DATA PROTECTION

Data protection law responsible body  within the meaning of the GDPR is 

Better Living Unternehmensgesellschaft, Greifswalder Str. 87, 10409 Berlin, phone 030 403 646 747

Any Complaints (within the meaning of Art. 77 GDPR) can be addressed to the State Commissioner for Data Protection in Brandenburg.

This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as "data"). This includes our online offerings, associated websites and any external services, such as social media offerings. Furthermore, this data protection declaration informs you about any use of your data by us outside of these online services. With regard to the terms used here, reference is made to Art. 4 GDPR. 

The legal foundations of the protection of your data can be found in the EU GDPR, the BDSG, the UWG and TMG.

If legal bases are not explicitly mentioned at all points in this privacy policy, reference is made to the following legal bases in accordance with Art. 13 GDPR:

- Legal basis for consents; Art. 6 I a and Art. 7 GDPR

- Processing for the fulfilment of services, performance of contracts and answering enquiries; Art. 6 I b GDPR

- Processing for the fulfilment of legal obligations; Art. 6 I c GDPR

- Legal basis for the protection of legitimate interests; Art. 6 I d GDPR

In this privacy policy used Relevant terminology:

"Personal data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookies) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is far-reaching and effectively covers any handling of data.

The "controller" is a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

According to the legal basis of the GDPR, we are not obliged to appoint a data protection officer.

We process the following data:

Inventory data, e.g. name, address / contact data, e.g. e-mail, telephone numbers and fax numbers / content data, e.g. text entries, scans, photos and videos / usage data, e.g. access times and websites visited / communication and meta data, e.g. IP addresses and device information.

We do not process any data within the meaning of Art. 9 or Art. 10 GDPR.

We are committed to protecting your privacy and using technology that gives you the most powerful and secure online experience. By using the online form, you consent to the data described in this statement.

We store personal data such as e-mail address, name, address and telephone number in order to be able to contact you at your request, for example in the context of a callback request or an online contact enquiry. We also store this data in order to be able to fulfil any contractual agreements with you. For the aforementioned purposes, we also store anonymous demographic information that cannot be clearly assigned to you, such as region, age, gender, preferences, interests, hobbies and favourites, provided that there is no conflict with other principles and legal requirements mentioned here.

There is also information about your computer hardware and software that is automatically collected by us. This information may include: Your IP address, browser type, domain names, access times and referring website addresses. This information is used by us to maintain service quality and to better customise our offers to their users.

Please be aware that if you directly disclose personally identifiable information or personally sensitive data through public messaging media, this information may be collected and used by others. Note: We never read your private online communications.

We encourage you to review the privacy statements of websites to which we link so that you are aware of how those websites collect, use and share your information. We are not responsible for the privacy policies of other websites outside of our own online offerings.

We store and use your personal information in order to operate the website and provide the requested service. We also use your information to inform you about new products and services, provided you have consented to this. Subject to your separate consent, we also use your data to conduct market research on your opinion of offers and possible new extensions. For the aforementioned consents, we undertake to use tried and tested procedures that are as secure as possible. 

We do not sell, rent or lend customer data to third parties. 

We track websites that our customers visit within our online offering to determine which services are most popular on our website. This data can be used to deliver customised content to visitors. This applies to visitors who indicate a specific interest.

We will only disclose, transfer or otherwise grant access to your personal data to processors or third parties if this is necessary for the fulfilment of the contract (Art. 6 I b GDPR) (e.g. payment), if you have consented, if there is a legal obligation or legitimate interests, or in order to effectively and efficiently fulfil our contractual obligations towards you (e.g. use of agents, tax and legal advisors, hosting companies).

Order processing by third parties is carried out in compliance with Art. 28 GDPR.

We also use your data in particular if a contractual relationship is established between you and us in order to provide our contractual services. For this purpose, customer, master, contact, contract and payment data are processed and stored. The type and scope of the data is determined by the requirements of the contractual relationship. We may also process and store the aforementioned data in the context of contract initiation, e.g. if you request order confirmations or quotations.

The website uses Cookiesto make it easier to use. A cookie is a text file that is stored on your hard drive by a website server. Cookies cannot be used to execute programmes or transfer viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that sent the cookie to you.

One of the main purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the web server that you have returned to a particular page. This applies, for example, when you register on our site or use a form. The online cookie helps us to reuse specific information on future visits. This simplifies the recording of your personal data, such as billing addresses, delivery addresses and so on. When you return to the same website, the information you previously provided can be retrieved, making it easier for you to use our online services. If you do not wish to receive cookies, you can prevent this by selecting the appropriate settings in your browser. We may also use Google Analytics tracking and use cookies to measure any Adwords conversion rates. The integration of such third-party services and content is in our legitimate interest (Art. 6 I f GDPR), as the recording of user behaviour, browser recognition and similar is important for the improvement of our services. 

We are committed to the security of processing within the meaning of Art. 32 GDPR. To this end, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including, where appropriate, the following

1. the pseudonymisation and encryption of personal data;
2. the ability to ensure the confidentiality, integrity, availability and resilience of the systems and services related to the processing in the long term;
3. the ability to quickly restore the availability of and access to personal data in the event of a physical or technical incident;
4. a process for regularly reviewing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of processing.

We take the protection of your data into account in accordance with the requirements of Art. 25 GDPR during development, the selection of technology (hardware and software) and through data protection-friendly default settings. If we use SSL encryption, you can recognise this by the abbreviation https:// in front of the web address in the browser field. 

We will inform you about a breach of the protection of your personal data within the framework and under the conditions of the legal basis of Art. 34 GDPR.

The transfer and/or processing of data to a third country only takes place under the conditions of Art. 44 ff GDPR. This means, in particular, only if you have given your consent or if special guarantees, such as the recognised determination of a level of data protection corresponding to the EU or recognised special contractual obligations, are observed.

Below we inform you about the Rights under the GDPR. The naming of a legal right does not say anything about whether the requirements and circumstances for this are fulfilled by our online and/or offline services.

You have the right under Art. 15 GDPR:

to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the following information:

1. the purposes of processing;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing 
6. the existence of a right of appeal to a supervisory authority;
7. if the personal data are not collected from the data subject, all available information about the origin of the data;
8. the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

If personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 in connection with the transfer.

You have the right to a copy of the personal data that is the subject of the processing. A reasonable fee based on administrative costs may be charged for any further copies you request. If you make the request electronically, the information must be provided in a commonly used electronic format, unless otherwise stated. The right to receive a copy must not affect the rights and freedoms of other persons.

In accordance with Art. 16 GDPR, you also have the right to demand the immediate correction of incorrect personal data concerning you. ²Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 

In accordance with Art. 17 GDPR, you have the right to demand that we erase personal data concerning you without undue delay. We are obliged to delete personal data immediately if one of the following reasons applies:

1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
3. You object to the processing and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 (2) GDPR.
4. The personal data was processed unlawfully.
5. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
6. The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1.

If personal data has been made public and we are obliged to delete it, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have requested them to delete all links to this personal data or copies or replications of this personal data.

The aforementioned rights of Art. 17 I and II GDPR do not apply if the processing is necessary

- to exercise the right to freedom of expression and information;

- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

- for reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) and Art. 9 (3);

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

- for the assertion, exercise or defence of our legal claims.

You have the right according to Art 18 GDPR,

to demand the restriction of processing if one of the following conditions is met:

1. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
3. we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or
4. you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours.

If processing has been restricted in accordance with Art. 17 (1) GDPR, these personal data - apart from their storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If a restriction of processing has been obtained in accordance with Art. 17 (1) GDPR, you will be informed before the restriction is lifted.

Within the scope of Art. 19 GDPR, we are subject to a notification obligation in connection with the rectification or erasure of personal data or the restriction of processing. 

You have the right under Art. 20 GDPR to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) or on a contract pursuant to Art. 6(1)(b) and
2. the processing is carried out using automated procedures.

When exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to obtain that the personal data be transferred directly by us to another controller, insofar as this is technically feasible.

The exercise of the right pursuant to Art. 20 (1) GDPR is without prejudice to Art. 17 GDPR. This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

The right pursuant to Art. 20 (1) GDPR must not adversely affect the rights and freedoms of other persons.

Pursuant to Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 (1) GDPR, Contradiction This also applies to profiling based on these provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

We must expressly draw your attention to the right referred to in the i at the latest at the time of the first communication with us; this reference must be made in a comprehensible and separate form from other information.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 GDPR, unless the processing is necessary for the performance of a task carried out in the public interest. 

In accordance with Art. 7 III GDPR, you also have the right to withdraw your consent for the future.

Provided that we Connections to third-party providers If we offer third-party services, e.g. integration of payment systems, fonts, videos, images or social media services, please inform yourself about the data protection regulations on these third-party sites.