Privacy policy

The data controller is:
Dr. Marc Trump
Neusser Str. 1
52428 Jülich

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. ACCESS DATA AND HOSTING
You can visit our websites without providing any personal information. Each time you access a webpage, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the request. This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the proper presentation of our services in accordance with Article 6(1)(f) of the GDPR. All access data is deleted no later than seven days after the end of your visit to the site.

HOSTING
The services for hosting and displaying the website are provided in part by our service providers as part of data processing on our behalf. Unless otherwise specified in this Privacy Policy, all access data and all data collected via the forms provided on this website are processed on their servers. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

2. DATA PROCESSING FOR CONTRACT FULFILLMENT, CONTACT, AND WHEN OPENING A CUSTOMER ACCOUNT
We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g., via the contact form or email). Required fields are marked as such because, in these cases, we absolutely need the data to fulfill the contract or to process your inquiry, and you cannot submit your order or inquiry without providing this information. The specific data collected is indicated on the respective input forms. We use the data you provide to fulfill the contract and process your inquiries in accordance with Article 6(1)(b) of the GDPR.
To the extent that you have given your consent pursuant to Article 6(1)(a) of the GDPR by choosing to open a customer account, we use your data for the purpose of opening a customer account. Further information regarding the processing of your data—in particular regarding its transfer to our service providers for the purposes of order, payment, and shipping processing—can be found in the following sections of this Privacy Policy. Once the contract has been fully fulfilled or your customer account has been deleted, your data will be restricted from further processing and deleted after the expiration of the retention periods required by tax and commercial law in accordance with Article 6(1)(c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data beyond this scope, provided such use is permitted by law and we inform you of it in this policy. You may delete your customer account at any time, either by sending a message using the contact information provided in this Privacy Policy or by using the function provided for this purpose in your customer account.

MERCHANDISE MANAGEMENT SYSTEM We use merchandise management systems provided by external service providers to process orders and contracts. Our service providers act on our behalf under a data processing agreement. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

3. DATA PROCESSING FOR THE PURPOSE OF SHIPPING
To fulfill the contract in accordance with Art. 6(1), sentence 1, subparagraph (b) of the GDPR, we share your data with the shipping provider responsible for delivery, to the extent necessary for the delivery of ordered goods.

DATA TRANSFER TO SHIPPING PROVIDERS FOR THE PURPOSE OF DELIVERY NOTIFICATION
If you have given us your explicit consent to do so during or after placing your order, we will, pursuant to Art. 6(1)(a) of the GDPR, share your email address and phone number with the selected shipping service provider so that it can contact you prior to delivery for the purpose of notifying you of the delivery or coordinating the delivery.
You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy or directly to the shipping service provider at the contact address listed below. Upon revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1–7
DE-36286 Neuenstein
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

4. DATA PROCESSING FOR PAYMENT PROCESSING
When processing payments in our online store, we work with the following partners: technical service providers, financial institutions, and payment service providers.

4.1 DATA PROCESSING FOR TRANSACTION PROCESSING
Depending on the selected payment method, we disclose the data necessary for processing the payment transaction to our technical service providers, who act on our behalf as data processors, or to the designated financial institutions or the selected payment service provider, to the extent necessary to process the payment. This serves the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g., on their own website or through technical integration into the ordering process. In this regard, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.

4.2 DATA PROCESSING FOR THE PURPOSES OF FRAUD PREVENTION AND OPTIMIZING OUR PAYMENT PROCESSES
Where applicable, we may provide our service providers with additional data, which they use, together with the data necessary for processing the payment, in their capacity as our data processors for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). In accordance with Article 6(1)(f) of the GDPR, this serves to safeguard our legitimate interests—which prevail following a balancing of interests—in protecting ourselves against fraud and in ensuring efficient payment management.

4.3 IDENTITY AND CREDIT CHECKS WHEN SELECTING KLARNA PAYMENT SERVICES
Klarna Pay Now (direct debit), Klarna Pay Later (purchase on account), Klarna Slice It (installment purchase)
If you choose to use the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we ask for your consent pursuant to Article 6(1)(a) of the GDPR to allow us to transfer to Klarna the data necessary for processing the payment and conducting an identity and credit check. In Germany, the credit bureaus listed in Klarna’s privacy policy at [https://cdn .klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy] may be used for identity and creditworthiness checks. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. You may also revoke your consent to this use of personal data at any time by contacting Klarna directly.

4.4 INSTALLMENT PURCHASE
When you select the “Installment Purchase” payment method and provide the necessary consent under data protection law in accordance with Art. 6(1)(a) of the GDPR, personal data (first name, last name, address, email, phone number, date of birth, IP address, gender) along with data required for transaction processing (items, invoice amount, due dates, total amount, invoice number, taxes, currency, order date, and order time) will be transmitted to our partner Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA, for the purpose of processing this payment method.
To verify the customer’s identity and creditworthiness, our partner conducts inquiries and obtains information from publicly accessible databases and credit bureaus. For information on the providers from whom information—including, where applicable, creditworthiness data—is obtained using mathematical and statistical methods, as well as further details regarding the processing of your data after it is transmitted to our partner Stripe, Inc., please refer to their Privacy Policy, which can be found here: https://stripe.com/de/privacy
Our partner, Stripe, Inc., uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You have the option to contact our partner, Stripe, Inc., to present your case and contest the decision. The consent to data transfer provided during the ordering process may be revoked at any time, even without stating a reason, by notifying us, with effect for the future.

The financing provider is based in this country: USA. There is no adequacy decision by the European Commission for this country. Our cooperation with him is based on these guarantees:Standard data protection clauses of the European Commission

5. EMAIL ADVERTISING
5.1 EMAIL NEWSLETTER WITH SUBSCRIPTION

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use newsletter service providers, which are described below, to process the newsletter.

NEWSLETTER SENDING with MailPoet

This website uses MailPoet to send newsletters. The provider is Aut O’Mattic A8C Ireland Ltd, Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland, whose parent company is based in the USA (hereinafter MailPoet).

MailPoet is a service that can be used to organize and analyze the sending of newsletters, among other things. The data you enter for the purpose of subscribing to the newsletter will be stored on our servers but sent via MailPoet’s servers so that MailPoet processes your newsletter-related data (MailPoet Sending Service). You can find details here: https://account.mailpoet.com/.

Data analysis by MailPoet

With the help of MailPoet, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links, if any, have been clicked on. In this way, we can determine which links have been clicked on particularly often.

We can also recognize whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can recognize whether you have made a purchase after clicking on the newsletter.

MailPoet also allows us to divide newsletter recipients into different categories (“clustering”). The newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups. If you do not wish to be analyzed by MailPoet, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

Detailed information on the functions of MailPoet can be found at the following link: https://account.mailpoet.com/ and https://www.mailpoet.com/mailpoet-features/.

You can find MailPoet’s privacy policy at: https://www.mailpoet.com/privacy-notice/.

Legal basis

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time for the future.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://automattic.com/de/privacy/.

Storage duration

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose no longer applies. We reserve the right to delete e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to delete or block it. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, we may store your e-mail address in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Order processing

We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the data controller processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

6. COOKIES AND OTHER TECHNOLOGIES
GENERAL INFORMATION
To make your visit to our website more enjoyable and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).
We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process the IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart). In the context of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our offer in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.

In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ [https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies] / Safari™ [https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14] / Chrome™ [https://support .google.com=””] / Firefox™ [https://support.mozilla.org/de/products/firefox/protect-your-privacy/cookies] / Opera™ [https://help.opera.com/de/latest/web-preferences/#cookies]

Insofar as you have consented to the use of the technologies pursuant to Art. 6 para. 1 p. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy.

7. USE OF COOKIES AND OTHER TECHNOLOGIES FOR WEB ANALYSIS AND ADVERTISING PURPOSES
To the extent that you have provided your consent pursuant to Article 6(1)(a) of the GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose has been fulfilled and we no longer use the respective technology, the data collected in this context will be deleted. You may revoke your consent at any time with future effect. For more information on your options for revoking consent, please see the section “Cookies and Other Technologies.” Further details, including the legal basis for our collaboration with the individual providers, can be found under the respective technologies. If you have any questions about the providers or the legal basis for our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

Cookies used

Your consent history

7.1 USE OF GOOGLE SERVICES
We use the following technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened by activating IP anonymization before it is stored on Google’s servers. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy [https://policies .google.com=””].

GOOGLE ANALYTICS
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), which is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not combined with other data held by Google. Data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimized marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The release of data to Google within the scope of these data release settings is based on an additional agreement between data controllers. We have no influence on the subsequent data processing by Google.

We also use the Google Analytics extension function Google Optimize to create and carry out tests.

For web analysis, the Google Analytics Google Signals extension function enables so-called “cross-device tracking”. If your internet-enabled devices are linked to your Google account and you have activated the “personalized advertising” setting in your Google account, Google can create reports on your usage behavior (in particular the cross-device user numbers), even if you change your end device. We do not process personal data in this respect; we only receive statistics compiled on the basis of Google Signals.

For web analysis and advertising purposes, the extension function of Google Analytics enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services relating to website activity and internet usage.

GOOGLE ADS
For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and through a pseudonymous cookie ID, based on the pages you have visited, to enable interest-based advertising. Any further data processing takes place only if you have enabled the “personalized ads” setting in your Google Account. In this case, if you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you have reached our website via a Google Ads advertisement. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) may be collected, from which user profiles are created using pseudonyms.

7.2 USE OF FACEBOOK SERVICES
USE OF THE FACEBOOK PIXEL
We use the Facebook Pixel as part of the technologies provided by Facebook Ireland Ltd [https://de-de .facebook.com/facebookdublin /], 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”), as described below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of what is known as “extended data matching,” information that can be used to identify individuals (e.g., names, email addresses, and phone numbers) is also collected and stored in hashed form for matching purposes. To this end, when you visit our website, the Facebook Pixel automatically sets a cookie that enables your browser to be recognized when you visit other websites using a pseudonymous cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies regarding your use of our website is generally transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the United States. To the extent that we are responsible for the transfer of data to the United States, our cooperation is based on the European Commission’s Standard Data Protection Clauses. For more information about Facebook’s data processing, please see Facebook’s Privacy Policy [https://de-de.facebook.com/policy.php].

FACEBOOK ANALYTICS
As part of Facebook Analytics, statistics on visitor activity on our website are generated from the data collected via the Facebook Pixel regarding your use of our website. Data processing is carried out based on a data processing agreement with Facebook. These analytics help us optimize the presentation and marketing of our website.

FACEBOOK ADS
We use Facebook Ads to promote this website on Facebook and other platforms. We determine the parameters of each advertising campaign. Facebook is responsible for the actual implementation, particularly the decision regarding the placement of ads for individual users. Unless otherwise specified for the individual technologies, data processing is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. Joint controllership is limited to the collection of data and its transmission to Facebook Ireland. Subsequent data processing by Facebook Ireland is not covered by this provision.

We use Facebook Custom Audience to operate group-based advertising on Facebook by determining the characteristics of the respective target group on the basis of the statistics on visitor activity on our website compiled via Facebook Pixel. Facebook acts as our processor in the context of the extended data matching that takes place to determine the respective target group (see above).

Based on the pseudonymous cookie ID set by Facebook Pixel and the data collected about your usage behavior on our website, we operate personalized advertising via Facebook Pixel Remarketing.

We use Facebook Pixel Conversions to measure your subsequent usage behavior for web analysis and event tracking if you have reached our website via a Facebook Ads ad. Data processing is carried out on the basis of an agreement on order processing by Facebook.

7.3 OTHER PROVIDERS OF WEB ANALYTICS AND ONLINE MARKETING SERVICES

8. SOCIAL MEDIA
8.1 OUR ONLINE PRESENCE ON FACEBOOK, TWITTER, INSTAGRAM, YOUTUBE, PINTEREST, LINKEDIN, XING
If you have provided your consent to the respective social media operator pursuant to Art. 6(1)(a) 1(a) of the GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the aforementioned social media platforms, and usage profiles will be created using pseudonyms. These profiles may be used, for example, to display advertisements—both on and off the platforms—that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of your data by the respective social media provider, as well as contact information, your rights in this regard, and privacy settings, please refer to the providers’ privacy policies linked below. If you still need assistance with this matter, please contact us.

Facebook [https://www .facebook.com/about/privacy /]is an offer of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transferred to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook fan page is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here [https://www .facebook.com/legal/terms/information_about_page_insights_data].

Instagram [https://help.instagram.com/519522125107875] is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland regarding your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Data processing in connection with a visit to an Instagram fan page is based on an agreement between joint controllers pursuant to Article 26 of the GDPR. Further information (including information on Insights data) can be found here [https://www .facebook.com/legal/terms/information_about_page_insights_data].

9. CONTACT OPTIONS AND YOUR RIGHTS

As the data subject, you have the following rights:

* Pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data processed by us;
* Pursuant to Article 16 of the GDPR, the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
* Pursuant to Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing is * necessary for the exercise of the right to freedom of expression and information;
* necessary for compliance with a legal obligation;
* is necessary for reasons of public interest or
* is necessary for the establishment, exercise, or defense of legal claims;

* Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data if * you contest the accuracy of the data;
* the processing is unlawful, but you oppose its erasure;
* we no longer need the data, but you need it to assert, exercise, or defend legal claims;
* you have objected to the processing pursuant to Article 21 of the GDPR;

* Under Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
* Pursuant to Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority at your usual place of residence, your place of work, or the location of our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of consents granted or objection to a specific use of data, please contact us directly via the contact details in our imprint.

Right to Object
To the extent that we process personal data as described above to safeguard our legitimate interests that prevail following a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. We will then no longer process your personal data for this purpose.

Privacy Policy created using rechtstexter.de [https://legal.trustedshops.com/legalwizard].

OUTLOOK

If you have any further questions about data protection at VetAthletics, please contact the following address:

VetAthletics GmbH
Neusser Str. 1
52428 Jülich | Germany