Supported languages: English   Deutsch

DATA PROTECTION DECLARATION

§ 1 General

Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only applies to our websites. If you are redirected to other sites via links on our site, please inform yourself there about the respective handling of your data.

With the following data protection declaration, we would like to explain to you which types of your personal data (hereinafter also referred to as "data") we process for which purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences.

§ 1. 1 Types of data processed

§ 1.2 Affected Persons

§1.3 Purpose of processing

§ 1.4 Legal Basis

In the following we inform you about the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process the personal data. Please note that in addition to the regulations of the GDPR, the national data protection regulations in your or our country of residence and domicile may apply. If more specific legal bases are relevant in individual cases, we will inform you of them in the data protection declaration.

Consent – the affected persons have given their consent to the processing of their personal data for a specific purpose or purposes

Fulfilment of a contract and pre-contractual requests – the processing is necessary for the performance of a contract to which the affected person is party or in order to take steps at the request of the data subject prior to entering into a contract

Legal obligation – the processing is necessary for compliance with a legal obligation to which the affected person is subject

Legitimate Interests - the processing is necessary to safeguard the legitimate interests of the affected person or a third party, unless the interests or fundamental rights and freedoms of the affected person, that require the protection of personal data, prevail

§ 1.5 Safety measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk.

The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, securing availability and their separation. Furthermore, we have set up procedures that ensure the exercise of data subject rights, the deletion of data and reactions to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.>

§ 2 Online presentation and web hosting

§ 2.1 Purpose of processing

In order to be able to provide our online offer securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services, as well as security services and technical maintenance services.

E-mail sending and hosting: The web hosting services we use also include the sending, receipt and storage of e-mails. For these purposes, the addresses of the recipients and senders as well as other information regarding the e-mail sending (e.g. the providers involved) and the content of the respective e-mails are processed. The aforementioned data can also be processed for SPAM detection purposes. We ask you to note that e-mails are generally not sent in encrypted form on the Internet. Therefore, we cannot accept any responsibility for the transmission path of the e-mails between the sender and receipt on our server.

Collection of access data and log files: We ourselves (or our web hosting provider) collect data for every access to the server (so-called server log files). The address and name of the retrieved websites and files, date and time of retrieval, amounts of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP Addresses and the requesting provider belong.

§ 2.2 Legal Basis

Legitimate Interests

§ 2.3 Types of Data Processed

Content data (e.g. text input, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses)

§ 2.4 Recipient Categories

Users (e.g. website visitors, users of online services)

§ 3 Mobile / Smart Applications

§ 3.1 Purpose of processing

We process the data of the users of our apps, registered users and any test users in order to be able to provide them with our contractual services and on the basis of legitimate interests to ensure the security of our app and to be able to develop it further. The required information is marked as such within the framework of the conclusion of the use, contract, order or comparable contract and may be required for the provision of services and for any billing and contact information in order to be able to hold any consultations. Insofar as our apps are obtained from platforms from other providers (e.g. Apple's App Store or GooglePlay), the terms and conditions and data protection notices of the respective platforms apply in the relationship between the users and the providers.

§ 3.2 Legal Basis

Fulfilment of a contract and pre-contractual requests, Legal obligation, Legitimate Interests

§ 3.3 Types of Data Processed

Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, term, customer category), usage data (e.g. websites visited, interest in content, access times) , meta/communication data (e.g. device information, IP addresses), location data (data indicating the location of an end user's end device).

§ 3.4 Recipient Categories

Interested parties, business and contractual partners, customers.

§ 4 Newsletter und Communication

§ 4.1 Purpose of processing

We send newsletters, e-mails and other electronic notifications only with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the consent of the user. Our newsletter also contains information about our services and us.

§ 4.2 Legal Basis

Consent

§ 4.3 Types of Data Processed

Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest in content, access times)

§ 4.4 Recipient Categories

Communication partners

§ 4.5 Deletion and restriction of processing

We can store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time. In the case of obligations to permanently observe contradictions, we reserve the right to store the e-mail address in a blocking list (so-called “blacklist”) solely for this purpose.

§ 4.6 Double-Opt-In-Procedure

The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

§ 4.7 Opt-out option

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the contact options given above, preferably e-mail.

§ 5 Online Marketing and Cookies

§ 5.1 Purpose of processing

We process personal data for online marketing purposes, which may include in particular the marketing of advertising space or the presentation of advertising and other content based on the potential interests of users and the measurement of their effectiveness.

For these purposes, user profiles are created and stored in a file (so-called "cookie") or similar processes are used, by means of which the user information relevant for the presentation of the aforementioned content is stored. This information can include, for example, content viewed, websites visited, online networks used, but also communication partners and technical information such as the browser used, the computer system used and information on usage times.

If users have consented to the collection of their location data, this can also be processed. Tracking (e.g. interest/behaviour-related profiling, use of cookies), remarketing, evaluation of visits, interest-based and behavioural marketing, profiling (creating user profiles), conversion measurement (measurement of the effectiveness of marketing measures), range measurement (e.g. access statistics, recognition of returning visitors).

§ 5.2 Legal Basis

Consent

§ 5.3 Types of Data Processed

Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses). Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This protects your interest in data protection.

§ 5.4 Recipient Categories

Users (e.g. website visitors, users of online services), interested parties.

§ 5.5 Types of Cookies

Based on your consent, we may also use cookies for other purposes. With regard to the type and purpose of data use, we distinguish between the following basic types:

Technical

Our website stores data on your device (cookies and browser memory) to identify your session and achieve basic platform functions, browsing experience and security.

Functional

Additional features that improve your browsing experience save some of your settings without a user account or login, use of scripts and/or third party resources, widgets and more.

Analytical

The use of analysis tools allows us to better understand the needs of our visitors and how they use our website. We may use first or third party tools to track or record your visit to our website, analyse tools or components you have interacted with or used, record conversion events, and the like.

Marketing

We may use third-party cookies and tools to improve the products and/or services we or our partners offer and how relevant they are to you, based on products or pages you have visited on this website or on other websites.

§ 5.6 Opt-out option

We refer to the data protection notices of the respective providers and the options for objection specified for the providers (so-called \"opt-out\"). If no explicit opt-out option has been specified, you can turn off cookies in your browser settings. However, this can limit the functions of our online offer.

§ 5.7 Safety measures

IP masking (pseudonymization of the IP address).

§ 6 Web analysis using Google Analytics

§ 6.1 Purpose of processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

§ 6.2 Legal Basis

Legal basis is defined by respective GDPR regulation.

§ 6.3 Recipient Categories

Google and its affiliates.

§ 6.4 Transfer to a third country

Google Ireland Limited is an affiliate of Google LLC. Google LLC is located in the USA (1600 Amphitheater Parkway, Mountain View, CA 94043).

§ 6.5 Storage duration

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have different lifespans, from a few minutes to several years.

§ 6.6 Services used and service providers

Google Analytics: online marketing and web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

§ 7 Deletion of data

The data processed by us will be deleted in accordance with the legal requirements as soon as your consent to processing is revoked or other permissions are no longer applicable (e.g. if the purpose of processing this data no longer applies or it is not required for the purpose).

If the data is not deleted because it is required for other, legally permissible purposes, its processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons or whose storage is necessary to assert, exercise or defend legal claims or to protect the rights of another natural or legal person.

Further information on the deletion of personal data can also be provided in the context of the individual data protection information in this data protection declaration.

§ 8 Your rights as a Affected Persion

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the person responsible:

§ 8.1 Right to information

Within the framework GDPR regulations, you can request information about your personal data processed by us.

§ 8.2 Right to rectification

If the information concerning you is not (or no longer) correct, you can request a correction in accordance with GDPR regulations. If your data is incomplete, you can request a completion.

§ 8.3 Right to deletion

Under the conditions of GDPR, you can request the deletion of your personal data by emailing us on app@dosecontrol.de. Your personal data and all associated accounts will be deleted in 30 days after we obtain your request.

§ 8.4 Right to restriction of processing

Within the framework of the requirements of GDPR, you have the right to demand a restriction of the processing of the data concerning you.

§ 8.5 Right to data portability

According to GDPR stipulations, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.

§ 8.6 Right to revoke the declaration of consent under data protection law

According to respective GDPR regulation, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

§ 8.7 Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. Please also note your right of objection according respective regulations of GDPR.

§ 9 Change and update of the privacy policy

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes in the data processing we carry out make this necessary. We will inform you as soon as the changes require your participation (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this data protection declaration, please note that the addresses can change over time and ask you to check the information before contacting us.

§ 10 Responsible for data processing

DOSECONTROL GmbH
Leopoldstraße 31
80802 München
Germany
Phone no.: +49 (0) 1522 667 1224
info@dosecontrol.de