Privacy

Preventis GmbH
Stubenwald-Allee 8a
64625 Bensheim
Tel: +49 6251 70711 - 0
Fax: +49 6251 70711 - 299
E-Mail: info@preventis.com

Kontaktdaten des Datenschutzbeauftragten
Thomas Ott
DESAG Sachverständiger für Datenschutz & Datensicherheit
Mobil: +49 1515 2886186
E-Mail: info@datenschutz-ott.de

We welcome you to our website. The protection of your data is very important to us. Therefore, we will show you below how we process your personal data.

In principle, we process the personal data that you provide to us in the context of an inquiry, a pre-contractual legal relationship, or a contractual relationship. In individual cases and insofar as this is necessary within the framework of the performance of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial register, debtors' registers, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies). This may be personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract term, purchased services, cancellations), communication data (correspondence, e-mail traffic), advertising data (advertising letters) and other comparable categories of personal data.

In principle, it is possible to use our website without providing personal data. However, we would like to point out that access data is also collected in this case and stored in the server log files. In particular, this involves the following data:

As a rule, we evaluate this information in an anonymized form to defend against attacks and to improve our offer (processing of personal data within the framework of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO) and subsequently, delete it. The data cannot be traced back to your person and will not be merged with other data. However, in the event of concrete indications of illegal use, we reserve the right to subsequently evaluate the data.

We obtain consent from you in individual cases for certain purposes expressly designated in connection with the collection of data (e.g. opening a customer account, contacting us via a contact form).

Data processing only takes place if you give us your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

Insofar as personal data is transferred to a third country, we comply with the data protection requirements in that the data transfer is based on standard contractual clauses or we obtain your consent to this in accordance with Art. 49 Para. 1 Sentence 1 lit. a) DSGVO.

A data transfer takes place, for example, in connection with the use of Google and Amazon services. Due to the use of these services, data is transferred to the United States of America.

The data transfer only takes place if you give us your consent.

The specific details of the recipient, the personal data transferred and the purpose of the data transfer can be found in the notes on the respective processing below.

There is a risk to your personal data as a result of the data transfer. In the United States of America, there is no level of data protection comparable to EU law (DS-GVO) and/or national regulations (e.g. BDSG) or sufficient guarantees that ensure an adequate level of data protection. Any deficits cannot be compensated by other specific guarantees due to the US legal situation. Nevertheless, depending on the service, standard contractual clauses are sometimes used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the information on the respective services.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

If a contract is concluded with us, we use personal data insofar as this is necessary to process the contractor to carry out pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.

If a contract already exists with us, we process your data in order to check that you are our contractual partner and in order to properly provide the contractual service owed.

We process personal data after weighing up the interests insofar as this is necessary to protect our interests or the interests of third parties. Examples of such purposes are:

If you send us an inquiry via our contact form, we process the data you have provided on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a) DSGVO in order to process your inquiry. In principle, your data will be deleted after the inquiry has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system. You can revoke your consent at any time with effect for the future via all the contact details provided.

If you send us an inquiry via our contact form, we process the data you have provided on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a) DSGVO in order to process your inquiry. In principle, your data will be deleted after the inquiry has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system. You can revoke your consent at any time with effect for the future via all the contact details provided.

When an order is placed via our website, we require the personal data necessary to process the order in order to conclude the contract. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a) DSGVO and Art. 6 para. 1 sentence 1 lit. b) DSGVO, as these are pre-contractual measures. Insofar as a contract is concluded with us, further data processing is based on Art. 6 para. 1 p. 1 lit. b) DSGVO. You can find our General Terms and Conditions at: https://preventis.com/meta/agb. Insofar as you contact us within the framework of an existing contractual relationship for a purpose that is necessary for the performance of the contract, we also process this data on the basis of Art. 6 para. 1 sentence 1 lit. b) DSGVO.

You have the option of voluntarily opening a customer account through which your data will be stored within the framework of the contractual relationship with us. The data processing is based on your consent pursuant to Art. 6 paras. 1 p. 1 lit. a) DSGVO. In the case of registration, the data entered will be stored revocably. You can delete the data you have entered as well as the entire account at any time. This does not apply to data that is absolutely necessary for the implementation of the contractual relationship on which the customer account is based. In part, we process such data in the customer account that you have provided to us upon conclusion of the contract or in the course of the performance of the contract by adding, supplementing, and evaluating them to your customer account.

Various cookies may be used during your visit to our website. These are text files that are placed on your computer and, among other things, enable the smooth running of your visit to our website. In some cases, cookies are necessary to ensure the functionality or IT security of our website. The use of such function cookies is based on a legitimate interest in enabling the use of our website incl. its functions according to Art. 6 paras. 1 p. 1 lit. f) DSGVO. We may use other - unnecessary - cookies on the basis of Art. 6 paras. 1 p. 1 lit. a) DSGVO and thus on the basis of your consent. The purposes of the cookies used in each case may include:

The use of cookies that are not necessary takes place within the framework of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored. Your IP address is only stored in shortened form so that a personal allocation of the user profile is no longer possible.</p><p>If we use cookies, particularly for the purposes of (re-)marketing or the implementation of (social media) plugins, we base this use on your free consent to such data processing and require your consent in this respect. With regard to the individual plugins or tracking tools, we refer to the following detailed explanations.</p><p>Most of the cookies we use are deleted from your computer after you close the browser (session cookies). Other types of cookies may remain on your computer and enable us to recognize your computer the next time you visit our site by means of the user profile created (permanent cookies).</p><p>Cookies are only used on our site by us and not by third parties, with the exception of third-party cookies, which are explicitly mentioned in this privacy policy.</p><p>You can give your consent by confirming our cookie banner when you visit our website. Once you have given your consent, you can revoke it at any time with effect for the future.</p><p>We rely on your consent to the collection of data in the context of the use of cookies. If you do not consent to the use of data when you visit our website for the first time, we will not collect your usage behavior and other personal data that may be collected during your visit to our website and will therefore not use it for subsequent remarketing campaigns. This also applies to third-party cookies such as this Matomo plugin.</p><p>If you consent to the processing of your data within the scope of the opt-in procedure, the lawfulness of the processing of your data is based on consent in accordance with Art. 6 paras. 1 p. 1 lit. a) DSGVO, so that we use your data to the extent of the consent you have given for the purposes of marketing and the evaluation of your usage behavior. For New Zealand, the European Commission has determined through a so-called adequacy decision that adequate protection of your personal data comparable to the European data protection law is ensured so that the data transfer is permissible.

Our website contains links to other external websites (Facebook, Twitter, YouTube, and Instagram). These are not so-called social plugins. If you click on a link, you will call up the corresponding website and will be forwarded to it.

Insofar as we process your data on these external websites (e.g. by you contacting us via these websites), these data protection provisions apply.

In addition, the linked websites process your personal data for their own purposes. We cannot make any statement about the way in which these providers process your personal data, the purposes for which they process it, or how long they store it. Please refer to the data protection provisions of the respective provider to obtain further information about the processing of your personal data by them. You can find this under:

If you rate our products on our website, special data protection and terms of use apply, which you can access via the following links:

Privacy policy for ratings

Terms of use for product ratings

We pass on data to other third parties if and to the extent that we have delegated the performance of tasks to them. The data is only passed on insofar as this is necessary for the fulfillment of the assigned tasks.

We work together with the following companies:

Furthermore, service providers can be entrusted with tasks in the following areas, for example:

If necessary, we will pass on your personal payment data to a credit institution commissioned with the payment processing (SEPA direct debit or receipt).

The data transfer always takes place on the basis of a legal norm or a suitable contract according to Art. 26 or 28 DSGVO, which ensures compliance with all data protection requirements.

Apart from that, data is only passed on in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the data transfer is legitimized according to Art. 6 paras. 1 sentence 1 lit. c) DSGVO.

A transfer of data to a third country is intended. This transfer takes place on the basis of the consent you have given. The recipients of the data provided by you are the following companies:

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfillment of contractual and legal obligations.

Personal data will be stored at least for as long as is necessary for the fulfillment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.

The criteria for the duration of the storage of cookies can be found in the corresponding section.

As a data subject of personal data processing, you have the following rights:

You have the right to request confirmation as to whether personal data are being processed. If this is the case, you have the right to be informed about the personal data and to receive the information listed in detail in Article 15 of the GDPR.

You have the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

You have the right to request from the controller that personal data concerning you be deleted without undue delay if one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data are no longer needed for the purposes pursued (right to erasure).

You have the right to request the controller to restrict the processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the controller's review.

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the help of automated procedures (Art. 20 DSGVO). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, where this is technically feasible (right to data portability).

You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims (Art. 21 DSGVO).

With regard to the exercise of your rights, you can contact us at any time via the contact options offered on our website.

In individual cases, we process personal data in order to carry out direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising (Article 21 of the GDPR).

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made form-free at any time via one of the contact options stated in this privacy policy or in our imprint.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR (Article 77 GDPR). You can assert this right with a supervisory authority in the member state of your residence, workplace, or the place of the alleged infringement. In Hesse, the competent supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information.

You can find more information at the following link:https://datenschutz.hessen.de/

Of course, you can also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our internal contact person on the subject of data protection is to use the following contact details:

Thomas Ott

DESAG expert for data protection & data security

Mobile: +49 1515 2886186

E-mail: info@datenschutz-ott.de

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.