§ 1 Information about the collection of personal data
(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) The person responsible according to Art. 4 para. 7 EU Data Protection Basic Regulation (DS-GVO) is [Rhoda Fideler, meritaCare, Im Hof 16, 88069 Tettnang, Germany, info@merita.care] (see our Impressum).
(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We will delete the data that arises in this context after it is no longer required to be stored, or restrict processing if there are legal storage obligations.
(4) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you below in detail about the respective processes. We will also specify the criteria for the storage period.
§ 2 Your rights
(1) You have the following rights against us with regard to the personal data concerning you:
– Right of access
– Right of rectification or cancellation
– Right to limit processing
– Right to object to processing
– Right to transfer data
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
§ 3 Collection of personal data when you visit our website
(1) If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO):
– IP address
– date and time of the request
– time zone difference to Greenwich Mean Time (GMT)
– content of the request (specific page)
– access status/HTTP status code
– amount of data transmitted in each case
– website from which the request originates
– browser operating system and its interface
– language and version of browser software
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
– Transient cookies (see b)
– Persistent cookies (see c)
b) Transient cookies are automatically deleted when you close your browser. These include in particular session cookies. They store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website.
e) [We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you will need to log in again for each visit.]
f) [The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the required data regardless of the browser you are using and do not have an automatic expiration date. If you do not wish the Flash cookies to be processed, you must install an appropriate add-on or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. In addition, we recommend that you regularly delete your cookies and browser history manually].
§ 4 Further functions and offers on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must generally provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) To some extent we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.
(3) We may also disclose your personal information to third parties when we offer promotions, sweepstakes, contracts or similar services in conjunction with partners. You can find out more about this when you provide us with your personal data or in the description of the offer below.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
§ 5 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on a weighing of interests, you may object to the processing. This is the case if the processing is not necessary in particular for the fulfilment of a contract with you, which is described by us in the following description of the functions. In the event of such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.
(3) Of course you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your advertising objection under the following contact data: [see our Impressum].
§ 6 Special forms of use
(1) In our blog, in which we publish various contributions on topics related to our activities, you can make public comments. Your comment will be published in the post with your username. We recommend using a pseudonym instead of your username. It is necessary to provide your username and e-mail address, all other information is voluntary. If you make a comment, we will continue to store your IP address, which we will delete after [one week]. The storage is necessary for us to be able to defend ourselves against liability claims in cases of a possible publication of illegal content. We need your e-mail address in order to contact you if a third party should object to your comment as unlawful. Legal bases are Art. 6 Para. 1 S. 1 lit. b and f DS-GVO. The comments will not be checked before publication. We reserve the right to delete comments if they are objected to as unlawful by third parties.
(2) When writing your comment, you can check our e-mail service. This will inform you when other users leave a comment on the post. For this service we use the so-called double opt-in procedure, i.e. you receive an e-mail in which you must confirm that you are the owner of this e-mail address and wish to receive the notifications. You can unsubscribe at any time by clicking on the link contained in the email. Your personal information, including e-mail address, time of registration for the Service and your IP address will be retained by us until you unsubscribe from the Notice Service.]
(3) Our comment function uses the plug-in "Disqus", which is operated by Big Head Labs, Inc., https://www.disqus.com, which is operated by Big Head Labs, Inc., https://www.disqus.com, which is responsible for processing the comments (in future: "Disqus"). With Disqus, you can post a comment on our posts, which will be stored and displayed for as long as the commented post is online on our website, unless you delete the comment first. You can use the comment function unregistered as a guest or as a registered user of Disqus on all websites using Disqus. In addition, you can log in via your third-party accounts Facebook, Twitter or Google. If you register using the access data of a third party provider, he will also process your personal data, although we do not know the details. Disqus provides us with the data collected through the comment function. The legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO. Since your personal data is processed in the USA, we have concluded standard data protection clauses. The contact details of the person responsible are as follows: Big Head Labs, Inc., San Francisco, USA. Terms of: https://help.disqus.com/customer/portal/articles/466260-terms-of-service/; For further information on the processing of your data, please refer to the provider's data protection provisions: https://help.disqus.com/customer/portal/articles/466259-privacy-policy.]
§ 7 Social Media
(1) We are currently using the following social media plug-ins: [Facebook, Twitter]. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the mark on the box above his initial letter or the logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have called up the corresponding website of our online service. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Xing, the IP address is made anonymous immediately after collection, according to information provided by the respective providers in Germany. When the plug-in is activated, personal data is transferred from you to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.
(2) We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also do not have any information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 Para. 1 S. 1 lit. f DS-GVO.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile by the plug-in provider.
(5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the following data protection declarations of these providers. There you will also find further information on your rights in this regard and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection information:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;https://www.facebook.com/policy.php; Further information on data collection: https://www.facebook.com/help/186325668085084. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA;https://twitter.com/privacy. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(1) We have included YouTube videos in our online offer which are available at https://www.YouTube.comgespeichert and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.]
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified under § 3 of this declaration will be transmitted. This takes place regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be assigned directly to your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§ 8 Data Security
We also use technical and organizational security measures to protect any personal data collected or collected, in particular against accidental or deliberate manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.