Data protection information in accordance with Article 13 of the General Data Protection Regulation
Supplement Consult byIPEV, operator of these pages, takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. If you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
1. Name and contact details of the responsible body:
IPEV - Institute for Prevention and Nutrition, Prof. Vormann GmbH
Authorized managing director: Prof. Jürgen Vormann
Address: Adalperostrasse 37, 85737 Ismaning
2. Processing to provide the website
2.1 Scope of Processing
Each time our website is accessed, our system automatically collects data and information from the internet-enabled system with which you as a user ("data subject") access our website. This data is stored and processed on our server in a log file (so-called log files). The following personal data is collected here:
a) Browser type and version used
b) User's operating system
c) Internet service provider of the user
d) IP address of the user
e) date and time of access
f) Websites from which the user's internet-enabled system accessed our website
g) Websites accessed by the user's internet-enabled system via our website.
2.2 Purpose of Processing
The IP address is a chain of numbers that uniquely assigns your Internet-enabled system at the time you access our website. The IP address is used to receive and send data packets and enables a user to access a website. The temporary storage of the IP address on our server is necessary in order to transmit the page content to the user's Internet-enabled system after accessing our website so that the user can view the content.
Log files are saved to ensure the functionality of the website and to be able to detect any transmission errors that may occur. In addition, we use this data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
2.3 Legal Basis for Processing
The processing takes place on the basis of our legitimate interests in accordance with Article 6 (1) sentence 1 lit. f GDPR.
2.4 Legitimate Interests
We have a legitimate economic and non-material interest in the external presentation of our company through a website.
2.5 Recipients or Categories of Recipients
The personal data is passed on to our IT department and to our contractors who are responsible for hosting and providing the IT resources for the operation of the website.
2.6 Third Country Transfer
We do not intend to transfer the personal data abroad.
2.7 Duration of storage
The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The user's IP address must be stored for the duration of the session in order to enable use of the website. If the data is stored in the log file, the data collected there will be deleted after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or made anonymous so that it is no longer possible to assign the accessing Internet-enabled system.
2.8 Possibility of Objection and Elimination
As the data subject, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Article 6 (1) sentence 1 lit. e or f GDPR ( Art. 21 Para. 1 GDPR). The processing of the personal data to provide the website and to create the log file is mandatory for the operation of the website to administer and maintain it. The user can therefore not object to this type of processing.
2.9 Obligation to provide information (Art. 13 II lit. e GDPR)
The provision of your data for the processing of log files is voluntary. If your data is not provided, we may not be able to address your Internet-enabled system and you will not be able to use our website.
3. Processing of cookies
3.1 Scope of Processing
We use so-called cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's Internet-enabled system as soon as a user calls up our website. Cookies contain characteristic character strings that enable the browser to be clearly identified when the website is called up again.
3.2 Purpose of Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the Internet browser is recognized even after a page change. In these technically necessary cookies, data is collected, stored and transmitted to us in order to retrieve our website from the database and to store the shopping cart as part of membership applications. The user data collected by technically necessary cookies are not used to create user profiles.
3.3 Legal Basis for Processing
The processing takes place on the basis of our legitimate interests in accordance with Article 6 (1) sentence 1 lit. f GDPR.
3.4 Legitimate Interests
We have a legitimate economic interest in the external presentation of our company and in the advertising of our products. This requires the offer of a website that corresponds to the generally recognized rules of technology for users and allows users to use our website easily, in line with their interests and needs.
3.5 Recipients or Categories of Recipients
The data from the cookies are passed on to our internal departments and to our contractors who are responsible for hosting and providing the IT resources.
3.6 Third country transfer
We do not intend to transfer the personal data abroad.
3.7 Duration of storage
The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of processing the data to provide the website, this is the case when the respective session has ended. Cookies are stored on the user's internet-enabled system and transmitted to our server. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically.
3.8 Possibility of Objection and Elimination
The data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 (1) sentence 1 lit. e or f GDPR (Art 21 (1) GDPR). If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
3.9 Obligation to provide data (Art. 13 II lit. e GDPR)
The provision of your data for the processing of cookies is voluntary. If your data is not provided, it is possible that we will not be able to address your Internet-enabled system and you will not be able to use our website, or not to the full extent.
4. Processing with Google Analytics
4.1 Scope of Processing
We use functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. Google will use this information on our behalf to evaluate your use of the website in order to compile reports on website activity.
4.2 Purpose of Processing
This data is used by us to design and optimize the website as required and to ensure the security of our information technology systems. We will also use the data for marketing purposes in order to better understand the interest of our customers or members in our products, services and member service offerings and to be able to find practical solutions.
4.3 Legitimate Interests
If the processing is based on Article 6 (1) (f) GDPR - i.e. on a balancing of interests - we are obliged to disclose the legitimate interests pursued by us or a third party. By processing your data, we are pursuing our legitimate interest in examining our market presence, the effectiveness of member recruitment and our public image. For this purpose, Google Analytics provides us with anonymous visitor statistics, which we can use to identify when which accesses took place from which country.
4.4 Recipients or Categories of Recipients
Your personal data will be passed on to our internal departments and to our contractors who are commissioned to provide the IT resources. It will not be passed on to other recipients. A contract for order data processing with Google has been concluded.
4.5 Third country transfer
Your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated the IP anonymization function on the website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
4.6 Duration of storage
The user data is kept for a period of 26 months. Based on reports created by Google Analytics, there is no longer any personal reference.
4.7 Obligation to provide data (Art. 13 II lit. e GDPR)
Providing your data for processing by Google Analytics is voluntary. If your data is not provided, there will be no impairments.
4.8 Possibility of Objection and Elimination
The data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 (1) sentence 1 lit. e or f GDPR (Art 21 (1) GDPR). From then on, the person responsible will no longer process the personal data. You can prevent Google Analytics from collecting your data by setting an opt-out cookie. You can use the opt-out cookie to prevent your data from being collected on future visits to this website: Disable Google Analytics. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: tools.google.com/dlpage/gaoptout .
5. Processing of Customer and Supplier Data
5.1 Scope of Processing
You can reach us by post and by e-mail, fax, telephone and SMS (communication). By providing your personal data, in particular your name, address, communication data and other content data, you can contact us, we will answer you and process your personal data.
5.2 Purpose of Processing
Your personal data will be processed in order to identify you, to assign your message to an existing contract or other contractual relationship, to process it and to answer it. Your personal data, which you transmit to us via means of communication, will be processed for the purpose of processing and answering your request.
5.3 Legal Basis for Processing
If you have given us your consent to process your personal data specified in Section 6.1 for the purposes specified in Section 6.2, the processing is based on the consent in accordance with Article 6 Paragraph 1 Sentence 1 lit a GDPR. The processing of your above-mentioned personal data may be necessary in individual cases for the performance of a contract to which you are a party or for the implementation of pre-contractual measures that are taken at your request, Article 6 (1) sentence 1 lit. b GDPR. The processing of personal data also takes place on the basis of our legitimate interests in accordance with Article 6 (1) sentence 1 lit. f GDPR.
5.4 Legitimate Interests
We have a legitimate economic interest in being available via our means of communication for processing and answering inquiries.
5.5 Recipients or Categories of Recipients
Your personal data will be processed within our office and, if necessary, forwarded to external recipients, if necessary, in order to process your request appropriately. Public bodies in the presence of overriding legal provisions. Other external bodies insofar as the person concerned has given his or her consent or a transmission is permissible due to an overriding interest.
5.6 Third-country transfers
We do not intend to transfer the personal data abroad. Processors outside the European Union may also be used as part of the execution of the contract.
5.7 Duration of storage
The personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The duration of the data storage depends on the legal storage obligations and is usually 10 years.
6. Information on data security
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
7. Your rights as a data subject
1. Right to revoke consent: You have the right in accordance with Art. 7 Para. 3 GDPR to revoke the consent you have given to the person responsible at any time. As a result, the data processing based on this consent may no longer be continued for the future.
2. Right to information: In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by the person responsible. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to complain, the origin of your data, if not collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.
3. Right to rectification: You have the right, in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by the person responsible.
4. Right to erasure and to be forgotten: You have the right, in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by the person responsible, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation Reasons of public interest or to assert, exercise or defend legal claims.
5. Right to restriction: Pursuant to Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted if you dispute the accuracy of the data, the processing is unlawful, but you refuse to delete it and we do not you need more, but you need them to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
6. Right to data portability: According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible.
7. Right to complain: You may complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or the headquarters of the person responsible.
8. Right of objection: If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are reasons for this that arise from your particular situation.