Privacy policy

Data Controller:

GesundPur
info@gesundpur.at

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

 

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), thereby documenting the access.

This access data is used exclusively to ensure the smooth operation of the website and to improve our service offering. According to Art. 6(1) sentence 1 lit. f GDPR, this serves to protect our legitimate interests, which outweigh other interests in the context of a balancing test, in the proper presentation of our offer. All access data is deleted no later than seven days after your visit to the site.

 

2. Collection and Use of Data for Contract Processing, Contact, and Account Creation

We collect personal data when you voluntarily provide it to us in connection with your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we require this data to process your order or respond to your inquiry, and you cannot submit the order or contact request without providing this information. The data collected is indicated in the respective input forms. We use the data you provide in accordance with Art. 6(1) sentence 1 lit. b GDPR for contract processing and handling your requests.

If you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of creating the customer account.

After the contract has been fully executed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods, unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond that, as permitted by law and described in this privacy statement. You can delete your customer account at any time either by sending a message to the contact details provided below or via a designated function within your customer account.

3. Data Sharing

For the fulfillment of the contract in accordance with Art. 6(1) sentence 1 lit. b GDPR, we share your data with the shipping company commissioned for delivery, insofar as this is necessary for the delivery of the ordered goods. Depending on the payment service provider you select during the ordering process, we share the payment data collected for processing payments with the bank responsible for payment processing and, if applicable, with payment service providers we have commissioned or the selected payment service. Some payment service providers also collect this data themselves if you create an account with them. In such cases, you must log in to the payment service provider with your credentials during the ordering process. The privacy policy of the respective payment service provider applies accordingly.

We use a shipping service provider based in a country outside the European Union. The transfer of personal data to this company takes place only to the extent necessary for contract fulfillment.

The same applies to data sharing with our manufacturers or wholesalers when they handle shipping on our behalf (drop shipping).

 

4. Email Newsletter

Email Marketing and Newsletter Subscription
If you subscribe to our newsletter, we use the necessary data provided by you or separately communicated by you to regularly send you our email newsletter based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via the unsubscribe link provided in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond that, as permitted by law and explained in this privacy statement.

 

5. Social Media

Our Online Presence on Facebook and Instagram

Our presence on social networks and platforms serves to enable better, active communication with our customers and interested parties. We use these channels to provide information about our products and ongoing special offers.

When you visit our online profiles on social media, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from this data. These profiles can be used to display ads both within and outside the platforms that are presumably tailored to your interests. To achieve this, cookies are typically used on your device, which store visitor behavior and user interests. This is done in accordance with Art. 6(1) lit. f GDPR to safeguard our overriding legitimate interests, balanced against yours, in optimizing the presentation of our offerings and effective communication with customers and prospects.

If the respective social media platform operators ask you for your consent to data processing (e.g., via a checkbox), the legal basis for data processing is Art. 6(1) lit. a GDPR.

If the mentioned social media platforms have their headquarters in the USA, the following applies: An adequacy decision by the European Commission exists for the USA. This is based on the EU-US Privacy Shield. A current certificate for each company can be viewed here.

Detailed information on data processing and usage by the providers, as well as contact options and your rights and privacy settings, especially opt-out possibilities, can be found in the linked privacy policies below. If you need assistance in this regard, please contact us.

Facebook: https://www.facebook.com/about/privacy/
Data processing is based on a joint controller agreement pursuant to Art. 26 GDPR, which you can view here.
More information on data processing when visiting a Facebook fan page (including insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

Opt-Out Options:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875

 

6. Contact Options and Your Rights

Your Rights as a Data Subject:

  • According to Art. 15 GDPR, you have the right to request information about the personal data we process about you, within the scope specified there.

  • According to Art. 16 GDPR, you have the right to request the immediate correction of inaccurate personal data we hold about you or the completion of incomplete data.

  • According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored with us, unless further processing is necessary

    • for exercising the right to freedom of expression and information;

    • for compliance with a legal obligation;

    • for reasons of public interest; or

    • for the establishment, exercise, or defense of legal claims.

  • According to Art. 18 GDPR, you have the right to request the restriction of processing of your personal data, provided that

    • you contest the accuracy of the data;

    • the processing is unlawful but you oppose deletion;

    • we no longer need the data but you require it for the establishment, exercise, or defense of legal claims; or

    • you have objected to processing pursuant to Art. 21 GDPR.

  • According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request transmission of those data to another controller.

  • According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Usually, you may contact the supervisory authority of your usual residence, workplace, or our company headquarters.

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to exercise your rights to access, correction, restriction, deletion of data, revoke given consents, or object to certain data processing, please contact us directly using the contact information provided in our imprint.

 

Right to Object

To the extent that we process personal data as described above based on our legitimate interests that outweigh yours following a balancing of interests, you have the right to object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. For processing carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.