Data Privacy Policy

1. Data protection at a glance

General information

The following information provides a basic overview of what happens with your personal data when you visit our website. Personal data refers to any data with which you as an individual can be identified. Detailed information concerning data protection can be found in our data privacy policy which is provided below this text.

Collection of data on our website

Who is responsible for collecting data on this website?
The operator of this website is responsible for processing the data on this website. The operator’s contact details are provided in the legal notice on this website.

How do we collect your data?
Your data are collected on the one hand when you share them with us – data you enter in our contact form, for example.
Other data are collected automatically by our IT systems when you visit our website. They mainly involve technical data (e.g. internet browser, operating system, or time of visiting a page). These data are collected automatically as soon as you visit our website.

For what purpose do we use your data?
Some of the data are collected to ensure the seamless functionality of the website. Other data may be used to analyse user behaviour.

What are your rights with respect to your data?
You are entitled to request information – free of charge – about the source, the recipient, and the purpose of your personal data that have been saved. You are also entitled to request the rectification, restriction or erasure of these data. In this respect, or in case of any questions concerning data protection, you may contact us at any time at the address provided in the legal notice on this website. You are also entitled to lodge a complaint with the competent supervisory authority.
You also have the right, under certain circumstances, to demand that the processing of your personal data be restricted. Details in this regard can be found in the data privacy policy under “Right to restriction of processing”.

2. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data in strict confidence while observing the statutory data protection regulations and this data privacy policy.
Various personal data are collected when you visit this website. The term “personal data” refers to any data with which you as an individual can be identified. This data privacy policy describes the data we collect and what we use the data for. It also explains how we do this and for what purpose.
Please note that the transmission of data across the internet (e.g. communication by email) is not 100% secure. It is not possible to completely protect the data against third-party access.

Information on the controller

The party responsible for data processing (controller) on this website is:
“Heart for Heart – Foundation for Life!” foundation
Denningerstraße 15 / III
81679 Munich
Telephone: +49 (0) 89 – 30 90 50 821
Email: info@herzfuerherz.de

‘Controller’ means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (name, email addresses, etc.).

Withdrawal of consent to data processing

Many data processing procedures are only possible with your express consent. You may withdraw the consent you have previously given at any time. This can be done by simply writing us an email. The lawfulness of the data processing based on the consent before its withdrawal shall not be affected.

Right to object against the collection of data in special cases and against direct marketing (Art. 21 GDPR)

Where data processing is based on Art. 6 Para. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. Details of the legal principles upon which processing is based can be found in this data privacy policy. Should you object, we will no longer process your personal data unless we can demonstrate that there are compelling reasons for processing that outweigh your interests, rights and freedoms or that the processing serves to enforce, exercise or defend legal claims (objection pursuant to Art. 21 Para. 1 GDPR).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this includes profiling insofar as it is related to such direct advertising. Should you object, your personal data will no longer be used for the purposes of direct marketing (objection according to Art. 21 Para. 2 GDPR).

Right to complain to the competent supervisory authority

In the event of a breach of the GDPR, the parties concerned have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged infringement. The right to complain exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to request that the data we process automatically based on your consent or in fulfilment of a contract be made available to you or to a third party in a common, machine-readable format. Should you request direct transfer of the data to another controller, this will take place only insofar as it is technically feasible.

Information, restriction, erasure and rectification

Within the framework of the applicable legal regulations, you have the right to free information at any time about your stored personal data, the origin and recipient of such data and the purpose of the data processing and, if necessary, a right to rectification, restriction or erasure of these data. In this regard, and in case of any questions concerning personal data, you may contact us at any time at the address provided in the legal notice on this website.

Right to restriction of processing

You have the right to demand that the processing of your personal data be restricted. You may therefore contact us at any time at the address provided in the legal notice on this website. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of the personal data we hold about you, we will usually require some time to verify this. During this period, you are entitled to demand that the processing of your personal data be restricted.
• If the processing of your personal data took/is taking place illegally, you may demand restriction of data processing rather than erasure.
• If we no longer need your personal data, but you require the data to exercise, defend or enforce any legal rights, you are entitled to demand that the processing of your personal data be restricted rather than erasure.
• If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, it will be necessary to weigh your interests against ours. Until it is clear which interests predominate, you are entitled to demand that the processing of your personal data be restricted.

If you have requested restriction of the processing of your personal data, such data – apart from their storage – may only be used with your consent or for the purpose of asserting, exercising or defending legal rights or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or of a member state.

3. Collection of data on our website

Cookies

Cookies are used on the pages of this website. They will not cause your computer any harm, and do not contain viruses. Cookies help improve the user-friendliness, effectiveness and security of this website. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are “session cookies”. They are deleted automatically when you leave our website. Other cookies remain on your device until you delete them. These cookies enable us to recognise your browser when you next visit our website.
You can configure your browser to inform you when cookies are set and to allow cookies only in individual cases, refuse cookies in certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.
Cookies that are required for the purpose of electronic communication or for providing certain preferred features (e.g. shopping cart function) are saved in accordance with Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the purpose of providing technically seamless, optimised services. Where other cookies (e.g. for analysing your surfing habits) are saved, these are addressed separately in this privacy policy.

Server log files

The website operator automatically collects and saves information in so-called server log files which are automatically transmitted to us by your browser. This information comprises:

• Browser type and version
• Operating system
• Referrer URL
• Host name of requesting computer
• Time of server request
• IP address

This information is not merged with other data sources.
These data are collected in accordance with Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically seamless presentation and optimisation of this website. Server log files must therefore be recorded.

Enquiry by email, telephone or telefax

If you contact us by email, telephone or telefax, we will save and process your enquiry along with all the related personal data (name, request) for the purpose of dealing with the enquiry. We will not share this information without your consent.
This information will be processed in accordance with Art. 6 Para. 1 lit. b GDPR insofar as your enquiry is related to the fulfilment of a contract or it is necessary for the purpose of fulfilling precontractual measures. In all other cases, the processing is subject to your consent (Art. 6 Para. 1 lit. a GDPR) and/or our legitimate interests (Art. 6 Para. 1 lit. f GDPR), because we have a legitimate interest in effectively handling the enquiries we receive.
The information you send to us in a contact request will be retained until you instruct us to erase such information, you revoke your consent to storage of the information, or the purpose for data storage no longer applies (e.g. once your enquiry has been processed). Mandatory statutory provisions – legal retention periods in particular – shall not be affected.

Data processing (customer and contractual data)

We collect, process and use personal data only where necessary for the purpose of establishing, structuring or altering the legal relationship (stock data). This takes place in accordance with Art. 6 Para. 1 lit. b GDPR, which allows for processing of data for the purpose of fulfilling a contract or precontractual measures. We collect, process and use personal data from visitors to our website (usage data) only insofar as is necessary for facilitating or billing the user for use of the services.
The customer data collected will be erased after completion of the order or termination of the business relationship. Statutory retention periods shall not be affected.

4. Plugins and tools

Google Web Fonts

Google fonts are used to harmonise the typographical appearance of this website. The Google fonts are installed locally. No connection to Google servers is thereby established.