Privacy

SCOPE

The protection of your data is very important for us. Therefore, this Privacy Policy is intended to inform you about the nature, extent and purposes of the collection, usage and processing of personal data in the context of the usage of our services.

RESPONSIBLE BODY

The service provider responsible for the collection, processing and usage of your personal data within data protection laws is HEIMER (hereinafter “HEIMER” or ”We”).

COLLECTION, PROCESSING AND USE OF PERSONAL DATA ON OUR WEBSITE

Personal data is individual information about personal or factual circumstances of a specific or identifiable individual. These are for example your name and your e-mail address. Within the framework of our internet presence and our services, personal data is only collected, processed and used within the legally permitted extent. This also applies to the transfer of personal data.

CONTACTING US

Our service also allows you to contact us. This can be done by e-mailing us. The information you provide when contacting us will be stored in order to process your request and any subsequent correspondence. Legal basis is either the performing of a contract obligation or our legitimate interest in providing a contact service (Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR).

INFORMATIONAL USE

If you do not purchase anything, e.g. you visit the website for informational purposes only, We do not collect any personal data, with the exception of the data transmitted by your browser, in order to give you access to the website or to use third-party services, as stated in this Privacy Policy. These are: IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transmitted, website from which the request originated, browser, operating system and its interface, language and version of the browser software. This is in accordance with Art. 6 paragraph 1 (b) GDPR.

NEWSLETTER

You may register for our e-mail newsletter to receive current information about our products, events or competitions.

We use the provider Klaviyo, a service of 125 Summer Street, Boston, MA 02110 Klaviyo, hereinafter only referred to as Klaviyo, to send these newsletters. Further information about Klaviyo can be found in their privacy policy: https://www.klaviyo.com/legal/privacy

The newsletters are tracked anonymously to evaluate if and when a newsletter was opened and which links in the newsletter were clicked. This enables us to create aggregated statistics, e.g. about the total number of open newsletters of all subscribers. In this context, technical information such as information about your browser and your system, but no personal data and also not your IP address are stored or processed. In particular, it is not possible for us to trace whether you have personally opened the newsletter or clicked on a link. We use the statistical evaluations to continuously optimise our newsletter. This analysis is done on our behalf by our service provider Klaviyo. Legal basis for the analysis of the newsletter use is art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest is to provide you with a better newsletter and to improve it continuously. If you do not wish to receive an analysis of the newsletter use, we recommend that you unsubscribe from the newsletter by clicking on the unsubscribe link included in every newsletter.

SOCIAL MEDIA PRESCENCES

We maintain online presences within various social networks and platforms in order to be able to communicate with our customers, interested parties and users active there and to inform them about our services.

We point out that you use these pages and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also call up the information we offer on our website: heimer-online.com

When you visit our various online presences, the respective website provider records your IP address and other information that is available on your device in the form of cookies. The data collected about you in this context is processed by the respective provider and may be transferred to countries outside the European Union. Which information the service providers receive and how this information is used is described in general terms in their respective data use guidelines. There you will also find information on how to contact us and how to place advertisements.

We, as the provider of the information service, also collect and process data from your use of our service for the purposes of advertising and communication, to answer your questions and advertise various products, services and events, as well as for applicant management purposes. The legal basis is Art. 6 paragraph. 1 sentence 1 (f) and (b) DSGVO. Our legitimate interest is to provide you with a better user experience, products and a simple form of communication.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can of course contact us.

You can also find us at:

https://www.instagram.com/_heimer_official/ on Instagram.com. The Instagram Service is one of the Facebook products provided by Meta Platforms Ireland Ltd. We use the technical platform and services of Meta, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered there. Instagram's complete data policy can be found here: https://help.instagram.com/155833707900388?cms_id=155833707900388

https://www.tiktok.com/@heimer_official on Tiktok.com. The TikTok Service is one of the ByteDance products provided by ByteDance Limited. We use the technical platform and services of TikTok for the information service offered there. TikTok's complete data policy can be found here: https://www.tiktok.com/legal/page/row/privacy-policy/en

We are jointly responsible with Meta Platforms Ireland Ltd. for collecting (but not further processing) data from visitors to our Instagram page. This data includes information about the types of content users view or interact with, or the actions they take, as well as information about the devices users use. You can assert your rights (information, correction, deletion, restriction of processing, data portability, objection and complaint) both against us and against Meta.

DURATION OF DATA STORAGE

If necessary, We process and store your personal data for the duration of your usage of our website. Your personal data will be deleted immediately if they are no longer necessary for the purposes (see Art. 17 GDPR), for which they were processed by us. Longer storage of data will only take place if the processing is necessary for the fulfilment of certain legal obligations or for certain tasks in public interest.

DATA SECURITY

We maintain current technical measures to guarantee data security, in particular to protect your personal data from dangers during data transmission as well as attainment from third-party. These measures are adapted to the current appropriate state of the art on a regular basis.

DATA TRANSFER

We only transfer personal data to third parties where necessary for the provision of our service or otherwise allowed by the law. Within the scope of the purposes stated here, personal data are transferred to service providers involved in the provision of our services. In addition to their legal obligation to comply with all data protection regulations, these service providers are bound to additional contractual data protection requirements. This includes in particular contractual obligations as a processor in accordance with Art. 28(3) GDPR.

Apart from that, we only transfer personal data to third parties if this is permitted by law or if you have given your prior consent. You can revoke any consent you may have given at any time with effect for the future.

If necessary, for our purposes, we may also transfer your data to recipients outside the EEA. We only do this within the framework of the data protection requirements for transfers to third countries if it is ensured that the recipient of the data guarantees an adequate level of data protection within the meaning of Chapter V of the GDPR and no other interests worthy of protection speak against the transfer of data. To ensure an adequate level of protection for the recipient of the data, we in particular use the standard contractual clauses of the EU Commission on the transfer of personal data to third countries, unless an adequacy decision within the meaning of Art. 45(1) GDPR has been taken by the EU Commission.

YOUR RIGHTS

REVOCATION OF GIVEN CONSENT

At any time, you can revoke explicit or implied consent given to us which will be in effect thereafter.

DISCLOSURE

You can request information regarding your stored personal data. Furthermore, you are entitled to the disclosure of information mentioned in Art. 15 GDPR.

CORRECTION AND DELETION

You have the right to have inaccurate personal data corrected in accordance with Art. 16 GDPR. You also have the right to have your personal data deleted in accordance with Art. 17 GDPR.

RESTRICTION OF PROCESSING

You can restrict the processing of your personal data under the conditions of Art. 18 GDPR.

OBJECTION

In accordance with Art. 21 GDPR you have the right to object to the processing of your personal data at any time, due to reasons based on your particular situation, as long as these are on the grounds of Art. 6 paragraph 1 (e) or (f) GDPR. In case of such an objection We will no longer process such data, unless We can prove that there are compelling compulsory reasons that outweigh your interests, rights and freedom or in case the processing serves to assert, exercise or defend legal claims.

PUBLICATION OF DATA AND DATA TRANSMISSION

You have the right to receive the personal data that you had provided us in a structured, common, machine-readable format. You also have the right, as long as it is technically feasible, to ask us to transmit this data to a third-party.

RIGHT TO LODGE A COMPLAINT

In connection with the processing of your personal data you have the right to lodge a complaint at the respective supervisory body, that is in charge of the protection of personal data.

NO AUTOMATED INDIVIDUAL DECISION-MAKING

We do not use your personal data for automated individual decisions in the meaning of Art. 22(1) GDPR.

CHANGES TO THE PRIVACY POLICY

We reserve the right to occasionally adapt the data protection declaration to current legal requirements and changes to our services. For your visit and/or your use the current data protection declaration applies.

CONTACT

If you no longer consent with the storage of your personal data or if you wish to exercise your rights as a data subject, We will comply with your request within the scope of regulatory requirements. Please do not hesitate to contact info@heimer-online.com with questions, requests and suggestions regarding the processing of your personal data and for information, correction, restriction or erasure of data, as well as objecting to a processing of your personal data.

Version: June 2023