Data Privacy Policy
We are pleased that you are visiting our website. We take the protection of your personal data very seriously.
Please find information below according to Articles 13 and 14 of the GDPR on processing your personal data which we are pleased to provide in this data privacy policy.
1. Processing of personal data when using our website.
1.1 Accessing the website
(1) For purely informative use of our website, i.e. if you do not register or transfer information to us by other means, we only collect the personal data that your browser transfers to our server.
In this regard, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety:
- IP address of the requesting processor
- Date and time of the request
- Name and URL of the file retrieved
- Information on the operating system and its status of access/HTTP status code
- Volume of data transmitted
- Website from which our site was accessed
- Browser and language and version of the browser software
(2) The legal basis for processing is the balancing of interests according to Art. 6 Para. 1 (1) Letter f of the GDPR.
The data specified are processed by us for the following purposes:
- To ensure trouble-free connection to the website
- Evaluation of system safety and stability.
- Analysis of unauthorised access or attempts to access the system
(3) The listed data are automatically deleted after a period of one month.
1.2 Using our contact form
Description of the data processing
(1) If you have any questions, you can contact us using a form provided on our website. To do so, you need provide a valid email address as well as other data for the required fields so that we know who sent the request and which enables us to answer this. Other information can be entered voluntarily.
Legal basis and purpose of the data processing
(2) The legal basis for processing is the balancing of interests according to Art. 6 Para. 1 (1) Letter f of the GDPR.
We process the data listed for the following purposes:
- Getting in touch
- Responding to specific questions
Retention period
(3) Subject to statutory retention periods, the personal data are erased after a period of 90 days after the question has been answered, to enable a response to further queries.
1.3 Using Adobe Fonts
Our website uses so-called web fonts, which are provided by Adobe, for the uniform representation of fonts.
Provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. To do this, the browser you are using must connect to the Adobe servers.
This will give Adobe notice that your website has been accessed via your IP address. The use of Adobe Fonts is in the interest of a uniform and attractive presentation of our online services.
This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font will be used by your computer.
For more information about Adobe Fonts, visit https://fonts.adobe.com/ and the Adobe privacy policy at https://www.adobe.com/privacy/policies/adobe-fonts.html
2. Notes on consent for provision of the personal data
(1) If you have given consent for processing of your data, you may withdraw this at any time. Such a withdrawal of consent affects the admissibility of processing your personal data based on the consent you gave before its withdrawal.
When withdrawing your consent, we kindly ask you to use one of the contact options listed in the disclaimer.
(2) The provision of personal data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract.
3. Use of cookies
(1) General information
We use cookies to make our website attractive and user-friendly, to improve it and to accelerate the processing of enquiries.
Cookies are small text files that are saved on your computer. They store certain settings and data for exchange with our system via your browser. Cookies do not damage your computer. They do not contain any malware such as viruses.
You can adjust your browser so that cookies are not saved in the first place or are deleted at the end of your internet session.
However, please note that in this case you may possibly not be able to use all the functions of our website.
(2) Technically necessary cookies
We use technically necessary cookies that are required to operate the website. They warrant functions without which you cannot use the website as intended.
The legal basis for processing is the balancing of interests pursuant to Art. 6 Para. 1 (1) Letter f of the GDPR.
(3) Optional cookies
We also use optional cookies for website analysis. Please find below a detailed description of the optional cookies used on our website:
Web analysis with Google Analytics:
These cookies give your device a randomly generated ID so that we can recognize your device at your next visit. Please refer to point 4 for details about website analysis.
Validity period: 6 months
We only use optional cookies after obtaining your prior consent (Art. 6 Para. 1 (1) Letter a of the GDPR). When you visit our website for the first time, you will see a banner where we ask for your consent to the use of optional cookies.
If you give your consent, we save a cookie on your computer and the banner no longer appears for the service life of the cookie. After this or if you actively delete the cookie beforehand, the banner appears again next time you visit our website to obtain your consent once more.
Use of optional cookies
4. Google Analytics
On the basis of your consent pursuant to Art. 6 Para. 1 (1) Letter a of the GDPR, our websites use Google Analytics, a web analytics service provided by Google Inc., 600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics is used for expedient design and improvement of our website.
Google Analytics uses cookies and creates pseudonymous user profiles. The information generated by the cookie about your use of our website (browser type and version; operating system, referrer URL, IP address and time of the server request) is usually transmitted to and stored by Google on a server in the United States. Before doing so, Google abbreviates your IP address within the Member States of the European Union or in other signatory states to the EEA Treaty and renders it anonymous in such a way that it cannot be allocated to your person (IP masking). The IP address is not put together with other data by Google. Pursuant to Art. 28 of the GDPR, Google uses the information on our behalf to evaluate your use of our websites, to produce reports about the website activities and to provide other services related to the use of our websites and the internet.
If you have not given your consent to the use of tracking cookies, then such tracking cookies will not be put on your device. You can also prevent registration of the data generated by the cookie regard-ing your use of our websites (including your IP address) and the processing of such data by Google by downloading and installing the browser add-on available under the following link: tools.google.com/dlpage/gaoptout.
As an alternative to the browser add-on, you can use this link to prevent registration by Google Analytics. In this case, an opt-out cookie is placed on your device that prevents your data from being registered in future when you visit our websites. Please note that this opt-out cookie only applies to this browser and to our websites. You will have to set the cookie again if you delete the cookies in your browser.
Please note that our websites also use Google Analytics for cross-device analysis of visitor flows based on a user ID. To prevent registration by Universal Analytics across different devices, you would have to implement the opt-out on all used systems.
Please refer to the following Google websites for more information about terms and privacy in relation to Google Analytics: Google Analytics terms ,
data security and privacy principles of Google Analytics
and in the Google privacy policy .
5. Recipients of personal data
(1) Within the EU/EEA:
All website data are stored on servers within the EU/EEA member states.
The personal data that you have made available may possibly be forwarded to service providers needed by us to fulfil the functions and services according to point 1 (e.g. logistics service providers for the dispatch of materials).
(2) Outside of the EU/EEA – third country:
As a basic rule, no data are forwarded to recipients in third countries, apart from data processing by Google as explained under point 4.
6. Your rights
(1) You have the following rights in regard to your personal data:
- Art. 15 of the GDPR Right of access
Right of access to your personal data that is stored by us. - Art. 16 of the GDPR Right to rectification
Right to rectification of your personal data that is inaccurate. - Art. 17 of the GDPR Right to erasure
Erasure of your personal data provided that no statutory retention periods exist. - Art. 18 of the GDPR Right to restriction of processing
If certain conditions are met, you have the right to restriction of processing of your personal data and these will not be processed further. - Art. 20 GDPR Right to data portability
Right to data portability of your personal data that you provided to us. - Art. 21 of the GDPR Right to object to processing
(2) You also have the right to lodge a complaint with a data protection Supervisory Authority.
(3) There is no automated decision-making including profiling according to Article 22 Para. 1 and 4.
7. External links
Our website contains links to third party websites that are specially designated and whose content is not located on our server. The external contents of these links was checked when the links were set up. However, it cannot be ruled out that the contents were sub-sequently amended by the respective providers. If you should notice that the content of external providers infringes any applicable laws, then please advise us. This data privacy policy only applies to the content on our servers.
8. Contact details
(1) The name and contact details of the controller and their representative:
Biologische Heilmittel Heel GmbH
Dr.-Reckeweg-Str. 2 - 4
76532 Baden-Baden
Email: info@heel.de
You can find more information in the disclaimer.
(2) Contact details of the Data Protection Officer:
Biologische Heilmittel Heel GmbH
Data Protection Officer
Dr.-Reckeweg-Str. 2 - 4
76532 Baden-Baden
Email: dataprotection@heel.com
9. Amendments to this data privacy policy
We will revise this data privacy policy from time to time to adapt it to the state-of-the-art or to revised legal frameworks.
Therefore, we recommend that you regularly inform yourself about changes to this webpage.
Dated: May 2018