Privacy Policy
Privacy Policy
The data controller is:
Healthfix GmbH
Bentheimer Str. 66
48529 Nordhorn
service@gohealthfix.com
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about how your data is handled.
- Access Data and Hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of retrieval, the amount of data transferred, and the requesting provider (access data), and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offerings. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in a correct presentation of our offerings in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.
1.1 Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
1.2 Content Delivery Network
To reduce loading times, we use a Content Delivery Network ("CDN") for some offers. With this service, content, e.g., large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the service providers' servers. Our service providers act as processors on our behalf. Our service providers are located and/or use servers in countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on standard data protection clauses of the European Commission. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
- Data Processing for Contract Fulfillment and Contact
2.1 Data Processing for Contract Fulfillment
For the purpose of contract fulfillment in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us during your order. Mandatory fields are marked as such, as in these cases we absolutely need the data for contract fulfillment and cannot send the order without their provision. Which data is collected can be seen from the respective input forms.
Further information on the processing of your data, especially on the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
WAREHOUSE MANAGEMENT SYSTEM
For order and contract processing, we use merchandise management systems from external service providers. Our service providers act as processors on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
2.2 Customer Account
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account and storing your data for further future orders on our website. You can delete your customer account at any time either by sending a message to the contact details described in this privacy policy or via a dedicated function in the customer account. After deleting your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
2.3 Contact
In the context of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such, as in these cases we absolutely need the data to process your contact. Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
LIVE CHAT TOOL USERLIKE
For the purpose of customer communication, we use the live chat tool from Userlike UG (haftungsbeschränkt), Probsteigasse 44-46, 50670 Cologne, Germany ("Userlike"). This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in effective and improved customer communication in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Userlike acts on our behalf as a processor.
- Data Processing for Shipping Fulfillment
For contract fulfillment in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipping for us (drop shipping). These are considered shipping service providers within the meaning of this privacy policy.
Data transfer to shipping service providers for the purpose of shipping notification
If you have given us your express consent to this during or after your order, we will, based on this consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, pass on your email address and telephone number to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification or arrangement.
You can revoke your consent at any time by sending a message to the contact details described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany
Amazon EU SARL, Niederlassung Deutschland
Marcel-Breuer-Str. 12
80807 München
- Data Processing for Payment Processing
We work with the following partners for payment processing in our online shop: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for payment processing. This serves to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers themselves collect the data required for payment processing, e.g., on their own website or via technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes
If necessary, we provide our service providers with additional data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing of disputed payments, accounting support). This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in our protection against fraud and efficient payment management in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
4.3 Identity and Credit Check when Choosing Klarna Payment Services
Invoice purchase via Klarna, Klarna installment purchase
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we will forward your data to Klarna within the scope of payment and contract processing in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR. The transmission of this data is necessary for Klarna to issue an invoice for the billing you requested and to carry out an identity and credit check. Please understand that we can only offer you the respective Klarna payment method if this is made possible by the results of the credit check. Detailed information on this and on the credit agencies used can be found in Klarna's data protection information.
- Advertising via Email, Post, Telephone
5.1 Email Newsletter with Registration
If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact details described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
5.2 Newsletter Dispatch
The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
Our service providers are located and/or use servers in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.
5.3 Sending Review Requests via Email
If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to request a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact details described in this privacy policy or via a dedicated link in the review request.
Review requests may also be sent by our service provider Trusted Shops as part of processing on our behalf. Trusted Shops also uses service providers from the USA. An adequate level of data protection is ensured. Further information on Trusted Shops' data protection can be found here. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.
5.4 Postal Advertising and Your Right to Object
Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in addressing our customers for advertising purposes in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact details described in this privacy policy.
5.5 Telephone Advertising
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use the data required for this or separately provided by you for our own advertising purposes, e.g., to inform you about interesting offers and our products. You can revoke your consent at any time either by sending a message to the contact details described in this privacy policy or by an oral notification during any call. After revocation, we will delete your telephone number, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
- Cookies and Other Technologies
6.1 General Information
To make visiting our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).
We use such technologies that are absolutely necessary for the use of certain functions of our website (e.g., shopping cart function). Through these technologies, the IP address, time of visit, device and browser information, and information about your use of our website (e.g., information about the content of the shopping cart) are collected and processed. This serves to protect our legitimate interests, which are overriding in the context of a balancing of interests, in an optimized presentation of our offerings in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of technologies in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact details described in the privacy policy. Alternatively, you can also click on the following link: Cookie Settings. If cookies are not accepted, the functionality of our website may be limited.
6.2 Use of the "Consentmanager" tool by consentmanager AB for consent management
We use "Consentmanager" on our website to inform you about the cookies and other technologies we use on our website, and to obtain, manage, and document your consent, where required, for the processing of your personal data by these technologies. This is required under Art. 6 para. 1 sentence 1 lit. c GDPR to fulfill our legal obligation under Art. 7 para. 1 GDPR to be able to prove your consent to the processing of your personal data, to which we are subject. "Consentmanager" is a service of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden.
After you submit your cookie declaration on our website, Consentmanager's web server stores your IP address, browser, language, and the page you visited. Furthermore, the IP address is processed to determine the visitor's country. Cookies are also used that contain information about your consent behavior, in particular the status and date of consent.
The duration of data storage depends on your active user settings on our website and will be deleted after 2 years, unless you have explicitly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR through a new request or we reserve the right to further use of data that is legally permitted and about which we inform you in this declaration.
- Use of cookies and other technologies for web analysis and advertising purposes
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the purpose ceases and the use of the respective technology by us ends, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your options for revocation can be found in the "Cookies and other technologies" section. Further information, including the basis of our cooperation with the individual providers, can be found under the individual technologies. For questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
7.1 Use of Google services for web analysis and advertising purposes
We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") presented below. The information automatically collected by Google technologies about your use of our website is usually transferred to a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be truncated by activating IP anonymization before being stored on Google's servers. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers concluded for the respective technology in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy policy.
GOOGLE ANALYTICS
For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this. Your IP address is generally not merged with other Google data. Data processing is based on an agreement on order processing by Google.
For the purpose of optimized marketing of our website, we have activated the data sharing settings for "Google Products and Services". This allows Google to access and then use the data collected and processed by Google Analytics to improve Google services. Data sharing with Google within the scope of these data sharing settings is based on an additional agreement between controllers. We have no influence on the subsequent data processing by Google.
We also use the extended function of Google Analytics Google Optimize for creating and conducting tests.
For the purpose of optimized marketing of our website, we use the so-called User-ID function. With this function, we can assign a unique, permanent ID to your interaction data of one or more sessions on our online presences and thus analyze your user behavior across devices and sessions.
For web analysis, the extended function of Google Analytics Google Signals enables so-called "cross-device tracking". If your internet-enabled devices are linked to your Google account and you have activated the "personalized advertising" setting in your Google account, Google can create reports on your usage behavior (in particular, cross-device user numbers), even if you change your device. We do not process personal data in this respect; we only receive statistics created on the basis of Google Signals.
For web analysis and advertising purposes, the extended function of Google Analytics, the so-called DoubleClick cookie, enables your browser to be recognized when visiting other websites. Google will use this information to compile reports on website activities and to provide other services related to website usage.
GOOGLE ADS
For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have activated the "personalized advertising" setting in your Google account. In this case, if you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.
For website analysis and event tracking, we measure your subsequent usage behavior via Google Ads Conversion Tracking if you have reached our website via a Google Ads advertisement. Cookies may be used for this purpose, and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or signing up for a newsletter) may be collected, from which usage profiles are created using pseudonyms.
GOOGLE MAPS
For the visual representation of geographical information, Google Maps collects data about your use of the Maps functions, in particular the IP address and location data, transmits it to Google, and then processes it. We have no influence on this subsequent data processing.
GOOGLE RECAPTCHA
For the purpose of protecting our web forms from misuse and spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information about your use of our website) and analyzes your use of our website using a JavaScript and cookies. In addition, other cookies stored by Google services in your browser are evaluated. No reading or storing of personal data from the input fields of the respective form takes place.
GOOGLE FONTS
For the uniform presentation of content on our website, data (IP address, time of visit, device and browser information) is collected by the script code "Google Fonts", transmitted to Google, and then processed by Google. We have no influence on this subsequent data processing.
YOUTUBE VIDEO PLUGIN
To embed third-party content, the YouTube video plugin in the extended data protection mode we use collects data (IP address, time of visit, device and browser information), transmits it to Google, and then processes it, only if you play a video.
7.2 Use of Facebook services for web analysis and advertising purposes
USE OF FACEBOOK PIXEL
We use the Facebook Pixel within the framework of the technologies of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") presented below. With the Facebook Pixel, data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or signing up for a newsletter) is automatically collected and stored, from which usage profiles are created using pseudonyms. In the course of so-called extended data matching, information that can identify individuals (e.g., names, email addresses, and phone numbers) is also collected and stored in hashed form for matching purposes. For this purpose, when you visit our website, the Facebook Pixel automatically sets a cookie, which automatically enables your browser to be recognized when visiting other websites using a pseudonymous cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activities and to provide other services related to website usage, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies about your use of our website is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If the data transfer to the USA falls within our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information about data processing by Facebook can be found in Facebook's privacy policy.
FACEBOOK ANALYTICS