Privacy Policy

§ 1 General
We will only process your personal data (e.g., title, name, address, email address, telephone number, bank details, credit card number) in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the type, scope and purpose of the collection, processing and use of personal data. This Privacy Policy applies only to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.
We use the chat plugin “Facebook Messenger” (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland) on our website.
The messenger can only be accessed if you have given your consent. In addition, you can use the other contact options available on the website. After granting your consent, your browser establishes a direct connection to Facebook’s servers and Facebook transmits the content of the plugin directly to your browser, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server and stored there. If you are logged in to Facebook at the relevant time, Facebook can immediately assign your visit to our website to your Facebook profile. When you interact with a plugin, this information is also transmitted directly to a Facebook server and stored there. The actions can be published on your Facebook profile and shown to your Facebook friends.
The legal basis of the processing is Art 6(1)(a) GDPR, your consent.
If you do not want the data collected via our website to be assigned to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent Facebook plugins from loading with add-ons for your browser, e.g., with the script blocker “NoScript” (http://noscript.net/).
We delete the Facebook messages as soon as we can assume that we have answered any information for the user, if no reference to a previous conversation is to be expected and the deletion does not conflict with any legal retention obligations.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum. Further information can be found in Facebook’s privacy policy:
https://www.facebook.com/policy.php

§ 2 Data processing for contract fulfilment
(1) Processing purpose
Your personal data, which you provide to us in the ordering process, is required to conclude a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without knowing your address. For some payment methods, we require the necessary payment data to be passed on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract.
If you send us an inquiry by email, via a contact form, etc. prior to concluding a contract, we process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our products.
(2) Legal basis
The legal basis for this processing is Art 6(1)(b) GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, if applicable, merchandise management system, if applicable, suppliers (drop shipping).
(4) Storage period
We store the data required for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We retain the data required under commercial and tax law for the periods specified by law, regularly ten years (cf. Section 257 HGB [German Commercial Code], Section 147 AO [Fiscal Code]).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it becomes apparent that on contract has been concluded.

§ 3 Information about cookies
(1) Processing purpose
Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies make it possible, for example, to add multiple products into a shopping cart.
(2) Legal basis
The legal basis for this processing is Art 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles. This will protect your interest in data privacy.
(4) Storage period
As a rule, the technically necessary cookies deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.
(5) RIGHT OF OBJECTION
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. This may, however, limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser.

§ 4 Data processing when opening a customer account and for contract processing
If you open a customer account with us, personal data will be collected and processed in accordance with Art 6 (1)(b) GDPR. The scope of the data can be seen in the input form. The data you enter will be stored and used by us to process the contract.
You can delete your customer account at any time. This can be done by sending a message to the address of the data controller or, if offered, directly in the customer account. In this case, we will also block your data with regard to retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

§ 5 Rights of the data subject
1. The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, of which we inform you below:
Right to access according to Art. 15 GDPR:
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and about the existence of further rights such as correction of the data or the existence of a right to complain to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed about which guarantees exist in accordance with Art 46 GDPR when your data is transferred to third countries;
– Right to rectification pursuant to Art. 16 GDPR:
You have a right to the immediate rectification of incorrect data concerning you and/or the completion of your incomplete data stored by us; the rectification or completion must take place immediately.
– Right to restriction of processing pursuant to Art. 18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the contested accuracy of your data is verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims, after we no longer need this data once the purpose has been achieved or if you have filed an objection for reasons based on your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh this;
If the processing of personal data concerning you has been restricted, then – apart from its storage – this data may only be processed with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.
– Right to erasure pursuant to Art. 17 GDPR:
You have the right to request the immediate deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right to erasure shall not (conclusively) exist if, in particular, the processing is required for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
– Right to notification pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.
– Right to data portability according to Art. 20 GDPR:
You have the right to receive your personal data disclosed to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically possible;
– Right of withdrawal according to Art 7(3) GDPR:
You have the right to object at any time to the processing of personal data relating to you that is carried out on the basis of Art 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with future effect. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
– Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider the processing of personal data concerning to infringe the GDPR.

2. Right of objection
You have the right to object to the processing of your data at any time with future effect if we process your data on the basis of our overriding legitimate interest after weighing up your interests.
If you exercise this right of objection, we will terminate the processing of your data if no demonstrably overriding compelling legitimate grounds for the termination exist or if the further processing serves to exercise or defend legal claims.

§ 6 Duration of the storage of personal data
The duration of the storage of personal data depends in each case on statutory retention periods. After expiry of this period, we routinely delete the data if it is no longer required to fulfil or initiate the contract and/or if we have no further legitimate interest in continuing to store it.

Data controller for data processing:
German Health Technology GmbH
Fritz-Thiele-Straße 13
28279 Bremen
Phone: +0421 224104 0
info@biorelax.eu