Privacy policy

1. Name and contact details of the data controller and the company data protection officer.

The following information on data protection applies to data processing by:

Person responsible: Selcuk Berktin Oral, Tivolistr. 72, 52349 Düren, Germany.

Managing director: Selcuk Berktin Oral

E-mail: inf@kampomed.net

A company data protection officer is not required.

 

2. Collection and storage of personal data and type and purpose of use

The legal basis for processing operations in which we obtain consent for a specific processing purpose is always Article 6 (1) p. 1 lit. a DSGVO. Insofar as the processing of personal data is necessary for the performance of a contract (shipment of goods, provision of services) to which you are a party, the processing is based on Art. 6 (1) p. 1 lit. b DSGVO. The above legal basis also applies in the event of the implementation of pre-contractual measures (e.g., inquiries about our products and services).

If our company is subject to a legal (statutory) obligation by which the processing of personal data becomes necessary and which has its basis in Union law or the law of the Member State to which we are subject, the processing is based on Art. 6 (1) sentence 1 lit. c DSGVO. Furthermore, the processing may be based on Art. 6 (1) p. 1 lit. d DSGVO if vital interests are affected (danger to life and limb and/or disasters). In addition, the legal basis for the processing of personal data may be Art. 6 para. 1 p. 1 lit. f DSGVO. In this case, we will still inform you separately about our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO.

a) Visit to our website

When you visit our website, your browser automatically sends information to the server of our website, which is temporarily stored in a so-called log file. This is the following information:

- IP address of the requesting computer,

- Date and time of access,

- name and URL of the accessed file,

- website from which the access is made (referrer URL),

- browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data is stored until it is automatically deleted after seven days. We process this data for the following purposes:

- Ensuring a smooth connection setup of the website,

- Ensuring a comfortable use of our website,

- evaluation of system security and stability, and

- for other administrative purposes.

The data processing carried out by us is based on Art. 6 para. 1 p. 1 lit. f DSGVO as the legal basis. The purposes of data collection listed above justify our legitimate interest. We do not draw any conclusions about your person from the collected data.

In addition, we use cookies and analysis services on our website, which are explained in more detail under sections 4 and 5 of this privacy policy.

b) Newsletter service

Pursuant to Art. 6 (1) p. 1 lit. a DSGVO, express consent is required if you wish to receive our newsletter. For the regular sending of the newsletter, we use the e-mail address you provide for this purpose. You do not need to provide any further information to receive the newsletter.

You can unsubscribe from our newsletter service at any time. At the end of each newsletter there is a link that you can use to unsubscribe. However, you do not have to use this link; you can simply send us an e-mail to this effect to info@kampomed.net.

c) Contact form

On our website there is a contact form, which you can use for questions of any kind. This type of data processing takes place according to Art. 6 para. 1 p. 1 lit. a DSGVO with your voluntary consent. A valid e-mail address is required so that we know the sender of the request and can answer it. All other information is voluntary.

There is an automatic deletion of all personal data collected by us through the use of the contact form as soon as your request has been completed.

d) Business transaction

If you conclude a distance selling contract with us, for example by shopping via our online store, the data processing is carried out in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO. In addition, we have a legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO in a credit check. The data you provide as part of the conclusion of the contract or during registration, in particular name, address, and email address, are necessary for the performance and execution of the contract. The contract cannot be performed without them. You will be expressly informed of this in accordance with Art. 13 Para. 2 lit e DSGVO. The data will also be passed on to third parties (item 4) if this is necessary (e.g., shipping service providers).

As a registered so-called influencer, the information you provide during registration will be stored in our influencer database. You will be contacted by us for the purpose of cooperation. This takes place by e-mail or as a message via your social media platform. For the purpose of sending, you goods, we will use your postal address.

The registration data will be stored as long as the account exists. If this is deleted, the account data will also be deleted.

 

3. Storage of data

Your data for the conclusion of the contract will be stored until the end of the limitation periods. The storage of your data is insofar based on Art. 6 para.1 p.1 lit. b DSGVO. The duration of the storage of your data is also based on our commercial and tax retention obligations. In this case, the storage of your data is based on Art. 6 para.1 p.2 lit. c DSGVO. If they are no longer required for the above-mentioned purposes, they will be deleted immediately.

 

4. Passing on of data

As a matter of principle, your personal data will not be forwarded to third parties. Forwarding will only take place in the following cases:

- You have given express consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO for forwarding to third parties.

- The disclosure is necessary according to Art. 6 (1) p. 1 lit. f DSGVO to protect our legitimate interests or those of a third party, for the assertion, exercise, or defense of legal claims, and you have no overriding legitimate interest in not disclosing your data.

- A legal obligation according to Art. 6 para. 1 p. 1 lit. c DSGVO exists.

- The data is forwarded in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you. In this case, your personal data will be passed on to third parties exclusively to the service partners involved in the processing of the contract, such as the logistics company commissioned with the delivery, the credit institution commissioned with payment matters or the service company responsible for merchandise management and accounting, insofar as this is necessary for the fulfillment and processing of the contract. In cases where data is passed on to third parties, the scope of the data passed on is limited to the minimum required for the execution of the contract.

 

5. Cookies

Our website uses cookies. Cookies are text files that are stored on a computer system via an Internet browser. They enable Internet pages and servers to recognize and identify your browser. We do not have direct knowledge of your identity.

Using cookies, we can provide you, the user, with special services that would not be possible without the cookie. The use of temporary cookies facilitates the use of the website, as you do not have to enter your access data again each time you visit the website, for example, or fill the shopping cart of an online store again. So-called session cookies allow us to see which individual pages of our website you have already visited. These are automatically deleted after you leave our website. We also use cookies for statistical purposes. They record the use of our website and in this way, we can optimize our offer for you (see point 6). These cookies are automatically deleted after a defined period.

The data processed by cookies are necessary for the purposes and serve to protect our legitimate interests as well as those of third parties in accordance with Art. 6

As a data subject, you can oppose the setting of cookies by our website at any time by means of an appropriate setting of your Internet browser and thus permanently object to the setting of cookies. Cookies that have already been set can be deleted at any time using an Internet browser or other software programs. We would like to point out that deactivating the setting of cookies may mean that you cannot use all the functions of our website.

 

6. Analysis tools and tracking tools

The legal basis for the use of the following tools is Art. 6 para. 1 p. 1 lit. f DSGVO. Only with these measures can a needs-based design and continuous optimization of our website be ensured. In addition, this allows us to compile statistics on the use of our website and continuously optimize our offer. These interests are to be regarded as legitimate within the meaning of the provision.

The purposes of the data processing and the type of data can be found in the tracking tool described below.

We use Google Analytics, a web analytics service provided by Google Inc (https://www.google.de/intl/de/about/)(1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"), to design and continuously optimize our website in line with requirements. The tool creates pseudonymized usage profiles and uses cookies for this purpose (see under point 4), which generate the following information:

- Browser type/version

- Operating system used

- Referrer URL (the previously visited page)

- Host name of the accessing computer (IP address)

- Time of the server request

These are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the activities of the website and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. If necessary, this information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

By default, Analytics uses the full IP addresses of website users to generate general geographical reports. When the use of IP masks is enabled, Analytics removes the last octet of the user's IP address before it is used and stored.

Google will not link your IP address with other data.

As shown in section 4, the installation of cookies can be prevented by setting the browser software accordingly, but this may affect the use of the website. Data collection by this tool can also be prevented by a browser add-on, which you can find at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

On mobile devices, you can simply click on the link to prevent Google Analytics from collecting data. For our website, this sets an opt-out cookie on your device. This will remain in place until you delete it.

Further information on data protection in connection with Google Analytics can be found in the "Help" information, which can be found at the following link: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded the necessary order data processing agreement with Google. The contract defines the subject and duration of the processing, the nature and purpose of the processing, the type of personal data, the categories of data subjects and the obligations and rights incumbent on us under the GDPR. The contract ensures that Google is bound to us to comply with these obligations accordingly. The processing of your data by Google is carried out exclusively on our instructions. We have ensured that Google provides sufficient guarantees that appropriate technical and organizational measures are implemented in such a way that the processing is carried out in accordance with the requirements of the GDPR and ensures the protection of the rights of the data subjects. The Processor shall not use any other Processor without our prior separate or general written consent.

 7. Social media plug-ins

Based on Art. 6 (1) p. 1 lit. f DSGVO, we use social media plug-ins of the social networks Facebook, Instagram, YouTube, Pinterest, and Twitter to increase our awareness on our website. This promotional purpose is to be classified as a legitimate interest within the meaning of the DSGVO. The respective providers of the plug-ins are responsible for the data protection compliant operation. We try to protect the visitor of our website as best as possible by integrating the plug-ins through the so-called two-click method.

a) Facebook

Social media plug-ins of Facebook Inc, Menlo Park, California, USA, (hereinafter "Facebook"), in the form of the "LIKE" or "SHARE" buttons are used on our website.

When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection with Facebook's servers. The content of the plug-in is transmitted by Facebook directly to your browser, which then integrates it into the website.

By integrating the plug-ins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plug-ins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and demand-oriented design of the Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy, which can be found at the following link: https://www.facebook.com/about/privacy/.

b) Instagram

Our website also uses so-called social plug-ins ("plug-ins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").

The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera".

When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection to the servers of Instagram. The content of the plug-in is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plug-ins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed there to your contacts.

If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website.

For more information, please refer to Instagram's privacy policy at: https://help.instagram.com/155833707900388.

c) YouTube

A link to the internet platform www.youtube.com is placed on our website. Responsible for this appearance is YouTube LLC with headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA. (https://www.youtube.com/t/terms).

Information about the data provided to YouTube LLC:

As soon as you run the corresponding plug-in and visit the page www.youtube.com, YouTube LLC collects data from you. It is expressly pointed out that we only have the knowledge of the data processing by YouTube presented below.

Basically, data is collected and transmitted every time you interact with www.youtube.com. Initially, the data that you yourself provide to the platform operator is stored (especially in the context of a registration for a user account).

Even without your own information, data is collected when you use the services: In particular, information is collected about the Services you use and how you use them, for example, when you watch a video on YouTube, visit a website that uses our advertising services, or view and interact with our advertising and content.

d) Pinterest

Our website also uses plug-ins of the service "pinterest.com", which is operated by Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plug-in can be recognized by the Pinterest logo. As with the other social media plug-ins, a direct connection to the Pinterest servers is established when you visit our site and log data is transmitted to the Pinterest servers. These are in the United States, among other places. The log data may contain your IP address, the address of the visited web pages that also contain Pinterest functions, type and settings of the browser, date and time of the request, your use of Pinterest as well as cookies (cf. Section 6). Pinterest can assign the visit to our website to your Pinterest account if you are logged in under it. When you click on the Pinterest button, the corresponding information is forwarded directly from your browser to Pinterest.

For more information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policyWeitere We have no knowledge of the use of data.

e) Twitter

Plug-ins of the short message network of Twitter Inc, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, (hereinafter "Twitter") are integrated on our website. You can recognize the Twitter plug-ins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here: https://about.twitter.com/resources/buttons.

When you call up a page of our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages on your Twitter profile. This allows Twitter to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account.

For more information on this, please see Twitter's privacy policy at: https://twitter.com/privacy.

 8. Data subject rights

The new General Data Protection Regulation has significantly expanded your rights. These are listed below and briefly explained, citing the legal basis.

- Information, Art. 15 GDPR: You have the right to request information about your personal data processed by us. This includes, for example, information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;

- Right to rectification, Art. 16 DSGVO: You may request the rectification of inaccurate or incomplete personal data stored by us without undue delay.

- Right to erasure ("right to be forgotten"), Art. 17 DSGVO: You have a right to erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise, or defense of legal claims.

- Right to restriction of processing, Art. 18 DSGVO: You may request that the processing of your personal data be restricted. The prerequisite is that you dispute the accuracy of the data, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 DSGVO (item 9).

- Right to data transfer, Art. 20 DSGVO: You may request to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to have it transferred to another controller.

- Revocation of consent, Art. 7 (3) DSGVO: You may revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. However, the lawfulness of the processing carried out based on the consent until the revocation is not affected by this.

- Right of complaint, Art. 77 DSGVO: You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the provisions of data protection law. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

 9. Right of objection

You are also entitled to a right of objection in accordance with Art. 21 DSGVO. This applies to your personal data processed based on legitimate interests pursuant to Art. 6 (1) p. 1 lit. e or f DSGVO and insofar as there are grounds for objecting to the processing that arise from your situation. If the objection is directed against direct marketing, you have an unrestricted right to object, even without specifying a particular situation.

You can assert your right to object and your other rights, for example, by sending an e-mail to info@kampomed.net.

 10. Data security

For our website, we use the common SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.

It is important to us to protect your data. We therefore take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 11. Existence of automated decision making

Automatic decision-making or profiling does not take place.

 12. Up-to-dateness and amendment of this privacy policy

It may also be necessary to adapt this data protection declaration to the further development of our website or to update it due to changed legal requirements. You can find the current data protection declaration for retrieval and printout purposes under the following link: https://kampomed.net/de/policies/refund-policy.

 

Status: August 25, 2022