The controller responsible for collecting, processing and using your personal data in accordance with Art. 4(7) GDPR is:
Dr. Schumacher GmbH
Am Roggenfeld 3
Data Protection Officer:
Data Protection Officer
Dr. Schumacher GmbH
Am Roggenfeld 3
Personal data that we collect about you
Personal data are particulars about the personal or factual circumstances of a specific or identifiable natural person such as your correct name, your date of birth, your address and your telephone number. Data that may not be directly linked to your true identity, such as information recorded about the number of users of a website, are not personal data. If you register with our website, we will collect login data that we use to monitor and improve our website in addition to our procedures and processing methods. We collect your personal information if you voluntarily send it to us directly or via our website. This includes information such as title, name or email address as well as other voluntarily granted information that you give to us by completing a contact form or otherwise corresponding with us or using other functions on our website. On some pages on our website, you will be asked to enter certain personal information. If personal information has to be provided so that the services offered can be used, this will be stated prior to collection, so that you have the option to voluntarily agree or reject our services. You can provide other personal data that is not required in order to use our services voluntarily. You decide yourself whether or not you would like to provide any personal data.
1. Purposes and legal basis for processing
1.1 Legal basis of data processing
Insofar as we obtain consent for the processing of your personal data, the legal basis for the processing of your data is point a of Article 6(1) GDPR.
If we process your personal data because this is necessary to fulfil a contract or due to a quasi-contractual relationship with you, the legal basis for the processing of your data is point b of Article 6(1) GDPR. When you contact us (e.g. via contact form or email), we process your information to process the query and for the event of any final questions. If data protection takes place to carry out precontractual measures due to a query from you or if you are already our customer, we act in accordance with this legal basis when executing the contract, so that we can fulfil our contractual obligations towards you. The collection of this data is always required when entering into a contract. The deletion of data takes place once the guarantee periods and statutory storage periods have expired.
Insofar as we process your personal data to meet a legal obligation, the legal basis for the processing of your data is point c of Article 6(1) GDPR. We use your data when fulfilling legal obligations, especially those arising from tax and commercial law as well as supplementary criminal laws, or regulations to protect public safety and order, where obliged to do so by law.
The legal basis for the processing of your data is point f of Article 6(1) GDPR if the processing of your personal data is required to safeguard a legitimate interest of our company or a third party and your interests, basic rights and basic freedoms do not require your personal data to be protected.
A legitimate interest exists e.g. in answering your email. This also includes the recognition and prevention of fraud and criminal acts and to establish revision safety. In this respect, we use your data to guarantee IT security. We use your master data and your email address for sales promotion and to advertise new goods and services.
We send product recommendations by email separately to the newsletter. This allows us to provide you with information about products from our website that you may be interested in based on your recent purchases of goods or services from us. We strictly observe statutory requirements when we do so. You can object to this at any time.
The legal basis for this is legal permission in accordance with point f of Article 6(1) 1 GDPR in conjunction with Section 7 Para. 3 Unfair Competition Prevention law (UWG).
1.2 Data deletion and storage duration
In principle, we delete or block your personal data whenever the reason for storage no longer applies. Storage may also take place where provided for by legal stipulations that we are subject to, such as statutory storage and documentation obligations, or under tax or commercial law. In such a case, we will delete or block your personal data after the end of the corresponding regulations.
When you visit our website, the connection data of the computer that accessed the website, the date and duration of your activity, the type of browser used and the type of operating system, the pages of our website that you visited and the website from which you accessed our internet presence are temporarily saved by our web server to maintain system security. These data are not saved beyond the duration of your visit.
More extensive personal details such as your name, address, telephone number or email address are not recorded. If you communicate with us via a contact form, we will become aware of your email address as well as all personal data that you voluntarily submit to us when you contact us. Your data is transmitted using a secure encryption procedure.
Your email address is used exclusively for the purposes of communicating specifically with you or to forward any requested information. We use the data shared by you exclusively to answer and complete your enquiry. We do not pass this information on to third parties without your explicit consent or legal authorisation. We use the personal data provided by you exclusively for the purposes of technical administration of the website and to answer your enquiries. There is no further use of your personal data.
2. Data usage / transfer
Data collected by us is used exclusively for the purposes listed in section 1 for the purposes described below. Your personal data are not transferred to third parties or used for marketing purposes. Your data are only transferred to third parties as part of mandatory legal requirements or if the transfer of data is necessary for reasons of prosecution or criminal proceedings in the event of attacks on our internet infrastructure.
3. Data security
The protection of your data is our highest priority. To protect your privacy and maintain confidentiality, we implement comprehensive measures for data protection, to which the personal data that you entrust to us during email communication is also subject. To prevent loss or abuse of your data that we have saved, we implement extensive technical and organisation measures and safety precautions that are regularly reviewed and adapted to comply with technological progress. We therefore save your data in a secure operating environment that can only be accessed internally.
4. Hyperlinks to/from external websites
This data protection statement does not apply to linked websites. Dr. Schumacher GmbH has no influence at all over the contents and organisation of other websites. Our data protection statement does not apply there and it is also expressly not for companies that have a link to our website or for websites of companies to which we have a link. Our website can include hyperlinks to websites of other providers. If you activate these hyperlinks, you will be transferred directly from our website to the website of the other provider. This will be reflected in the change in the URL. We cannot take any responsibility for the confidential handling of your data on these websites offered by third parties because we do not have any influence over whether or not these companies comply with the data protection regulations. Please read the information on these websites about how your personal data is handled by these companies.
5. Server data/log files
For technical reasons, the following data that your internet browser sends to us or to our web space provider is recorded (known as server log files):
- browser type and version
- operating system used
- the website that you visited us from (referrer URL)
- website that you visit
- date and time of your access
- your IP address
This anonymous data is stored separately from any personal data you may provide and therefore does not allow any conclusions to be drawn about a certain person.
6. Use of web tracking and cookies:
Cookies are small text files that enable specific user-related information to be saved on a user’s end device while you are visiting our website. In this way we can determine the frequency of visits to our website and the number of users of our website as well as to ensure our internet presence is as comfortable and efficient as possible for you.
Cookies allow us to recognise your computer and to make potential pre-settings available to you immediately. Cookies help us to improve our website and to be able to offer you a better service better tailored to you. This is a legitimate interest in data processing in accordance with point f of Article 6(1) GDPR.
The cookies we use are what are known as session cookies, which are deleted against automatically after the end of a browser session. Individual cookies may also be used with a longer storage duration so that your pre-settings and preferences can also be taken into account when you next visit our website.
Most browsers have been set up such that they accept cookies automatically. You can however deactivate the saving of cookies or set your browser so that it informs you as soon as you are sent cookies. It is also possible to manually delete cookies already stored via browser settings. Please note that you may only be able to use our website to a restricted extent or not at all if you reject the storage of cookies or delete necessary cookies.
It is also possible to use our website without cookies. In your browser you can deactivate the saving of cookies, restrict their saving to particular websites or set your browser so that it informs you as soon as you are sent a cookie. You can also delete cookies from the hard drive of your computer at any time. However, please note that if you do so you must expect the display of the website and the user guidance to be limited.
The information generated by a cookie about how you use our website, including your IP address, is generally transferred to a Google server in the US and saved there. By activating IP anonymisation on this website, however, your IP address will first be truncated within the Member States of the European Union or other signatories to the Agreement on the European Economic Area.
You can prevent cookies being saved using the appropriate settings in your browser software; we advise against this, however, because you may not necessarily be able to access all the functions of this website to their full extent.
You can also prevent the collection of the data generated by the cookie and data related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at (https://tools.google.com/dlpage/gaoptout?hl=en).
We use these analysis cookies to improve and optimise the quality of our websites and their content as well as to review and improve the scale and discoverability of our websites. At the same time, these purposes constitute a legitimate interest in accordance with the legal basis for the processing of data under point f of Article 6(1) GDPR.
You can prevent cookies being saved using the appropriate settings in your browser software; we advise against this, however, because you may not necessarily be able to access all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and data related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link tools.google.com/dlpage/gaoptout.
Further information on Google Analytics can be found at tools.google.com/dlpage/gaoptout (general information about Google Analytics and data protection). Please note that on our website Google Analytics has been extended by the ‘anonymizeIp();’ code to anonymise IP addresses by deleting the last octet.
We believe that, thanks to the security precautions taken (anonymisation and option to object), data processing to improve our website is considered as a legitimate interest in data protection in accordance with point f of Article 6(1) GDPR.
If you would like to sign up to the newsletter offered on the website, we require your email address as well as information about your gender, title and surname and that you consent to the receipt of the newsletter. Storage takes place on the basis of point f of Article 6(1) GDPR. The website provider has a legitimate interest in optimising both its website and its advertising.
To guarantee that newsletters are sent with consent only, we use what is known as the double opt-in procedure. In this procedure, potential recipients are added to a distribution list. Then, through a confirmation email, users receive the option to confirm sign-up to make registration legally watertight. The address is only added actively to the distribution list once confirmation has been given.
We use this data exclusively to send the information and offers requested.
The newsletter software we use is Newsletter2Go. Your data is sent to Newsletter2Go GmbH for this purpose. Newsletter2Go is prohibited from selling your data or for using it for reasons other than sending newsletters. Newsletter2Go is a certified, German service provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
You can find more information here (in German): https://www.newsletter2go.co.uk/information-for-newsletter-recipients/
You can revoke your consent to saving the data, email address and its use for sending the newsletter at any time, such as via the “Unsubscribe” link in the newsletter.
8. Use of YouTube components with an expanded data protection mode
Our website uses components (videos) from the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company owned by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
9. Adobe Typekit
This website uses Adobe Typekit webfonts. Typekit is a service offered by the company Adobe. This service provides fonts that are displayed in the user’s web browser during a server call at Adobe (in the USA). When this happens, the IP address of the browser on the user’s device is stored by Adobe when they visit the website. You can find further information in Typekit’s data privacy information, which you can access here: www.adobe.com/uk/privacy/policies/typekit.html
10. Google Maps
This website uses Google Maps to display interactive maps and to create travel directions. Google Maps is a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Through the use of Google Maps, information about the use of this website, including your IP address and the (start) address entered when using the route planner function, is sent to Google in the USA. When you open a page on our website, which includes Google Maps, your browser will establish a direct connection to Google servers. Google delivers the map content directly to your browser, which also includes such content directly in the website. We therefore have no control over the volume of data collected by Google as a result. As far as we know, this includes the following data at least:
- date and time of the visit to the website concerned,
- web address or URL of the website accessed,
- IP, (start) address entered as part of routine planning.
We have no influence on further processing and use of data by Google and therefore cannot assume any responsibility for it.
For more information about the purpose and scope of the data collection and further data processing by Google and your respective rights and data protection options, please see the Google privacy statement (https://policies.google.com/privacy?hl=en).
Please note that, when you use our website, Google Maps route planner will collect data about you in the way described previously.
11. Social Media
On our website, you will find links to the social networks Facebook and the carrier network LinkedIn. You will recognise the links by the logo of the relevant provider.
Before you click on these links, no personal information is transmitted to the service provider in question. At the same time, your visit to the linked site forms the basis for data processing by the service provider.
12. Rights of the data subject
The data subject has the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to object (Art. 21 GDPR)
- Right to complain to a data protection authority
- Right to restriction of processing (Art. 18f. GDPR[A1] )
- Right to data portability (Art. 20 GDPR)
We will explain your rights as data subject to you in more detail.
Right to information
You have the right to receive clearly understandable information about the processing of your personal data at any time. You have the right at any time to receive confirmation from us as to whether or not personal data concerning you is being processed. If this is the case, you have the right to request free-of-charge information about the personal data stored about you in addition to a copy of this data. You have a right to information about
- The purposes of the processing;
- The categories of personal data concerned;
- The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- If the personal data has not been collected from you, all information about the origin of the data.
Rectification and deletion
If we have saved incorrect data despite our efforts to maintain correct and current data, you have the right to rectification. We will report these immediately.
We only save the personal information that you provide to us when you make contact with us for as long as is permitted by the Act. If you want to have the saved data deleted, this requested deletion will also be carried out promptly. If deleting data is not possible for legal reasons, the particular data will instead be blocked. Please note, however, that we can no longer offer the services described here if your data are deleted.
Withdrawal of consent and objection.
Consent that you have granted can be revoked at any time with future effect. The lawfulness of any processing of your data that takes place on the basis of your consent prior to the withdrawal will not be affected by revocation of consent. Your contact person for related matters is out Data Protection Officer.
Where the processing of your personal data is not based on consent, but rather takes place on another legal basis, you can object to this data processing. Your objection leads to a review and potentially end of data processing. You will be informed of the result of the review and, in the event of data processing continuing anyway, will receive more detailed information from us as to why the data processing is necessary.
Complaint to a supervisory authority
You have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the law. You can also contact our Data Protection Officer. They will look into the matter and inform you of the result of the review. If you have any questions of this kind, please contact firstname.lastname@example.org. Please note that, with such queries, we must insure that they actually come from the data subject.
13. Validity and currency