Privacy statement

We welcome you visiting our website and are very pleased about your interest in our company. We take the protection of your personal data very seriously. We process your data in compliance with the applicable legal provisions for the protection of personal data, in particular the EU’s General Data Protection Regulation (GDPR) and the country-specific implementation laws applicable to us. By means of this privacy statement, we comprehensively inform you about the processing of your personal data by Abtswinder Naturheilmittel GmbH & Co. KG and the rights you are entitled to.

 

In this context, personal data are pieces of information allowing for an identification of a natural person. In particular, this includes the name, date of birth, address, telephone number and email address, but also your IP address.

 

Anonymous data are data in which no personal reference can be established to the user.

 

Responsible body and data protection officer

 

Address (Gewürzstr. 1-3, 97355 Abtswind)
Contact information (www.abtswinder.de, 09383/9711-0, [email protected], 09383/971166)

 

Contact of the data protection officer
Company Atarax GmbH & Co. KG, Dr.-Dassler-Str. 57, 91074 Herzogenaurach

 

Your rights as a concerned person

 

First, we want to inform you about your rights as a concerned person here. These rights are standardized in the Art. 15 - 22 GDPR. This includes:

 

  • The right of information (Art. 15 GDPR),
  • The right of deletion (Art. 17 GDPR),
  • The right of correction (Art. 16 GDPR),
  • The right of data transferability (Art. 20 GDPR),
  • The right of restriction of data processing (Art. 18 GDPR),
  • The right of refusal of data processing (Art. 21 GDPR).

 

To exercise these rights, please contact: [email protected] The same applies if you have any questions on the data processing in our company. Besides, you have a right of complaint with a privacy supervisory authority.

 

Rights of refusal

 

Please note the following in relation to rights of refusal:


If we process your personal data for the purpose of direct advertising, you have the right to object to this data processing any time without indicating any reasons. This also applies to a profiling as far as it is related to the direct advertising.

 

If you object to the processing for direct advertising, we will not process your personal data anymore for these purposes. The objection is free of charge and can be expressed without formal requirements, if possible to: .

 

If we process your data to preserve justified interests, you can object to this processing any time for reasons caused by your special situation; this also applies to a profiling based on these provisions.

 

In such case, we will not process your personal data any longer, unless we can prove compulsory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal rights.

 

Purposes and legal bases of data processing

 

In processing your personal data, the provisions of the GDPR, the BDSG (Federal Data Protection Act) (new) and all other applicable privacy provisions are respected. In particular, the legal basis for the data processing results from Art. 6 GDPR.

 

We use your data to initiate business, to fulfil contractual and legal obligations, to execute the contractual relation, to offer products and services and to strengthen the client relationship, which can also include analyses for marketing purposes and direct advertising.

 

Your consent also represents a mandatory approval according to privacy law. At this occasion, we inform you about the purposes of the data processing and your right of revocation. If the consent also refers to the processing of special categories of personal data, we will explicitly indicate this to you in the consent, Art. 88 par. 1 GDPR in connection with § 26 par. 3 BDSG (new).

 

A processing of special categories of personal data within the meaning of Art. 9 par. 1 GDPR will only occur if this is required due to legal provisions and there is no reason to assume that your interest in the exclusion of processing worthy of protection prevails, Art. 88 par. 1 GDPR in connection with § 26 par. 3 BDSG (new).


Forwarding to third parties

 

We will forward your data to third parties only within the legal provisions or with a corresponding consent. Apart from that, there will be no transfer to any third parties, unless we are obliged to that due to compulsory legal provisions (forwarding to external bodies as e.g. supervisory authorities or prosecution authorities).


Recipients of the data / categories of recipients

 

Within our company, we will ensure that your data will only be received by those persons who need them to fulfil their contractual and legal obligations.

In many cases, service providers support our specialized departments in fulfilling their tasks. The necessary privacy contracts have been concluded with all service providers.

 

Transfer to third countries / intention to transfer to third countries

 

A data transfer to third countries (outside the European Union/the European Economic Area) only occurs as far as this is required to execute the obligations or prescribed by law or you have granted us your consent to it.

 

There is no data transmission to third countries outside the EU/the European Economic Area.

 

Duration of data storage

 

We store your data as long as they are required for the respective processing purposes. Please note that many conservation periods require that data (must) be continued to store. In particular, this concerns conservation periods according to trade or tax law (e.g. commercial code, tax code, etc.). As far as there are no further conservation obligations beyond that, the data will routinely be deleted after the achievement of the purpose.

 

In addition, we can conserve data if you have given us your consent for that or if there are legal disputes and we use evidence within the legal limitation periods, which can last up to 30 years; the regular imitation period is three years.


Safe transmission of your data

 

In order to protect the data stored with us as well as possible from accidental or intentional manipulations, loss, destruction or access by unauthorized persons, we use respective technical and organizational safety measures. The safety levels are constantly reviewed in collaboration with safety experts and adapted to new safety standards.

 

The data exchange from and to our website takes place in encrypted form, respectively. For our web presence, we offer HTTPS as a transfer protocol, respectively using the current encryption protocols (TLS_AES_128_GCM_SHA256, 128-bit key, TLS1.3. Besides, it is possible to use alternative communication paths (e.g. postal mail).

 

Obligation to provide the data

 

Various personal data are necessary for the foundation, execution and termination of obligations and the fulfilment of the associated contractual and legal duties. The same applies to the use of our website and the different functions provided by it.

 

We have summarized details on that for you in the above-mentioned paragraph. In certain cases, data must also be collected/provided due to legal provisions. Please note that a processing of your requests or the execution of the underlying obligations is not possible without the provision of these data.

Categories, sources and origin of the data

 

The respective context determines which data we process: this depends on the question whether e.g. you place an order online or enter a request in our contact form, whether you send us a job application or a complaint.

 

Please note that we might also provide information for special processing situations separately in an appropriate location, e.g. when uploading application documents or at the occasion of a contact request.

 

During a visit of our website, we collect and process the following data:

 

The provider of the pages collects and stores information automatically in so-called server log files that your browser automatically transmits to us. These are:

 

  • Browser type and browser version 
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

 

These data will not be compiled with other data sources.
The basis for the data processing is Art. 6 par. 1 f GDPR, which allows for the processing of data for the fulfilment of a contract or precontractual measures.

 

Within a contact request, we collect and process the following data:

 

  • First name and last name
  • Email address
  • Company
  • Subject


Any voluntary information additionally provided by you will also be processed.

 

Automatic decisions in individual cases

 

We do not use any purely automatic processing procedures to initiate any decisions.

 

APPENDIX


Links to other providers

 

Our website also contains – clearly recognizable – links to websites of other companies. As far as there are any links to the websites of other providers, we have no influence on their content. Therefore, no warranty or liability can be assumed for these contents. The responsibility for the contents of these pages always lies with the respective provider or operator of the pages.

 

When inserting the link, the linked pages were checked for potential infringements and recognizable violations of rights. At this time, no unlawful contents were recognizable. However, a permanent control of the content of the linked pages is not reasonable without any concrete indications of an infringement of rights. When any infringements of rights become known, such links will be removed immediately.


Cookies (Art. 6 par. 1 f GDPR / Art. 6 par. 1 a GDPR with consent)

 

In several locations, our Internet pages use so-called cookies. They serve to make our offer more user-friendly and effective and safer. Cookies are small text files that are deposited on your computer and stored by your browser (locally on your hard disk).

 

By means of these cookies, we can conduct an analysis on how users use our websites. So we can conceive the contents of the website according to the needs of the visitors. Besides, cookies allow us to measure the effectiveness of a certain advertisement and have it placed e.g. depending on the thematic user interests.

 

Most of the cookies used by us are so-called "session cookies". Those will be automatically deleted after your visit. Permanent cookies will be automatically deleted from your computer when their term (usually six months) expires or you delete them yourself before expiry of the term.

 

Most web browsers automatically accept cookies. In general, however, you can also change the settings of your browser if you prefer not to send this information. In such case, however, you can still use the offerings of our websites without any restrictions (exception: configurators).

 

We use cookies to make our offer more user-friendly and effective and safer. Besides, we use cookies allowing us to conduct an analysis on how users use our websites. So we can conceive the contents of the website according to the needs of the visitors. Besides, cookies allow us to measure the effectiveness of a certain advertisement and have it placed e.g. depending on the thematic user interests.

 

Cookies are saved on the computer of the user and transmitted to our website by it. Therefore, you as a user also have the full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. In addition, any cookies already saved can be deleted any time through an Internet browser or other software programs. This is possible in all common Internet browsers.

 

Please note: if you deactivate the storage of cookies, it could be that not all functions of our Internet page are completely available.


Contact form / making contact by email (Art. 6 par. 1 a, b GDPR)

 

There is a contact form on our website that can be used for making contact electronically. If you send us a message via the contact form, we process your data provided within the contact form to contact you and reply to your questions and desires.

 

In doing this, the principles of data economy and data avoidance are respected by having you provide only data that we absolutely need from you to make contact. These are your email address and the message text itself. In addition, your IP address will be processed due to technical requirements and for legal security reasons. All other data are voluntary fields and can be provided optionally (e.g. for a more individual reply to your questions).

 

If you contact us by email, we will only process the personal data provided in the email for the purpose of replying to your request. As far as you do not use the proposed forms to make contact, no additional data will be collected beyond that.


Advertising purposes for existing clients (Art. 6 par. 1 f GDPR)

 

Abtswinder Naturheilmittel GmbH & Co. KG is interested in maintaining the client relationship with you and sending you information and offers about our products/services as well as price information. Therefore, we process your data to send you the respective information and offers by email.

 

If you do not want that, you can object to the use of your personal data for the purpose of direct advertising anytime; this also applies to a profiling as far as it is associated with the direct advertising. If you object to that, we will not process your data anymore for this purpose.

 

The objection can be expressed without indicating any reasons free of charge and without form requirement and should be addressed, if possible, to 09383 / 97 11 – 0, by email to [email protected] or by postal mail to Abtswinder Naturheilmittel GmbH & Co. KG, Gewürzstraße 1-3, 97355 Abtswind.