Privacy Policy - Previtalica

Privacy Policy - Previtalica:

Thank you for visiting our website and thank you for your interest in our company, as well as our world-class products, services, websites (in short, our 'Services'). Data protection and data security when using our website are very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for which purposes it is used.

As changes in the law or changes in our internal processes may necessitate an adaptation of this 'Privacy Policy - Previtalica', we ask that you read this Privacy Policy periodically.

§ 1. Responsible

The person responsible within the meaning of the EU General Data Protection Regulation (hereinafter GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Previtalica e.K., Allhartsmais 51, 94572 Schöfweg, Germany
Phone: +49 9908 263450
E-mail: info@previtalica.com

§ 2. Principles of data processing

Personal data is any information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address or user behavior. Information in which we can not relate to your person, for example, by anonymizing the information, is not personal information. The processing of personal data (for example, collecting, querying, using, storing or transmitting) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and no legally required retention requirements have to be maintained.

If we process your personal data for the provision of certain services, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective retention period.

§ 3. Processing operations

3.1. Informative use of the website

Technical provision of the website:
If you only use our website for information purposes, we do not process any personal data, with the exception of the data that your browser transmits for technical reasons to us or to our web space provider. For the purpose of providing the Website with technical facilities, we require that we process certain, automatically transmitted information from you, so that your browser can view our website and you can use the Website. This information is automatically collected each time you visit our website and temporarily stored in our server log files. This information relates to the computer system of the calling computer. The following information is collected: Host, IP address of the user, (if necessary) auth name, date and time of access, method of access (get / post), request, protocol (for example http), status (for example error messages), retrieved dataset, referrer, browser and operating system of the user. These anonymous data do not allow any conclusions about a specific person.

Legal basis:
We process your personal data for the technical provision of our website on the basis of the following legal bases:

• to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR, as far as you visit our website, to inform yourself about our products or services and our events; and
• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR in order to make the website technically available to you. Our legitimate interest is to provide you with an attractive, technically-functional and user-friendly website, as well as to take measures to protect our website from cyber risks and to prevent our website from posing cyber risks to third parties.

Duration of storage:
As soon as the mentioned data for the display of the web page are no longer necessary, they are deleted. The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, there is no possibility of contradiction on the part of the user. Further storage may be made in individual cases if required by law.

2. Active use of the website and conclusion of contract

In addition to the purely informational use of our website, you can also actively use our website to order one of our products or services, to register for our newsletter or to contact us. In addition to the above-described processing of your personal data in the case of purely informative use, we then also process further personal data from you, which we need, for example, to process your order or to process and respond to your inquiry.

2.1. Contact form

Type and scope of data processing:
On our website we offer you to contact us via a provided form. As part of the submission process of your request via the contact form, we refer you to this privacy policy to obtain your consent. If you use the contact form, personal data that you voluntarily provide to us will be processed by us. These are, for example: address, first name, name, email address, telephone number, country, content of the message. Specifying your e-mail address serves the purpose of being able to assign your inquiry and answer you. When using the contact form no transfer of your personal data to third parties.

Legal basis:
We process your personal data to answer user requests based on the following legal bases:

• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR; our justified interest lies in the proper answering of contact requests.
• in accordance with Art. 6 para. 1 lit. a) GDPR on the basis of the voluntarily submitted declaration of consent by you, in the following:

Consent declaration:
By entering my data and pressing the 'Submit' button, I declare my consent to the processing of information provided by me, such as address, first name, name, email address, telephone number, country and the content of the message, in order to answer my contact request. I have read the current privacy policy and accept it. I can revoke this consent at any time with effect for the future by contacting info@previtalica.com.

You can revoke your consent to the use of your personal data at any time with effect for the future by sending an email to the email address mentioned above under § 1.

Duration of storage:
As soon as the request you have made has been completed and the relevant facts clarified, the personal data processed via the contact form will be deleted by you. Further storage may be made in individual cases, if required by law.

2.2. Requests

Type and scope of data processing:
In order to be able to process and respond to your inquiries to us, which you transmit, for example, by telephone, by post or to our email address, we will process the personal data you have provided in connection with this. Our data collection is limited only to the personal data that you provide us in the context of contacting us at will.

Legal basis:

• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR; our legitimate corporate interest consists in the proper answering of contact inquiries and communication between you and our company in order to be able to process your request properly.

Duration of storage:
The duration of the storage of the above data depends on the background of your contact request. A deletion of your data takes place regularly, as long as the pursued purpose of the communication is omitted and a storage is no longer necessary (for example, after processing of your request). If it comes to a business relationship and / or a contract, we store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

2.3. conclusion of contract

Type and scope of data processing:
When you order any of our paid or free products or services through our website, we process your personal information in order to accept your order, process it and provide you with the products or services ordered. In doing so, we process the personal data voluntarily provided by you, such as: email address, salutation, position, first name, last name, company, branch, postal address, telephone number.

Legal basis:
We process your personal data for justification, execution and termination based on the following legal bases:

• according to Art. 6 para. 1 lit. b) GDPR, so that we can perform the pre-contractual measures or the contract.

Duration of storage:
In the case of a business relationship and / or a contract, we store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. In addition, we will then store your personal information until the statute of limitations of any legal claims arising from the relationship with you, where appropriate, to use as evidence. The limitation period is between 12 and 36 months, but can also be up to 30 years. With the beginning of the statute of limitations, we will delete your personal data, unless there is a statutory storage obligation, for example, from the Commercial Code (§§ 238, 257, under-paragraph 4 HGB) or from the Tax Code (§ 147 sub-paragraph 3, 4 AO). These storage requirements may be two to ten years.

3. Contact inquiries, contracts outside the website

If you make a contact request to us, or contract with us and this not via our website, but through other means of communication (for example e-mail, telephone, in person), we process your personal information that you provide us. We process this data to conclude a contract and to provide our products or services, to justify, implement and possibly terminate our contracts with you, as shown below.

3.1. Contact request

Type and scope of data processing:
In order to be able to process and answer your inquiries, which you submit to us by telephone, by post or to our email address, we process your personal data in this context, which you voluntarily provide to us. In any case, this includes your name and address information, such as your e-mail address, postal address, or fax number, to give you an answer, as well as the other information that you send to us as part of your message.

Legal basis:

• to protect our legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR; Our legitimate interest is the correct answering of contact inquiries.

Duration of storage:
The duration of the storage of the above data depends on the background of your contact request. A deletion of your data takes place regularly, as long as the pursued purpose of the communication is omitted and a storage is no longer necessary (for example, after processing your request). If it comes to a business relationship and / or a contract, then we store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

3.2. Conclusion of contract

Type and scope of data processing:
For example, if you order one of our paid or free products or services by phone, e-mail or in person, we will process your personal information. This is required so that we can accept your order, process it and provide you with the ordered products or services. In doing so, we process the data voluntarily provided by you, such as: email address, salutation, position, first name, last name, company, sector, postal address, telephone number.

Legal basis:
to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.

Duration of storage:
If we have a business relationship with you or conclude a contract, your personal data will be stored for the duration of this business relationship or the contract. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract. In addition, we will then store your personal information until the statute of limitations of any legal claims arising from the relationship with you, where appropriate, to use as evidence. The limitation period is between 12 and 36 months, but can also be up to 30 years. With the beginning of the statute of limitations, we will delete your personal data, unless there is a statutory storage obligation, for example, from the Commercial Code (§§ 238, 257, under-paragraph 4 HGB) or from the Tax Code (§ 147 sub-paragraph 3, 4 AO). These storage requirements may be two to ten years.

4. Data processing during contract executiong

During the execution of the contract, we process your personal data as follows:

4.1. Performance

Type and scope of data processing:
As far as this is necessary in the context of the fulfillment of the contract, we process your personal data for the performance of the service, for example to get in contact with you, to coordinate appointments, clarify queries and provide services.

Legal basis:

• to fulfill a contract or pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.

4.2. Payment

Type and scope of data processing:
For payment we use payment service providers and banks.

Legal basis:
We process your personal data on the basis of the following legal bases in order to establish, implement and terminate the contract:

• to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.

4.3. Compliance with legal regulations

Type and scope of data processing:
We also process your personal data in order to fulfill other legal obligations that we have in connection with the execution of the contract. These include in particular commercial, commercial or tax retention periods.

Legal basis:
We process your personal data when creating, executing and terminating the contract based on the following legal bases:

• to fulfill a legal obligation pursuant to Art. 6 para. 1 lit. c) GDPR in connection with commercial, business or tax law regulations.

4.4. Enforce our rights

Type and scope of data processing:
We also process your personal information in order to enforce our rights and our legal claims. We also process your personal data in order to defend ourselves against legal claims. Finally, we process your personal data, as far as necessary for defense or prosecution of crime.

Legal basis:
We process your personal data to enforce our rights:

• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR, insofar as we assert legal claims, or defend ourselves in legal disputes, or we prevent or clarify criminal offenses.

§ 4. The transfer of data

The transfer to third parties:
We only share your personal data with third parties if:

• for this you expressly consent, according to Art. 6 para. 1 sentence 1 lit. a) GDPR;
• this is legally permissible and according to Art. 6 para. 1 sentence 1 lit. b) DSGVO is required to fulfill a contractual relationship with you;
• pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR is a legal obligation for disclosure;
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f) DSGVO for the protection of legitimate corporate interests, as well as for the assertion, exercise or defense of legal claims is necessary and there is no reason to believe that you have a predominantly legitimate interest in not disclosing your information.

Legal basis:
Wwhen creating, executing and terminating the contract based on the following legal bases:

• to take pre-contractual or to fulfill a contract measures in accordance with Art. 6 para. 1 lit. b) GDPR.

§ 5. Categories of recipients

Initially, only our employees will be aware of your personal data. In addition, we share your personal information, to the extent permitted or required by law, with other recipients who provide services to us in connection with our website or orders. We restrict the transfer of your personal data to the necessary, in particular to be able to process your orders. Some of our service providers receive your personal data as a processor and are then in the handling of your personal data strictly bound by our and statutory instructions. In part, the recipients act independently with your data, which we transmit to them.

Here are the categories of recipients of your personal data:

• the payment service providers and banks, in the settlement of the payment;
• the IT service provider in the administration and hosting of our website;
• the deliverer of the order, tax consultant and accounting service provider, in the settlement or billing of your orders;
• the collection agencies and legal advisors in asserting our claims.

§ 6. Data security and security measures

We are committed to protecting your privacy and keeping your personal information confidential. To avoid any manipulation, loss or misuse of your stored data, we take extensive technical and organizational security measures that are periodically reviewed and adapted to technological progress. Among other things, this includes the use of recognized encryption methods (SSL or TLS). However, please note that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned safeguards will not be observed by other persons or institutions that are not within our area of responsibility. In particular, unencrypted data disclosed - for example, if this is done by e-mail - be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him by encryption or otherwise against misuse.

Your personal data, which we store electronically, is stored on our computers in Germany. All of these computers are protected with the latest security programs. Your personal data, which we store in paper form, are stored in a locked cabinet. Access to this data is only possible for authorized personnel of our company.

§ 7. Scope of your duties to provide data

Basically, you are not obliged to provide us with your personal data. However, if you fail to do so, we will not be able to provide you with our website, will not be able to respond to your requests and will not be able to contract with you. Personal data that we do not necessarily need for the above-mentioned processing purposes are not marked as compulsory.

§ 8. Hyperlinks

On our website are so-called hyperlinks to websites of other providers. By activating these hyperlinks you will be redirected from our website directly to the website of the other providers. You recognize this by changing the URL. We can not accept responsibility for the confidentiality of your information on these third-party websites, as we have no control over their compliance with the privacy policy. Please inform yourself directly about the handling of your personal data by these companies on these websites.

§ 9. Use of YouTube videos

If necessary (for example, on the blog), videos from YouTube operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") are incorporated on our website. We embed the videos in "advanced privacy mode" which initially sends only your IP address to a Google server (such as the US) to display a preview image. Only when you click on the video, the content will be displayed and managed via a Google cookie. If you're signed in with your Google profile, your data may be linked directly to your profile. If you do not want this, you should log out of your Google profile before using the website. YouTube may process your data as usage profiles and use them for advertising, market research and website design purposes. The purpose and scope of the data collection and the further processing and use of the data by YouTube and Google as well as your rights and options to protect your privacy, please refer to the privacy policy of Google.

§ 10. Automated decision-making / profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

§ 11. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

§ 12. Your rights as the person concerned

From DSGVO the following rights arise for you as the person concerned in the processing of personal data:

• According to Art. 15 GDPR, you may request information about your personal data processed by us. In particular, they may request information on: processing purposes, the categories of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the existence of a right of rectification, deletion, limitation of processing or opposition, the existence of a right of appeal, the origin of their data, if these were not collected from us, via a transfer to third countries or to international organizations and the existence of automated decision-making including profiling sowie über das Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling and meaningful information about their details.
• According to Art. 16 DSGVO you can immediately request the correction of incorrect or the completion of your personal data stored by us.
• According to Art. 17 GDPR, you may request the deletion of your personal data stored with us, as far as the processing is not for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of the public interest or for the assertion, exercise or defense of Legal claims is required.
• According to Art. 18 GDPR you can demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, we no longer need the data and you refuse their deletion, because you assert this, exercise or defense of legal claims. You are also entitled to the right under Art. 18 GDPR if you object to the processing pursuant to Art. 21 GDPR.
• According to Art. 20 GDPR you may request to receive your personal data provided to us in a structured, common and machine-readable format or you may request the transfer to another person in charge.
• According to Art. 7 para. 3 DSGVO, you can revoke your once given consent at any time. As a result, we will not be allowed to continue the data processing based on this consent for the future.
• According to Art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

§ 13. The right of withdrawal

When processing your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, in accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data, as far as there are reasons for this arising from your particular situation or the opposition is directed against direct mail. In the case of direct mail, there is a general right of objection for you, which is implemented by us without specifying any particular situation.