Skip links

Privacy Policy

We value data protection

§ 1 General

Your personal data (e.g. salutation, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions will inform you about the type, scope and purpose of the collection, processing and use of personal data. This privacy policy applies only to our websites. If you are directed through links on our pages to other pages, please make yourself aware about the handling of your data on those pages.

§ 2 Data processing for contract fulfilment

(1) Processing purpose

Your personal data that you provide to us during the ordering process is required to conclude a contract with us. You are not obligated to provide your personal data. However, we cannot send you the goods without being given your address. For some payment methods we require the necessary payment data in order to pass them on to a payment service provider commissioned by us. The processing of your data entered in the order process therefore takes place for the purpose of contract fulfilment.

If you send us an inquiry by email, using a contact form, etc. before concluding the contract, we will process the data received in this way to carry out pre-contractual measures and answer, for example, your questions about our products.

(2) Legal basis

The legal basis for this processing is Art. 6 para. 1 lit b) GDPR.

(3) Recipient categories

Payment service providers, shipping service providers, hosting providers, if applicable merchandise management system, if applicable suppliers (drop shipping).

(4) Storage period

We store the data required for contract processing until the statutory warranty and, if applicable, contractual guarantee periods expire.

We store the data required under commercial and tax law for the legally specified periods, usually ten years (cf. Section 257 HGB [German Commercial Code], Section 147 AO [German Tax Code]).

The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and a contract has clearly not been concluded.

§ 3 Information about cookies

(1) Processing purpose

Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, several products to be placed in a shopping cart.

(2) Legal basis

The legal basis for this processing is Art. 6 para.1 lit. f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.

(4) Storage period

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have different lifespans from a few minutes to several years.

(5) RIGHT TO OBJECT

If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. This may, however, limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser.

§ 4 Web analysis with Matomo

(1) Processing purpose

Our website uses the Matomo web analysis service. Matomo (www.matomo.org) uses cookies. The information generated by a cookie about your user behaviour on our website enables us to analyse the use of the website. The user information produced by the cookie (including your abbreviated IP address) is transmitted to our server and stored for user-analysis purposes. Otherwise, your data will not be disclosed to third parties.

(2) Legal basis

The legal basis for this processing is Art. 6 para.1 lit. f) GDPR.

(3) Legitimate interest

Our legitimate interest is the statistical analysis of user behaviour for optimization and marketing purposes of our website. At the start of this process your IP address is anonymised, so that you as a user will remain anonymous to us. This takes your right to data protection into account.

(4) RIGHT TO OBJECT

You can generally prevent the use of cookies by setting your browser software accordingly; however, it is possible that in this case you will not be able to use all the functions of this website. If you do not agree to the storage and evaluation of the data of your visit, you can object to the storage and use with a click of the mouse. In this case, an opt-out cookie is stored in your browser and Matomo does not collect any session data.

Attention: If you delete your cookies, this means that the opt-out cookie will also be deleted and will have to be reactivated by you the next time you visit this website. To object

§ 5 Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to us:

1. Right to information

You can request confirmation from us as to whether personal data relating to you will be processed by us.

If such processing is taking place, you can request the following information from us:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data that are processed;

(3) the recipients or the categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(5) the existence of a right to correct or delete your personal data, a right to restrict processing by us or a right to object to this processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) all available information about the origin of the data if the personal data is not collected from the data subject;

(8) the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information about whether the personal data relating to you is being transmitted to a third country or to an international organization. In this regard, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in relation to the transmission.

2. Right to rectification

You have a right to rectification and/or completion of data held by the data controller if your processed personal data is incorrect or incomplete. We must make the correction immediately.

3. Right to restriction of processing

You can request restriction of processing of your personal data under the following conditions:

(1) if you contest the accuracy of the personal data concerning you for a period that enables us to check the accuracy of the personal data;

(2) if the processing is unlawful and you reject the deletion of the personal data and instead request the restriction of the use of the personal data;

(3) if we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or

(4) if you have objected to processing in accordance with Art. 21 para. 1 of the GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.

If the processing of your personal data has been restricted, this data – apart from its storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You can request that we erase the personal data relating to you immediately, and we are obligated to erase this data immediately if one of the following reasons applies:

(1) Your personal data is no longer necessary for the purposes for which it was originally collected or otherwise processed.

(2) You revoke your consent upon which the processing was based in accordance with Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) GDPR and there is no other legal basis for its continued processing.

(3) You object according to Art. 21 para. 1 GDPR, and there are no overriding legitimate reasons for its continued processing, or you submit an objection to its processing in accordance with Art. 21 para. 2 GDPR.

(4) The personal data relating to you has been processed unlawfully.

(5) The erasure of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.

(6) The personal data relating to you was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

b) Information to third parties

If we have made personal data public that concerns you and if we are obliged to delete it pursuant to Article 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions

The right to erasure does not exist if processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h) and i), as well as Art. 9 para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 para. 1 GDPR, to the extent that the right referred to in a) is likely to render impossible or seriously inhibit the achievement of the purposes of such processing; or

(5) for the establishment, exercise or defence of legal claims.

5. The right to information

If you have exercised your right to correction, erasure or to restrict processing, we shall inform all recipients to whom the personal data that concerns you has been disclosed of this correction or erasure or restriction on processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients.

6. Right to data portability

You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. You have the right to transmit this data to another responsible party without any hindrance, provided that

(1) the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on the basis of a contract in accordance with Art. 6 para. 1 lit. b) GDPR and

(2) the processing is carried out using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by us to another data controller, insofar as this is technically feasible. This action must not affect the freedoms and rights of other persons.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us.

7. Right to object

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 lit. e) or f) GDPR, including profiling based on those provisions.

We will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing your data for direct marketing purposes, your personal data will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object using an automated process involving the use of technical specifications.

8. Right to withdraw consent

You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its revocation.

9. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

(1) is necessary for the conclusion or fulfilment of a contract between you and us,

(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(3) is based on your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) apply and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

With regard to the cases mentioned in (1) and (3), we take appropriate measures to protect your rights and freedoms and your legitimate interests.

10. The right to file a legal complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you contravenes the GDPR.

The supervisory authority to which the complaint is submitted informs the complainant about the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.

Responsible entity for the data processing:
German Health Technology GmbH
Fritz-Thiele-Strasse 13
28279 Bremen
Phone: 0421 224 104 0
info@biorelax.eu