Privacy policy

We collect and use our users’ personal data only insofar as this is necessary to provide a functional website and our content and services.
The collection and use of our users’ personal data only takes place regularly with the user’s consent.
An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.

2. legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para.
1 lit.
a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para.
1 lit.
b GDPR serves as the legal basis.
This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para.
1 lit.
c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para.
1 lit.
d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para.
1 lit.
f GDPR serves as the legal basis for the processing.

3. collection and processing of data

3.1.
Homepage und Webshop

Every access to our homepage and every retrieval of a file stored on the homepage/webshop is logged.
The storage serves internal system-related and statistical purposes.
The following are logged:

Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, web browser, operating system used, requesting domain, the IP addresses of the requesting computers.

Further personal data is only collected if you provide this information voluntarily, for example as part of an inquiry or registration.

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer.
For this purpose, the user’s IP address must remain stored for the duration of the session.

3.2.
Kontaktformular Homepage

If you send us inquiries via the contact form, your details from the inquiry form (contact details) will be stored by us for the purpose of processing the inquiry and in the event of any further questions arising from it.
We will not pass on this data without your consent.

3.3.
Kontaktformular Homepage Anmeldung Veranstaltungen

If you send us your registration for our events via the registration form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the registration and for passing on further information in connection with your registration.
We will not pass on this data without your consent.

If you register for paid events, your contact details will be stored in our store after you have been forwarded to it in order to document any resulting purchase contract and to send you a confirmation.
See also the following point:

3.4.
Bestellungen in unserem Onlineshop

Personal data is collected and stored for the ordering process, for opening a customer account and for the execution of purchase contracts: Name, address, payment data, email address, telephone number.
Your data may be passed on to several companies if this is necessary to process our contractual relationship, in particular in the following cases:

a) Data is always passed on to the shipping company commissioned by us for the purpose of delivering the order.
The forwarding only includes such data that is necessary for the delivery of the goods.

b) If payment services are used for the payment transaction (e.g. PayPal, Visa, MasterCard etc.) or if a direct debit authorization is issued, your data will be passed on to the payment intermediaries used.
This also applies to the credit institutions commissioned with the payment.

c) In the event of payment defaults, a claim may be assigned to a debt collection agency.
In addition, information may be sent to credit agencies.
The forwarding of the personal data required for this is based on the information on the credit check.

Further information can be found in the privacy policy of the online store.

3.5.
Kontakt über Webshop

If you send us inquiries or product reviews via the contact form, your details from the inquiry form (contact details) will be stored by us for the purpose of processing the inquiry and in the event of any further questions arising from it.
We will not pass on this data without your consent.

3.6.
Datenschutzerklärung für die Nutzung von YouTube

In order to display our videos, our website and the online store use plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile.
You can prevent this by logging out of your YouTube account beforehand.

Further information on the handling of user data can be found in YouTube’s privacy policy at www.google.de/intl/de/policies/privacy.

3.7.
Cookies

Some of the Internet pages use so-called cookies.
Cookies are small text files that are stored on your computer and saved by your browser.
Cookies do not damage your computer and do not contain viruses.
Cookies are used to make our website more user-friendly, effective and secure.

Most of the cookies we use are so-called “session cookies”.
They are automatically deleted at the end of your visit.
Other cookies remain stored on your end device until you delete them.
These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, the functionality of this website may be restricted; when shopping in our web store, the shopping cart will not work without cookies.

3.8.
DocCheck

DocCheck uses so-called “cookies” – text files that are stored in the user’s browser – to facilitate the use of the services.
The information generated by these cookies is only transmitted to DocCheck servers and is not shared with the website operator or other third parties.
Data is not transferred to countries outside the EU.

Cookie 1 – Doccheck_user_id – Enables a single sign-on for all DocCheck logins.
Lifetime = 1 session

Cookie 2 – Doccheck_scu_data – Used to provide suitable content based on pseudonymized identification data (e.g. profession, country, language).
Lifetime = 1 year

Log data – As part of the use of DocCheck password protection, DocCheck collects the so-called log data (IP address, access date, access time, referrer URL, information about the hardware and software used, such as browser features, device information such as resolution) of the user, starting from the website of the information provider who integrates the login into the website via “embed” or iFrame.

This data is not used to draw conclusions about the person, but is used to ensure the correct display of the page or iFrame content and/or the security of DocCheck services.

3.9.
Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics primarily uses cookies to record the interactions of visitors to the website.

In your browser settings, you can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, the functionality of this website may be restricted; when shopping in our web store, the shopping cart will not work without cookies.

You can prevent the processing of data by Google Analytics by installing a browser add-on by downloading and installing the browser add-on.

Opt-out cookies prevent the future collection of your data when you visit this website.
To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used.

If you delete all cookies on your computer, this opt-out cookie will also be deleted.
If you wish to continue to prevent Google Analytics cookies from being used, you must set the opt-out cookie again.
The cookie is set for the specified domain, browser and computer.
If you visit our website with different computers or browsers, you must activate the opt-out cookie in the different computers or browsers.

3.10.
Newsletter

To subscribe to our newsletter information service(s), we need your e-mail address and confirmation that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
This data is only collected for the purpose of sending you the newsletter and to document your consent in this regard.
The data will not be passed on to third parties (except to the email sender itself).

You can revoke your subscription to the newsletter info service and your consent to the storage of your e-mail address at any time.

3.11.
CleverReach

To send e-mails for our newsletter/info service, we use the provider CleverReach, CleverReach GmbH & Co.
43, 26180 Rastede.
The data you enter when ordering a newsletter/info service (e.g. e-mail address) is stored on CleverReach’s servers in Germany or Ireland.

The newsletters sent with CleverReach can be analyzed, e.g. how many recipients have opened the newsletter and how often which link in the newsletter was clicked on.
It can also be analyzed whether a predefined action (e.g. forwarding to our online store or registration link for our events) has taken place after clicking on a link in the newsletter.

Further information on data analysis by CleverReach newsletters can be found at: www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
You can revoke this consent at any time by unsubscribing from the newsletter.
The legality of the data processing operations that have already taken place remains unaffected by the revocation.

If you do not wish to be analyzed by CleverReach, you must unsubscribe from the newsletter.
We provide a link for this purpose in every newsletter message.
You can also unsubscribe from the newsletter directly on the website.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the CleverReach servers after you unsubscribe from the newsletter.
Data stored by us for other purposes (e.g. e-mail addresses for the customer area) remain unaffected by this.

Further details can be found in CleverReach’s privacy policy at www.cleverreach.com/de/datenschutz/.

We use the Google service reCaptcha to determine whether a human or a computer is making a certain entry in our contact or newsletter form.
Google uses the following data to check whether you are a human or a computer IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images.
The legal basis for the data processing described is Art. 6 para.
1 lit.
f of the General Data Protection Regulation.
We have a legitimate interest in this data processing to ensure the security of our website and to protect us from automated entries (attacks).

4. right to information

Upon written request, we will be happy to inform you about the personal data stored about you.

5. duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies.
Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject.
The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

6. revocation and deletion

You have the right to withdraw your consent at any time with effect for the future.
Stored personal data will be deleted if you withdraw your consent to storage, if knowledge of the data is no longer required to fulfill the purpose for which it was stored or if storage of the data is not permitted for other legal reasons.
The deletion of order-related data that has led to a contractual relationship may be prevented by statutory retention periods.
After expiry of such periods, this data will be deleted.

7. safety note

We make every effort to take all technical and organizational measures to store your personal data in such a way that it is not accessible to third parties.
We cannot guarantee complete data security when communicating by e-mail, so we recommend that you send confidential information by post.

8. responsible body

The responsible body within the meaning of the BDSG and at the same time service provider within the meaning of the TMG is vitOrgan Arzneimittel GmbH, see our imprint.

If you have any questions or comments about this privacy policy or about data protection in general, please send them to the following e-mail address: info@vitOrgan.