Data Protection Declaration
We are pleased that you are visiting our website and appreciate your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that relates to an identified or identifiable individual.
A. Information on the responsible party
Kräuterhaus Sanct Bernhard KG
Helfensteinstr. 47
73342 Bad Ditzenbach
Germany
info@kraeuterhaus.de
B. Contact Details of the Data Protection Officer
Data protection officer of the Kräuterhaus Sanct Bernhard KG
Kräuterhaus Sanct Bernhard KG
Helfensteinstr. 47
73342 Bad Ditzenbach
Germany
datenschutz@kraeuterhaus.de
C. Processing of Personal Data
1. Data Collection When Visiting Our Website
When you use our website for informational purposes only, meaning you do not register or provide us with any other information, we only collect the data that your browser transmits to our server. This includes the following information:
- Our visited website
- Date and time of access
- Amount of data transmitted (in bytes)
- Source/referrer from which you accessed the page
- Used browser
- Used operating system
- Used IP address
This data is also stored in so-called log files of our system. They are not stored together with other personal data of the visitor.
Moreover it is not shared with third parties. In strict compliance with applicable data protection regulations, only our carefully selected service providers involved in hosting and maintaining our systems may receive these data. This is done on the basis of data processing agreements, through which the service providers are contractually bound, ensuring that we remain responsible for the processing of the data.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. For this purpose, the IP address must be stored for the duration of the session. The storage of data in log files ensures the functionality of the website. Additionally, these files serve to optimize the website and ensure the security of our information technology systems.
The legal basis for the temporary storage of the data and its storage in log files is Art. 6 Abs. 1 lit. f) GDPR. The legitimate interest required for this data processing lies in the aforementioned processing purposes.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected or processed. Data collected and stored for the provision of the website will be deleted once the respective session has ended. In the case of storage in log files, this happens no later than seven days after collection.
You have the right, according to Art. 21 GDPR, to object to the processing of your data at any time on grounds relating to your particular situation. In such a case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
To exercise this right, you may contact us by using the e-mail address datenschutz@kraeuterhaus.de. Should the objection be justified, the data will be deleted.
2. Contact Form and E-mail Contact
When you use our contact form, the data entered into the input fields is transmitted to us and stored. Additionally, at the time the message is sent, the following data is recorded:
• Date and Time
Alternatively, you may contact us via the e-mail address provided. In this case, any personal data transmitted with the e-mail will be stored.
The data is used exclusively for processing the respective enquiry. No data will be shared with third parties in this context. In strict compliance with applicable data protection regulations, our carefully selected service providers engaged for hosting and system maintenance may process this data on our behalf. Such processing is carried out based on data processing agreements, ensuring that these service providers are contractually bound, and we remain responsible for the processing of the data.
The processing of personal data from the contact form or your e-mail enquiry is solely for handling the communication. This also constitutes the legitimate interest required for the processing of the data. The additional personal data collected during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for processing data related to an enquiry is Article 6 para. 1 lit. f) GDPR. If the enquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data entered via the contact form or transmitted via e-mail, this occurs when the respective conversation or enquiry has been concluded. A conversation is considered concluded when it can be inferred from the circumstances that the matter has been fully resolved. Any additional personal data collected during the submission process will be deleted no later than seven days after collection.
You have the right to object to the storage of your personal data at any time in accordance with Art. 21 GDPR. In such a case, the conversation cannot be continued.
To exercise your right to object or withdraw your consent, you may contact us by using the e-mail address datenschutz@kraeuterhaus.de. In the event of a valid objection or withdrawal, the personal data stored in connection with the communication will be deleted.
3. Advertising by post
On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and occupation, trade or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible (see above A.).
4. Dispatch of rating requests by e-mail
Provided that you have given us your express consent to do so during or after your order in accordance with Art. 6(1) sentence 1, letter a GDPR, we will use your e-mail address to request a rating of your order via the rating system we use. This consent can be revoked at any time by sending a message to the contact option indicated in this privacy policy or via a link provided for this purpose in the rating request.
If necessary, the rating requests are also sent by our service provider Trusted Shops within the scope of processing on our behalf. Trusted Shops also uses service providers from the USA. An appropriate level of data protection is guaranteed. Further information on data protection at Trusted Shops can be found here. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option indicated in this privacy policy.
5. Cookies
In order to make the visit to our web site attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files, which are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us, or our partner company (third-party cookies), to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.
In some cases, cookies are used to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping basket for a later visit to the web site). Insofar as personal cookies are also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR for safeguarding our legitimate interests to the best possible functionality of the web site as well as a customer-friendly and effective design of the page visit.
We may work with advertising partners to help us make our web site more interesting to you. For this purpose, in this case, when you visit our web site, cookies from partner companies are stored on your hard disk (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of cookies and the scope of the information collected in the following paragraphs.
Please note that you can set your browser so that you can be informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Every browser differs in the way it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our web site may be limited.
6. Online-Marketing
6.1 Use of Google Ads Conversion-Tracking
This website uses the “Google Ads” online advertising program and, as part of Google Ads, conversion tracking from Google Ireland Limited (“Google”), a company registered and operated under Irish law (Registry Number: 368047), located in Gordon House. Barrow Street, Dublin 4, Ireland (“Google”). We use the Google Ads service to draw attention to our attractive offers with the help of advertising materials (so-called Google Ads) on external web sites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our web site more interesting to you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files, which are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this web site and the cookie has not expired yet, Google and we can recognise that the user clicked on the ad and was redirected to this page. Every Google Ads advertiser receives a different cookie. Cookies cannot be tracked through AdWords advertisers' web sites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can easily block use by disabling the Google Conversion Tracking cookie via your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in a targeted advertising according to Art. 6 para. 1 lit. f GDPR.
For more information about Google’s privacy policy, visit the following Internet address: https://www.google.de/policies/privacy/
You can permanently deactivate cookies by blocking them by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this web site may not be used or may only be able to be used with restrictions if you have deactivated the use of cookies.
7. Web analysis services
7.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.When using Google Analytics 4, so-called "cookies" are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior and to provide us with other services related to your website usage and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish between groups of website users for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website. On this website, the "Google Signals" service can also be used as an extension of Google Analytics 4.
Im Zusammenhang mit dieser Website wird als Erweiterung von Google Analytics 4 auch die Funktion „UserIDs“ eingesetzt. Durch die Vergabe von individuellen UserIDs können wir geräteübergreifende Berichte (Reports) durch Google erstellen lassen (sog. „Cross Device Tracking“). Dies bedeutet, dass Ihr Nutzungsverhalten bei Erteilung Ihrer entsprechenden Einwilligung in den Einsatz von Google Analytics 4 gemäß Art. 6 Abs. 1 lit. a DSGVO auch geräteübergreifend analysiert werden kann, falls Sie durch Ihre Registrierung auf dieser Website ein persönliches Konto eingerichtet haben und mit Ihren diesbezüglichen Anmeldedaten in Ihrem persönlichen Konto auf verschiedenen Endgeräten angemeldet sind. Die auf diese Weise erfassten Daten zeigen unter anderem, auf welchem Endgerät Sie das erste Mal auf eine Anzeige geklickt haben und auf welchem Endgerät die diesbezügliche Conversion erfolgt ist.
Im Zusammenhang mit dieser Website wird als Erweiterung von Google Analytics 4 auch der Dienst Google Signals eingesetzt. Mit Google Signals können wir geräteübergreifende Berichte (Reports) durch Google erstellen lassen (sog. „Cross Device Tracking“). Sofern Sie in Ihren Einstellungen in Ihrem Google-Konto die „personalisierten Anzeigen“ aktiviert und Ihre internetfähigen Endgeräte mit Ihrem Google-Konto verknüpft haben, kann Google das Nutzungsverhalten bei Erteilung Ihrer Einwilligung in den Einsatz von Google Analytics 4 gemäß Art. 6 Abs. 1 lit. a DSGVO geräteübergreifend analysieren und hierauf basierende Datenbankmodelle erstellen. Berücksichtigt werden dabei die Anmeldungen und Gerätetypen aller Website-Nutzer, die in einem Google-Konto angemeldet waren und eine Conversion ausgeführt haben. Die Daten zeigen unter anderem, auf welchem Endgerät Sie das erste Mal auf eine Anzeige geklickt haben und auf welchem Endgerät die diesbezügliche Conversion erfolgt ist. Wir erhalten hierbei keine personenbezogenen Daten von Google, sondern lediglich auf Basis von Google Signals erstellte Statistiken. Sie haben die Möglichkeit, die Funktion „personalisierte Anzeigen“ in den Einstellungen Ihres Google-Kontos zu deaktivieren und damit die geräteübergreifende Analyse im Zusammenhang mit Google Signals abzustellen.
Folgen Sie hierzu den Hinweisen auf dieser Seite: https://support.google.com/ads/answer/2662922?hl=de
Weitergehende Informationen zu Google Signals finden Sie unter folgendem Link: https://support.google.com/analytics/answer/7532985?hl=de
Wir haben mit Google für unsere Nutzung von Google Analytics 4 einen sog. Auftragsverarbeitungsvertrag abgeschlossen, durch den Google dazu verpflichtet ist, die Daten unserer Website- Nutzer zu schützen und nicht an Dritte weiterzugeben. Zur Gewährleistung der Einhaltung des europäischen Datenschutzniveaus auch bei der etwaigen
Übermittlung von Daten aus der EU bzw. dem EWR in die USA und den möglichen weiteren Verarbeitungen dort beruft sich Google auf die sog. Standardvertragsklauseln der Europäischen Kommission, die wir mit Google vertraglich vereinbart haben.
Weitere rechtliche Hinweise zu Google Analytics 4, einschließlich einer Kopie der genannten Standardvertragsklauseln, finden Sie unter https://policies.google.com/privacy?hl=de&gl=de und unter https://policies.google.com/technologies/partner-sites
Google-Signale
Diese Website nutzt Google-Signale. Wenn Sie unsere Website besuchen, erfasst Google Analytics u.a. Ihren Standort, Suchverlauf und YouTube-Verlauf sowie demografische Daten (Besucherdaten). Diese Daten können mit Hilfe von Google-Signal für personalisierte Werbung verwendet werden. Wenn Sie über ein Google-Konto verfügen, werden die Besucherdaten von Google-Signal mit Ihrem Google-Konto verknüpft und für personalisierte Werbebotschaften verwendet. Die Daten werden außerdem für die Erstellung anonymisierter Statistiken zum Nutzerverhalten unserer User verwendet.
8. Retargeting/ Remarketing/ Recommendation Advertising
8.1 Google Ads Remarketing
Our web site uses the features of Google Ads Remarketing to advertise this web site on Google’s search results, as well as third party web sites. The provider is Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Processing is based on our legitimate interest in optimal marketing our web site in accordance with Art. 6 para. 1 lit. f GDPR.
Any further data processing will only take place if you have agreed with Google that your Internet and App browser history will be linked to your Google Account by Google and information from your Google Account will be used to personalise the ads you view on the web. In this case, if you are logged into Google when visiting our web site, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily link your personal information with Google Analytics data to create audiences.
You can deactivate cookies by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to find out about setting cookies and how to make settings. Finally, you can set your browser so that you are informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not accept cookies, the functionality of our web site may be limited.
Further information and the data protection regulations regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
9. Tools and miscellaneous
Google Maps
On our website, we use Google Maps (API) by Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. The use of this service will show you our location and make it easier for you to find us.
When you visit any of the sub pages where the Google Maps map is incorporated, information about your use of our web site (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you're logged in to Google, your data will be assigned directly to your account. If you do not wish your profile to be assigned on Google, you must log out before activating the button. Google stores your data (even for users not logged-in) as usage profiles and evaluates them. Collection, storage and evaluation take place according to Art. 6 para. 1 lit. f GDPR, based on the legitimate interests of Google in the display of personalised advertising, market research and/or tailor-made design of Google web site. You have a right to object to the creation of these user profiles, but you must contact Google to exercise your right.
If you disagree with the future transmission of your data to Google when using Google Maps, you can also disable the Google Maps web service completely by turning off the JavaScript application in your browser. Google Maps and therefore the map display on this web site will then not be able to be used.
The Google terms of use can be viewed at https://www.google.de/intl/de/policies/terms/regional.html and the additional conditions of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
You will find detailed information on data protection associated with the use of Google Maps on the Google Internet site (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/
10. Rights of the data subject
You generally have the following rights:
Right to information (Art. 15 GDPR)
Right to correction (Art. 16 GDPR)
Right to deletion (Art. 17 GDPR)
Right to restrict processing (Art. 18f. GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right of revocation
THE FOLLOWING APPLIES, IF YOU HAVE GIVEN US YOUR CONSENT TO PROCESS PERSONAL DATA:
YOU HAVE THE RIGHT TO REVOKE YOUR CONSENT AT ANY TIME FOR THE FUTURE. HOWEVER, SUCH A REVOCATION DOES NOT AFFECT THE LEGALITY OF THE PROCESSING DONE ON THE BASIS OF THE CONSENT.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, employment or the place of alleged infringement, in accordance with Article 77 GDPR, if you consider that the processing of your personal data breaches the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the GDPR.
11. Data security
For security reasons and to protect the transmission of personal data and other confidential contents (for example, orders or inquiries to the person responsible), this web site uses an SSL or TLS encryption. You can recognise an encrypted connection by the string “https: //” and the lock icon in your browser bar.
12. Validity and modification of this data protection declaration
This data protection declaration is the current valid version and was updated in July 2023.
As a result of the further development of our web site and offers thereof or due to changes in legal or official requirements, it may be necessary to change this data protection declaration. The current data protection declaration can be accessed and printed on the web site at any time.