the granted consent to data processing in the future.
Right to objection
The visitor to this website may at any time object to the future processing of personal data according to Art. 21 DS-GVO. This objection can be made especially against direct mail.
Cookies
So-called "cookies" are small data packets that are stored by the browser of the respective user on the terminal. Different data are stored here, for example information about the user. The data is stored there even after visiting the website to be available at the next visit. But there are also temporary cookies that are stored only during the visit, for example, to take user information from one page to the next page. These so-called session cookies are automatically deleted after leaving the website. Some cookies may be used by third-party manufacturers to measure reach and for marketing purposes.
If a user of this website does not want this storage, they can deactivate the storage of cookies in the settings of the browser. Already saved cookies can be deleted there. However, there may be functional restrictions on the website without cookies.
Data deletion
In accordance with Art. 17 and 18 DS-GVO, the processed data is deleted or the processing is restricted. All data collected and stored by us will be deleted as soon as they are no longer required for the purpose of collection and no statutory retention obligations would be violated by the deletion. If the data is not deleted because it is required for other or legally permissible purposes, the data is blocked. There is no other processing. Such a retention reason could be, for example, commercial or tax reasons.
According to legal requirements in Germany, the storage takes place in particular for six years in accordance with § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for ten years pursuant to § 147 Abs. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
Hosting
For the operation of this website one or more servers are needed on which the website is "hosted", ie operated. These servers are available in German data centers certified to ISO 27001.
To provide hosting services, data center operators provide infrastructure and platform services, computing capacity, storage, security, and technical maintenance services. These services are exclusively for the operation of the server. A contract with the respective operator of the data center regarding data processing is available.
Collection of access data
Based on the legitimate interests of the operator of this website within the meaning of Art. 6 para. 1 lit. f. DS-GVO data about every access to the server are collected. These log files contain the retrieved data, the date and time of the retrieval, the amount of data transferred, the message about successful retrieval, the browser type, the browser version, the user's operating system, the so-called referrer URL (previously visited page), the IP address and the requesting provider.
Log files are stored for security reasons (for example, to investigate abusive or fraudulent activities) for a period of 14 days and then deleted automatically. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.
|
