Privacy


Privacy policy for the website www.gvb-gelimed.de
We would now like to ask you to read the following summary of how our website works carefully. 
The following data protection information is intended to inform you about how we use your personal data. We will strictly adhere to the provisions of German data protection law, as well as the requirements of the European General Data Protection Regulation (GDPR). 

Responsible party and contact for your data protection 
The controller within the meaning of the GDPR, other data protection laws applicable in the member states of the EU and other provisions of a data protection nature is:

GVB-geliMED GmbH, Ginsterweg 7a, 239795 Bad Segeberg, Germany 
Michael Geiselberger 
Phone: 04551 - 956730 
info@gvb-gelimed.de 

Scope of the processing of personal data 
We collect and use your personal data only to the extent necessary to provide a functional website and its content and services, e.g. when you register on our website or log into an existing customer account or when you order products. The collection and use of your personal data takes place regularly only with your consent. An exception applies in cases where prior consent is not possible for factual reasons and the processing of the data is permitted by law.
The security of your personal data is a high priority for us. We protect your data stored by us through technical measures by Shopware and organizational measures by us personally in order to effectively prevent loss or misuse by third parties. If other employees are hired who process personal data, they will be responsibly bound to our data secrecy and must also strictly adhere to it.
In order to ensure the permanent protection of your data, the technical security measures are regularly reviewed and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and in accordance with our instructions.

Processing purposes and legal basis for processing your personal data

We collect, process and use your personal data for the following purposes:

  • Establishment and execution of contractual relationships 
  • Dispatch of printed products Sending newsletters (newsletters are only sent at your express request) 
  • Customer service and customer support 
  • Provision of telemedia, e.g. for processing orders for our online range of goods and services 

The processing of your personal data may be based on the following legal bases:

  • Art. 6 para. 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain your consent for a specific processing purpose. 

  • Art. 6 para. 1 lit. b GDPR, insofar as the processing of personal data is necessary for the performance of a contract, e.g. when you purchase a product. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our product selection or services. 

  • Art. 6 para. 1 lit. c GDPR, insofar as I am subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations. 

  • Art. 6 para. 1 lit. d GDPR in the event that vital interests of you or another natural person require the processing of personal data.

  • Art. 6 para. 1 lit. f GDPR applies on the basis of our legitimate interests, e.g. when using service providers in the context of order processing, such as shipping service providers or when carrying out statistical surveys and analyses as well as logging registration procedures. We are interested in the use of a user-friendly, appealing and secure presentation and optimization of our website, which serves both our business interests and meets your expectations. 

Duration of storage and routine deletion of personal data
We process and store your personal data only for the period of time required to fulfill the purpose of storage or if this has been provided for in laws or regulations. Your personal data will be deleted or blocked once the purpose no longer applies or has been fulfilled. In the event of blocking, deletion will take place as soon as legal, statutory or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause disproportionately high costs due to the special type of storage.

Collection of general data and information, so-called log files
Each time our store page is accessed, a series of general data and information is collected on the basis of Art. 6 para. 1 lit. f GDPR, which is temporarily stored in log files on a server. A log file is created as part of an automatic log of the processing computer system. The following can be recorded:
  • Access to the website (date, time and frequency)
  • How you reached the website (previous page, hyperlink, etc.)
  • Amount of data sent Which browser and browser version you are using
  • The operating system you are using Which internet service provider you use
  • Your IP address, which your Internet access provider assigns to your computer when you connect to the Internet
The collection and storage of this data is necessary for the operation of the website in order to ensure the functionality of the website and to deliver the content of our website correctly. In addition, we use the data to optimize the website and to ensure the security of Shopware's IT systems. For this reason, the data is stored for a maximum of 7 days as a technical precaution.
This data is used for the purposes of advertising, market research and the needs-based design of our services by creating and evaluating user profiles under pseudonyms, but only if you have not exercised your right to object to this use of your data (see information on the right to object under “Your rights”).

Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM.
Further information about Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Sending information about our offer and special promotions as well as other news, e.g. newsletters
We use your data to send information you have ordered about our offer and other promotions from us to the e-mail address you have provided. Consent to the dispatch is given on the basis of Art. 6 para. 1 lit. a, Art. 7 GDPR and § 7 para. 3 UWG.

a) Newsletter registration on our website
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to our system, i.e. at least your e-mail address. Registration takes place by means of the so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with other people's e-mail addresses. As part of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection notice.

b) Shipping due to the sale of goods and services
If you purchase goods or services on our website, we may send you information about our own similar goods, changes and services to the e-mail address you have provided, even without your consent.

c) Postal dispatch
We may also use your data to send you information about our offers and promotions by post. 
Certain information messages that are necessary for contract processing and the function of our website, for example regarding the service (e.g. registration confirmation, customer service information) or a chargeable package, such as order confirmation, contract documents, payment processing, cannot be canceled. You will receive these messages to the contact information you have provided. 

Processing of personal data when contacting us, registering or placing a guest order

a) Making contact
When you contact us by e-mail or via a contact form, the data you provide will be stored by our system on the basis of Art. 6 para. 1 lit. a GDPR in order to answer your questions. The contact is logged in order to be able to prove the contact in accordance with the legal requirements. Your consent is obtained for the processing of the data in the contact form and reference is made to this privacy policy.

b) Registration
On our store page, we offer you the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to our system and stored. The registration serves the fulfillment of a contract or the implementation of pre-contractual measures and is therefore based on Art. 6 para. 1 lit. b GDPR.
For the conclusion and processing of contracts, we require contact details, such as name, delivery and billing address and e-mail address, as well as information on the type of payment method you have chosen, depending on the individual case. In addition, we use your data to maintain our customer database so that only accurate data is stored there. In order to avoid typing errors and to ensure that your ordered items reach you, we check the completeness and accuracy of your address when you enter it.

c) Other
Based on Art. 6 para. 1 lit. c and f GDPR, we use and store your personal data and technical information insofar as this is necessary to prevent or prosecute misuse or other illegal behavior on our website, e.g. to maintain data security in the event of attacks on Shopware's IT system. This also takes place insofar as we are legally obliged to do so, for example due to official or court orders, and for the exercise of our rights and claims as well as for legal defense.
Disclosure of personal data to third parties
When passing on your personal data to third parties (tax consultants, shipping service providers, direct suppliers) or for internal processing, we always ensure the highest possible level of security. Therefore, your data will only be passed on to our selected and contractually obligated service providers and partner companies. In addition, your data will only be forwarded by us to bodies that are located within the European Economic Area and are therefore subject to strict EU data protection law or that are obliged to comply with a corresponding level of protection.

a) Disclosure within affiliated companies pursuant to Art. 6 para. 1 lit. b GDPR
We pass on your personal data to affiliated companies in Germany for the conclusion and processing of contracts for offers on our website for storage in central databases and for internal billing and accounting purposes.

b) Inspection of service providers pursuant to Art. 6 para. 1 lit. b and f GDPR
Shopware works for us for the operation and optimization of our website and technical processing, e.g. for IT services or hosting within our website. Shopware may not access our system without our consent. If this is necessary for technical reasons, they are obliged to strictly comply with Art. 6 para. 1 lit. b and f GDPR.
In contrast to order processing, we transmit data to third parties for their own use for contract processing in the following cases:
When delivering goods to logistics companies and the postal service provider specified in the order.

c) Disclosure to other third parties pursuant to Art. 6 para. 1 lit. c and f GDPR
We will pass on your data to third parties or government agencies within the framework of the existing data protection laws if we are legally obliged to do so, e.g. due to an official or court order, or if we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offenses or for the exercise and enforcement of our rights and claims.

Your rights
Requested information will be provided immediately, at the latest within one month of the request. You have the right to information about personal data, to view your data, to request a correction or to have it deleted. In the event of a justified complaint, you can contact the independent state center for data protection.

Independent State Center for Data Protection
Holstenstraße 98
24103 Kiel
Mailing address:
P.O. Box 71 16
24171 Kiel
Telephone: 0431 988-1200 
Fax: 0431 988-1223
E-mail: mail@datenschutzzentrum.de

Links to websites of other companies
Our website may contain links to websites of other companies. We are not responsible for the privacy practices of external websites that you may access through these links.

Changes to the data protection information
We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services.

Data Protection Officer:
Ulrika Geiselberger
Ginsterweg 7a
23795 Bad Segeberg
Tel: 04551-956730
u.geiselberger@gvb-gelimed.de
Status: May 2018