Privacy policy

Responsible for data processing:
Moritz Hoffmann
Nymphenburger Straße 58
80335 Munich

Email: info@hevologica.com
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.
1. Access Data and Hosting
You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated exclusively to ensure the smooth operation of the website and to improve our offering. This serves to protect our legitimate interests in the correct presentation of our offering, which prevail in the context of a balance of interests, pursuant to Art. 6 (1) S. 1 lit. f GDPR.
2. Data Processing for Contract Processing and Contacting
2.1 Data Processing for Contract Processing
For the purpose of contract processing (including inquiries about and processing of any existing warranty and liability claims as well as any statutory updating obligations) pursuant to Art. 6 para. 1 p. 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us within the scope of your order. Mandatory fields are marked as such because in these cases we require the data for contract processing and cannot send the order without their provision. The data collected can be seen from the respective input forms.
Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods pursuant to Art. 6 para. 1 p. 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to further use of data, which is legally permitted and about which we inform you in this declaration.
2.2 Customer Account
If you have given your consent to this pursuant to Art. 6 para. 1 p. 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and for storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to further use of data, which is legally permitted and about which we inform you in this declaration.
2.3 Contact
In the context of customer communication, we collect personal data for processing your inquiries pursuant to Art. 6 para. 1 p. 1 lit. b GDPR if you voluntarily provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such because in these cases we require the data to process your contact request. The data collected can be seen from the respective input forms. After complete processing of your inquiry, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 p. 1 lit. a GDPR or we reserve the right to further use of data, which is legally permitted and about which we inform you in this declaration.
3. Data Processing for Shipping
For the purpose of contract fulfillment pursuant to Art. 6 para. 1 p. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, to the extent necessary for the delivery of ordered goods.
 Data transfer to shipping service providers for the purpose of shipping notification
If you have given us your express consent during or after your order, we will pass on your email address and telephone number to the selected shipping service provider based on this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR so that the shipping service provider can contact you for the purpose of delivery notification or coordination before delivery.
You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
Hermes Germany GmbH
Essener Straße 89
D-22419 Hamburg
Germany
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany
4. Payment processing data processing
In the processing of payments in our online shop, we work with these partners: technical service providers, banks, payment service providers.
4.1 Transaction processing data processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers who work for us as part of order processing or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. Some payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via technical integration in the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact option described in this data protection declaration.
4.2 Data processing for the purpose of fraud prevention and optimization of our payment processes
If necessary, we provide our service providers with further data that they use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, processing of disputed payments, support of accounting). This serves to safeguard our predominant legitimate interests in fraud protection or efficient payment management in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, as part of a balancing of interests.
5. Cookies and other technologies
5.1 General Information
To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).
Protection of privacy on end devices
When using our online offer, we use technologies that are absolutely necessary to provide the expressly desired telemedia service. The storage of information on your device or access to information that is already stored on your device does not require your consent.
For functions that are not absolutely necessary, the storage of information on your device or access to information already stored on your device requires your consent. We would like to point out that if consent is not given, parts of the website may not be fully usable. Any consent you may have given will remain valid until you adjust or reset the respective settings on your device.
Subsequent data processing through cookies and other technologies
We use such technologies that are essential for using certain functions of our website (e.g. shopping cart function). Through these technologies, IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the content of the shopping cart) are collected and processed. This serves, within the framework of a balancing of interests, our overriding legitimate interests in an optimized presentation of our offer pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO.
We also use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consents to the processing of your personal data) as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this data protection declaration.
You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Mozilla Firefox™ / Opera™
You can also prevent the storage of cookies on your device by setting your browser to "Do Not Track". We use the "Do Not Track" option on our website.
As far as you have consented to the use of technologies in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy. Alternatively, you can also follow this link: www.hevologica.com. If you do not accept cookies, the functionality of our website may be restricted.
5.2 Consent Manager Platform (CMP)
On our website, we use a Consent Management Service ("Consent Manager Platform (CMP)") to inform you about the cookies and other technologies we use on our website and to obtain, manage, and document your necessary consent to the processing of your personal data by these technologies, if applicable. This is required in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO to fulfill our legal obligation under Art. 7 para. 1 DSGVO to be able to prove your consent to the processing of your personal data, to which we are subject. The Consent Manager Platform (CMP) used is provided by Pandectes OÜ, Männimäe/1, 74626 Pudisoo küla, Kuusalu vald, Estonia, which processes your data on our behalf.
5.3 Hosting and E-Mail Hosting
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online service.
5.4 External Payment Service Providers
We use external payment service providers through whose platforms the users and we can carry out payment transactions (e.g., each with a link to the privacy policy, Klarna: https://www.klarna.com/uk/privacy-notice/, Paypal (Europe) S.à r.l. et Cie, S.C.A.: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full?locale.x=en_GB).
5.5 Administration, Financial Accounting, Office Organization, Contact Management
We process data in the context of administrative tasks as well as the organization of our operations, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process in the context of providing our contractual services. The processing bases are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the data specified in these processing activities.
5.6 Participation in Affiliate Partner Programs
Within our online offer, we use tracking measures that are supported by the affiliate partner programs. The tracking measures are used to determine the success of the individual advertisements placed within our online offer, e.g. to track which websites a visitor has visited before he/she made a purchase. The purpose of this is to settle accounts with the affiliate partner programs, i.e. to prove that we are entitled to the commission due to the success of a placement.
5.7 Business Analysis and Market Research
We process personal data for the purpose of business analysis and market research. In doing so, we can take into account the profiles of registered users with information, e.g. on their purchase transactions. The analyses serve us to increase the user-friendliness, the optimization of our offer and the business economics. The analyses serve us alone and are not disclosed externally, unless they are anonymous analyses with summarized values.
5.8 Contact
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the user's details are processed for processing the contact enquiry and its processing in accordance with Art. 6 para. 1 lit. b) DSGVO. User information can be stored in a customer relationship management system ("CRM system") or comparable request organization.
5.9 Hosting and E-mail
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services that we use for the purpose of operating this online service.
5.10 Collaboration with processors and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if a transmission of the data to third parties, such as to payment service providers, is required for the fulfilment of the contract in accordance with Art. 6 Para. 1 lit. b DSGVO), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
5.11 Transfer to Third Countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this only takes place if it occurs for the fulfilment of our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. Process DSGVO. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
5.12 Commercial and Business Services
We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as "contractual partners") within the framework of contractual and comparable legal relationships as well as associated measures and within the framework of communication with the contractual partners (or pre-contractually), e.g. to answer enquiries.
5.13 Administration, Financial Accounting, Office Organization, Contact Management
We process data in the context of administrative tasks as well as organization of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the scope of providing our contractual services. The processing bases are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of data with regard to contractual services and contractual communication corresponds to the information provided in these processing activities.
5.14 Agency Services
We process our clients' data as part of our contractual services, which include conceptual and strategic consulting, campaign planning, software and design development / consulting or maintenance, implementation of campaigns and processes / handling, server administration, data analysis / consulting services and training services.
5.15 Organization and Consulting Services
We process our clients' data as part of our contractual services, which include conceptual and strategic consulting, process / organization consulting or consulting services.
6. External Payment Service Providers
We use external payment service providers through whose platforms users and we can make payment transactions (e.g. each with a link to the privacy policy, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html).
7. External Payment Service Providers
We use external payment service providers through whose platforms users and we can make payment transactions (e.g., each with a link to the privacy policy, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html).
Our service providers are located and/or use servers in the following countries, for which the European Commission has established an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.
A decision of the European Commission on an adequate level of data protection for the USA serves as the basis for a transfer to third countries, provided that the respective service provider is certified. Certification is available.
Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with you is based on these guarantees: Standard contractual clauses of the European Commission.
7. Contact Options and Your Rights
7.1 Your Rights
As a data subject, you have the following rights:
  • pursuant to Art. 15 GDPR the right to request information about your personal data processed by us to the extent described therein;
  • pursuant to Art. 16 GDPR the right to demand without undue delay the rectification of inaccurate or completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR the right to demand the erasure of your personal data stored by us, provided that the further processing
    • is not necessary
    • for exercising the right of freedom of expression and information;
    • for compliance with a legal obligation;
    • for reasons of public interest or
    • for the establishment, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR the right to demand the restriction of processing of your personal data, provided that
    • the accuracy of the data is contested by you;
    • the processing is unlawful, but you oppose the erasure;
    • we no longer need the data, but you require them for the establishment, exercise or defense of legal claims or
    • you have objected to processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request their transmission to another controller;
  • pursuant to Art. 77 GDPR the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or place of work or our company headquarters for this purpose.
Right to Object
To the extent that we process personal data to safeguard our overriding legitimate interests as explained above, you have the right to object to this processing for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only if there are reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.
7.2 Contact Options
If you have any questions regarding the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as the revocation of granted consent or objection to a particular data usage, please contact us directly using the contact information provided in our legal notice.
Privacy Policy created with the Trusted Shops Legal Text Generator