Controller responsible for data processing is
GesundPur
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our websites without providing any information about yourself. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the retrieval.
This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our offer. This serves, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the correct presentation of our offer. All access data will be deleted no later than seven days after the end of your page visit.
2. Data collection and use for contract processing, contact and opening of a customer account
We collect personal data if you voluntarily provide it to us in the context of your order or when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, since in these cases we require the data to process the contract or your contact inquiry, and you cannot send the order or inquiry without this information. The data collected can be seen from the respective input forms. We use the data provided by you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the purpose of contract processing and handling your inquiries.
If you have given your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of opening your customer account.
After full completion of the contract or deletion of your customer account, your data will be restricted from further processing and deleted after expiry of the tax and commercial law retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a designated function in the customer account.
3. Data sharing
For the fulfillment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution handling the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The privacy policy of the respective payment service provider applies.
We use a shipping service provider whose registered office is located in a country outside the European Union. The transmission of personal data to this company takes place only to the extent necessary for the fulfillment of the contract.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipment for us (drop shipping).
4. Email newsletter
Email advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this or provided separately by you to regularly send you our email newsletter based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address from the distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.
5. Social media
Our online presence on Facebook, Instagram
Our presence on social networks and platforms serves a better, active communication with our customers and interested parties. We inform there about our products and current special offers.
When visiting our online presences in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These may be used, for example, to display advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your device. These cookies store user behavior and interests. This serves, pursuant to Art. 6 para. 1 lit. f GDPR, to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent to data processing (e.g. by ticking a checkbox), the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
If the aforementioned social media platforms have their headquarters in the USA, the following applies: For the USA there is an adequacy decision of the European Commission. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
Detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and settings options to protect your privacy, in particular objection options (opt-out), can be found in the privacy notices of the providers linked below. Should you nevertheless need help in this regard, you can contact us.
Facebook: https://www.facebook.com/about/privacy/
Data processing takes place on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here.
Further information on data processing in connection with the visit of a Facebook fan page (information about Insights data) can be found here.
Instagram: https://help.instagram.com/519522125107875
Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
6. Contact options and your rights
As a data subject, you have the following rights:
pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
pursuant to Art. 16 GDPR, the right to request without undue delay the correction of inaccurate or completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
for the exercise of the right to freedom of expression and information;
for compliance with a legal obligation;
for reasons of public interest; or
for the establishment, exercise or defense of legal claims;
pursuant to Art. 18 GDPR, the right to request the restriction of processing of your personal data, insofar as
the accuracy of the data is contested by you;
the processing is unlawful but you oppose its deletion;
we no longer need the data, but you require it for the establishment, exercise or defense of legal claims; or
you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or place of work or at our company headquarters.
For questions about the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consent granted or objection to a particular data use, please contact us directly via the contact details in our imprint.
Right to object
Insofar as we process personal data as explained above in order to safeguard our legitimate interests within the framework of a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you only have a right of objection if there are reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.