Privacy Policy
DATA PROTECTION INFORMATION
This data protection declaration informs you about how we handle your data. In order to make the processing of your data comprehensible for you, we would like to give you an overview of this processing with the following information. In order to ensure fair processing, this data protection declaration contains general information about how we handle your data as well as information about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
We will also inform you in detail about
- General Information
- Data processing on our website
- Data processing on our Facebook fan page and Instagram
- Further data processing
Conscious Health GmbH (hereinafter referred to as"we"or"us") is responsible for data processing.
I.GENERAL INFORMATION
1. CONTACT
If you have any questions or suggestions about this information or would like to contact us about asserting your rights, please send your request to
Conscious Health GmbH
Mulackstr. 32, 10119 Berlin, Germany
Email: service@this.place
2. LEGAL BASIS
The term “personal data” under data protection law refers to all information relating to a specific or identifiable person.
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. We process personal data
- only with your consent (Art. 6 Paragraph 1 letter a) GDPR),
- to fulfill a contract to which you are a party,
- at your request to carry out pre-contractual measures (Art. 6 Paragraph 1 letter b) GDPR),
- to fulfill a legal obligation (Art. 6 Paragraph 1 letter c) GDPR)
- or if processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights or freedoms that require the protection of personal data prevail (Art. 6 Paragraph. 1 letter f) GDPR).
3. DURATION OF STORAGE
Unless otherwise stated in the following information, we only store the personal data for as long as is necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such statutory retention requirements can arise in particular from commercial or tax regulations.
4. CATEGORIES OF RECIPIENTS
We use contract processors to process your data. These include, for example hosting, maintenance and support of IT systems, the provision of certain services and functions on our website, order processing, marketing measures or the destruction of files and data carriersA processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out the data processing exclusively for the person responsible and are contractually obliged to guarantee suitable technical and organizational measures for data protection.
In addition, we may transmit your personal datato positions such as postal and delivery services, house bank, tax advisors/auditors or the financial administration.
If your data is transmitted to other recipients, we will inform you under the respective processing procedure.
5. PROCESSING IN THE EXERCISE OF YOUR RIGHTS ACCORDING TO Art. 15 TO 22 GDPR
If you exercise your rights according to Art. 15 to 22 GDPR, we process the transmitted personal data for the purpose of implementing these rights by us and to be able to provide evidence of this. For the purpose of providing information and preparing it, we will only process data stored for this purpose and for purposes of data protection control and otherwise the processing in accordance with Art. 18 GDPR
This processing is based on the legal basis of Art. 6 Paragraph 1 letter c) GDPR in conjunction Art. 15 to 22 GDPR and Paragraph 34 Section 2 BDSG.
6. YOUR RIGHTS
As a data subject, you have the right to assert your rights as a data subject. In particular, you have the following rights:
- In accordance with Art. 15 GDPR and Paragraph 34 BDSG, you have the right to request information about whether and, if so, to what extent we process personal data about you or not.
- You have the right, in accordance with Art. 16 GDPR to request us to correct your data.
- You have the right, in accordance with Art. 17 GDPR and Paragraph 35 BDSG to request that we delete your personal data.
- You have the right, in accordance with Art. 18 GDPR to restrict the processing of your personal data.
- You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another person responsible.
- If you have given us separate consent to data processing, you can give this consent in accordance with Art. 7 Paragraph 3 GDPR revoked at any time. Such a revocation does not affect the legality of the processing, which took place up to the revocation on the basis of the consent.
- If you are of the opinion that the processing of your personal data violates the provisions of the GDPR, you have the right in accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority.
7. RIGHT TO OBJECT
In accordance with Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on the legal basis of Art. 6 Paragraph 1 letter e) or f) GDPR are based, for reasons that arise from your particular situation, to object. If we process personal data about you for the purpose of direct advertising, you can object to this processing in accordance with Art. 21 Paragraph 2 and Paragraph 3 GDPR to lodge an objection.
8. DATA PROTECTION OFFICER
You can reach our data protection officer under the following contact details: dsb@this.place
II. DATA PROCESSING ON OUR website
When you use the website, we collect information that you provide yourself. In addition, certain information about your use of the website is automatically recorded by us during your visit to the website. In data protection law, the IP address is generally considered to be personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
1. DATA TRANSFER TO THIRD COUNTRIES
Visiting our website may involve the transmission of certain personal data to third countries, i.e. countries in which the GDPR does not apply. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country.
If there is no such adequacy decision by the European Commission, personal data will only be transferred to a third country if there are suitable guarantees as per Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is given.
Unless otherwise stated below, we use the EU standard contractual clauses as suitable guarantees for the transmission of personal data to processors in third countries: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri= CELEX% 3A32010D0087 .
2. HOSTING BY SHOPIFY
We use the Shopify shop system for hosting and displaying our website. Shopify is offered by the service provider Shopify International Limited (Ireland)Unless otherwise stated in the following information, all data collected on our website will be processed on our behalf on the servers of Shopify International Limited.
As part of the aforementioned services, data may be transferred to Canada to Shopify Inc. An adequacy decision by the European Commission is available for data transmission to Canada as a third country, i.e. a country in which the GDPR does not apply. The European Commission has thus decided that there is an adequate level of protection in Canada and that the transmission can take place in a permissible manner.
Further information on data protection from Shopify can be found at: https://www.shopify.de/legal/datenschutz .
3. PROCESSING SERVER LOG FILES
When using our website for informational purposes, general information is initially stored automatically (i.e. not via registration), which your browser sends to our server. By default, this includes:browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing takes place to safeguard our legitimate interests and is based on the legal basis of Art. 6 Paragraph 1 letter f) GDPRThis processing serves the technical administration and the security of the website
The stored data will be deleted after 30 days if there is no justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject based on the stored information. The kind15 to 22 GDPR therefore apply in accordance with Art. 11 Paragraph 2 GDPR does not apply unless you provide additional information that enables your identification to exercise your rights as set out in these articles.
4. CONTACT POSSIBILITIES AND INQUIRIES
A. CONTACT FORM
Our website contains a contact form which you can use to send us messages. The transfer of your data is encrypted (recognizable by the "https"in the address line of the browser). All data fields marked as mandatory are required to process your request. Failure to provide it means that we cannot process your request. The provision of further data is voluntary. Alternatively, you can send us a message using the contact e-mail address.
B. CHAT FORM
On our website we use chat forms from the re:amaze service operated by Lantirn Incorporated (USA)If you send us inquiries via the chat form, your details from the form will be stored for the purpose of processing the request and in case of follow-up questions. This can also lead to a transfer of personal data to the USA. Re:amaze offers the connection of EU standard contractual clauses.
C. LEGAL BASIS
If your request is aimed at concluding or executing a contract with us, Art. 6 Paragraph 1 letter b) GDPR legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in getting in contact with inquiring persons. The legal basis for data processing is then Art. 6 Paragraph 1 letter f) GDPR.
5. SHOP DATA PROCESSING FOR PURCHASE PROCESSING
A. DATA PROCESSING FOR PURCHASE PROCESSING
If you order a product via our website, we process personal data for contract processing orin order to be able to provide you with the ordered product. As part of the booking or order process, we only process the data that you have entered in the input mask and, if applicable, payment information if you pay by bank transfer in advance. In order to be able to deliver the ordered products to you, we will transmit the data required for the delivery to one of our shipping service providers as stated in the order
You also have the option of creating a customer account.
The legal basis for the processing is Art. 6 Paragraph 1 letter b) GDPRAll data fields marked as mandatory are required to process your booking or order. Failure to provide it means that we cannot process your booking or order. The provision of further data is voluntary.
B. PAYMENT WITH CREDIT CARD
We offer you the option to pay by credit card. Please note that the respective payment information is collected and processed by the respective payment service providers on their own responsibility.
C. INVOICE AND RATE PURCHASE WITH KLARNA
We offer you the payment method invoice and installment purchase in cooperation with Klarna AB (Sweden,"Klarna")For this, Klarna must carry out an identity and credit check. In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna when you choose to purchase by invoice or by installment. In this way Klarna can assess whether you can use the payment options offered by Klarna and adapt the payment options to your needs. The legal basis for the transmission to Klarna is Art. 6 Paragraph 1 letter b) GDPROtherwise Klarna processes the data independently
Further information on data protection at Klarna can be found at https://www.klarna.com/de/datenschutz/Your personal details will be treated by Klarna in accordance with the applicable data protection regulations and according to the information in Klarna's data protection regulations.
D. IMMEDIATE TRANSFER WITH KLARNA
We offer the"Sofort"payment method in cooperation with the service provider Sofort GmbH, a company of the Klarna Group (Germany)If you use this service, Sofort GmbH will send us confirmation that the transfer order has been successfully placed for your order. This only includes the data from the transfer form (name, account number, bank code, subject, transfer amount) as well as the date (with time) and the transaction identifier selected by us (e.g.Order number)For SEPA transfers and if, depending on your bank, BIC and IBAN are required to set the transfer to your online banking account, the confirmation to us also contains BIC and IBANIn principle, we can also take this data from our account statement Sofort GmbH does not transmit further personal data to us. We process the received data for the purpose of executing the contract on the legal basis of Art. 6 Paragraph 1 letter b) GDPRIn addition, Sofort GmbH processes the data independently.
You can find further information on data protection at Sofort GmbH at https://www.klarna.com/sofort/kundenservice/erfahre-mehr-ueber-den-datenschutz-bei-sofort-gmbh-a-klarna-group-company/ retrieve.
E. Credit Card, GIROPAY AND SEPA DEBIT VIA ADYEN
We offer the payment options Credit Card, Giropay and SEPA direct debit via the payment service provider Adyen (Simon Carmiggeltstraat 6-50, 1011 DJ, Amsterdam)The payment data you provide during the ordering process will be transmitted to Adyen, insofar as this transmission is necessary to carry out the payment process. The legal basis for this transfer is Art. 6 Paragraph 1 letter b) GDPR.
Adyen is solely responsible for processing the payment data as part of the subsequent payment processing. You can find more information on Adyen's data protection at https://www.adyen.com/de_DE/bedingungen-und-haftungsausschluss/privacy-policy .
F. FINANCING AND INSTALLMENT PAYMENTS WITH SEZZLE
Together with Sezzle Germany GmbH (Germany, "Sezzle"), we offer the option to purchase products from us and pay for them later by making installment payments to Sezzle. To use this financing option, a Sezzle account must be opened. In order for Sezzle to assess whether you are eligible for the financing offered through Sezzle, Sezzle performs its own identity and credit checks. If we transmit data to Sezzle for this purpose, this is done on the legal basis of Art. 6(1)(b) DSGVO. Otherwise, Sezzle processes the data on its own responsibility. For more information on data protection at Sezzle, please visit https://legal.eu.sezzle.com/privacy.
6. CUSTOMER ACCOUNT
You can create a customer account on our website and log in as a customer on our website. To do this, you must first register on our website. The information required for this can be found in the registration form. The provision of the information that is marked as mandatory is absolutely necessary so that the registration can be completed.
You can use the customer account to take advantage of shipment tracking and order history, as well as pre-made forms during the checkout for subsequent orders.
The data provided will be processed for the purpose of providing the service. The processing is based on the legal basis of Art. 6 Paragraph 1 letter b) GDPR.
7. EMAIL MARKETING
A.SUBSCRIPTION AND UNSUBSCRIBE FOR MARKETING E-MAILS
On our website, we offer the option of subscribing to receiving marketing emails such as our newsletter after registration, we will inform you regularly about the latest news about our offers and eventsremind you of shop items in your shopping cartA valid email address is required to register. To verify the e-mail address, you will first receive a registration e-mail, which you have to confirm via a link (double opt-in)If you subscribe to the newsletter on our website, we process personal data such as your email address and your name on the basis of the consent you have given.
The processing is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPRYou can revoke your consent at any time with effect for the future, for example via the"Unsubscribe"link in the newsletter or by contacting us via the above-mentioned channels. The legality of the use of the data that has already taken place remains unaffected by the withdrawal. When registering for the newsletter, we also save the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 Paragraph 1 letter c) in conjunction with Art. 7 Paragraph 1 GDPR).
B. NEWSLETTER ANALYSIS
The newsletters contain a so-called "web beacon", i.e. a pixel file that is retrieved when the newsletter is opened. When opening, technical information such as your browser and system information, IP address and the time of opening are collected. This data and information is used to technically improve our service based on your reading behavior. This also means that it is recorded when an e-mail ora newsletter, opened and whether a link was clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. It is not our aim to observe individual users. The statistical collection and analysis of the data enables us to recognize the reading habits of our users and thereby better adapt our content to the users. This also serves to send different content to the users according to the interests of our users.
The legal basis for statistical collection and analysis is Art. 6 Paragraph 1 letter f) GDPRWe are interested in the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users
You can object to the statistical collection and evaluation by unsubscribing from the newsletter a separate revocation of the statistical evaluation is unfortunately not possible.
C. RATING REQUESTS AND PRODUCT REVIEWS
On our website we offer you the opportunity to post reviews about our shop and our productsWe use the Review.io service from Liquid New Media Limited.
If you buy a product through our website, we will send a message to the email address you provided and ask you to rate whether you would recommend us to others. We hereby pursue our legitimate interests in measuring the satisfaction of our customers. The legal basis for this use of the specified email address is Art. 6 Paragraph 1 letter f) GDPR in conjunction§ 7 Paragraph 3 UWGYou can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do this, you can inform us of your objection by clicking on the unsubscribe link contained in each mailing, by email to service@this.place or via one of the other contact channels listed above.
The processing of personal data in connection with a product review and in particular the use of the specified e-mail address will only take place if you have previously given your consent to receiving marketing e-mails. The processing is based on the legal basis of Article 6 Paragraph 1 letter a) GDPRYou can revoke your consent at any time with effect for the future, for example via the"Unsubscribe"link in a marketing email that has been sent or by contacting us via the above-mentioned channels.
D. SERVICE PROVIDER ZENLOOP
We use the Zenloop service from the German provider Zenloop GmbH for our management of customer feedback, i.e. collecting and evaluating reviews and other feedback. Various data such as your e-mail address, your name and the information that you have given us with your feedback can be processed. Zenloop processes the data on our behalf. We hereby pursue our legitimate interest in evaluating the feedback from our customers and improving our offer on this basis and marketing. The legal basis for the processing of personal data described is Article 6 Paragraph 1 boxf) GDPRFurther information on the processing of personal data when using Zenloop can be found at https://www.zenloop.com/de/legal/privacy .
E. SERVICE PROVIDER KLAVIYO
We use the Klaviyo service to manage subscribers and to send the newsletter and other marketing e-mails. Klaviyo is an offer from Klaviyo Incfrom Boston (USA)The data provided for sending the newsletter and the data from the newsletter analysis are stored on the servers of Klaviyo Inctransferred to the USA and processed there. We have worked with Klaviyo Incconcluded the EU standard contractual clauses for the transfer of personal data to processors in third countries.
9. COOKIES
We use cookies and similar technologies on our website. Cookies are small text files that are saved by your browser when you visit a website. The browser used is thereby identified and can be recognized by our web server. We use so-called"session cookies", which are deleted when the browser session is ended. Other cookies ("persistent cookies") are automatically deleted after a specified period, which can differ depending on the cookie.
The use of cookies is in part technically necessary for the operation of our website. We also use cookies and comparable technologies to measure the range of our website and to analyze the use of our website.
We also use cookies and comparable technologies to understand user behavior across websites and devices. We hereby pursue marketing purposes in particular. Cookies are placed on your device when you interact with one of our advertising materials on another website. When you visit our website, we read this cookie and can thus understand the effectiveness of our advertising material. This process is also known as conversion measurement. We also use cookies to target those users with our advertising material on other websites who are already interested in our website and our products. This process is also called retargeting.
Cookies are stored on the user's computer. As a user, you therefore have full control over the use of cookies. You can delete cookies at any time in the security settings of your browser. You can object to the use of cookies in your browser settings in principle or in certain cases. The Federal Office for Information Security offers you further information at https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehler/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmasshaben/Cookies/cookies_node.html .
You can use our consent management tool to manage the use of cookies and comparable technologies on our website for which you would like to give us your consent and you can revoke your consent.
Further information on how cookies and comparable technologies are used by us can be found below under the description of the specific services. You can also get more information about the cookies we use on our website under the other cookie settings.
10. CONSENT MANAGEMENT VIA USERCENTRICS
We use the consent management platform Usercentrics on our website. Usercentrics is a product of Usercentrics GmbH (Germany).
Usercentrics enables the users of our website to give consent to certain data processing processes or to revoke consent given. Usercentrics also supports us in being able to provide evidence of the declaration of consent. For this purpose, Usercentrics processes information about the declaration of consent and further log data for this declaration. Cookies are also used to collect this data. The collected IP address is only processed in anonymised form.
So that we can meet our obligation to provide evidence, the revocation certificate of a previously given consent will be kept for three years
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 Paragraph 1 letter c) in conjunction with Art. 7 Paragraph 1 GDPR).
11. ANALYSIS OF OUR WEBSITE
We use programs on our website to measure the reach of our website and to analyze user behavior. We use cookies and comparable technologies for this.
A. SHOPIFY STATISTICS
We use the Shopify statistics function on our website. This enables us to measure the reach of our website and receive statistical analyzes of visitor behavior on our website. The data is processed on the servers of Shopify International Limited (Ireland), which we have commissioned to process.
The legal basis for data processing in connection with the Shopify statistics function is Art. 6 Paragraph 1 letter f) GDPR and the processing serve our legitimate interest in the analysis of user behavior on our website and the possible needs-based design. You can object to this processing at any time in the cookie settings.
B. GOOGLE ANALYTICS
We use the Google Analytics service of Google Ireland Limited (Ireland/EU) to evaluate our website visits.Google uses cookies that enable your use of our website to be analyzed. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about the interaction with our website. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within our website and to provide us with other services related to the use of our website and the internet. In doing so, pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by the user's browser will not be merged with other Google data.
We use the Google Universal Analytics variant. This enables us to assign interaction data from different devices and from different sessions to a unique user IDThis enables us to put individual user actions in context and analyze long-term relationships.
The data on user actions are stored for a period of 14 months and then automatically deleted. The data whose storage period has expired is automatically deleted once a month.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 Paragraph 1 letter a) GDPRYou can revoke your consent at any time under “Cookie Settings”.
You can also prevent the storage of cookies by Google Analytics by setting your browser software accordingly. You can also prevent the information generated by the cookie from being recorded by downloading and installing the browser plug-in available under the following link:https://tools.google.com/dlpage/gaoptoutIf you visit our website via a mobile device, you can deactivate Google Analytics by clicking on this linkPlease also note that we document the consent you have given in order to meet our obligation to provide evidence under Art. 7 Paragraph 1 GDPRSince we are obliged to do this, this storage is based on the legal basis of Art. 6 Paragraph 1 letter c) GDPR).
C. OPTIMIZATION OF THE WEBSITE WITH VWO
We use various functions of the analysis tool"Visual Website Optimizer (VWO)"from the Indian provider Wingify (KLJ Tower, North, Netaji Subhash Place, Pitam Pura, Delhi, 110034) on our website.Wingify processes personal data as our contract processor. The data is processed on servers in the USAIn order to guarantee an adequate level of data protection, we have concluded the EU standard contractual clauses with Wingify for the transmission of personal data to processors in third countries.
Via VWO we can visualize and visually represent the behavior of visitors to our website. We also run a so-calledA/B testing. We can display our website with slightly varied content and analyze how the different versions of our website are used by visitors. Cookies are used for this, which enable a measurement and analysis of your use of our website. Personal data is processed in the form of cookie identifiers and information about the interaction with our website. The IP address used is not saved.
The use of cookies and the processing of personal data in connection with the use of VWO takes place only with your consent. The legal basis for the processing is Art. 6 Paragraph 1 Letter a) GDPR.
D. MATOMO
We use the Matomo web analysis service on our website. Matomo is an open source software for website optimization that anonymously evaluates the accesses of website visitors through the use of cookies. The IP address is anonymized immediately after it has been processed and before it is saved. No further processing of personal data takes place when using Matomo. The information generated by the cookies about your use of our website is not used for personal evaluation or profiling and is also not passed on to third parties. This data processing is used to measure the range and statistical analysis of the use of our website. The processing takes place with your consent based on the legal basis of Art. 6 Paragraph 1 letter a) GDPRThis processing serves the purpose of optimizing our offer and, if possible, avoiding the processing of personal data.
We have commissioned external technical service providers from whom the data is received to process the data using Matomo. These service providers process the data only after express instructions and are contractually obliged to ensure adequate technical and organizational measures for data protection.
12. TRACKING & RETARGETING
We use programs and technologies on our website to understand the user behavior of our website visitors across websites and devices. We use cookies and comparable technologies for this.
A. FACEBOOK PIXEL
We use the Facebook pixel from Facebook Inc. on our website(USA), orif you are based in the EU, Facebook Ireland Ltd(Ireland/EU) (“Facebook”).
The Facebook pixel is triggered by Facebook when you visit our website and can be a so-called Cookie, iesave a small file. This enables us to perform various functions, which we will describe in detail below.
Function: Conversion Tracking
With the help of the Facebook pixel, we can track the behavior of users after they have been forwarded to the provider's website by clicking on a Facebook ad (so-called"Conversion")In this way we can also record the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we will inform you of based on our level of knowledge. Facebook can connect this data with your Facebook account and also use it for its own advertising purposes, in accordance with the Facebook data usage guidelines https://www.facebook.com/about/privacy/You can enable Facebook and its partners to place advertisements on and outside of FacebookA cookie can also be stored on your computer for these purposes.
If you then log into Facebook or visit Facebook while logged in, your visit to our online offer will be noted in your profile. The data collected about you are still anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes.
This processing is carried out for the purpose of obtaining information about the effectiveness of the Facebook advertisements. It takes place exclusively with your consent and is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR.
You can revoke your consent by withdrawing your consent under"Cookie Settings"on our website.
You can also object to the collection by the Facebook pixel and the use of your data to display Facebook ads at the following address: https://www.facebook.com/settings?tab=ads .
Function: Custom Audience
We also use the Custom Audience service via the Facebook pixel. Facebook uses the integrated pixel to record visitors to our website and their data as the basis for displaying advertisements (Facebook Ads)The pixel transmits general information about the browser session to Facebook as well as a non-reversible and non-personal checksum (hash value), which is generated from your Facebook ID.
We also use the Custom Audience function in the"Advanced Matching"mode. This causes certain data (email address) that you enter on our website to be transmitted to Facebook in encrypted form as a hash value. Facebook can compare these hash values with the corresponding hash values of data that have already been provided by Facebook users. In this way it is determined which customers are also Facebook users in order to be able to show them targeted advertising on the Facebook platform.
Details on how Facebook handles your data, as well as your rights and setting options to protect your personal data, can be found in Facebook's data protection information at https://www.facebook.com/privacy/explanation .
This processing takes place for the purpose of marketing our offers via the target group-specific display of advertising and takes place with your consent. It is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR.
You can revoke your consent by withdrawing your consent under"Cookie Settings"on our website.
If, as a Facebook user, you would also like to object to the use of the Facebook Custom Audiences website for the future ("opt out"), you can do so at https://www.facebook.com/ads/Webseite_custom_audiences .
C. GOOGLE ADS
We use the online advertising program Google Ads from Google Ireland Limited (Ireland/EU), through which we place advertisements on the Google search engine. If you reach our website via a Google ad, Google places a cookie on your device ("conversion cookie")Each Google Ads customer is assigned a different conversion cookie, so that the cookies are not tracked via the websites of different Ads customers. The information obtained with the help of the cookie is used to generate conversion statistics. This is how we find out the total number of users who clicked on one of our Google ads. However, we do not receive any information with which users can be personally identified.
Insofar as personal data are processed in this context, this is done with your consent and this is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPRYou can revoke your consent by withdrawing your consent under “Cookie Settings”You can also object to being included in conversion tracking by preventing cookies from being set in your browser settings.
D. MICROSOFT BING ADS
We use the conversion and tracking tool Bing Ads from Microsoft Corporation (USA) on our website. Microsoft stores a cookie on the user's computer to enable analysis of the use of our online offering. The prerequisite for this is that the user has reached our website via an advertisement from Microsoft Bing Ads. In this way, Microsoft and we can recognize that someone who clicked on an ad was redirected to our online offer and reached a predetermined target page. We only see the total number of users who clicked on a Bing ad and were then redirected to the target page (“conversions”)No IP addresses are saved. No further personal information about the identity of the user is communicated.
Further information on data protection and the cookies used by Microsoft Bing Ads can be found in Microsoft's data protection declaration:https://privacy.microsoft.com/de-de/privacystatement .
We only use Microsoft Bing Ads with your consent. The legal basis for using this service is Art. 6 Paragraph 1 letter a) GDPRYou can revoke your consent at any time by declaring the revocation of your consent under the point “Cookie Settings”If you do not want to participate in the Bing Ads tracking process, you can also object to this at Microsoft:http://choice.microsoft.com/de-DE/opt-out .
E. ADFORM
We use services from the Danish provider Adform A/S on our website Adform A/S operates a platform for digital advertising technology that enables the purchase of advertising space within digital media.
So that our advertising can be played on the Adform A/S platform, we use cookies and comparable technologies on our website for the purpose of measuring the conversion rate and for retargeting visitors to our website. The data collected via the cookies are transmitted to Adform A/S and the partners participating in the platform. The use of cookies and the subsequent processing of the data only takes place with your consent and is based on the legal basis of Art. 6 Paragraph 1 letter a) GDPR.
F. TWITTER ANALYTICS
We use conversion tracking from Twitter International Company (Ireland) on our website. The Twitter International Company stores a cookie on the user's computer to enable analysis of the use of our online offer. With Twitter conversion tracking, the actions that you have taken after viewing ads or interacting with ads on the social media platform Twitter can be tracked. Conversion tracking from Twitter enables the assignment of conversions such as link clicks, retweets or"likes"This use of cookies and the subsequent processing of data only takes place with your consent. The legal basis for using this service is Art. 6 Paragraph 1 letter a) GDPR.
G. PINTEREST Tag
We use the Pinterest tag of the provider Pinterest Europe Ltd on our website(Ireland) a. With the help of the Pinterest tag, Pinterest Europe Ltd is able to identify the visitors of our online offer as a target group for the presentation of advertisements on the social media platform Pinterest (so-called“Pinterest Ads”)Accordingly, we use the Pinterest tag in order to only display the Pinterest ads placed by us to Pinterest users who have also shown an interest in our online offer or who have certain features (e.g.Interests in certain topics or products, which are determined based on the websites visited), which we transmit to Pinterest. With the help of the Pinterest tag, we also want to ensure that our Pinterest ads correspond to the potential interest of the users and are not annoying. With the help of the Pinterest tag, we can also understand the effectiveness of the Pinterest advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest advertisement.
The Pinterest tag is integrated by Pinterest when you visit our website with your consent and can place a cookie on your device. This is used to perform the retargeting and conversion measurement described above. If you then log in to Pinterest or visit Pinterest while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about your identity.
The use of the Pinterest tag and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
You can find more information about the processing of data when using Pinterest at https://policy.pinterest.com/de/privacy-policy .
H. SNAP PIXEL
We use the so-called Snap Pixel from Snap Group Limited (United Kingdom)With the help of the snap pixel, we are able to identify the visitors of our website as a target group for the display of advertisements on the social media platform Snapchat (so-called"Snapchat Ads")Accordingly, we use the Snap Pixel to display the Snapchat ads we have placed only to Snapchat users who have also shown an interest in our online offer or who have certain features (e.g.Interests in certain topics or products (determined by the websites visited) that we transmit to Snapchat.
With the help of the Snap Pixel, we also want to ensure that our Snapchat ads correspond to the potential interest of the users and are not annoying. With the help of the Snapchat pixel, we can also understand the effectiveness of the Snapchat ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Snapchat ad.
The use of the Snap Pixel and further use of the data will only take place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
You can find more information about the processing of data when using Snapchat at https://www.snap.com/de-DE/privacy/privacy-policy/#european-union-users .
I. OUTBRAIN
We use cookies and comparable technologies from the provider Outbrain Inc on our website(USA) to display interest-based advertising. Outbrain Inc. works with other partners on whose websites advertising is displayed. To ensure that our advertisements are displayed as precisely as possible and that we receive feedback on the success of our adverts, we use Outbrain Inc. cookies on our websitefor conversion measurement and retargeting.
This use of cookies and comparable technologies and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
J. QUORA
We use a tracking pixel from Quora Inc on our website(USA) to display interest-based advertising on the Quora platform. To ensure that our advertisements are displayed as precisely as possible on the Quora platform and that we receive feedback on the success of our adverts, we use cookies from Outbrain Inc. on our websitefor conversion measurement and retargeting.
This use of cookies and comparable technologies and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
You can find more information about the processing of data when using Quora at https://de.quora.com/about/privacy .
K. REDDIT PIXEL
We use a tracking pixel from Reddit, Inc. on our website(USA) to display interest-based advertising on the Reddit platform. To ensure that our advertisements are displayed as precisely as possible on the Reddit platform and that we receive feedback on the success of our adverts, we use cookies from Reddit Inc. on our websitefor conversion measurement and retargeting.
This use of cookies and comparable technologies and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
For more information about the processing of data in the use of Reddit can be found under https://www.redditinc.com/policies/privacy-policy .
L. TABOOLA
We use cookies and comparable technologies from Taboola Inc on our website(USA) to display interest-based advertising. Taboola Inc. works with other partners on whose websites advertising is displayed. To ensure that our advertisements are displayed as precisely as possible and that we receive feedback on the success of our adverts, we use cookies from Taboola Inc. on our websitefor conversion measurement and retargeting.
This use of cookies and comparable technologies and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
M. TISOOMI
In order to improve the display of our digital advertisements, we use cookies from the provider Tisoomi GmbH (Germany) on our website. The data collected by means of the cookies are used by Tisoomi GmbH to enable the optimal display of our advertisements even when using an ad blocker.
This use of cookies and comparable technologies and further use of the data only takes place with your consent. The legal basis is Art. 6 Paragraph 1 letter a) GDPR.
13. WEBGAINS AFFILIATE MARKETING
As part of our affiliate program, we participate in the performance advertising network of the provider ad pepper media GmbH based in Germany ("Webgains")As part of affiliate marketing, Webgains saves to document transactions (e.g.of leads and sales) we use cookies on our website or read information from cookies already placed on your device. This is done for the purpose of enabling a correct allocation of the success of an advertising medium and the corresponding billing within the network.
A cookie only stores information about when a specific advertising medium was clicked on by a device. In the Webgains tracking cookies, an individual sequence of digits, which cannot be assigned to the individual user, is stored, with which the partner program of an advertiser, the publisher, and the time of the user's action (click or view) are documented. Webgains also collects information about the terminal device from which a transaction is being carried out, e.g.the operating system and the calling browser. If the information also contains personal data, the processing described takes place with your consent and is based on Art. 6 Paragraph 1 letter a) GDPR.
14. EMBEDDED SERVICES AND THIRD PARTY CONTENT
We use services and content provided by third parties on our website (hereinafter collectively referred to as"content")For such an integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third party provider.
This data processing takes place in each case to safeguard our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6 Paragraph 1 letter f) GDPRYou can object to this data processing at any time via the settings of the browser used or certain browser extensions. Such an extension is, for example, the matrix-based uMatrix firewall for the Firefox and Google Chrome browsers. Please note that this can lead to functional restrictions on the website.
We have integrated content from the following services provided by third parties into our website:
- “YouTube” from YouTube LLC (USA) for displaying videos.
- "Cloudflare"from Cloudflare Inc (USA) for displaying content.
- "Gettyimages"from Getty Images Deutschland GmbH (Germany) for displaying images.
- "Soundcloud"from SoundCloud Limited (Germany) for embedding audio content.
- “Spotify” from Spotify AB (Sweden) for embedding audio content.
- "Google Forms"for contact forms and surveys.
We only use certain services provided by third-party providers on our website with your consent. The legal basis for the use of these services is Art. 6 Paragraph 1 letter a) GDPRYou can give your consent for these services in our consent management ormanage the cookie settings under the heading “Functional”Based on your consent, we use the following services:
- "Google Maps"from Google Ireland Limited (Ireland/EU) for displaying maps.
- “Spotify” from Spotify AB (Sweden) for embedding audio content.
- "Google reCAPTCHA"to check whether form entries are made by a natural person.
III. DATA PROCESSING ON OUR SOCIAL MEDIA PAGES
We are represented with a company page on several social media platforms. We would like to offer further possibilities for information about our company and for exchange. Our company has corporate pages on the following social media platforms:
- Snapchat
- YouTube
If you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile used also regularly represents personal data. This also includes messages and statements made using the profile. In addition, certain information is often automatically collected during your visit to a social media profile, which can also represent personal data.
1. DATA PROCESSING WHEN VISITING A SOCIAL MEDIA PAGE
A. FACEBOOK AND INSTAGRAM PAGE
When you visit our Facebook or Instagram page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller for this processing of personal data is Facebook Ireland Ltd (Ireland/EU -"Facebook")You can find further information about the processing of personal data by Facebook at https://www.facebook.com/privacy/explanation .
Facebook offers the possibility to object to certain data processing; Relevant information and opt-out options can be found at https://www.facebook.com/settings?tab=ads .
Facebook provides us with statistics and insights for our Facebook and Instagram pages in anonymised form, with the help of which we obtain information about the types of actions that people take on our site (so-called"Page Insights")These page insights are created on the basis of certain information about people who have booked our site. This processing of personal data is carried out by Facebook and us as jointly responsible. The processing serves our legitimate interest in evaluating the types of actions taken on our site and improving our site based on this knowledge. The legal basis for this processing is Art. 6 Paragraph 1 letter f) GDPRWe cannot assign the information obtained via the page insights to individual Facebook profiles that interact with our Facebook page. We have reached an agreement with Facebook on processing as jointly responsible, in which the distribution of data protection obligations between us and Facebook is specified. Details about the processing of personal data for creating page insights and the agreement concluded between us and Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_dataWith regard to this data processing, you have the option of asserting your data subject rights (see “Your rights”) against Facebook. Further information can be found in Facebook's data protection declaration at https://www.facebook.com/privacy/explanation .
Please note that according to the Facebook data protection regulations, user data is also processed in the USA or other third countries. Facebook only transfers user data to countries for which an adequacy decision by the European Commission according to Art. 45 GDPR or on the basis of suitable guarantees according to Art. 46 GDPR.
B. LINKEDIN COMPANY SITE
The LinkedIn Ireland Unlimited Company (Ireland/EU -"LinkedIn") is solely responsible for the processing of personal data when you visit our LinkedIn page. You can find more information about the processing of personal data by LinkedIn at https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy .
If you visit our LinkedIn company page, follow this page or deal with the page, LinkedIn processes personal data in order to provide us with statistics and insights in an anonymous form. This gives us information about the types of actions that people take on our side (so-called. Page insights)For this purpose, LinkedIn processes data that you have already made available to LinkedIn via the information in your profile, such as:B.Data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g.whether you are a follower of our LinkedIn company page. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated page insights. This processing of personal data in the context of page insights is carried out by LinkedIn and us as jointly responsible. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and to improve our company page based on this knowledge. The legal basis for this processing is Art. 6 Paragraph 1 letter f) GDPRWe have reached an agreement with LinkedIn on processing as jointly responsible, in which the distribution of data protection obligations between us and LinkedIn is specified. The agreement is available at:https://legal.linkedin.com/pages-joint-controller-addendumThereafter, the following applies:
- LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPRYou can contact LinkedIn online via the following link ( https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de ) or contact LinkedIn using the contact details in the privacy policy. You can contact the data protection officer at LinkedIn Ireland via the following link:https://www.linkedin.com/help/linkedin/ask/TSO-DPOYou can also contact us using the contact details provided to exercise your rights in connection with the processing of personal data as part of the page insights. In such a case, we will forward your request to LinkedIn.
- LinkedIn and we have agreed that the Irish Data Protection Commission will be the lead supervisory authority overseeing the processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie ) or any other regulatory authority.
Please note that in accordance with the LinkedIn data protection guidelines, personal data is also processed by LinkedIn in the USA or other third countries LinkedIn only transfers personal data to countries for which an adequacy decision by the European Commission according to Art. 45 GDPR or on the basis of suitable guarantees according to Art. 46 GDPR.
C. TWITTER
In principle, Twitter Inc. is responsible for processing personal data when you visit our Twitter profile(USA) solely responsible. Further information on the processing of personal data by Twitter Inc.are available from https://twitter.com/de/privacy .
D. SNAPCHAT
In principle, Snap Inc. is responsible for processing personal data when you visit our Snapchat channelsole responsible. Further information about the processing of personal data by Snap Incare available from https://www.snap.com/de-DE/privacy/privacy-policy/ .
E. PINTEREST
In principle, Pinterest Europe Ltd is responsible for processing personal data when you visit our Pinterest profilesole responsible. Further information on the processing of personal data by Pinterest Europe Ltdare available from https://policy.pinterest.com/de/privacy-policy .
F. YOUTUBE
Google Ireland Limited (Ireland/EU) is solely responsible for the processing of personal data when you visit our YouTube channel. Further information about the processing of personal data by YouTube. OR you can get Google Ireland Limited at https://policies.google.com/privacy .
2. PROCESSING OF DATA PROVIDED TO US VIA OUR SOCIAL MEDIA SITES
We also process information that you have made available to us via our company page on the respective social media platform. Such information can be the username used, contact details or a message to us. We only process this personal data regularly if we have expressly asked you to provide us with this data beforehand, for example in the context of a survey. We are solely responsible for this processing.
We process this data on the basis of our legitimate interest in getting in contact with inquiring persons. The legal basis for data processing is Art. 6 Paragraph 1 letter f) GDPR.
In addition, we may process such communicated datafor evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Paragraph 1 letter f) GDPR and serve our interest to further develop our offer and to inform you specifically about our offers. Further data processing can take place if you have given your consent (Art. 6 para 1 lit.a) GDPR) or if this serves to fulfill a legal obligation (Art. 6 Paragraph 1 letter c) GDPR).
We use software to manage our company pages. If a user asks a question specified in more detail in the software via the comment function on one of our company pages, the text is displayed together with the user name of the user via the software. This data is also transmitted to the software provider. The sent text and the username will be deleted as soon as the request has been answered.
IV. FURTHER DATA PROCESSING
1. CONTRACTUAL RELATIONSHIP
To establish or implement the contractual relationship with our customers, the processing of the personal master, contract and payment data provided to us is regularly required. The legal basis for this processing is Art. 6 Paragraph 1 letter b) GDPRWe also process customer and prospect data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Paragraph 1 letter f) GDPR and serve our interest to further develop our offer and to inform you specifically about offers from Conscious Health GmbH. Further data processing can take place if you have given your consent (Art. 6 para 1 lit.a) GDPR) or if this serves to fulfill a legal obligation (Art. 6 Paragraph 1 letter c) GDPR).
2. USE OF THE EMAIL ADDRESS
We can use the email address you provided when registering or ordering to inform you about our own similar products and services from This Place. The legal basis is Art. 6 Paragraph 1 letter f) GDPR in conjunction§ 7 Paragraph 3 UWGYou can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. To do this, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an email to service@this.page.
3. OFFLINE ORDERS
If you order a product via our order form or by phone, we process personal data for contract processing orin order to be able to provide you with the ordered product. As part of the ordering process, we only process the data that you have provided yourself. In order to be able to deliver the ordered products to you, we will transmit the data required for the delivery to one of our shipping service providers as stated in the order. The legal basis for the processing is Art. 6 Paragraph 1 letter b) GDPRAll data fields marked as mandatory are required to process your order. Failure to provide it means that we cannot process your order. The provision of further data is voluntary.
Status: August 2020