In this data protection declaration, we inform you about what data we will process for what purpose and to what extent when you visit our websites and give you an overview of the rights to which you are entitled.

1. Responsible office for data protection law

Responsible office for data processing within the framework of the website:
Alorelia Healthcare GmbH
CEO Stephan Schommer
Rehlinger Straße 20
66701 Beckingen

E-Mail: info@bactoattaq.de
Phone: +49 6835/60588-22
Fax: +49 6835/605883-19

2. Data protection officer

You can reach our data protection officer at datenschutz@cps-pharma.de

3. Processing operations, purposes and duration as well as the legal basis of data processing

3.1  Collection of personal data when deploying our website and creating log files

When you visit our website, the following data is collected and stored in log files:

• Information about the type of browser and the version in use
• the user’s operating system
• the user’s anonymised IP address
• date and time of access
• websites from which the user’s system accesses the page

The purpose of the processing is to ensure the establishment of the connection and the use of the website, to ensure the functionality of the website, the statistical evaluation for the purpose of optimising the website, to improve the stability and functionality and to ensure the security of the IT systems.

The legal basis for data processing is a legitimate interest in the flawless and secure operation of the website necessary for our business activities (Art. 6 para. 1 p. 1 lit. f GDPR).

The data is stored for a maximum period of 31 days. Due to the anonymisation of the IP address, an identification of the accessing client is not possible.

3.2 Processing of personal data when contacting us

a)    By e-mail, phone or via the contact form

When you contact us by e-mail or telephone, the data you provide will be stored by us.

Alternatively, the contact form available on our website can be used for contacting us online. If you contact us via the contact form, the following data entered in the input screen will be transmitted to us and stored:

• First name (mandatory)
• Last name (mandatory)
• E-mail address (mandatory)
• Subject (mandatory)
• Comment (mandatory)

The provision of further data may be voluntary.

The processing of personal data transmitted by e-mail or via the contact form serves to establish contact quickly and thus to process your enquiry promptly (legal basis: Art. 6 para. 1 p. 1 lit. f GDPR).

If your contact aims at the signing of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR).

The data transmitted by you in the context of the enquiry will only be forwarded to third parties if this is necessary for the completion of a contract (legal basis is Art. 6 para. 1 p. 1 lit. b GDPR). For further details, please refer to section 3.3 “Processing of personal data for orders” below.

The data will be deleted when the processing of the respective request has been completed. Processing is terminated when the circumstances indicate that the matter in question has been conclusively clarified, provided that there are no legal retention obligations.

If your enquiry leads to the signing of a contract, your data will be deleted after the expiry of the retention periods required by commercial and tax law.

b)    Affiliate form

The following data is transmitted and stored via the affiliate form:

• Company (mandatory field)
• Contact person (mandatory field)
• E-mail (mandatory)

The provision of further data may be voluntary.

The data transmitted to us as part of the enquiry about the partner programme will not be forwarded to third parties.

The processing of personal data that you transmit to us via the partner programme serves to establish contact quickly and thus to process your enquiry about the partner programme efficiently (legal basis is Art. 6 para. 1 lit. f GDPR)

If your contact aims at the formation of a contract (participation in the partner programme), the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

The data will be deleted when the processing of the respective request has been completed. Processing is terminated when the circumstances indicate that the matter in question has been conclusively clarified, provided that there are no legal retention obligations.

If your enquiry leads to participation in the partner programme, your data will be stored until you terminate your participation in the partner programme. In this case, we will delete your data immediately, unless we have a legal obligation to retain it and/or we have to retain certain data for accounting or billing reasons. We will then only use this data for these purposes and only keep it stored for the legally required period. After that, they will also be deleted.

c)    Contact form: Return of a product

The following data will be transmitted to us via the contact form “Return of products” and stored:

• Client ID (see invoice)
• E-mail address
• Invoice number
• Article number

The data is processed for the purpose of handling the return of products. The legal basis is Art. 6 Para. 1 lit. b GDPR.

d)    Contact form: Defective product

The following data will be transmitted to us via the contact form “Defective product” and stored:

• Invoice number*
• E-mail address*
• Client ID (see invoice)
• Company (If yes, please tick)
• Item number(s)
• Detailed fault description
• How does the problem occur?

The data processing is carried out for the handling of warranty cases and other complaints. The legal basis is Art. 6 para. 1 lit. b GDPR.

 3.3       Processing of personal data for orders

If you order in our webshop, it is necessary for the completion of the contract that you provide your personal data, which we need for the processing of your order.

However, you can also create a customer account through which we can save your data for future purchases. When you create an account under “My account”, the data you provide will be saved.

The mandatory data required for the processing of contracts is marked separately, other information is voluntary.

We process the data you provide to process your order. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.

Your data will only be forwarded to third parties if this is necessary for the completion of a contract (legal basis is Art. 6 para. 1 p. 1 lit. b GDPR). Third parties employed by us within the framework of the contract may also receive your data for this purpose. This concerns the following service providers:

• Shipping companies
• Payment service providers: in order to process payments, the payment data collected for this purpose will be forwarded to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, the data protection regulations of the respective payment service provider apply.
• In addition, our order processors (Art. 28 DSGVO), particularly in the area of goods and warehousing, receive your data and process it on our behalf in accordance with your instructions.

Your data will be deleted after expiry of the retention periods under tax and commercial law.

3.4  Comments on blog posts

It is possible to write a comment on our blog posts.

If you use the comment function, your e-mail address and the name you have chosen will be saved in addition to your comment, but only the name you have entered will be published.

It is not possible for you to use the comment function without providing an e-mail address.

The specification of an e-mail address is necessary so that we can contact you in case of an objection to your comments on the blog and so we can ask you to give a statement. This is done to avert possible liability claims asserted against us due to unlawful comments and thus to protect our legitimate interests. The legal basis for this processing is Art. 6 (1) lit. f DSGVO.

The comments and the associated data are deleted if the comments have to be deleted for legal reasons (e.g. offensive comments) or if you request the removal of your comment.

3.5   Cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. Cookies contain a characteristic string of characters that enables the browser to be identified when the website is accessed again.

Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). In this respect, these are mandatory cookies.

In addition to technically necessary cookies, the following cookies are also used on our website:

• Google Analytics (see section 4.1 below)
• Google Ads (see section 4.2 below)

When you access our website, you will be informed about the use of cookies for analysis purposes and your consent to the processing of personal data used in this context will be obtained. In this context, a reference to this data protection declaration is also made.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all the features of this website to their full extent.

Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the features of the website to their full extent.

4.    Google services

This website uses various services provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Ireland Limited is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By integrating Google services, Google may collect and process information (including personal data). It cannot be ruled out that Google also transmits the information to a server in a third country. We have no influence on the further processing and use of the data by Google.

You can find Google’s data protection information at https://policies.google.com/privacy.

You can find more information on the individual Google services we use in the additional privacy policy:

4.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google, on our website. This service is used to improve the quality of our website and its content. We learn how our website is used and can thus constantly optimise our offer.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.

When creating the usage profiles, Google collects the following data:

• Pages viewed
• Your behaviour on the pages (for example, clicks, scrolling behaviour and length of stay)
• Your approximate location (country and city)
• Your IP address (in anonymised form, so that no clear identification is possible)
• Technical information such as browser, internet provider, device and screen resolution

We would like to point out that on this website Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure anonymised collection of IP addresses (so-called IP masking).

Furthermore, we have concluded an order processing agreement with Google for the use of Google Analytics (Art. 28 GDPR). Google processes the data on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

The legal basis for the processing of personal data described here is your consent (Art. 6 para. 1 lit. a GDPR).

When you access our website, you will be informed about the use of Google Analytics and your consent to the processing of personal data used in this context will be obtained. In this context, there is also a reference to this data protection declaration.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all features of this website to their full extent.

4.2 Google Ads

We use the online advertising programme “Google Ads” on our website and in this context Conversion Tracking.

When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and ourselves will be able to recognise that you have clicked on the ad and have been redirected to that page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers’ websites. The information obtained with the help of the conversion cookie is used for the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

When you access our website, you will be informed about the use of cookies for advertising purposes and your consent to the processing of personal data used in this context will be obtained. In this context, a reference to this data protection declaration is also made.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

5.   Newsletter

On our website, you have the option of subscribing to a newsletter with which we inform you about offers and events. When you subscribe, the following data will be processed:

• E-Mail address

The indication of further data can be voluntary.

We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The legal basis for the processing of data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given their consent.

You can revoke your consent to receive the newsletter at any time by sending an e-mail to datenschutz@cps-pharma.de.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active.

The data will not be passed on or transferred to a third party.

Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there.

6.  Links to external social media sites

We use links to Instagram and Facebook on our website. By clicking on the corresponding image icon, you will be redirected to the corresponding page.

7.   External Links

The website contains so-called “external links” to other websites.

If you use these external links, please note that this data protection declaration does not apply to these links. We have no influence on the compliance with data protection by the providers of the linked sites. Therefore, please inform yourself on the websites of the other providers about the data protection declarations provided there

8.    Your rights

a)    You have the following rights in relation to personal data relating to you:

• right to information,
• right to rectification or erasure,
• right to restriction of processing,
• right to object to processing,
• right to data transferability.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

b)    Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law – if such has been given – at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If you wish to exercise your right of revocation, an e-mail to datenschutz@cps-pharma.de.

c)    Right of objection according to Art. 21 GDPR

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data with effect for the future in accordance with Art. 21 GDPR, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection that is implemented by us without specifying a particular situation.

If you would like to exercise your right of objection, it is sufficient to send an e-mail to datenschutz@cps-pharma.de. 

9.  Automated decision making and profiling

Automated decision-making including profiling pursuant to Article 22 para. 1 and 4 GDPR does not take place.