Data protection

© 2020 Rolf Becker WIENKE & BECKER - COLOGNE

You can print out or save this document by using the usual functionality of your Internet service program (= browser: there usually "File" -> "Save as"). You can also download and archive this document in PDF form by clicking here . To open the PDF file, you need the free Adobe Reader program (at www.adobe.de ) or a comparable program who can handle PDF format.

Data protection at https://www.bio-lyne.de/

Data protection is a matter of trust and your trust is important to us. The data processing of equipe4brands GmbH, represented by Carsten Jurk (hereinafter also "we" or "us") as the responsible person within the meaning of Art. 4 No. 7 GDPR, is of course based on the statutory provisions.

Your information

This data usage information informs visitors and customers who conclude contracts on our website about data collection, processing and use during visits, registration and conclusion of contracts as well as about objection, revocation and other rights that you as the person affected by the data collection and use are due.

The following headings are intended to make it easier for you to access the information you require.

• I. What do we do with your personal data?
  • 1. What are personal data
  • 2. Use of data for contract processing and internal organization
  • 3. Data storage, customer account
  • 4. Contact
  • 5. Use of data for advertising
  • 6. Deletion and blocking
• II. Data collection when you visit our website
  • 1. Technical information and cookies
  • 2. Use of profiles
• III. How do we protect your personal data?
  • 1. General protective measures
  • 2. Protection of your payment data and credit checks
• IV. What are my rights?
  • 1. Right to confirmation and information
  • 2. Right to rectification
  • 3. Right of objection
  • 4. Right of withdrawal
  • 5. Right to erasure (right to be forgotten)
    • a) Requirements for deletion
    • b) Further right to be forgotten
    • c) Exceptions to deletion
  • 6. Right to restriction of processing
  • 7. Right to data portability
  • 8. Asserting your rights

I. What do we do with your personal data?

1. What are personal data

Personal data is all information that relates to an identified or identifiable natural person (hereinafter "data subject"). A name is not necessarily required for identifiability. Indirect identifiability is also sufficient, e.g. by means of assignment to an identification number, to location data, to an online identifier or to one or more special features. So it's about your identity. This includes, for example, your name, but also your telephone number, your address and other data that you provide to us.

Many legal bases for our data processing can be found in the European General Data Protection Regulation (GDPR), its text and the associated recitals. In the following information we refer to the corresponding regulations as the respective legal basis for our processing.

2. Use of data for contract processing and internal organization

Contract initiation and processing

If you make an inquiry with us or conclude a contract with us, we need and process certain data, such as the information on the intended or made order, your address, e-mail address and payment processing data for the pre-contractual review, contract processing and any later warranty or guarantee processing (see as a basis Art. 6 Para. 1 Clause 1 lit. b GDPR). As part of the order and payment processing, the service providers we use (e.g. logistics companies, payment brokers) receive the necessary data about you or the order. Our partner Klarna, who handles the payment of orders for us, also carries out credit checks. Without the correct information, we cannot accept orders or offer you certain payment options.

In addition, commercial and tax law obliges us to keep data from the concluded transactions for the duration of the statutory retention archiving deadlines. The legal basis for the corresponding data usage is Art. 6 Paragraph 1 lit. c GDPR.

Processing in the company organization

As part of our corporate organization, we process your data in our IT systems and, if necessary, transmit data from customers, interested parties, suppliers and personnel to authorities such as financial administrations and consultants (tax consultants, lawyers, auditors) in accordance with legal obligations our interests in legally compliant and economic corporate governance. Legal basis Art. 6 Para. 1 lit. c and f GDPR.

In this context, we analyze data on all corporate and business transactions for corporate management and market analysis. If there is no need for the specific purpose, the data is largely anonymized or at least evaluated pseudonymously and, if necessary, made available to third parties separately from persons. Legal basis Art. 6 Para. 1 lit. c and f GDPR.

Outsourced IT and hosting

We use IT software and hosting services from service providers as part of the provision of services and the fulfillment of your concerns and our contractual obligations on the basis of our interests in efficient and secure company and contract execution. Your data on your interests, concerns, orders and visits or perceptions of our range of services will also be processed with the help of the services of these service providers.

As far as required by law and not already secured by rules on professional secrecy, we have contractually secured our access and the secure and confidential treatment of your data in order processing cases.

Legal basis Art. 6 Para. 1 lit. f GDPR, possibly in conjunction with Art. 28 GDPR (conclusion of an order processing contract).

3. Data storage, customer account

Your specific order data will be saved by us. You can register with us (email address and password). By registering, you will receive, among other things, access to data stored by us about you and your orders and, if necessary, you can manage an ordered newsletter.

In addition to authorization, we also use your e-mail address to notify you about important changes in connection with the registration.

If you want to close your access again, please use one of the contact options below.

Please note that your data will continue to be stored by us even if it is closed and will be used for the specified purposes (such as order processing, but also for advertising information). For your right to object to the use of data for advertising, see below.

4. Contact

If you contact us via our contact options (e.g. via email), we will save your name and contact details as well as your request. The data is used to process your request and to communicate with you. We use your e-mail in order to be able to reply to you by e-mail (legal basis Art. 6 Para. 1 Clause 1 lit. a and b GDPR). If you have any questions about specific orders or if you want us to do something for you personally, we need your real name. If you have any other questions, you can also provide a pseudonym. Once your request has been finally settled and there are no other retention requirements, the data will be deleted again.

5. Use of data for advertising

We are interested in maintaining customer relationships with you, winning you over for new product groups and services from us, generating new customers, reactivating old customers and sending our customers information and offers. In order to safeguard these legitimate interests, we process your data on the basis of Article 6 (1) (f) of the GDPR (also with the help of service providers) to provide you with information and personalized offers from us and to improve our information and offers. p>

We use the following data on the basis of the aforementioned legal basis, without asking you separately for your consent.

Postal advertising

We use your first and last name, your postal address and - insofar as we have received this additional information from you - your title, academic degree, date of birth and your professional, industry or business name to send you offers and information about ours Company and our services and products by post, if after an evaluation we expect after an evaluation of the data given at the beginning of this section that this information is in your interest.

Consent-based uses

The following We only use it after we have asked for your consent outside of this declaration.

Art. 6 Para. 1 lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

(The acceptance of this information does not yet constitute your consent to the corresponding use of your data for advertising purposes!)

Use of your data when you visit our website

Insofar as we collect or have data collected with the help of web analysis tools and use web advertising tools, we will inform you in detail under “II. Data collection when you visit our website ".

There you will also find out how you can use your right to object and which technical options are available to you to counter data collection.

6. Deletion and blocking

Your personal data will be stored until the stated purposes have been achieved or as long as we have a legitimate interest in storing them.

This is followed by deletion, unless other agreements have been made with you or there are statutory archiving obligations (e.g. due to commercial or tax law). When archiving is required by law, the data is blocked for other access. These documents are deleted and destroyed in accordance with data protection regulations after the statutory retention periods have expired.

If you have consented to the collection, processing and use of your data, we will store and use your data for an indefinite period until it is withdrawn or the purpose for which you have given your consent no longer applies. This is followed by archiving d. Consent and processing data until the statute of limitations (usually three years) for legal defense purposes (legal basis Art. 17 Para. 3 lit. e GDPR).

If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, your e-mail address for the purpose of blocking in corresponding lists with which we compare our advertising measures so that you no longer receive any further advertising. In this sense, deletion means that your data is blocked in our systems, especially for advertising and marketing activities (legal basis Art. 6 Para. 1 lit. f GDPR). If necessary, the data will continue to be processed for purposes other than advertising, for example in the context of contract processing and, if applicable, warranty as well as commercial and tax documentation (legal basis Art. 6 Para. 1 lit. b and c GDPR).

If you wish, despite the possible consequences in individual cases, that you can continue to receive advertising, a deletion instead of blocking, please let us know.

II. Data collection when you visit our website

1. Technical information and cookies

You can visit our site without entering any information about yourself. If you visit our website, even if this is done, for example, via a link in a newsletter or an advertisement, certain data is still recorded and stored in so-called log files. Even if the visit takes place via newsletter links or advertising links on the Internet, only access data without direct personal reference such as B.

• the website from which we are visited
• the page that is called or the name of a requested file
• Type and version of your browser,
• Time and date of access
• the operating system used on which the browser is running
• the name of your Internet service provider
• the Internet address of the accessing party (IP address)
• Products and content in which the visitor is interested and the degree of interest, such as duration, frequency, interaction with forms, navigation elements and links

It is not possible for us to draw conclusions about your person on the basis of this data and we will not combine the above data with your personal data without your consent, unless the purpose is to pursue legal violations and attacks on our systems.

The IP address is made available by our hoster, but for data protection reasons it is overwritten after 7 days with an "x" and thus anonymized.

If we include third-party content on our pages (e.g. embedded films or other information), they will receive your IP address for this purpose only, as otherwise the content cannot be delivered to your browser.

Cookies

Cookies are text files that are transferred to your computer's hard drive using your web browser or other programs. These are stored locally on your computer's hard drive and used for held ready for later retrieval. Each of these text files contains a characteristic string with which we can identify your browser the next time you visit our website.

When you visit our website, you can view a detailed list of the cookies we use. At this point we also ask for your consent to the use of these cookies and the technologies behind them.

You can use the link in the footer of this website to see at any time which cookies we are using and which consent you have given.

You can also revoke your consent there by unchecking the box.

As soon as you remove the tick, the data processing via the corresponding cookies is terminated.

Please note that we do not have access to your browser or your hard drive. This means that the cookies remain stored on your computer even after the tick has been removed - but they no longer have any function for our website.

In such a case, we recommend that you delete the cookies manually from your computer using the browser settings.

III. How do we protect your personal data?

1. General protective measures

The law requires companies to create an adequate level of data protection. Among other things, the respective risk for the data, the probability of occurrence, the state of the art and the costs must be reconciled. We have taken appropriate technical and organizational measures to ensure the security of your data and its processing in accordance with legal requirements. If you have any security concerns when entering data or if you have any other questions or suggestions, please contact our customer service or our data protection officer. The other contact details can be found at the end of these notes.

Your personal data is transmitted securely by encryption when you place an order and when you register for your personal access. We use the coding system SSL (Secure Socket Layer). We use technical and organizational measures to secure our website and other systems against loss, destruction, access, modification and dissemination of your data by unauthorized persons. You should always treat your access information confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.

2. Protection of your payment data and credit checks

Order process via Klarna

We use the Klarna ordering process in our shop. This means that all payment and order data that you enter as part of the ordering process are collected directly by Klarna. We do not receive your payment details.

We only receive information from Klarna about the order placed and the delivery address. Klarna also tells us when an order has been paid for. Further information on the Klarna ordering process can be found in Klarna's data protection declaration at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy (this is also linked again in the order process).

Credit check

Klarna reserves the right to carry out credit checks depending on the selected payment method. For more information, see section 2.2 of Klarna's privacy policy ( https : //cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy ).

IV. What rights do I have?

As a person affected by data processing, you can assert certain legal rights.

1. Right to confirmation and information

According to Art. 15 GDPR, you have the right to request confirmation from us as to whether personal data relating to you is being processed. In the event that we process such data, you have the right to free information about your stored data. The information includes information about:

• the purposes of processing;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular in the case of recipients in third countries or international organizations;
• If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
• the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
• the right to lodge a complaint with a supervisory authority;
• if the personal data are not collected from the data subject: All available information about the origin of the data;
• the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the person concerned.

Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transmission. If you have any questions about the collection, processing or use of personal data, if you need information or if you want to assert your rights in any other way, simply contact us using the contact details listed at the end of this notice.

2. Right to rectification

You have a right to correction and / or completion vis-à-vis the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

3. Right of objection

4. Right of withdrawal

You have the right to revoke any consent you may have given at any time. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal.

5. Right to erasure (right to be forgotten)

a) Requirements for deletion

You have the right to request the deletion of your personal data. Please note that you only have a right to immediate deletion (Art. 17 GDPR) ("right to be forgotten") if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing was based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• You object to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or you object in accordance with Art. 21 Paragraph 2 GDPR to processing for the purposes of direct marketing a.
• The personal data relating to your person have been processed unlawfully.
• The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
• The personal data relating to you was collected in relation to information society services offered in accordance with Art. 8 Paragraph 1 GDPR.

b) Further right to be forgotten

If we have made the personal data concerning you public and we are obliged to delete it in accordance with Art. 17 Paragraph 1 GDPR, we shall take into account the available data aren Technologie and the implementation costs appropriate measures, including technical measures, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data Requested data.

c) Exceptions to deletion

In addition to the above requirements, please note that the following exceptions can justify a rejection of your request for deletion:

The right to deletion does not exist if processing is necessary

• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation that requires processing under the law of the Union or the Member States to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that is transferred to the person responsible was;
• for reasons of public interest in the field of public health in accordance with Art. 9 Paragraph 2 lit. h and i as well as Art. 9 Paragraph 3 GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right to erasure is likely to make the realization of the objectives of this processing impossible or seriously impaired, or
• for the establishment, exercise or defense of legal claims.

6. Right to restriction of processing

You have the right to restriction of processing if you dispute the accuracy of the personal data for a period that enables us to check the accuracy of the personal data or if you reject the deletion and instead the restriction in the case of unlawful processing request the use of personal data. You also have the right if we no longer need the data, you need this personal data to assert, exercise or defend legal claims. You can finally assert this right if you have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing has been restricted, these data may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a member state. The possibility of permanent storage remains unaffected. If the processing restriction has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

7. Right to data portability

You also have the right to data portability of the data you have given us, which we have processed on the basis of effective consent or whose processing was necessary for entering into or fulfilling an effective contract, in a "structured, common and machine-readable format Format ”to you. You also have the right to request the direct transfer to another person responsible, as far as this is technically feasible.

The right only exists insofar as the rights and freedoms of other persons are not impaired.

8. Asserting your rights

If you have any questions or to assert your rights, please contact our customer service (see contact details below).

You can also contact our data protection officer. This is responsible in the event of a complaint. You can contact our data protection officer via the following email: gustke@gfp24.de. You also have the right to lodge a complaint with the supervisory authority responsible for data protection, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if we do not deal with your concern appropriately from your point of view.

Your equipe4brands GmbH
Gansäcker 20
74321 Bietigheim-Bissingen
Tel .: 0800/675 670 6
Fax: 0800 735 412 2
E-Mail: office@equipe4brands.de

www.bio-lyne.de

This data protection notice also represents intellectual property protected by copyright. Use by third parties - even in extracts - for commercial purposes is not permitted. Violations will be prosecuted. WIENKE & BECKER takes over No liability to third parties, espondere not for completeness and topicality of the above information.

© 2020 WIENKE & BECKER - COLOGNE Lawyers .