Privacy Policy

Privacy Policy

In this data protection information pursuant to Art. 13, 14 DSGVO, we inform you about the processing of your personal data by Cansativa GmbH, Hessenring 15i, 64546 Mörfelden-Walldorf (“we”) in connection with the use of this website and the provision of the respective products and services purchased by you.

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

In the first section of this data protection notice, you will find general information on the handling of your personal data and the claims and rights to which you are entitled under the data protection regulations. Which data is processed in detail and how it is used depends largely on the products and services you have purchased and is specified in the second section (Special Information).

Privacy Policy Cansativa GmbH

Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us.

Cansativa GmbH operates the websites

Below you will find information on the handling of your data that is collected through your use of our websites or individual services and offers on our websites. Your data will be processed in accordance with the statutory data protection regulations.

Controller within the meaning of the GDPR

Cansativa GmbH

Hessenring 15i

64546 Moerfelden-Walldorf

Phone: +49 (0) 69 2475 778 40

E-mail: datenschutz@cansativa.de

Contact details of the data protection officer

Proliance GmbH / www.datenschutzexperte.de

Data Protection Officer

Leopoldstr. 21

80802 Munich

datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please state the company to which your request relates. Please refrain from enclosing sensitive information, such as a copy of your ID, with your request.

Definitions

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.

Access to and storage of information in terminal equipment

By using our websites, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases in which such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 sentence 1, para. 2 no. 2 TTDSG.

In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Web hosting

Our websites are hosted by external service providers, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (www.shop.cansativa.de/my-account/) and Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg (www.cansativa-group.de, www.cansativa-partner-apotheken.de, www.amici-cannabis.de/). Personal data collected on these websites is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the websites and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the websites available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.

Server log files

When you visit our websites, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status

  • Web browser and operating system used

  • (Full) IP address of the requesting computer

  • Amount of data transferred

We collect the data listed in order to ensure a smooth connection to the websites and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the websites available to you. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 30 days at the latest, the data is anonymized by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.

The data may also be processed in anonymized form for statistical purposes. At no time is this data stored together with other personal data of the user, compared with other databases or passed on to third parties.

Cookies

Our websites use so-called “cookies”. Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the information on the specific data processing.

The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you about this separately in the context of this data protection declaration and obtain your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can set your browser so that you

  • be informed about the setting of cookies,

  • only allow cookies in individual cases,

  • exclude the acceptance of cookies for certain cases or in general

  • activate the automatic deletion of cookies when closing the browser.

The cookie settings can be managed under the following links for the respective browsers

You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called “Do-Not-Track-Function”. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be “tracked” for the purpose of behavior-based advertising and the like.

For information and instructions on how to edit this function, please refer to the following links, depending on your browser provider:

In addition, you can prevent the loading of so-called scripts by default. “NoScript” allows the execution of JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that the functionality of our website may be restricted if cookies are deactivated.

Change cookie settings

You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via the link in the footer of the website.

Piwik Pro Consent Manager & Piwik Pro Analytics

We use the consent management tool and analytics tool “Piwik Pro” from Piwik PRO GmbH on our websites. We use Piwik Pro to manage the storage of information in your end device (such as cookies) or access to information that is already stored in your end device. The legal basis for the processing is our legitimate interest in observing the rejection of cookies and/or the revocation of your consent to the use of cookies in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

We also use Piwik Pro Analytics to analyze user behavior for optimization purposes. Piwik Pro is operated by Piwik PRO GmbH, Knesebeckstraße 62/63, 10719 Berlin, Germany.

Piwik Pro uses cookies, which are stored on your computer and which enable us to analyze the use of the website. For this purpose, the usage information generated by the cookie (including your shortened IP address) is transmitted to our server and stored for usage analysis purposes, which serves to optimize our website. Your IP address is immediately anonymized during this process so that you as a user remain anonymous to us. The information generated by the cookie about your use of this website is not passed on to third parties.

We process the data on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree to the storage and analysis of this data from your visit, you can object. In this case, a so-called opt-out cookie will be stored in your browser, which means that Piwik Pro will not collect any session data. If you reset your cookie settings, the opt-out cookie will also be deleted and may have to be reactivated by you.

Further information on the handling of user data can be found in the privacy policy of Piwik PRO GmbH: Privacy policy of Piwik PRO GmbH – GDPR

Google Maps

If the online map service provider Google Maps is integrated on the website via an interface, we can display interactive maps directly on the website and enable you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address.

Google uses cookies to collect information about user behavior. The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.

As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information on the handling of user data can be found in Google’s privacy policy:

https://www.google.de/intl/de/policies/privacy/, Opt-out: https://www.google.com/settings/ads/

Newsletter Rapidmail

If you would like to receive our newsletter with regular information about our offers and products, we require your e-mail address as mandatory information. The provision of additional data is voluntary so that we can address you personally in the newsletter.

We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you our newsletter by email if you have expressly confirmed to us that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, wish to receive future newsletters. By confirming, you give us your consent in accordance with Art. 6 para. 1 lit. a GDPR that we may use your personal data for the purpose of sending the desired newsletter.

When you register for the newsletter, in addition to the e-mail address required for sending the newsletter, we store the IP address you used to register for the newsletter as well as the date and time of registration and confirmation in order to be able to trace possible misuse at a later date. The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

You can unsubscribe from the newsletter at any time. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

Once you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the data collected or the continued processing is otherwise permitted by law.

Our e-mail newsletters are sent via the technical service provider rapidmail GmbH, Wentzingerstraße, 21, 79106 Freiburg, Germany, to whom we pass on the data you provided when registering for the newsletter. We have concluded an order processing contract with our email service provider in which we oblige them to protect our customers’ data and not to pass it on to third parties.

The service provider uses the information from the newsletter registration to send and statistically evaluate the newsletter on our behalf on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked on. Conversion tracking can also be used to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to withdraw your consent to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

Data will not be transferred to third countries. The data you enter for the purpose of subscribing to the newsletter will be stored on rapidmail’s servers in Germany.

WooCommerce

The WooCommerce service from WooCommerce Ireland Ltd. is integrated on our store website (www.shop.cansativa.de/my-account/). We use the WooCommerce e-commerce platform to design our web store with the help of Wordpress plug-ins. WooCommerce is operated by Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86.

We process the data on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to ensure the optimal design of our online store.

We have concluded an order processing contract with the provider WooCommerce Ireland Ltd. in accordance with the requirements of Art. 28 GDPR, in which we oblige it to protect our customers’ data and not to pass it on to third parties.

Since personal data may be transferred by WooCommerce Ireland Ltd. to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Automattic Inc, the parent company of WooCommerce, is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search.

Sanity.io

On our website www.cansativa-group.de we use the Content Delivery Network (CDN) of Sanity US Inc, 2345 Yale St., Palo Alto, California, USA (Sanity) to increase the security and delivery speed of our website. A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. For this purpose, the browser you are using must connect to Sanity’s servers. As a result, Sanity becomes aware that our website has been accessed via your IP address. The data collected will only be used for the aforementioned purpose and to maintain the functionality and security of the CDN. For this purpose, Sanity may process personal data in the form of server log files. The name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider may be stored in the server log files. This data also helps Sanity to detect new threats to websites, for example. This enables Sanity to ensure a high level of security protection for our website.

The processing of personal data in connection with the use of Sanity is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to increase the security and delivery speed of our website.

We have concluded an order processing contract with the provider Sanity in accordance with the requirements of Art. 28 GDPR, in which we oblige it to protect our customers’ data and not to pass it on to third parties.

For potential transfers to third countries outside the EU and the EEA, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Registration for information and ordering goods

If you would like to order goods from us, you must register in advance. Registration is only possible for pharmacy owners and is used for information purposes and to enable you to order goods. For this purpose, the following profile data is requested and processed by us:

  • First name and surname of the pharmacy owner

  • Contact person

  • address

Further mandatory information is also required for the use of the restricted access specialist portal with ordering option:

  • Copy of the pharmacy operating license

Cansativa GmbH is obliged to identify specialist group users on the basis of provisions under the law on the advertising of medicinal products and the law on medicinal products and narcotics and for this reason processes the above-mentioned data to provide the restricted specialist group content. We therefore base the data processing on Art. 6 para. 1 lit. c GDPR.

Contact form and contact by email

You can send inquiries to our customer service via the contact form and by email. If you send us inquiries via the contact form or e-mail, your details from the inquiry form or your e-mail, including the personal data you provide there, will be stored by us to process the inquiry and in the event of follow-up questions. It is necessary to provide an e-mail address to contact us; providing your first name, surname and telephone number is voluntary.

We will never pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Doc-Check-Login

We may only provide you with information about prescription-only medicines if you are a healthcare professional. In this case, we are obliged to request your personal data and proof of your professional affiliation. Optionally, you can use the “DocCheck” service provided by DocCheck Medical Services GmbH, Vogelsanger Straße 66, 50823 Cologne, Germany, to verify your identity.

The user name and password are checked directly on DocCheck servers. We do not receive any personal data about you as a user of DocCheck without your explicit consent to the transfer of data (e.g. for “DocCheck Personal”) in accordance with Art. 6 para. 1 lit. a GDPR.

When using DocCheck, the agreements between you and DocCheck apply, with regard to data protection the DocCheck data protection declaration: https://more.doccheck.com/de/privacy.

Form for data management options

You can use the following form to access your data, delete your data and change your data. Only your e-mail address is required. You are free to choose which personal data you would like to enter in the “Message” field.

We use your data exclusively to process your request and to fulfill our legal obligations (Art. 6 para. 1 lit. c GDPR). The data you provide will be treated confidentially and will not be passed on to third parties.

Online application procedure

If you apply to us via our online contact form, we collect personal data. This includes in particular your contact details (such as first and last name, telephone number and e-mail address of the user) as well as other data provided by you about your background (e.g. CV, qualifications, degrees and professional experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. details of a severe disability).

As a rule, your personal data is collected directly from you as part of the application process and encrypted during electronic transmission. The primary legal basis for this is Section 26 (1) BDSG. In addition, consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 para. 2 BDSG can be used as a data protection authorization provision. If the processing of your data is based on consent, you have the right to withdraw your consent at any time with effect for the future.

Within our company, only those persons and departments (e.g. Human Resources) have access to your personal data that absolutely need it to carry out the application process or to fulfill our legal obligations. If necessary, your application will be forwarded to the responsible person for review. Under no circumstances will your personal data be passed on to third parties without authorization.

Your data relating to an application for a specific job advertisement will be stored and processed by us during the ongoing application process. After completion of the application process (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system no later than six months after completion of the application process. The data of selected applicants will be securely stored for up to 1 year, provided that the applicants have given their consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with § 26 para. 2 BDSG. You can withdraw your consent at any time with effect for the future. An informal email to the contact details of the controller listed above is sufficient for this purpose. If you are accepted, your application documents will be transferred to your personnel file.

In order to be able to access our online application procedure and our job offers in the “Careers” section, we integrate a link to a recruiting page of “Personio”, Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. After clicking on the integrated “Career” link in the footer of the website, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded.

We have concluded an order processing contract with the provider Personio in accordance with the requirements of Art. 28 GDPR, in which we oblige it to protect the data of our customers and not to pass it on to third parties.

For information on the handling of your personal data when using this recruiting page, please refer to the respective data protection provisions at https://cansativa.jobs.personio.de/privacy-policy?language=de.

Data transfer and recipients

Your personal data will not be transferred to third parties unless

  • if we have explicitly indicated this in the description of the respective data processing,

  • if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and

  • insofar as this is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

In addition, we use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing contracts in accordance with Art. 28 GDPR if necessary. These service providers are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending emails, maintenance and servicing of our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you have exercised your right of revocation or objection.

Your rights

Below you will find information on the data subject rights that the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

  • The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

  • The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

  • The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

  • The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

  • The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller in accordance with Art. 20 GDPR

  • The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

  • The right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@cansativa.de

Legal obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfillment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.

Automated decision-making

Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.

Reservation of the right to make changes

We reserve the right to adapt or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.

Status of this privacy policy: 11.04.2024