Privacy

§ 1 General

Your personal data (e.g. title, name, address, email address, telephone number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases, storage periods and your rights and the person responsible for your data processing. This privacy policy applies only to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.

§ 2 Contact

(1) Purpose of processing

We process the personal data you provide us with via email, contact form, etc. for the purpose of responding to and processing your enquiries. You are not obliged to provide us with your personal data. However, without your email address, we will not be able to respond to you by email.

(2) Legal basis

a) If you have given us your express consent to process your data, Art. 6 (1a) GDPR is the legal basis for this processing.

b) If we process your data for the purpose of implementing pre-contractual measures, Art. 6 (1b) GDPR is the legal basis.

c) In all other cases (in particular when using a contact form), Art. 6 (1f) GDPR is the legal basis.

RIGHT TO OBJECT: You have the right to object to data processing based on Art. 6 (1f) GDPR and not for direct marketing purposes for reasons arising from your particular situation at any time.

In the case of direct marketing, however, you may object to the processing at any time without giving reasons.

(3) Legitimate interest

Our legitimate interest in processing your data is to communicate with you quickly and respond to your enquiries in a cost-effective manner. If you provide us with your address, we reserve the right to use it for direct marketing by post. You can protect your interest in data protection by providing only the minimum amount of data (e.g. using a pseudonym).

(4) Categories of recipients

Hosting providers, shipping service providers for direct advertising.

(5) Storage period

Your data will be deleted if it can be inferred from the circumstances that your enquiry or the matter in question has been conclusively clarified.

However, if a contract is concluded, we will store the data required under commercial and tax law for the periods specified by law, i.e. regularly for ten years (cf. Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO)).

(6) Right of withdrawal

In the event of processing based on your consent, you have the right to withdraw your consent at any time.

§ 3 Further information

Cloudflare Turnstile

We use Cloudflare Turnstile (hereinafter ‘Turnstile’) on this website. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter ‘Cloudflare’). Turnstile is used to check whether the data entered on this website (e.g. in a contact form) is entered by a human or by an automated program. To do this, Turnstile analyses the behaviour of the website visitor based on various characteristics.

This analysis begins automatically as soon as the website visitor enters a website with Turnstile activated. Turnstile evaluates various information for analysis (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Cloudflare. The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM. If the relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Data processing is based on standard contractual clauses, which can be found here: https://www.cloudflare.com/cloudflare-customer-scc/.

For more information about Cloudflare Turnstile, please refer to the privacy policy at https://www.cloudflare.com/cloudflare-customer-dpa/.

§ 4 Web analysis with Google Analytics

(1) Purpose of processing

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Analytics 4 uses ‘cookies’, which are text files placed on your device that enable us to analyse your use of the website. According to Google, Google Analytics 4 does not log or store individual IP addresses. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: ‘city’ (and the derived latitude and longitude of the city), ‘continent’, ‘country’, ‘region’, ‘subcontinent’ (and the ID-based equivalents). For access originating in the EU, IP addresses are only used to derive location data and are then immediately deleted. They are not logged, are not accessible and are not used for any other purposes. When collecting measurement data in Analytics, all IP searches are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing. These servers are also located outside the EU.

Google Analytics offers a user ID feature. This feature allows sessions to be assigned a permanent ID, enabling user behaviour to be analysed across devices. No personally identifiable information is used when the IDs are used, and user IDs do not contain any information that could be used by third parties to identify a user. Remarketing target groups can be created based on the user IDs. However, Analytics only collects the user ID and device ID for the last device associated with a logged-in user.

We use the Google Signals feature. This feature collects additional information about website visitors who have enabled personalised ads, and ads can be delivered to these visitors in cross-device remarketing campaigns.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

(2) Legal basis

The legal basis for this processing is your consent in accordance with Art. 6 para. 1a) GDPR.

(3) Categories of recipients

Google and its partner companies.

(4) Transfer to a third country

Google Ireland Limited is a company affiliated with Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the USA is the EU-US Privacy Shield.

(5) Storage period

14 months

(6) RIGHT OF WITHDRAWAL

You can withdraw your consent at any time with future effect via our cookie banner or via our website.

You can also prevent the storage of cookies in general by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by downloading and installing the browser plug-in available under the following link: optout

§ 5 Information about cookies

(1) Purpose of processing

Technically necessary cookies are used on this website. These are small text files that are stored on your computer system by your Internet browser.

(2) Legal

The legal basis for this processing is Art. 6 para. 1 f) GDPR.

(3) Legitimate

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This protects your interest in data protection.

(4) Storage

Technically necessary cookies are usually deleted when you close your browser. Permanently stored cookies have a lifespan of varying lengths, from a few minutes to several years.

(5) RIGHT TO OBJECT

If you do not want these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in functional restrictions on our website. You can also delete permanently stored cookies at any time via your browser.

§ 6 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

1. Right to information

You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

2. Right to rectification

If the information concerning you is no longer accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

3. Right to erasure

You can request the erasure of your personal data under the conditions of Art. 17 GDPR.

4. Right to restriction of processing

Within the scope of the provisions of Art. 18 GDPR, you have the right to request a restriction on the processing of data concerning you.

5. Right to data portability

Under Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

6. Right to withdraw your consent to data processing

Under Article 7(3) of the GDPR, you have the right to withdraw your consent to data processing at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Art. 77 GDPR.

Please also note your right to object in accordance with Art. 21 GDPR:

a) General: justified objection required

If the processing of personal data concerning you

– is necessary to safeguard our overriding legitimate interests (legal basis pursuant to Art. 6(1)(f) GDPR) or

– is in the public interest (legal basis pursuant to Art. 6(1)(e) GDPR),

you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time without giving reasons; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Data controller:

SAVI GmbH Reha Solutions
Lise-Meitner-Str. 10
48691 Vreden
Telephone: 02564-930970
info@savi.de