data protection
data protection
Data protection
The person responsible for data processing is:
Rainer Ludäscher
Castle meadows 3
74847 Obrigheim
Germany
info@pronura.net
We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.
1. Access data and hosting
You can visit our websites without providing any personal information. Every time a website is accessed, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offering. In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site.
Hosting services provided by a third party
As part of processing on our behalf, a third-party provider provides us with the services of hosting and displaying the website. All data collected as part of the use of this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the framework explained here.
This service provider is located within a country of the European Union or the European Economic Area.
2. Data collection and use for contract processing, contact and when opening a customer account
We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract or to process your contact and you cannot send the order or contact us without providing them. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR to process the contract and process your inquiries.
If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.
After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the tax and commercial law retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this is permitted by law and about which we inform you in this statement. Your customer account can be deleted at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.
3. Data sharing
In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR, we pass on your data to the shipping company commissioned with the delivery, to the extent that this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution responsible for the payment and, if applicable, the payment service provider commissioned by us, or to the selected payment service, in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies.
Data transfer to shipping service providers
If you have given us your express consent to this during or after your order, we will pass on your email address to the selected shipping service provider in accordance with Art can contact you for delivery notification or coordination purposes.
Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
Deutsche Post DHL Group
Charles-de-Gaulle-Str. 20
53113 Bonn
Germany
4. Email newsletters and postal advertising
Email advertising with registration for the newsletter
If you register for our newsletter, we will use the data required for this or provided separately by you to regularly send you our email newsletter based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR.
You can unsubscribe from the newsletter at any time and can do so either by sending a message to the contact option described below or via a link provided in the newsletter. After you unsubscribe, we will delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.
Email advertising without registering for the newsletter and your right to object
If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you offers for similar products to those you have already purchased on the basis of Section 7 Paragraph 3 UWG , to be sent by email from our range. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in advertising to our customers.
You can object to this use of your email address at any time by sending a message to the contact option described below or via a link provided in the advertising email, without incurring any costs other than the transmission costs according to the basic tariffs.
The newsletter is sent as part of processing on our behalf by a service provider to whom we pass on your email address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.
Postal advertising and your right to object
In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, for example to send interesting offers and information about our products by post. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in advertising to our customers in accordance with Article 6 Paragraph 1 Sentence 1 Letter f GDPR.
The advertising mail is provided as part of processing on our behalf by a service provider to whom we pass on your data for this purpose.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.
5. Cookies and web analytics
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If you do not accept cookies, the functionality of our website may be restricted.
Use of Google (Universal) Analytics for web analysis
If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analysis service is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. ( www.google.de ). Google (Universal) Analytics uses methods that enable analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data. Once we no longer use Google Analytics, the data collected in this context will be deleted.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with future effect by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de . This prevents the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.
As an alternative to the browser plug-in, you can <a href=""javascript:gaOptout()"">click this link</a> to prevent Google Analytics from recording data on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you will be asked to give your consent again.
Use of etracker for web analysis
If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR, data will be automatically collected and stored on this website using technologies from etracker GmbH ( www.etracker.com ) for the purpose of website analysis Usage profiles are created using pseudonyms. Cookies can be used. The pseudonymized usage profiles will not be combined with personal data about the bearer of the pseudonym without a separate, express consent. Once we no longer use eTracker, the data collected in this context will be deleted. You can revoke your consent at any time with future effect by clicking this link .
After you revoke your consent, an opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to give your consent again.
6. Online Marketing
Google Ads Remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you visit. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our website in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Once we no longer use Google Ads Remarketing, the data collected in this context will be deleted.
Any further data processing will only take place if you have agreed to Google that your web and app browser history will be linked by Google to your Google account and that information from your Google account will be used to personalize ads that you display on the web see. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups.
Google Ads is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ( www.google.de ).
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can deactivate the remarketing cookie via this link . You can also find out more about the setting of cookies and make settings from the Digital Advertising Alliance .
Hotjar We use Hotjar to better understand the needs of our users and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users' experiences (e.g. how much time they spend on which pages, what links they click, what users like and don't like, etc.) and that helps us in enables us to build and maintain our service based on user feedback. Hotjar uses cookies and other technologies to collect data about the behavior of our users and their devices. This includes a device's IP address (which is processed during your session and stored in an anonymized form), the device's screen size, device type (unique device identifiers), browser information, geographical location (country only) and preferred language in which our website is displayed. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
For more details, see the 'About Hotjar' section on the Hotjar support page ."
Google reCAPTCHA
For the purpose of protecting against misuse of our web forms and against spam, we use the Google reCAPTCHA service in some forms on this website. Google reCAPTCHA is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. ( www.google.de ). By checking manual input, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in protecting our website from misuse and in ensuring that our online presence is displayed smoothly.
Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, as part of the verification process that enables an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website, including your IP address, is usually transmitted to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.
Personal data is not read or saved from the input fields of the respective form.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by JavaScript or the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by changing your browser settings prevent JavaScript or the setting of cookies. Please note that this may limit the functionality of our website for your use.
Further information about Google's data protection policy can be found here .
Google Fonts
The script code “Google Fonts” is integrated into this website. Google Fonts is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. ( www.google.de ). This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a uniform presentation of the content on our website in accordance with Article 6 Paragraph 1 Letter f) GDPR. In this context, a connection is established between the browser you use and Google's servers. This gives Google knowledge that our website was accessed via your IP address.
To the extent that information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield. Further information about data processing by Google can be found in Google's data protection information .
Adobe Typekit
The script code “Adobe Typekit” from Adobe Systems Incorporated 345 Park Avenue San Jose, CA 95110-2704, USA (hereinafter: Adobe) is integrated into this website. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in a uniform presentation of the content on our website in accordance with Article 6 Paragraph 1 Letter f) GDPR. In this context, a connection is established between the browser you use and Adobe's servers. This gives Adobe knowledge that our website was accessed via your IP address.
Adobe is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
Further information about data processing within Adobe Typekit can be found in Adobe's data protection information .
7. Social media
Use of social plugins from Facebook, Instagram
So-called social plugins (“plugins”) from social networks are used on our website.
If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page on our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example by clicking the “Like” or “Share” button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed there to your contacts. This serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
YouTube video plugins
Third-party content is integrated into this website. This content is provided by Google (“Provider”). YouTube is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ( www.google.de ).
The extended data protection setting is activated for videos from YouTube that are embedded on our site. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
Vimeo video plugins
Third-party content is integrated into this website. This content is provided by Vimeo LLC (“Provider”). The integration of the video serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”).
The tracking tool Google Analytics is automatically integrated into videos from Vimeo that are embedded on our site. We have no influence on the tracking settings or the analysis results collected and cannot view them. In addition, web beacons are set for website visitors when Vimeo videos are embedded.
To prevent Google Analytics tracking cookies from being set, you can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de .
As an alternative to the browser plug-in, you can <a href=""javascript:gaOptout()"">click this link</a> to prevent Google Analytics from recording data on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you must click the link again.
The purpose and scope of data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your related rights and setting options to protect your privacy can be found in the providers' data protection information:
https://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
https://policies.google.com/privacy
If you do not want the social networks to directly assign the data collected via our website to your profile in the respective service, you must log out of the relevant service before visiting our website. You can also completely prevent the plugins from loading using add-ons for your browser, e.g. B. with the script blocker “ NoScript ”.
Our online presence on Facebook, Twitter, YouTube, Instagram
Our presence on social networks and platforms serves better, active communication with our customers and interested parties. We provide information there about our products and ongoing special promotions.
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that presumably match your interests. Cookies are usually used on your device for this purpose. These cookies store visitor behavior and user interests. In accordance with Article 6 Paragraph 1 Letter f of the GDPR, this serves to protect our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (consent) to data processing, for example with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
If the aforementioned social media platforms have their headquarters in the USA, the following applies: An adequacy decision by the European Commission has been made for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here .
For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your related rights and setting options to protect your privacy, in particular objection options (opt-out), please refer to the providers' data protection information linked below. If you still need help with this, you can contact us.
Facebook: https://www.facebook.com/about/privacy/
Google/YouTube: https://policies.google.com/privacy?hl=en-GB
Twitter: https://twitter.com/en/privacy
Instagram: https://help.instagram.com/519522125107875
Option to object (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads
Google/YouTube: https://adssettings.google.com/authenticated
Twitter: https://twitter.com/personalization
Instagram: https://help.instagram.com/519522125107875
8. Sending review reminders via email
If you have given us your express consent to this during or after your order in accordance with Art Rating System.
This consent can be revoked at any time by sending a message to the contact option described below.
9. Contact options and your rights
As a data subject, you have the following rights:
• in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• in accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect or complete personal data stored by us;
• in accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims
is required;
• in accordance with Art. 18 GDPR, the right to request the restriction of the processing of your personal data, to the extent that
- you dispute the accuracy of the data;
- the processing is unlawful but you object to its deletion;
- we no longer need the data, but you need it to assert, exercise or defend legal claims or
- you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
• in accordance with Art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact us directly using the contact details in our legal notice.