Information on data processing for this website in accordance with Art. 13 of the EU General Data Protection Regulation (DSGVO) when collecting personal data from the data subject
WALA Heilmittel GmbH is responsible for this website and, as the provider of a tele-service, must inform you at the beginning of your visit about the type, scope and purpose of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear and simple language. This content must be available to you at all times.
We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the currently applicable European and national laws.
With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:
WALA Heilmittel GmbH
Dorfstraße 1
73087 Bad Boll/Eckwälden
Germany
Commercial register no.: HRB 530784
Managing Directors: Dr. Johannes Stellmann (Chairman), Dr. Armin Dörr, Dr. Philip Lettmann, Prof. Dr. Florian Stintzing
Phone: +49 (0)7164 930-0
Email: info@wala.de
Our data protection officer:
Sven Lenz
German data protection law firm - Datenschutzkanzlei Lenz GmbH & Co KG
Bahnhofstraße 50
87435 Kempten
Germany
If you have any questions about data protection or other data protection concerns, you are welcome to send an e-mail to the following e-mail address: datenschutz@wala.de.
A. General
For better comprehensibility, we refrain from differentiating between the genders. In the interest of equal treatment, the corresponding terms apply to all genders. The meaning of the terms used, such as "personal data" or "processing", can be found in Article 4 of the GDPR.
The personal data processed within the framework of this website include:
- inventory data (e.g. name and addresses of customers),
- contractual data (e.g. services used, payment information),
- usage data (e.g. pages visited on our website) and
- content data (e.g. entries in online forms).
B. Specific
Privacy policy
We guarantee that we will only process your data in connection with the processing of your enquiries and for internal purposes as well as in order to provide the services you have requested or to make content available.
Legal basis for data processing
We process your personal data only in compliance with the relevant data protection regulations. Legal bases are:
- Provision of our contractual services, (Art. 6 para. 1 lit. b) DSGVO)
- existence of your consent, (Art. 6 para. 1 lit. a) and Art. 7 DSGVO)
- enforcement of our legitimate interests (Art. 6 para. 1 lit. f) DSGVO).
Data transmission to third parties
We point out that in the context of the order processing a data transmission to third parties, namely the respective commissioned shipping service providers takes place.
Your data will only be passed on to third parties within the framework of legal requirements. We only pass on your data if this is necessary, for example, for contractual purposes or on the basis of legitimate interests in the economic and effective operation of our business.
If we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal regulations.
Transfer of data to a third country or an international organisation
Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.
No data is transferred to a third country or an international organisation without a legal basis.
Storage period of your personal data
We adhere to the principles of data economy and data avoidance. This means that we only store your data for as long as necessary to fulfil the aforementioned purposes or as specified by the various storage periods provided for by law. If the respective purpose ceases to apply or after expiry of the corresponding periods, your data will be routinely blocked or deleted in accordance with the statutory provisions.
We have drawn up an internal concept to ensure this procedure.
Contact
If you contact us via the website using our contact form, you agree to electronic communication. In the context of electronic contact with us, personal data will be processed. The information you provide will be stored exclusively for the purpose of processing the request and for possible follow-up questions.
We would like to give you the legal basis for this:
- processing for the fulfilment of our services and implementation of contractual measures Art. 6 para. 1 lit. b) DSGVO
We would like to point out that e-mails can be read or changed unauthorized and unnoticed during transmission. Furthermore, we draw your attention to the fact that we use software to filter unwanted e-mails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam by certain characteristics.
What rights do you have?
a) Right to information
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.
b) Right of rectification
You have the right to have your data stored by us corrected if it is incorrect. In doing so, you can request a restriction of processing, e.g. if you dispute the accuracy of your personal data.
c) Right to block
Furthermore, you can have your data blocked. To ensure that a blocking of your data can be taken into account at any time, this data must be kept in a blocking file for control purposes.
d) Right to erasure
You can request the deletion of your personal data, unless there is a legal obligation to retain it. If such an obligation exists, we will block your data upon request. If the relevant legal requirements exist, we will also delete your personal data without your request.
e) Right to data portability
You have the right to request that we provide the personal information you provide to us in a format that allows it to be transferred to another entity.
f) Right of appeal to a supervisory authority
You have the possibility to lodge a complaint with one of the data protection supervisory authorities.
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany
Address: Königstraße 10a, 70173 Stuttgart, Germany
Phone +49 711 615541-0
Fax: +49 711 615541-15
Email: poststelle@lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de
You can open the complaint form via the following link:
https://www.baden-wuerttemberg.datenschutz.de/beschwerde
Note: A complaint can also be made to any data protection supervisory authority within the EU.
(g) Right of objection
You have the possibility at any time, for reasons arising from your particular situation, to object to the processing of your data in accordance with Art. 6(1)(e) and (f); this also applies to profiling based on these provisions.
WALA Heilmittel GmbH will then no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertising. For this purpose, it is sufficient to send us a corresponding e-mail.
h) Right of withdrawal
You have the possibility at any time to revoke your consent to the processing of your data with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the revocation. For this purpose, it is sufficient to send us a corresponding e-mail.
However, such a revocation shall not affect the lawfulness of the processing carried out on the legal basis of Art. 6 (1) a) DSGVO up to the time of the revocation.
To exercise your data protection rights, please send us an e-mail to the following address: datenschutz@wala.de.
Protection of your personal data
We take contractual, technical and organisational security measures in accordance with the state of the art to ensure that the data protection laws are complied with and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.
The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, a 256-bit SSL (AES 256) encryption technology is used.
Your personal data will be protected within the scope of the following points (excerpt):
a) Maintaining the confidentiality of your personal data
In order to maintain the confidentiality of your data stored with us, we have taken various measures to control access, entry and access control.
b) Safeguarding the integrity of your personal data
In order to protect the integrity of your data stored with us, we have taken various measures to control the transfer and entry of data.
c) Maintaining the availability of your personal data
To ensure the availability of your data stored with us, we have taken various measures to control orders and availability.
The security measures in place are continuously improved in line with technological developments. Despite these precautions, due to the unsecure nature of the Internet, we cannot guarantee the security of your data transmission to our website. Therefore, any data transmission by you is at your own risk.
Protection of minors
Personal information may only be provided to us by persons who have not yet reached the age of 16 with the express consent of their legal guardians. This data will be processed in accordance with this data protection notice.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- time of the server request
- IP address
This data is not merged with other data sources.
The basis for data processing is our legitimate interest in accordance with Art. 6 Para. 1 lit. f) DSGVO.
Cookies
Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies enable, for example, the recognition of the Internet browser. The files are used to help the browser navigate through the website and to make full use of all functions.
We only use system-relevant cookies.
Passing on of personal data for order processing
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on payment data to the commissioned credit institution within the framework of the processing of payments.
Processing of your personal data in the context of payment
The payment method is specified in the general terms and conditions and depends on which of the methods you have chosen in advance.
Passing on your data to shipping service providers
The delivery of the goods is carried out by transport service providers commissioned by us.
These are currently:
- DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn)
- TOF (trans-o-flex Express GmbH, Hertzstraße 10, 69469 Weinheim)
- GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1-7, 36286 Neuenstein)
- Spedition Dachser (DACHSER SE, Thomas-Dachser-Str. 2, 87439 Kempten).
If you have given us your consent during the ordering process, we will pass on your e-mail address to the commissioned shipping service provider in accordance with Art. 6 Para. 1lit. a DSGVO prior to delivery of the goods for the purpose of agreeing a delivery date or for delivery notification. Otherwise, we only pass on the name of the recipient and the delivery address to the commissioned shipping service provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The forwarding only takes place if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the commissioned shipping service provider or delivery notification is not possible. The consent can be revoked at any time with effect for the future towards us or towards the respective transport service provider.
Change of our privacy policy
We reserve the right to adapt our data protection information at short notice so that it always complies with the current legal requirements or in order to implement changes to our services. This may, for example, concern the introduction of new services. The new data protection information will then apply to your next visit.
Version: DSGVO 2.0 from 24.09.2021