Privacy policy

We collect and use our users’ personal data only insofar as this is necessary to provide a functional website and our content and services. The collection and use of our users’ personal data regularly take place only with and based on the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3. Collection and processing of data

3.1. Homepage and online shop

Every access to our homepage and every retrieval of a file stored on the homepage/online shop is logged. The storage serves internal system-related and statistical purposes. The following are logged:

Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser, operating system used, requesting domain, the IP addresses of the requesting computers.

Further personal data will be collected only if you provide this information voluntarily, for example as part of an inquiry or registration.

Temporary storage of the IP address by the system is necessary to enable delivery of the website data to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

3.3. Contact form homepage – registration for events

If you send us your registration for our events via the registration form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the registration and for provision of information in connection with your registration. We will not disclose your data without your consent.

If you register for paid events, your contact details will be stored in our store’s database in order to document any resulting purchase contract and to send you a confirmation. See also the following item:

The following personal data will be collected and stored for the ordering process, for opening a customer account, and for the execution of purchase contracts: Name, address, payment data, email address, telephone number. Your data may be passed on to other companies if and insofar as this is necessary to process our contractual relationship, in particular in the following cases:

a) Data will in every case be disclosed to the shipping company commissioned by us for the purpose of delivering the order. Only data necessary for delivery of the goods will be disclosed.

b) If payment services are used for the payment transaction (e.g. PayPal, Visa, MasterCard etc.), or if a direct debit authorization is issued, your data will be passed on to the payment intermediaries used. This also applies to the credit institutions commissioned with the payment.

c) In the event of payment defaults, a claim may be assigned to a debt collection agency. In addition, information may be sent to credit agencies. The disclosure of the personal data required for this is based on the information on the credit check.

Further information can be found in the privacy policy of the online store.

If you send us inquiries or product reviews via the contact form, your details from the inquiry form (contact details) will be stored by us for the purpose of processing the inquiry and any further questions arising from it. We will not disclose such data without your consent.

3.6. Data privacy policy for the use of YouTube

In order to display our videos, our website and the online store use plugins from the Google-owned YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Whenever you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to link your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account beforehand.

Further information on the handling of user data can be found in YouTube’s privacy policy at www.google.de/intl/de/policies/privacy.

3.7. Cookies

Some of the internet pages use so-called cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective, and secure.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, reject cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted; for example, when shopping in our online store, the shopping cart will not work without cookies.

3.8. DocCheck

DocCheck uses so-called “cookies” – text files that are stored in the user’s browser – to facilitate use of the services. The information generated by use of these cookies is transmitted only to DocCheck servers and not shared with the website operator or other third parties. Data are not transferred to countries outside the EU.

Cookie 1 – Doccheck_user_id – Enables a single sign-on for all DocCheck logins. Lifetime = 1 session

Cookie 2 – Doccheck_scu_data – Used to provide suitable content based on pseudonymized identification data (e.g. profession, country, language). Lifetime = 1 year

Log data – As part of the use of DocCheck password protection, DocCheck collects the so-called log data (IP address, access date, access time, referrer URL, information about the hardware and software used, such as browser features, device information such as resolution) of the user, starting from the website of the information provider who integrates the login into the website via “embed” or iFrame.

This data is not used to draw conclusions about the person, but is used to ensure the correct display of the page or iFrame content and/or the security of DocCheck services.

3.9. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics primarily uses cookies to record the interactions of visitors to the website.

In your browser settings, you can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, reject cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted; for example, when shopping in our web store, the shopping cart will not work without cookies.

You can prevent the processing of data by Google Analytics by installing a browser add-on by downloading and installing the browser add-on.

Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used.

If you delete all cookies on your computer, this opt-out cookie will also be deleted. If you wish to continue to prevent Google Analytics cookies from being used, you must set the opt-out cookie again. The cookie is set for the specified domain, browser and computer. If you visit our website with several computers or browsers, you must activate the opt-out cookie in all computers or browsers.

3.10. Newsletter

To subscribe to our newsletter information service(s), we need your e-mail address and confirmation that you are the owner of the e-mail address provided and agree to receive the newsletter. These data are collected only for the purpose of sending you the newsletter and to document your consent in this regard. The data will not be disclosed to third parties (except to the email sender itself).

You can revoke your subscription to the newsletter info service and your consent to the storage of your e-mail address at any time.

3.11. CleverReach

To send e-mails for our newsletter/info service, we use the provider CleverReach, CleverReach GmbH & Co. 43, D-26180 Rastede, Germany. The data you enter when ordering a newsletter/info service (e.g. e-mail address) are stored on CleverReach’s servers in Germany or Ireland.

The newsletters sent via CleverReach can be analysed, e.g. how many recipients have opened the newsletter and how often which link in the newsletter was clicked on. It can also be analysed whether a predefined action (e.g. forwarding to our online store or registration link for our events) has taken place after clicking on a link in the newsletter.

Further information on data analysis by CleverReach newsletters can be found at: www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

If you do not wish to be analysed by CleverReach, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter, and deleted from both our servers and the CleverReach servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the customer area) remain unaffected by this.

Further details can be found in CleverReach’s privacy policy at www.cleverreach.com/de/datenschutz/.

We use the Google service reCaptcha to determine whether it is a human or a software that is entering data in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas, and tasks in which you have to identify images. The legal basis for the data processing described is Art. 6 para. 1 lit. f of the General Data Protection Regulation. We have a legitimate interest in these data processing to ensure the security of our website and to protect us from automated entries (attacks).

4. Right to information

Upon written request, we will be happy to inform you about the personal data stored about you.

5. Duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

6. Revocation and deletion

You have the right to revoke your consent at any time with effect for the future. Stored personal data will be deleted if you withdraw your consent to storage, if knowledge of the data is no longer required to fulfil the purpose for which they were stored, or if storage of the data is prohibited for other legal reasons. The deletion of order-related data that has led to a contractual relationship may be prevented by statutory retention periods. After expiry of such periods, these data will be deleted.

7. Security note

We make every effort to take all technical and organizational measures to store your personal data in such a way that it is not accessible to third parties. We cannot guarantee absolute data security when communicating by e-mail, so we recommend that you send confidential information by post.

8. Responsible body

The responsible body within the meaning of the BDSG (Federal Data Protection Act) and at the same time service provider within the meaning of the TMG (Federal Telemedia Act) / DDG (Digital Services Act) is vitOrgan Arzneimittel GmbH, see our Legal Notice.

If you have any questions or comments about this privacy policy or about data protection in general, please send them to the following e-mail address: info@vitOrgan.