We inform you about the type, scope and purpose of the processing of your personal data within our online offer and the associated services.
This data protection declaration is based on notions used by the European Directive and Regulation Maker when adopting the General Data Protection Regulation (DSGVO). To ensure that this statement is understandable, we explain in advance the terminology used. Insofar as you find references to legal regulations below without exact specification of the respective law name, the DSGVO is meant.
- Personal data
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.
“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Third Party
“Third party” means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
“Consent” means any freely given specific, informed and unambiguous indication of the data subject’s wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
“Profiling” is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
- Contact details of the controller
Visionbody Homeproduct Ltd.
Holzstr. 2. 40221 Düsseldorf
Phone: 0211 94256880
III General information on data processing.
- Scope of the processing of personal data
We process personal data of our users in principle only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.
- Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
- Deletion of data and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the controller is subject. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
- Visiting our website and log files
- Description and scope of data processing
With each call to our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected here:
- Browser type and browser version
- Host name of the accessing computer
- Date and time of access
- IP address of the user
- Referrer URL
- Operating system of the user
The data is also stored in the log files of our system.
- Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.
- Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
In these purposes also lies our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.
- Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case after 14 days. In the case of storage of the data in log files, this is the case after one month at the latest.
- Opposition and elimination
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
- Cookies and Tracking
You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
- Online offers on social media platforms
On social media platforms, we offer online offers to provide information there and to be able to contact you. We have no influence on the processing of data by the respective platform operator. As a rule, when you visit our social media offerings, cookies are stored in your browser by the platform operator, in which your usage behavior or interests are stored for market research and advertising purposes. The platform operators use the usage profiles, which are usually obtained across devices, to display personalized advertising to you. We offer our online services on the following platforms:
Provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data processing takes place on the basis of an agreement on the joint processing of personal data in accordance with Art. 26 DSGVO.
Opposition / Opt-Out: https://www.facebook.com/settings?tab=ads
Provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.
Opposition / Opt-Out: http://instagram.com/about/legal/privacy
- Other third party services
Within our website, in order to optimize our Internet presence, we continue to use offers from third-party providers to integrate their content and services, namely e.g. fonts into our website (hereinafter uniformly referred to as “services”). This integration requires that the providers of these services process your IP address. Because this cannot be prevented technically, the processing of the IP address is thus necessary for the use and realization of the Services. We always strive to use only those services whose respective providers process the IP address only for the direct provision of the services. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Through the “web beacons” various information, e.g. the visit to our website can be examined and evaluated. In pseudonymized form, information can also be stored in cookies on your terminal device, whereby technical information about your browser and operating system used, linked web pages, time of visit and other information about the use of our website can be processed.
The legal basis for this processing of the transmitted data is Art. 6 para. 1 lit. f DSGVO. The services possibly used are:
YouTube in enhanced privacy mode.
The operator of YouTube is YouTube, LLC. 901 Cherry Ave, San Bruno, CA 94066, USA.
If you contact us (e.g. by e-mail, contact form or telephone), your personal data will be processed for the purpose of handling the contact request and its processing.
The legal basis for this processing of the transmitted personal data is Art. 6 para. 1 lit. b DSGVO. Insofar as health data are concerned, Art. 6 para. 1 lit. b DSGVO in conjunction with Art. 9 para. 2 lit. h DSGVO and § 22 para. 1 no. 1 lit. b. Federal Data Protection Act the legal basis.
We delete this data as soon as it is no longer required to achieve the purpose for which it was collected; i.e. regularly when the respective conversation with you has ended. The conversation is ended when the facts concerned have been finally clarified. Otherwise, the statutory retention periods apply.
VII. Your rights as a data subject.
If your personal data is processed, you are a data subject within the meaning of the GDPR. You are thus entitled to the following rights vis-à-vis the controller, i.e. us:
- Right to information
You have the right to request confirmation as to whether data in question is being processed and to be informed about this data and to receive further information and a copy of the data, Art. 15 DSGVO.
- Right to rectification
As you have the right to request the completion of the data concerning you or the correction of inaccurate data concerning you, Art. 16 DSGVO.
- Right to erasure
You have the right to request that data concerned be deleted without undue delay, Art. 17 DSGVO.
- Right to restriction of processing
Under the conditions specified in more detail in Art. 18 DSGVO, you may request restriction of the processing of data.
- RIGHT OF RESISTANCE
You may object to the future processing of data concerning you at any time, Art. 21 DSGVO. The objection may be made in particular against the processing for purposes of direct marketing.
- Right of withdrawal
You have the right to revoke your declaration of consent under data protection law at any time with effect for the future, Art. 7 (3) DSGVO. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
- Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right against the controller to be informed about these recipients.
- Right to data portability
You have the right to request to receive the data concerning you that you have provided to us and to request its transfer to other controllers, Art. 20 DSGVO.
- Right of complaint
You have the right to lodge a complaint with the competent supervisory authority, Art. 77 DSGVO.