1. Data Protection at a Glance
General information
The following information provides you with a simple overview of what happens to your personal data when you visit our website. Personal data means all data which allow for the identification of your person. For detailed information on the topic of data protection, please refer to our Privacy Policy, set out below this text.
It is generally possible to use this website without providing personal data.
Collection of Data on our Website
Who is responsible for the collection of data on this website?
The data processing on this website is performed by the website operator. For their contact data, please refer to the legal notice on this website.
How do we collect your data?
One way of collecting your data is that you provide it to us. Such data may, for example, include information that you enter in a contact form.
Other data are automatically recorded by our IT systems when you visit the website. Such data are mainly of a technical nature (e.g. internet browser, operating system or time at which the website was accessed). Such data are collected automatically as soon as you enter our website.
For which purpose do we use your data?
Some of the data are collected to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.
Which rights do you have with regard to your data?
You have, at any time, a right of free access to information on the origin, recipients and purpose of your stored personal data. Moreover, you have the right to request the rectification, blocking or erasure of such data. For this purpose, or if you have any further questions regarding data protection, you may contact us at the address specified in the legal notice at any time. In addition, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and third-party tools
When you visit our website, your surfing behaviour can be statistically analysed. This largely takes place by means of cookies and analysis programs. Your surfing behaviour is usually analysed anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information is provided in the data privacy notice below.
You can object to this analysis. This data privacy notice contains information about the possibilities to object.
2. General Information and Mandatory Information
Data Protection
The operators of this site take the protection of your personal data very seriously. We keep your personal data confidential and handle it according to the legal data protection regulations as well as this Privacy Policy.
When you use this website, different personal data will be collected. Personal data are data which allow for your personal identification. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purposes this takes place.
Please note that data transmission over the internet (e.g. during communication via email) may have security vulnerabilities. The complete protection of the data against access by third parties is not possible.
Information on the Data Controller
The Data Controller for the data processing on this website is:
Grünwalder Gesundheitsprodukte GmbH
Ryuichi Sakamoto
Ruhlandstraße 5
83646 Bad Tölz
Tel.: +49 (0)8041-7944000
info@gruenwalder.de
The Data Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may withdraw the consent that you provided on a previous occasion at any time. To do so, sending us an informal message by email will suffice. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of data protection law, the data subject has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for issues surrounding data protection law is the State Data Protection Officer of the federal state in which our company has its registered office. For a list of the data protection officers and their contact data, please refer to the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to data portability
You or a third party have the right to be provided with the data that we process automatically on the basis of your consent or for the fulfilment of a contract, in a commonly used, machine-readable format. If you request the direct transfer of the data to another Controller, this will only be made insofar as it is technically feasible.
Access, blocking, erasure
You have, at any time, under the applicable legal provisions, the right of free access to your stored personal data, their origin and recipients and the purpose of the data processing and to the rectification, blocking or erasure of this data, if applicable. To this end, or if you have more questions related to the topic of personal data, you can contact us at the address stated in the legal notice at any time.
Objection to advertising emails
The use of contact data published to comply with statutory reporting obligations for the purposes of sending advertisements and information material which has not been expressly solicited is hereby rejected. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for instance by means of spam emails.
3. Collection of Data on our Website
Cookies
Some of the web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve the purpose of making our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.
Navigation bar programming is currently based on the use of session cookies. In a session cookie, a randomly generated unique identification number is stored which is referred to as a “ session ID”. In addition, a cookie contains information on its origin and storage period. These cookies are not able to store any other data and they will be automatically erased from your computer once you close your browser.
Other cookies are stored on your end device until you delete them. These cookies allow us to recognise your browser during your next visit to our site.
You can set your browser to inform you when cookies are being placed and to only allow cookies on a case-by-case basis, to refuse cookies in certain cases or in general, and to activate the automatic deletion of cookies when you close the browser. Deactivating cookies may limit the full functionality of this website.
Cookies that are required for execution of the electronic communication process or for provision of certain features requested by you (e.g. shopping cart feature) are saved on the basis of Art. 6(1) point (f) of the GDPR. The website operator has a legitimate interest in the storage of cookies for the technically smooth and optimised provision of their services. Where other cookies (e.g. cookies for analysis of your browsing behaviour) are stored, these are addressed separately in this Data Protection Declaration.
Data Processing/Server Log Files
Whenever you visit a website, data will be collected and exchanged. The website provider web server automatically collects and stores the below data which your browser transmits in the form of server log files:
• internet browser type and version (such as Firefox, Internet Explorer, Safari, ...)
• operating system in use (such as Windows 7, MacOS, Linux etc.)
• host name of the accessing computer
• accessed websites (such as products)
• previously visited websites (referrer URL, such as companies)
• time of the server query
• IP address
This data cannot be associated with a specific person. This data is not combined with other data sources.
The data processing is based on Art. 6(1) point (f) GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.
Contact form/Emails
If you send us enquiries using the contact form or by email, we will store your data from the enquiry form and/or your email, including the contact data specified there by you, for processing the enquiry and in case follow-up questions arise. We will not disclose such information without your consent.
In this respect, the data entered by you in the contact form or your email will only be processed based on your consent (Art. 6(1) point (a) GDPR). You can withdraw this consent at any time. To do so, sending us an informal message by email will suffice. The lawfulness of the data processing operations that occurred before the withdrawal of the consent shall remain unaffected.
The data entered by you in the contact form will remain with us until you ask us to erase it, withdraw your consent to its storage, or the purpose for the data storage lapses (e.g. after the processing of your enquiry). Imperative legal provisions – particularly retention periods – shall remain unaffected.
4. Plug-ins and tools
Google web fonts
For the uniform representation of fonts, this website uses “web fonts”, which are provided by Google. When accessing a website, your browser will load the necessary web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must establish a connection to the Google servers. In this way, Google finds out that our website was accessed by your IP address. Google web fonts are used to ensure a uniform and appealing presentation of our online offers. This is a legitimate interest in terms of Art. 6(1) point (f) of the GDPR.
If your browser does not support web fonts, one of your computer's standard fonts will be used.
For more information regarding Google web fonts, please refer to https://developers.google.com/fonts/faq and the Google data privacy policy: https://www.google.com/policies/privacy/.
Analysis services
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”).
Google Analytics uses “cookies”, text files that are stored on your computer which enable an analysis of how you use our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the case of the activation of IP anonymisation on this website, however, your IP address will first be abbreviated by Google within European Union member states or other states which are part of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the provider of this website, Google will use this information to analyse your use of the website, to compile reports about the website activity and to provide further services which are connected to the use of this website and of the internet for its operator. The IP address transferred by your browser in the context of Google Analytics will not be combined with any other data from Google. By changing your browser settings accordingly, you may prevent cookies from being stored; however, we point out that you may not have full access to all website functions in this case.
In addition, you may prevent any data created by the cookie and relating to website usage on your part (including your IP address) from being transmitted to and being processed by Google by downloading and installing the browser plug-in available under the link http://tools.google.com/dlpage/gaoptout?hl=de
Social plug-in networks
This website uses plug-ins provided by facebook.com, a social network operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States. This plug-in can be recognised by the Facebook logo (white “f” on a blue tile/thumbs-up sign). The list and appearance of the Facebook social plug-ins can be viewed here: http://developers.facebook.com/plugins.
Your browser automatically establishes a direct connection to the Facebook servers. Through the embedding of the plug-in, Facebook is informed that you have accessed the relevant web page. If you are logged on to Facebook at that time, Facebook is able to assign the visit to your Facebook account. If you interact with the plug-ins, for example, by pressing the “Like” button or leaving a comment, your device will transfer this information directly to Facebook, where it will then be stored. If you are not a member of Facebook, it is still possible for Facebook to find out and save your IP address.
For further information on the purpose and the extent of the collection and processing of data by Facebook and on your associated rights and settings options for the protection of your private sphere, please refer to the privacy policy of Facebook : http://www.facebook.com/policy.php.
If you are a member of Facebook and want to prevent Facebook from collecting data about your person and associating it with your saved Facebook member data, you must log out of Facebook.
YouTube
Our website uses plug-ins of the YouTube website operated by Google. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our websites that features a YouTube plug-in, a connection with the YouTube servers is established. In this respect, the YouTube server is informed about which of our websites you have visited.
If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interests of ensuring an appealing presentation of our online offerings. This is a legitimate interest in the sense of Art. 6(1) point (f) of the GDPR.
For more information on the handling of user data, please refer to the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy.
Google+
This website uses Google+ buttons of the Google Plus social network operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
Your browser automatically establishes a direct connection to the Google servers.
For more information on the purpose and the extent of data collection and processing by Google and on your related rights and privacy protecting settings, please refer to the Google Privacy Policy concerning Google+ buttons at https://developers.google.com/+/web/buttons-policy#policies.
If you have a Google+ account and want to prevent Google from collecting data about your person and associating it with your saved Google member data, you must log out of Google+.
This website uses Twitter buttons operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, United States. They can be recognised by the terms “Twitter” or “Follow” in combination with a stylised blue bird. These buttons make it possible to share postings or pages of the offer with Twitter or to follow other providers on Twitter.
If a user accesses any web page which contains such a button, their browser will establish a direct connection to the Twitter servers. Twitter will directly transmit the contents of the Twitter button to the user's browser, which is why the operators have no influence on the amount of data which Twitter collects with the help of this plug-in, and therefore inform the users according to our state of knowledge.
Accordingly, they shall only store the user’s IP address and the URL of the website when clicking on the button, although this data will not be used for purposes other than button display.
Further information is available in the Twitter data protection declaration at http://twitter.com/privacy.
DocCheck access use by specialists
DocCheck uses cookies (see above) to simplify service usage. Data which these cookies create will only be transmitted to DocCheck servers, and will not be shared with Grünwalder as the website operator or with any third parties; data will not be transferred to non-EU countries, either.
Cookie 1 Doccheck_user_id enables a single sign-on for each DocCheck log-in period = 1 session
Cookie 2 Doccheck_scu_data serves the provision of adequate contents based on pseudonymised data (such as the profession, country, language).
Period = 1 year
Logging data
In the context of DocCheck password protection usage, DocCheck collects user log data (IP address; time of access; reference time; referrer URL; software/hardware information, such as browser features; device data) based on the website of the information provider who incorporates the log-in process via “embed” and/or iFrame (Grünwalder in this case) (see “server log files). This data will not be used to draw conclusions as to individuals, but only to guarantee the correct page and/or iFrame contents display and/or DocCheck services security.