1.1 What is personal data
Personal data is information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, no personal data is collected.
1.2 Handling of personal data
Personal data is used exclusively to establish the contract, design the content, implement or process the contractual relationship (Art. 6 I S. 1 b GDPR). In addition, personal data will only be processed if we have received your consent (Art. 6 I S. 1 a DSGVO) or if it is data whose processing is necessary for our legitimate interests and if the consideration shows that no conflict with overriding interests, fundamental rights or fundamental freedoms on your part (Art. 6 I S. 1 f GDPR). We can use contract processors to process your personal data, but we will generally not pass on the personal data to third parties. The data will only be passed on to the shipping company commissioned with the delivery for the purpose of fulfilling the contract, insofar as this is necessary for the delivery of ordered goods. In order to process payments, the payment data required for this will be passed on to the bank commissioned with the payment and, if applicable, the commissioned and selected payment service provider. The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.
1.3 Usage data
When visiting the website, general technical information is collected. These are the IP address used, time, duration of the visit, browser type and, if applicable, the origin page. For technical reasons, these usage data are registered in a log file and can be used and saved for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.
1.4 Registration Data
Registration is required for full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I S. 1 a DSGVO).
1.5 Duration of storage
After the end of the purpose for which the data was collected, we only store your personal data for as long as is required by law (in particular tax law).
2. Your rights
You can request information from us as to whether we process your personal data and, if this is the case, you have the right to information about this personal data and the further information specified in Art. 15 GDPR.
2.2 Right to rectification
You have the right to correct incorrect personal data concerning you and, in accordance with Art. 16 GDPR, you can request the completion of incomplete personal data. 2.3 Right to erasure You have the right to request that the personal data concerning you be erased immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:
· Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
· You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.
· Your data has been processed unlawfully.
The right to deletion does not exist insofar as your personal data are required to assert, exercise or defend our legal claims.
2.4 Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if
you contest the accuracy of the data and we therefore check the accuracy,
· the processing is unlawful and you reject the deletion and instead request the restriction of use
we no longer need the data, but you need them to assert, exercise or defend legal claims,
You have objected to the processing of your data and it has not yet been determined whether our legitimate reasons outweigh your reasons.
2.5 Right to Data Portabilityt
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format and you have the right to transmit this data to another person in charge without hindrance from us, provided that the processing is based on consent or is based on a contract and the processing is carried out by us using automated processes.
2.6 Right of withdrawal
If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time.
2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. If you have a complaint, you have the right to contact the supervisory authority responsible for us, the state data protection officer.
3.1 Data Securityt
All data on our website is secured by technical and organizational measures against loss, destruction, access, change and distribution.
3.2 Sessions and Cookies
If you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 I S. 1 a DSGVO. Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options given in the imprint or via the link provided for this purpose in the newsletter. After you have unsubscribed, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
5. Presence on social media platforms
We use the following social media platforms to present the company and communicate (express reference is made to the data protection declarations and opt-out options linked below).
Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
Data protection declaration: https://www.facebook.com/about/privacy/
Opt Out: http://www.youronlinechoices.com
Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)
Data protection declaration: https://twitter.com/de/privacy
Opt out: https://twitter.com/personalization
Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
Data protection declaration and opt-out: http://instagram.com/about/legal/privacy/
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Xing (Xing, New Work SE, Am Strandkai 1, 20457 Hamburg)
Data protection declaration and opt-out: https://privacy.xing.com/de/datenschutzerklaerung
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
These social media platforms may process personal data outside the EU; in this respect, we refer to the above data protection declarations of the social media platforms. The respective social media platforms may be able to create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is saved. If you have an account on the respective social media platform and are logged in, your usage behavior can even be stored independently of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests. We process the personal data exclusively to communicate with you via the social media platform you have selected and to optimize our online presence and ensure that no interests on your part are affected which outweigh this legitimate interest on our part (Article 6 I p. 1 f GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 I S. 1 a GDPR).
6. Third party services
6.1 Google Analytics
that on this website Google Analytics was extended by the code "anonymizeIp" in order to ensure an anonymous collection of IP addresses (so-called IP masking).
6.2 Social media links and social sharing
We have our own social media pages for the third-party providers that can be reached via links from this website. By using the links, you get to the respective third-party website (e.g. Facebook, Twitter, Instagram) and can also share our content. When you visit our website, there is no data transfer. We recommend logging out of the respective third-party provider to avoid unnecessary data transfer before using a corresponding link, so that usage profiles may not already be created by the third-party provider through the use of the link.
6.3 Use of Google Maps
6.4 Use of Youtube
This website and the integrated offers contain so-called embedding of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is an offer from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). YouTube is only used with your consent (Art. 6 I S. 1 a GDPR). The purpose and scope of data collection and data use by Google as well as your rights and setting options for protection as a YouTube customer can be found in YouTube's data protection information. You can find this at: http://www.youtube.com/t/privacy/.
6.5 Google Web Fonts
6.6 Use of Google ReCAPTCHA
6.7 Active Campaign
This website uses the services of ActiveCampaign (operated by ActiveCampaign, LLC, 1 North Dearborn Street 5th Floor, Chicago, IL 60602, USA) to send newsletters. ActiveCampaign is a service that can be used, among other things, to organize and analyze the sending of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g. e-mail address), this will be stored on ActiveCampaign's servers in the USA. With the help of ActiveCampaign we can analyze our newsletter campaigns. When you open an e-mail sent with ActiveCampaign, a file contained in the e-mail (so-called web beacon) connects to ActiveCampaign's servers in the USA. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. Technical information is also recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. They are used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.
If you do not want ActiveCampaign to carry out an analysis, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
The data processing takes place on the basis of your consent (Art. 6 I S. 1 a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and, after unsubscribing from the newsletter, will be deleted from both our servers and ActiveCampaign's servers. Data that we have stored for other purposes remain unaffected.
6.8 Google Tag Manager
This website also uses the Google Tag Manager (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This service allows website tags to be managed via an interface. This Google tool only implements tags. No cookies are used here and no personal data is recorded. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
6.9 Google DoubleClick
6.10 Bing Ads
We use technologies from Bing Ads (operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) on our website. Microsoft places a cookie on your end device if you have reached our website via a Microsoft Bing ad. This allows Microsoft and us to recognize that someone clicked on an ad, was redirected to our website and reached a predetermined landing page (“conversion site”). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and to display advertisements. No personal information on the identity of the user is processed. If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this - for example via a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of the data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link https://choice.microsoft.com/de-DE/opt- out explaining your disagreement. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
6.11 Use of Facebook Pixels
We use Facebook Pixel from the Facebook network (operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94304, USA). The body responsible for processing the information collected by Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This function enables us to target visitors to this website on Facebook with advertising. For this purpose, personalized and interest-based Facebook ads are placed when the Facebook pages are visited. The function is made possible on our website by a pixel from Facebook, which is implemented on the site. When you visit our website, the pixel establishes a direct connection to the Facebook server if you have consented to the setting of the pixel (Art. 6 I S. 1 a GDPR). It is transmitted to the Facebook server which of our Internet pages the user has visited.
Facebook assigns this information to your personal Facebook user account. You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/.
Once you have given your consent, you can object at any time using this opt-out link: [ ]
Wenn Sie nicht möchten, dass Facebook die gesammelten Informationen unmittelbar Ihrem Facebook-Benutzerkonto zuordnet, können Sie die Funktion in Ihren Kontoeinstellungen unter: https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads#_=_ bearbeiten. Hierzu müssen Sie bei Facebook angemeldet sein.
6.12 Font Awesome
It is possible to complete the payment process using the online payment service PayPal from PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg City, Luxembourg.
The following of your data is regularly transmitted to PayPal for payment processing and also processed outside the EU:
· Your email address
· Your Address
· Details of your order
· Your IP address
The legal basis for using the service is Art. 6 I S. 1 a GDPR (consent).
Data processing and/or data transfer also takes place here outside the European Union, Andorra, Argentina, Canada (only for commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan and the United Kingdom. However, only for these countries, with the exception of the countries of the European Union, which are classified as safe anyway, is there an adequacy decision (Article 45 GDPR) of the European Commission with regard to data transmission. Therefore, the transfer of data to other countries is at least not expressly permitted. However, if data is to be transferred, the processor must use other means to ensure that the recipient's personal data is adequately protected. This can be achieved through the use of standard data protection clauses (Art. 46 GDPR), through so-called Binding Corporate Rules in the case of data transfers within a group, through an obligation to comply with rules of conduct that have been declared generally applicable by the Commission, or through the certification of the processing operation happen. The standard contractual clauses issued by the European Commission can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914
Information on data protection and the standard contractual clauses used by PayPal can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
We use the WooCommerce plugin for processing in our shop and to be able to offer you our products/services for sale. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Through the functions of the plugin, the data you provide when placing an order (e.g. name, address, e-mail, text field message, order details, payment information) is also sent to Automattic Inc., where it is stored and processed.
We also use the Tidio chat tool (operated by Tidio LLC, 160 Spear Street, #1000, San Francisco, CA 94105, USA). This uses chat bots, among other things, to answer your inquiries. Here, Tidio processes the data you enter and your IP address, including in the USA. Data processing and/or data transfer therefore also takes place outside the European Union, Andorra, Argentina, Canada (only for commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan and the United Kingdom. However, only for these countries, with the exception of the countries of the European Union, which are classified as safe anyway, is there an adequacy decision (Article 45 GDPR) of the European Commission with regard to data transmission. Therefore, the transfer of data to other countries is at least not expressly permitted. However, if data is to be transferred, the processor must use other means to ensure that the recipient's personal data is adequately protected. This can be achieved through the use of standard data protection clauses (Art. 46 GDPR), through so-called Binding Corporate Rules in the case of data transfers within a group, through an obligation to comply with rules of conduct that have been declared generally applicable by the Commission, or through the certification of the processing operation happen. The standard contractual clauses issued by the European Commission can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914
Tidio can only be used with your consent (Art. 6 I S. 1 a GDPR).
6.18 LinkedIn Insight Tag
We use the LinkedIn Insight Tag conversion tracking tool (operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; in Europe: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) for marketing purposes . The service also processes personal data from you, such as your IP address. This processing also takes place within the USA.
6.19 Anti-Spam by CleanTalk
6.20 Microsoft Teams
We also use Microsoft Teams (operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "Meetings"). The legal basis for the use of Microsoft Teams is your consent in accordance with Art. 6 I S. 1 a GDPR or Art. 6 I S. 1 b GDPR (contract execution). If you call up/use the website and/or the Microsoft Teams app, you are under the responsibility of Microsoft. You may have to enter the respective meeting ID and other access data. Microsoft can process the following personal data, among others, during the online meetings, also outside the European Union (in particular the USA):
· Information about the user: e.g. B. Display name
· e-mail address, if applicable
· Profile picture (optional)
· Preferred Language
· Meeting metadata: e.g. B. date, time, meeting ID, phone numbers, location,
Text, audio and video data:
You may have the option of using the chat function in an online meeting. In this respect, the text you enter will be processed in order to display it in the online meeting. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera on the end device will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the Microsoft Teams applications.
Events are only recorded with your consent. You can view Microsoft's data protection declaration here: https://privacy.microsoft.com/de-de/privacystatement
You can apply to us electronically, in particular by using the appropriate form on our website. Of course, we will only use your information to process your application and will not pass it on to third parties. Please note that if you send your application via e-mail, unencrypted e-mails will not be protected against access.
Your personal data will be deleted immediately after the application process has been completed, or after a maximum of 6 months, unless you have given us your express consent to store your data for a longer period of time or a contract has been concluded. The legal basis is Art. 6 Para. 1 a, b and f GDPR and Section 26 BDSG.
Baldus Sedation GmbH & Co. KG
In der Langfuhr 32
Telephone: 0049 261/96 38 926-66