This privacy statement informs users about the nature, scope and purpose of the collection and use of personal data by the responsible provider Naturheil Zentrum Oliver Weiss (see also imprint) on this website.
The legal basis for data protection can be found in the Federal Data Protection Act (BDSG) and the EU Data Protection Regulation (DSGVO).
Personal data in the sense of the EU Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) are individual details worthy of protection about personal or factual circumstances of a specific or identifiable natural person, e.g. name, address, e-mail address, date of birth, etc., but according to current case law also including IP addresses and location data.
2. Collection of personal data on the internet site
Due to the way the Internet works, it is necessary that the IP addresses of visitors to my web server are collected, temporarily stored and processed. After termination of the connection, however, they are not stored any further.
For analysis and performance purposes, in addition to anonymised (and thus no longer personally identifiable) IP addresses, other technical information about the device used to access my web presence, such as the type and version of the browser used to access, your operating system, referrer (from which website you were redirected to me), and in some cases system configuration, date and time information is collected and stored.
An access logging does not take place. However, it can be switched on temporarily for the purpose of danger prevention until the time of danger elimination. In this case, IP addresses are also collected and stored.
Special feature: Comments and contributions
When users leave comments on the blog or other contributions, their IP addresses are stored. This is done for the security of the provider, in case someone writes illegal content in comments and posts (insults, prohibited political propaganda, etc.). In this case, the provider itself can be prosecuted for the comment or post and is therefore interested in the identity of the author.
Further personal data is only collected on this website if you provide it yourself, for example by sending us an e-mail via the contact form. Any communication of this information is expressly on a voluntary basis and with your consent.
You can manage many online ad cookies from companies through the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.
This website uses Newsletter Sign-up Form.
With the newsletter we inform you about us and our offers. If you would like to receive the newsletter, we require a valid email address from you as well as information that allows us to verify that you are the owner of the specified email address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties. With the registration for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time. The revocation can be done via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.
What does this mean?
Of course, every(!) website collects and processes personal data. For example, the screen resolution of your device tells our server in which size it should deliver the content to you. Some operating systems and browsers need special commands, displays and settings to display a homepage correctly. The browser can also signal if the user needs a different color representation, e.g. because of a (color) visual impairment, or needs a non-graphical representation for blind people.
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).
By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.
If you contact us for inquiry, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients of the data may be processors.
The data will be deleted no later than 3 months after processing the inquiry.
Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
3. Use of Personal Data
The collection and processing of technical data is used exclusively to ensure a smooth connection setup and for technical optimization purposes (e.g. responsive web design). The processing takes place exclusively on the web server. An evaluation by or a transmission to third parties does not take place.
The data collected by the optional (in the event of an attack on IT system security or stability) access logging is used to identify attackers of my systems, to exclude them from further abusive use of my systems and, if necessary, to initiate legal action. In these cases, data may be passed on to government investigative agencies. The data collected in this way will be stored until the facts of the case have been legally clarified and in compliance with the relevant legal provisions, and then deleted.
If you voluntarily enter data on the homepage via the contact form, insofar as this involves information on communication channels, you agree by implied conduct that we may contact you via this communication channel in order to respond to your request. Any use beyond this without your consent will not take place. This data is not stored on the web server.
We store your data for as long as it is required to fulfil the purpose for which it was collected (e.g. in the context of correspondence) or if this is required by law or by the authorities. In the context of a contractual relationship, we store your data at least until the complete termination of the contract. Subsequently, the data will be stored for the duration of the statutory retention periods.
4. Legal basis of collection and processing
The collection and processing of technical personal data is based on Article 6 (1) b) DSGVO (contract performance), taking into account Article 5 (1) c) DSGVO (data minimization).
The optional temporary access logging for security purposes is carried out on the basis of Article 6 (1) f) DSGVO (Legitimate Interests) and Section 24 (1) BDSG (Security and Civil Claims), taking into account Article 13 (1) d) DSGVO (Naming of Legitimate Interests).
The collection of voluntarily entered personal data is based on Article 6 (1) a) DSGVO (consent). The storage of this data takes place on the basis of applicable archiving regulations, e.g. §257 HGB, for the period specified in corresponding regulations.
5. Data disclosure
We only pass on data if the customer has given his consent to the passing on, if it is absolutely necessary for the fulfilment of the order or if legal regulations or judicial titles require it. The passing on of data for the fulfilment of the order depends mainly on the type and scope of the order.
These are mainly the following recipients: parcel delivery companies and shipping companies, but also tax consultants (company accounting), tax offices (tax accounting) and, if necessary, other responsible offices.
If a third party is used for services in connection with the handling of processing operations, the statutory provisions shall be complied with. The data provided by the customer by way of the order will be processed exclusively for the purpose of contacting the customer within the scope of contract processing and only for the purpose for which the customer provided the data.
A transfer to third countries does not take place and is not planned.
6. Your Rights
Right of revocation according to Article 7 (3) DSGVO: You have the right to revoke at any time a consent given by you to the processing of personal data with effect for the future.
Right to information according to Article 15 (1) DSGVO: You have the right to request information about the data stored about you. The information is usually provided electronically. For information pursuant to Article 13 (1) a) DSGVO, please refer to our imprint.
Right to rectification (Article 16 DSGVO), deletion (Article 17 DSGVO) or blocking (Article 18 DSGVO): You have the right to request the rectification, deletion or blocking of personal data stored about you. If legal regulations do not permit deletion, your data will be blocked instead so that it is only accessible for the purposes of mandatory legal regulations. After expiry of the legally required retention periods, however, your data will be deleted in any case.
Right to lodge a complaint pursuant to Article 77 of the GDPR with the supervisory authority pursuant to Articles 51 and 57 of the GDPR: the competent complaints body is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, https://www.datenschutz.rlp.de
What does that mean?
The Basic Data Protection Regulation and the Federal Data Protection Act oblige every entrepreneur to comply with the above-mentioned rights of citizens. To exercise your aforementioned rights of revocation, information, correction, deletion or blocking of your personal data, you can contact us at any time via the contact details listed at the very bottom.
We are required by law to retain certain records. They may not be deleted before the expiry of certain periods and must be available for inspection by the authorities (e.g. the tax authorities). During this period, the customer's request for deletion of his data may also not be complied with. A 10-year storage obligation applies, for example, to invoices sent by us and contracts concluded. Other correspondence, such as letters, emails and delivery bills, must be stored for 6 years. After expiration of all storage obligations, the data and documents are deleted or destroyed in accordance with legal requirements.
7. Security and Confidentiality
We have implemented extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technical progress. The web server as well as the backup servers are located in Germany.
8. Social media and marketing
These collect personal data, usually on the platforms themselves. We do not pass on any personal data to the social media.