Data protection

We welcome you to our website and are pleased that you are interested in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and the country-specific implementing laws that apply to us. With the help of this data protection declaration, we provide you with comprehensive information about the processing of your personal data by Abtswinder Naturheilmittel GmbH & Co. KG and the rights to which you are entitled.

Personal data is information that enables the identification of a natural person. This includes in particular name, date of birth, address, telephone number, email address, and also your IP address.

Anonymous data exists when no personal reference to the user can be established.

Responsible body and data protection officer

Address

Abtswinder Naturheilmittel GmbH & Co. KG

Gewürzstrasse 1-3

D-97355 Abtswind

Contact information

Phone: +49-9383-971-10

Fax: +49-9383-971-197

Email: info@abtswinder.de

Website: www.abtswinder.de

Contact Privacy Policy

info@abtswinder.de

Your rights as a data subject

First of all, we would like to inform you about your rights as a data subject. These rights are set out in Articles 15 - 22 of the GDPR. This includes:

The right to information (Art. 15 GDPR),
The right to erasure (Art. 17 GDPR),
The right to rectification (Art. 16 GDPR),
The right to data portability (Art. 20 GDPR),
The right to restrict data processing (Art. 18 GDPR),
The right to object to data processing (Article 21 GDPR).

To assert these rights, please contact: info@abtswinder.de . The same applies if you have any questions about data processing in our company or if you would like to revoke your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with your right of objection:

If we process your personal data for direct marketing purposes, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is related to direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and does not require the filling out of a form. It should ideally be sent to: info@abtswinder.de .

In the event that we process your data to safeguard legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or unless the processing serves to assert, exercise, or defend legal claims.

Purposes and legal bases of data processing

When processing your personal data, the provisions of the GDPR and all other applicable data protection regulations are complied with. The legal basis for data processing arises in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfill contractual and legal obligations, to execute the contractual relationship, to offer products and services, and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising.

Your consent to data processing may also constitute a data protection authorization requirement. Before granting your consent, we will inform you about the purpose of the data processing and your right of withdrawal.

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent. Otherwise, special categories of personal data will only be processed in accordance with Art. 9 GDPR if this is required by law.

Disclosure to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, your data will not be disclosed to third parties unless we are obliged to do so due to mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).

Within our company, we ensure that only those persons receive your data who need it to fulfill their contractual and legal obligations.

In certain cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts have been concluded with all service providers. (e.g. IT service provider, content delivery network).

Transfer to third countries / intention to transfer to third countries

Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, is required by law, or if you have given us your consent to do so.

We do not (currently) transfer your personal data to any service provider outside the European Economic Area.

Storage period of the data

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods mean that data (must) continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g., German Commercial Code, German Fiscal Code, etc.). If there are no further retention obligations, the data is routinely deleted once the purpose has been achieved.

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.

Secure transfer of your data

We use appropriate technical and organizational security measures to protect the data stored by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.

The exchange of data to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, always using the latest encryption protocols. We also offer our users content encryption as part of the contact forms. Only we are able to decrypt this data. It is also possible to use alternative communication channels (e.g., by post).

Obligation to provide data

Various personal data are necessary for the establishment, execution, and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.

We have summarized the details for you in the point above. In certain cases, data must also be collected or made available due to legal provisions. Please note that it is not possible to process your request or perform the underlying contractual relationship without providing this data.

Categories, sources, and origin of data

Which data we process is determined by the respective context:

When you visit our website, we collect and process the following data:

Name of Internet Service Provider
Information about the website from which you visit us
Web browser and operating system used
The IP address assigned by your Internet Service Provider
Requested files, amount of data transferred, downloads/file export
Information about the websites you visit, including date and time

For reasons of technical security (in particular to prevent attempted attacks on our web server), this data is stored in accordance with Art. 6 Paragraph 1 Letter f of GDPR. After a maximum of 7 days, the data is anonymized by shortening the IP address so that no reference is made to the user.

As part of a contact request, we collect and process the following data:

• Salutation

• Name
• Company
• Contact details

We collect and process the following data as part of our newsletter registration:

Email address
Name
Information about your interests, if applicable

Automated decisions in individual cases

We do not use any purely automated processing procedures to reach a decision.

Cookies (Art. 6 para. 1 sentence 1 lit. a, f GDPR, § 25 para. 1, 2 TDDDG)

Our website uses so-called cookies. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your end device and saved (locally) by your browser. Cookies only contain pseudonymous, usually even anonymous data. Some cookies remain in place for the duration of a browser session (so-called session cookies), others are stored for longer periods (so-called persistent cookies, e.g. consent settings). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies that are controlled by third-party providers. These use the information contained in the cookies, e.g., to show you content or to record the pages you have visited.

Due to our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR), we set technically necessary cookies, which are absolutely necessary for the operation of the website and to ensure its functionality. Furthermore, we use cookies without your consent if their sole purpose is to store or access information stored in the terminal device for the transmission of messages or if they are absolutely necessary to provide the service you have expressly requested, Section 25 (2) TDDDG.

We use the following technically necessary cookies:

Subject to your consent, other cookies are used to enable us or third parties to analyze how our services are used, for example. This enables us to tailor the content to user needs. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example. The legal basis for this is your express consent (Art. 6 para. 1 sentence 1 lit. a GDPR, § 25 para. 1 TTDSG).

You can revoke your consent at any time via our consent banner with effect for the future and change the cookie settings. Please note that changes must be made separately for each end device.

The cookie settings can be changed by clicking on the “Cookie settings” button at the bottom left of our page.

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not giving or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance.

Most browsers accept cookies automatically. You can also deactivate, restrict, or delete cookies on your end device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, you will not be able to use our website to its full extent or only to a limited extent.

Please also note our information in the section of the respective service that uses cookies.

Contact form / contact via email (Art. 6 para. 1 lit. a, b GDPR)

There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form to contact you and answer your questions and requests.

The principle of data economy and data avoidance is observed here, as you only have to provide the data that we absolutely need to contact you. This is your email address and the message field itself. In addition, your IP address is processed for technical reasons and for legal protection. All other data is voluntary and can be provided optionally (e.g., to answer your questions more individually).

We implement appropriate security measures to best protect the security and confidentiality of your data. Your request will be transmitted to us in encrypted form.

If you contact us by email, we will process the personal data provided in the email solely for the purpose of processing your request. If you do not use the forms provided to contact us, no further data will be collected.

Newsletter (Art. 6 Para. 1 lit. a GDPR)

You can subscribe to a free newsletter on our website. The email address and your name provided when registering for the newsletter will be used to send you the personalized newsletter.

The principle of data economy and data avoidance is observed here, as only the email address and name are marked as mandatory fields. For technical reasons and for legal protection, your IP address is also processed when you order the newsletter.

We use the so-called double opt-in procedure to send newsletters by email. This means that you will only receive advertising by email if you have previously expressly confirmed that we should activate the newsletter service. This happens by sending you a notification email and asking you to confirm that you wish to receive our newsletter at this email address by clicking on a link contained in this email.

You can of course cancel your subscription at any time using the unsubscribe option provided in the newsletter and thus revoke your consent. You also have the option of unsubscribing from the newsletter at any time directly via our website.

Advertising purposes for existing customers (Art. 6 para. 1 lit. f GDPR)

Abtswinder Naturheilmittel GmbH & Co. KG is interested in maintaining the customer relationship with you and providing you with information and offers about our products/services. We therefore process your data in order to send you relevant information and offers by email.

If you do not wish this, you can object to the use of your personal data for direct marketing purposes at any time; this also applies to profiling insofar as it is related to direct marketing. If you object, we will no longer process your data for this purpose.

The objection can be made free of charge and without giving reasons and should, if possible, be done by telephone: +49-9383-97110, by email to info@abtswinder.de, or by post to Gewürzstraße 1-3, D-97355 Abtswind, Germany.

Online offers for children

Persons under the age of 16 may not send us any personal data or give a declaration of consent without the consent of their legal guardian. We would like to encourage parents and legal guardians to actively participate in their children's online activities and interests.

Links to other providers

Our website also contains – clearly visible – links to the websites of other companies. If there are links to websites of other providers, we have no influence on their content. Therefore, no guarantee or liability can be accepted for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable violations of law at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of law. If violations of law become known, such links will be removed immediately.

Handling data from customers, suppliers, contractual partners, and interested parties

Categories/origin of the data

We process the following personal data as part of the contractual relationship and for the initiation of the contract:

Contact data (e.g., name of current and, if applicable, previous contact persons as well as name affixes, company name, and address of the customer (employer), telephone number with extension, mobile, landline telephone number, email address, fax number, business e-mail address)
Different delivery/billing address (e.g. name and address (if applicable, floor, district, federal state), if applicable, telephone number, if applicable, email address)
Order history
Job-related data (e.g., function in the company, department)
If applicable, bank details (in the context of a SEPA direct debit mandate also first/last name of the account holder)
If applicable, preferred payment system, information on creditworthiness and credit behavior

We generally receive your personal data from you as part of the contract initiation process or during the ongoing contractual relationship. Exceptionally, your personal data may also be collected from other sources in certain constellations. This includes occasion-related queries to relevant information from credit agencies, in particular regarding creditworthiness and credit behavior.

Purposes and legal bases of data processing

When processing your personal data, the provisions of the EU GDPR, the BDSG (new), and other relevant legal provisions are always complied with.

Your personal data will be processed exclusively for the implementation of pre-contractual measures (e.g. communication, for the preparation of offers for products or services) and for the fulfillment of contractual obligations (e.g., for the implementation of our services or for order/payment processing), (Art. 6 para. 1 lit. b EU-GDPR) or if there is a legal obligation to process (e.g., due to tax law requirements) (Art. 6 para. 1 lit. c EU-GDPR). The personal data was originally collected for these purposes.

Your consent to data processing can, of course, also constitute a data protection authorization provision (Art. 6 para. 1 lit. a EU GDPR). Before granting consent, we will inform you about the purpose of the data processing and about your right of withdrawal in accordance with Art. 7 para. 3 EU GDPR.

Your personal data will only be processed for the detection of criminal offenses under the conditions of Art. 10 EU GDPR.

Handling applicant data

Categories/origin of the data

We process the following personal data as part of the application process:

Your data (name, name affixes, date of birth)
Contact details (address, telephone number, email address)
Work permit / residence permit, if applicable
If applicable, criminal record / certificate of good conduct

Your personal data is generally collected directly from you as part of the application process. We also use personal data that we have permissibly obtained from publicly accessible directories (e.g., professional networks).

Purposes and legal bases of data processing

When collecting and processing your personal data, the provisions of the EU GDPR, the BDSG (new), and all other (labor) law provisions are always complied with. According to Art. 6 para. I lit. b GDPR, personal data of employees may be processed for the purposes of the employment relationship if this serves the decision on the establishment of an employment relationship or, after the establishment of the employment relationship, the implementation or termination of the employment relationship.

In addition, permission to process data, including special categories of personal data, may result from certain other laws, in particular due to industry-specific (compliance) requirements.

Of course, your consent to data processing can also constitute a data protection law permission regulation. We will inform you about the purpose of the data processing and about your right of withdrawal in accordance with Art. 7 para. 3 of the EU GDPR, Art. 88 para. 1 EU GDPR in conjunction with Section 26 para. 2 BDSG. § Section 26 (2) BDSG (new). If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent, Art. 88 para. 1 EU GDPR in conjunction with Section 26 para. 3 BDSG (new). § Section 26 (3) BDSG (new).

Processing of special categories of personal data within the meaning of Art. 9 para. 1 EU GDPR only takes place if this is required by law and there is no reason to assume that you have an overriding interest worthy of protection in the exclusion of processing, Art. 88 para. 1 EU GDPR in conjunction with § Section 26 (3) BDSG (new).

Storage period of the data

We store your applicant data until the application process has been completed or we no longer need your data for the above-mentioned purposes or you have withdrawn your consent. If we enter into an employment relationship with you, we will continue to store the relevant applicant data, provided that it is still relevant for the implementation of the employment relationship.

If we unfortunately have to reject your application, we will delete your application documents no later than 6 months afterwards, unless you have given us your consent to include you in our applicant pool and the associated longer storage of your application documents. In this case, we will delete your data after a maximum of 12 months or if you withdraw your consent.

Abtswinder Naturheilmittel GmbH & Co. KG uses social media, in this case LinkedIn. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with.

Below you will find the most important information on data protection law in relation to our presence.

Name and address of the controller

In addition to Abtswinder Naturheilmittel GmbH & Co. KG, the controller responsible for the company websites within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection regulations is KG is the

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)

However, you use these platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). We would also like to point out that your data may be processed outside the European Union.

Purpose and legal basis

We maintain the fan pages ourselves in order to communicate with visitors to these pages and to inform them about our offers in this way.

We also collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g., total number of page views, page activities, and data provided by visitors, interactions) are processed by the social networks and made available to us. We have no influence on the generation and presentation of this data.

In addition, your personal data is processed by the social media providers for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behavior and the resulting interests. This allows, among other things, advertisements to be placed within and outside the platforms that correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly on your end devices may also be stored in your usage profiles. Data is also stored and analyzed across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

We do not collect or process any other personal data.

The processing of your personal data by Abtswinder Naturheilmittel GmbH & Co. KG is based on our legitimate interests in effective information and communication in accordance with Art. 6 para. 1 sentence 1 lit. f. GDPR.

If you are asked for consent to data processing, i.e. if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Art. 6 para. 1 sentence 1 lit. a., Art. 7 GDPR.

Your rights / option to object

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored membership data with the respective network, you must
- log out of the respective network before visiting our fan page
- delete the cookies on your device, and
- close and restart your browser.

After logging in again, however, you will once again be recognizable to the network as a specific user.

For a detailed description of the respective processing and the opt-out options, please refer to the information linked below:

Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com

Overall, you have the following rights regarding the processing of your personal data:

Right of access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority.

However, since Abtswinder Naturheilmittel GmbH & Co. KG does not have full access to your personal data, you should contact the social media providers directly if you wish to assert your rights, as they have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact info@abtswinder.de.

Notes on copyright and artistic copyright

If you wish to publish images, texts, plans, videos, music, etc. on our website, you should be aware that you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder yourself.