Privacy Statement and Affected Information acc. Art. 13, 14 EU-GDPR
for the website www.hnc.de
The HNC Healthy Nutrition Company GmbH (hereinafter: „HNC“ or „we“) is committed to the protection of your personal data. The processing of your personal data by HNC therefore takes place exclusively within the regulations of the European General Data Protection Regulation (GDPR). On this page we inform you according to Art. 13, 14 GDPR about the processing of your personal data..
Controller for the data processing is the
HNC Healthy Nutrition Company GmbH
51469 Bergisch Gladbach
Phone: +49 (0) 22 02/105 - 0
Fax: +49 (0) 22 02/105 - 150
Our data protection officer is
Dr. Jan-Peter Ohrtmann
PricewaterhouseCoopers Legal AG law firm
Moscow street 19
When visiting this website and using the various offers, we process your personal data as described in detail below.
Table of contents
- Server log files
- Google Analytics
- Google Maps
- Contact form
- Transfer of datato recipients
- Rights of data subjects
We use so-called cookies on the websites hosted at www.hnc.de (including their subpages). These are small text files which are transferred via your web browser from our web server to your computer and stored there on the permanent memory (hard drive, fixed memory, etc.). The information stored in cookies (e.g. IP address, date and time of the request, web browser used and operating system) is read by us. Below you will find further information on individual cookies used by us.
Some of these cookies process personal data insofar as this is necessary for the provision of certain functions of the web pages, e.g. when entering data, in order to enable you to navigate on the web pages without having to repeat your entries on each subpage (hereinafter referred to as "necessary cookies"). In this respect, the processing of your personal data takes place on the basis of Art. 6 para. 1 s. 1 lit. b) GDPR, whereby this data is only stored for the duration of your current browser session. You have neither a legal nor a contractual obligation to provide the data collected by necessary, but you cannot use our websites without processing this data.
In the following you will find more detailed information on the necessary cookies used:
|Up to 30 days||Differentiation between users.||policies.google.com/privacy|
b) Functional cookies
We currently make use of the following functional cookies:
|Google Maps||30 days||Convenient use of the interactive road map||www.google.de/intl/en/policies/privacy|
c) Marketing cookies
We currently make use of the following marketing cookies:
|Google Analytics||30 days||Create statistics about website usage||policies.google.com/technologies/partner-sites|
2. Server log files
In addition, each time you visit our website, your browser automatically transmits your IP address, identification (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited sub-pages of our website, your referrer URL (i.e. the URL of the page from which you are visiting us), as well as the volume of data generated during your visit to our website (hereinafter "access data"). We process your access data in order to guarantee system security (e.g. to defend against hacker attacks) and to compile usage statistics. These processes are carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 s. 1 lit. f) GDPR). You have neither a legal nor a contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can access our website and use the offers and services provided on it.
3. Google Analytics
a) Data categories subject to processing, recipients, processing purposes
In general, no personal data is processed when using Google Analytics. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there (for these cases Google has submitted to the EU-US Privacy Shield, available at www.privacyshield.gov/EU-US-Framework); we point out that on our web pages Google Analytics was extended by the Plug-In "AnonymizeIP", in order to guarantee an anonymized collection of your IP address also in these exceptional cases, so that your data are not referable to your person.
The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
b) Legal basis, retention period
The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f) GDPR. Sessions end regularly after 30 minutes of inactivity and campaigns end after six months; campaign data can be stored for a maximum of two years.
c) Right to object
If Google Analytics processes your data in personal form, you can object to this at any time - in this case this processing will be stopped immediately.
In particular, you can send your informal objection to our data protection officer:
firstname.lastname@example.org, Krüger GmbH & Co. KG, Rechtsabteilung, Senefelderstraße 44, 51469 Bergisch Gladbach.
You can also exercise your right of objection in particular by preventing the storage of cookies used by Google Analytics by configuring your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout
Please note that you are leaving our website by doing so.
d) Information of Google
Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001
4. Google Maps
On this website we use the services of Google Maps. This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account.
When you're logged in to Google, your information will be directly associated with your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such evaluation is carried out in particular (even for users who are not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.
You have the right to object to the creation of these user profiles, for which you have to address to Google.
5. Contact form
You have the option of contacting us directly via a contact form provided on our website. In this case, you must provide your name, e-mail address and a subject for your request. We also offer you the opportunity to contact us directly via e-mail. If you click on the "E-Mail" button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. If you contact us via e-mail or web form, we will also collect your IP address and the time at which you send us your message. We use the information you send us via contact form or e-mail exclusively to process your request. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. b) GDPR. We process your IP address and the time of your request in order to identify and defend against automated access and hacker attacks. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. f) GDPR. In principle, we delete this data at the end of one week after your request has been answered or otherwise dealt with; in individual cases, however, we keep this data for longer if we are legally entitled or obliged to do so (e.g. by virtue of commercial or tax retention periods).
6. Transfer of data to recipients
Your personal data will not be transferred to third parties without your consent unless we are legally obliged to disclose this data (e.g. to provide information to law enforcement authorities and courts; information to public bodies that receive data on the basis of statutory regulations, e.g. social insurance institutions, financial authorities, etc.) or unless we involve third parties obliged to maintain professional secrecy in order to enforce our claims.
7. Rights of data subjects
In the following we would like to inform you about the further rights to which you are entitled as a data subject according to Art. 15-21 and Art. 77 para. 1 GDPR. In order to assert these rights, you can contact our data protection officer email@example.com by e-mail in particular.
a) Right of access:
Pursuant to Art. 15 GPDR, you have the right to obtain information on data processing and a copy of the data processed. Within this context you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.
b) Right to rectification:
In accordance with Art. 16 GDPR, you have the right to demand that we correct or complete your personal data.
c) Right to erasure:
In accordance with Art. 17 para. 1 GDPR you have the right to demand that we erase your personal data. If we have published your personal data, you also have the right, in accordance with Art. 17 para. 2 GDPR, to request that we inform other controllers of your request to delete all links to and/or copies or replications of your personal data.
d) Right to restriction of processing:
In accordance with Art. 18 para 1-3 GDPR, you have the right to demand that we restrict the processing of your personal data.
e) Right to data portability:
Pursuant to Art. 20 GDPR, you have the right to receive the personal data about yourself that you have provided to us in a structured, commonly used and machine-readable format and to request the transfer of this data to another controller.
f) Right to withdraw consent:
If you have given us your consent to process your personal data, you can withdraw this consent at any time, in its entirety or with regard to individual processing purposes, in each case without giving reasons.
Please note that a lawful processing of your personal data, which has taken place until the time of your revocation, will not be retroactively unlawful by this.
You may withdraw your consent in particular by send a respective e-mail to firstname.lastname@example.org.
In the event of withdrawal of your consent given for a specific service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.
g) Right to object:
Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data by us insofar as this is carried out for the purpose of direct advertising and/or on the basis of a "legitimate interest" within the meaning of Art. 6 para. 1 s. 1 lit. f) GDPR.
h) Lodging a complaint with a supervisory authority:
According to Art. 77 para. 1 GDPR, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us if you are of the opinion that the processing of your personal data violates data protection regulations.
The competent supervisory authority for the federal state of North Rhine-Westphalia (Nordrhein-Westfalen) is the:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Postfach 20 04 44
Additionally, you have the option of asserting other legal remedies to which you are entitled (e.g. with courts or authorities).