Data Protection Policy

We would hereby like to inform you of how we handle your personal data:

1. Name and contact details of the controller and the company data protection officer.

This data protection information applies to data processing by:

Person Responsible

A & O Gesundheit Medien- und Verlagsgesellschaft mbH
Managing Director: Guido Mecklenbeck
Mörsenbroicher Weg 200
D-40470 Düsseldorf
email: info@a-o-gesundheit.de
Tel.: +49 (211) 58 33 57 300

Data Protection Officer

You can contact our data protection officer by contacting the email address: datenschutzbeauftragter(at)a-o-gesundheit.de.

 

2. General Data Processing Information

a) Collection and storage of personal data and the nature and purpose of use

We collect and use the personal data of our users in principle only as required to host a functional website featuring our content and services. Personal data of our users is only collected and used after they have provided their consent. An exception applies in such cases in which it is not possible to obtain prior consent, and legal provisions permit the processing of data.

 

b) The legal basis for the processing of personal data

If we obtain the data subject consent data to processing operations, Art. 6, (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Art. 6 (1) lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill the contractual stipulation, to which the data subject is a contractual party. The same applies to processing operations required to carry out precontractual measures.

If the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

If processing is required to preserve the vital interests of the data subject or another natural person, Art. 6 (1) lit. d GDPR serves as the legal basis for the processing.

Art. 6 (1) S. 1 lit. f GDPR serves as the legal basis for the processing of data. Our legitimate interest stems from the purposes of data processing listed above. We never use the collected data to identify you.

 

c) Data Deletion and Storage Period

The personal data of the data subject is deleted or restricted when the purpose of storage no longer applies. In addition, data may be stored if this has been stipulated by the European or national legislator in EU-applicable legal regulations, laws, or other provisions which apply to the person responsible. Data may also be restricted or deleted if a legally stipulated storage deadline has expired, unless the data is required for the conclusion or fulfillment of a contract.

 

3. Provision of the Website

a) Visiting the Website

When accessing our website (vitamindoctor.com), the browser on the user's device will automatically transmit information to our website server. This information is temporarily stored in what is known as a logfile. The following information is stored, without action of the part of the data subject, until the time of automatic deletion:

  • Time and date of access,
  • IP address of the accessing computer,
  • name and URL of the accessed file,
  • the website from which our site was accessed (Referrer URL),
  • amount of transmitted data,
  • access status,
  • technical description of the browser used and, when necessary, the name of the computer operating system and the name of your access provider.

 

Our company will process the above mentioned data for the following purposes:

  • To ensure the smooth functioning of the website connectivity,
  • to ensure comfortable use of our website,
  • analysis of system security and stability
  • and for additional administrative purposes.

The legal basis for the data process is Art. 6 (1) S. 1 lit. f GDPR. Our legitimate interest stems from the purposes of data processing listed above. We never use the collected data to identify you.

We also apply the use of website cookie and analysis services during a visit to our website. Further applicable information can be found in sections 4 or 4 and 5 of this data protection policy.

 

b) Contact via Email

We can be contacted directly via the provided email address. In this case, the user data transmitted with the email will be stored. This information will not be transmitted to any third parties. The data will be used exclusively for the processing of the conversation.

The legal basis for the processing of data transmitted when sending an email is Art. 6 (1) lit. f GDPR. If the email contact pertains to a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

In the case of contact via email, herein lies the necessary legitimate interest for the processing of the data. The data will be deleted as soon as the purpose for the original collection of the data is fulfilled.

 

4. Transmission of Data

Transmission shall be lawful only if and to the extent that at least one of the following applies: We shall transmit your personal data to third parties only if:

  • you have given your explicit prior consent as per Art. 6 (1) S. 1 lit. a GDPR,
  • to the transmission as per Art. 6 (1) S. 1 lit. f GDPR, only if necessary for the establishment, exercising, or defending of legal claims, except where your interests are overridden by the fundamental rights
  • if there is a legal obligation to transmit the data as per Art. 6 (1) S. 1 lit. c GDPR and if
  • this is legally permitted as per Art. 6 (1) S.1 lit. b GDPR for the conclusion of a contractual agreement.

 

5. Cookies and Google Analytics

A&O websites use cookies. Cookies are small data packages or text files that are stored on the user's computer and via the user's browser and exchange certain types of data and setting with the A&O systems. Generally, cookies contain the name of the domain from which the cookie data has been sent, as well as information regarding the age of the cookie and an alphanumeric identifier. Cookies enable A&O to make the website more visually appealing and user-friendly, for example, the storage of certain information entered by the user so is not necessary for the user to enter the same information during each visit to the website.

A&O will not use the information contained in the cookies to identify the user, nor is the cookie information stored with any other user information that A&O may have stored about the user.

This website uses functions provided by the web analysis service Google Analytics. The operator is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA ("Google"). Google Analytics also uses cookies. The information generated by the cookie regarding the usage of the internet page will usually be transmitted to and stored on a Google server located in the USA.

A&O websites use Google Analytics with the additional "anonymize IP" function. This means that user IP addresses collected in a EU member state, or other signatory states to the EEA, will be shortened before being transmitted to the USA. Only in exceptional cases will a complete IP address be transmitted first to a Google server in the USA and then shortened.

Google uses the information generated by the Google Analytics cookies on behalf of A&O, to analyse the usage of the website, to create reports on website activity and to provide other services to A&O related to the use of the website and the Internet. The IP address sent from your browser as part of Google Analytics services is not merged with other data by Google.

The user can prevent data generated by the cookies and relating to use of the website (including the IP address) from being collected and processed by Google Analytics, by downloading and installing a browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout?hl=en. A&O would like to point out in this case that it is possible that not all functions offered by this website will be available. The user can also prevent data collection by Google Analytics via the following link. In the case, an opt-out cookie will be generated which will prevent data collection during any future visits to the A&O website:

Disable Google Analytics


Further information on the terms of use and data protection can be found at  www.google.com/analytics/terms/gb.html and  www.google.com/intl/de/analytics/privacyoverview.html 

If a user wishes to reject the use of cookies (including Google analytics cookies), they can set their browser to reject the storage of cookies. This action may limit or prohibit the use of the A&O website. If a user wishes to accept A&O-related cookies, but not the cookies of A&O service providers and partner, they can activate the setting "block third-party cookies" (or a similar function).

6. Rights of the Data Subject

You have the right:

  •  as per Art. 15 GDPR, to demand information about their personal data being processed by us. Especially, information relating to purposes of the processing, the categories of personal data being processed, the categories of the recipients to whom the personal data has been or will be disclosed, the envisaged period for which the personal data is to be stored, the right or correction, deletion, restriction or appeal to the responsible data protection authority. If the personal data is not collected by our company, all available information as to their source, and information must be made available, in relation to the existence of automated decision-making, including profiling, and, where applicable, the receipt of relevant detailed information;
  • as per Art. 16 GDPR, the right to immediate correction or completion of your personal data stored by our company;
  • as per Art.17 GDPR, the deletion of all your personal data for the fulfillment of a legal obligation, for reasons of public interest, or establishment, exercising of defense of legal claims;
  • as per Art. 18 GDPR, the right to demand restriction of the processing of your personal data, where you contest the accuracy of the data, the processing of the data is unlawful, but where you reject the right to deletion and we no longer require the data for the stated purpose, but where you require this data to allow for the establishment, exercising or defense of legal claims or if, as per Art, 21 GDPR, you have appealed against the processing of your data.

 

7. Right to Object

If the processing of your personal data is based on legitimate interests as per Art. 6 (1) S. 1 lit. f GDPR, you have the right, as per Art. 21 GDPR, to object to the processing of your personal data, if there are legitimate grounds for this arising from your particular situation or the objection is directed against direct advertising. In the case of the latter, you have a general right of objection, which we will implement without the need for details of a particular situation. To make use of the right to objection or retraction, a simple form letter sent via post to the address mention above or an email sent to an datenschutzbeauftragter@a-o-gesundheit.de will suffice.

 

8. Data Security

We apply all suitable technical and administrative safety measures to protect data against coincidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our safety measures are consistently updated to correspond to the latest technological advancements.

 

9. Topicality and Amendments of our Data Protection Policy

The version is valid as of May 2018.

Due to further development and its contents, or due to eventual change to the corresponding law and official legal obligations, it may be necessary to amend our data protection policy. The current version of our data protection policy can be accessed and printed on our website at any time.