Data Privacy Statement

The use of my webpage is basically possible without specification of personal data. Via this data privacy statement I would like to inform the public about ways, extent and purpose of collected, used and processed personal data from this website. Apart from this, rights concerning this data privacy statement are explained to regarding website users.

 

  1. Name and address of the responsible person for processing

 

Person responsible as defined by the data privacy statement, valid data privacy acts and other regulations for reasons of data protection of the member states of the European Union is:

 

Winviell Casimir

Albrechtstrasse 15c

12167 Berlin

Phone: +49 040 94 79 77 66

E-mail: info@bodybywin.de

Website: www.bodybywin.de

 

  1. Hosting URL

 

https://www.strato.de/apps/

 

  1. Collection of general data and info

 

The internet page collects with each visit by a concerned person or by an automated system a certain amount of general data and information. These general data and information are saved in the server’s log-file. Captured can be 1) used browser types and versions of it, 2) the browser’s system used by the collecting system, 3) the webpage, from which an accessing system reaches my website (so-called referrers), 4) the sub-websites, which are triggered by a triggering system on my website, 5) date and time of an access to the webpage, 6) an internet-protocol-address (IP address), 7) the internet-service-provider of the accessing system and 8) other similar data and information, which serve the prevention of hazards in case of attack on my information technological systems.

 

Regarding the use of these general data and information I don’t draw conclusions from concerned persons. Rather, the information will be needed to 1) show the content of my website in a correct manner, 2) optimize the contents of my webpage as well as its advertisements, 3) guarantee the permanent efficiency of my information technological systems and the technique of my webpage, as well as 4) provide necessary information for law enforcement authorities in case of cyber attacks. These anonymously collected data and information are analyzed by myself in a static way, and moreover, with the aim to increase data protection and security of data in my company in order to secure an optimal level of protection for the processed personal data. The anonymous data of the server log-files are saved separately from all of the personal data given by a concerned person.

 

  1. Routinely deletion and blocking of personal data

 

The person responsible for processing, processes and saves personal data of the regarding person only for the time frame which is needed for purposes of saving or which was allowed by laws or other law enforcement institutions in laws or other regulations, which succumb to the person in charge of the processing.

 

Is the purpose of saving fulfilled, or the period of saving prescribed by European policies or other law enforcing institutions is over, personalized data are disabled or deleted according to legal rules.

 

  1. Rights of the concerned person

 

  1. Rights of confirmation

 

Each concerned person has the right provided by the European law enforcement institutions to ask for a confirmation from the responsible person for processing whether personal data concerning him/her are being processed. If a concerned person wants to make use of this confirmation right, he/she can appeal to me.

 

  1. Right of information

 

Each person concerned with the process of personal data has the right conceded by European law enforcement institutions to receive information on his/her saved personal data and a copy of this information from the responsible person for processing free of charge at all times. Apart from this, European law enforcement institutions have granted information about the following to the concerned person:

 

  • purpose of processing
  • categories of personal data, which are being processed
  • beneficiary or categories of beneficiaries, to whom personalized data have been disclosed or will be disclosed, in particular beneficiaries in third-world countries or international organizations
  • if possible the planned duration of the process of saving personalized data, or, if this is not possible, the criteria for determination of the period
  • the existence of the right of complaint with an inspecting authority
  • in case the personalized data cannot be collected with the regarding person: all available information on the origins of data
  • the existence of an automated decision making, including profiling according article 22 paragraph 1 and 4 DS-GVO and – at least in these cases – significant info on involved logic as well as consequences and the targeted effects of such a process for the concerned person

 

Moreover, the concerned person has the right of information in case personalized data have been transferred to third countries or other international organizations. If this is the case, the concerned person has the right to receive information on suitable guarantees regarding the transfer.

 

If a concerned person would like to make use of this right of information, he/she can refer to me at all times.

  1. Right of correction

 

Each person concerned with the process of personalized data bears the right issued by the European institutions for guidelines and enactments to ask for immediate correction of incorrect personal data. Moreover, the concerned person has the right to ask for completion of incomplete personalized data regarding the purpose of processing, also with an additional explanation.

 

If a concerned person wants to make use of this right of correction, he/she can turn to me at all times.

 

  1. Right of deletion (right of being forgotten)

 

Each person concerned with the processing of personalized data has the right issued by European authorities for regulations and orders ask the responsible person for immediate deletion of personalized data if one of the following reasons applies and insofar as purposes of processing are not mandatory:

 

  • Personalized data have been collected for reasons and have been processed in ways, which are not necessary anymore.
  • The concerned person cancels his/her consent, on which the process according to article 6, paragraph 1 letter a DS-GVO or article 9 paragraph 2 letter a DS-GVO is based, and further legal foundation for processing is missing.
  • The concerned person files an objection against processing according to article 21, paragraph 1 DS-GVO, and there are no prior-ranking reasons for processing, or the concerned person files an objection against processing according to article 21, paragraph 2 DS-GVO.
  • The personalized data are being processed unlawful.
  • The deletion of personalized data is necessary for fulfillment of a lawful duty according to Union law or the law of member states, to which the responsible person succumbs.
  • The personalized data have been collected regarding provided services by the information society according to article 8, paragraph 1 DS-GVO.

 

Provided that one of the reasons stated above applies and the concerned person would like to cause the deletion of the personalized data saved with me, he/she can turn to me at all times.

 

  1. Right of constraints of processing

 

Each person concerned with the processing of personalized data bears the right issued by the European institutions of regulation and rules to ask for constraints of processing data by the responsible person if one of the following requirements is given:

 

  • The accuracy of personalized data is disputed by the concerned person, especially for the time period, which enables the responsible person the check the correct personalized data.
  • The processing of data is unlawful, the concerned person denies the deletion of personalized data and asks instead for constraint of use of personalized data.
  • The responsible person requires personalized data for purposes of processing not any longer, whereas the concerned person needs them for enforcement, execution or defense of legitimate claims.
  • The concerned person filed an objection to processing according to article 21, paragraph 1 DS-GVO, and it is not yet certain if justifiable reasons of the responsible person overweigh the claims of the concerned person.

 

In case of one of the above stated conditions applies and a concerned person asks for constraint of personalized data saved by me, he/she can turn to me at all times.

 

  1. Right of data transfer

 

Each person concerned with the process of personalized data has the right issued by European law enforcement authorities to receive data in a structured, established and machine readable format concerning him/her, which have been provided by the concerned person to the responsible person. Apart from this, he/she has the right to transfer these data to another responsible person without interference of the responsible person, who has been provided with personalized data, in case the processing is based on an agreement according to article 9 paragraph 2 letter a DS-GVO or on a contract according to article 6 paragraph 1 letter b DS-GVO, and the process is carried out via automated methods, in case the process is not necessary for a task of public interest or in execution of public authority, which was transferred to the responsible person.

 

Moreover, within the execution of the right of data transfers according to article 20, paragraph 1 DS-GVO, the responsible person has the right to effect the transmit personalized data directly from one responsible person to another responsible person, so far as this is technically viable and the rights and liberties of another person are not affected in this process.

 

For purposes of law enforcement of data transfers, the concerned person can turn to me at all times.

 

  1. Right of opposition

 

Each person concerned with the processing of personal data has the right issued by European authorities of regulations and other rules, to file an objection against the processing of personalized data for reasons resulting from his/her specific situation, which applies to article 6 paragraph 1 letter e or f DS-GVO. This also applies to profiling based on these regulations.

 

I no longer process personalized data in case of opposition, except I can prove convincing reasons requiring protection for the processing, which predominate interests, rights and liberties of the concerned person, or the processing serves the enforcement, execution or defense of lawful demands.

 

When I process personalized data for direct advertising, the concerned person has the right to file in opposition against the processing of personalized data for such advertising purposes at all times. This also applies to profiling, in case it is connected to such methods of direct advertisements. Opposes the concerned person the processing for such purposes of direct advertising, I will not process personalized data for such purposes anymore.

 

In addition, the concerned person has the right to oppose the processing of personalized data concerning him/her, which is being carried out with me for academic or historical research purposes or for statistic purposes according to article 89 paragraph 1 DS-GVO for reasons resulting from his/her particular situation. This does not apply when such a process of data processing is required to fulfill public interests’ tasks.

 

  1. Automated decisions in individual cases including profiling

 

Each person concerned with the processing of personalized data has the right issued by European institutions for regulations and other rules to not having to succumb to a decision based on singularly automated processing – including profiling – , which unfolds lawful results or impacts him/her immensely, in case the decision (1) is not necessary for the completion or implementation of a contract between the concerned person and the responsible person, or (2) is permissible according to law enforcements of the Union or its member states which the responsible person succumbs to and these lawful regulations contain appropriate measures to protect rights and liberties as well as legitimate interests of the concerned person or (3) with explicit acquiescence of the concerned person.

 

Is the decision (1) for the conclusion or the completion of a contract between the concerned person and the responsible person required, or (2) is it carried out with explicit agreement of the concerned person, I will implement adequate action in order to protect the rights and liberties as well as legitimate interest of the concerned person, which includes at least the right to effect to take action of a person on behalf of the responsible person, to demonstrate his/her point of view and to defend a decision.

 

  1. Right of cancelation of an agreement regarding data protection

 

Each person concerned with the processing of personalized data has the right issued by European institutions for regulations and other rules to cancel an agreement to the processing of personalized data at all times.

 

  1. Data privacy regulations for the implementation and use of Google-ad words

 

The responsible person for processing data has integrated Google-ad words on this webpage. Google-ad words is a service for internet advertising, which allows advertisers to operate adverts both in searching engines by Google as well as in Google advertising networks. Google-ad words allows advertisers to determine pre-selected key words, by which an advert is only shown in Google’s search engines when the user triggers a key word relevant search result via the searching engine. In the Google advertising network, adverts are divided between webpages relevant to certain topics via automated algorithms and under consideration of prior selected keywords.

 

Operating company of the services of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

 

The purpose of Google AdWords is the application of my website via the masking of interest relevant advertising on the websites of third companies and on the search engine results of the searching engine Google and the masking of foreign advertising on my website.

 

Reaches a concerned person my website via a Google advertisement, a so-called conversion-cookie will be placed by Google on the information technological system of the concerned person. Earlier, it is explained what cookies are. A conversion cookie looses validation after a period of 30 days and does not fulfill the purpose of identifying a person. Via the conversion cookie, preconditioned the cookie is not out of date yet, it is tested if certain sub-pages can be triggered on my webpage, for example the shopping basket of an online shop system. With the conversion cookie, me and Google can follow if a concerned person, who has reached my webpage via an AdWords advertisement, has generated sales, in other words, if a person has bought articles or canceled the shopping process.

 

The collected data and information via the use of conversion-cookies are used by Google in order to generate visitor statistics for my website. In turn, these visitor statistics are used by me in order to determine the complete number of users who were mediated to me by AdWords advertisements; in general to determine success or failure of particular AdWords advertisements and to optimize my AdWords advertisements for the future. Nor my company neither other advertising customers of Google-AdWords receive information from Google, by which the concerned person could be identified.

 

With conversion-cookies, personalized information, for example the websites visited by the specific person, are saved. Consequently, with each visit of my webpages personalized data, including the IP address of the internet access used by the concerned person, are saved by the United States of America by Google. Possibly, Google transfers these personalized data collected via technical procedures to third parties.

 

The concerned person can prevent the setting of cookies at any time via my website as shown above with the help of an according placement of the internet browser in use and in this way object permanently to the setting of cookies. Such a placement of the used internet browser could also prevent the setting of a conversion-cookie on the informational technological system of the respective person. In addition, a set cookie by Google AdWords can be deleted at any time via the internet browser or other software programs.

 

Furthermore, the concerned person has the possibility to contradict the advertisement based on interests via Google. In order to do this, the concerned person is to trigger the link www.google.de/settings/ads from each of the used internet browsers and conduct the desired placements there.

 

Further information and the prevailing data privacy regulations by Google are available here: https://www.google.de/intl/de/policies/privacy/.

 

  1. Social media, analyzing tools and tools from third-party providers, log-fields

 

Upon visiting my website, your surfing habits can be statistically analyzed. This is mostly done with cookies and so-called analyzing programs. The analysis of your surfing habits is mostly anonymous; the surfing habits cannot be traced back to you. You can contradict this analysis or you can prevent it by not using certain tools.

 

  1. Use of Google analytics with anonymous function

 

On my website, I use an advertisement analyzing service by the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, in the following called “Google.” Google analytics uses so-called “cookies,” text data saved on your computer, which enables an analysis of the use of the website by you. Engendered information via these cookies, for example time, place and frequency of our website visits, including your IP address, are transferred to Google in the US and saved by them. On my website I use Google-analytics with an IP anonymous function. Your IP address is in this case already shortened by Google within the member states of the European Union or in other contract states of the treaty on the European economic region and thereby made anonymous.

 

Google will use this information in order to analyze the use of my webpage, to compile reports on the website activities for me, and to provide further services connected to the use of the website and the internet. Also, Google will transmit the information in certain cases to third parties, provided enforced by law or in case third parties process these data for Google. However, according to Google, they will not at all connect your IP address with other data by Google. You can prevent the installation of cookies by a certain setting of your browser software; however I point to the fact that not all of the functions of my website will be working in full effect in this case. Furthermore, Google provides a deactivation option for frequently used browsers, which gives you more control over which data are collected and processed by Google. If you activate this option, no information about your website visit is transmitted to Google Analytics. However, the activation does not prevent the transfer of information to me or other advertisement analytic services used by me. Further information on the deactivation options provided by Google as well as on the activation of this option will be provided via the following link

https://tools.google.com/dlpage/gaoptout?hl=de

 

  1. Logfiles

 

In order to show the connection with social media networks of Facebook, Twitter and G+, logfiles (s, .o.) are transferred to the internet service Strato.

 

  1. Contact form

 

If you would like to send me requests via the contact form, your requests from the request form including your provided contact data are saved for reasons of handling the request and in case of consequent questions. I will not transfer these data to third parties without your consent.

The processing of data inserted in the contact form is solely being made with your consent (article 6 paragraph 1 letter a DSGVO). You can contradict this consent at all times. In order to do this, an informal e-mail is sufficient. The rightful processing of your data until the contradiction is untouched by the contradiction. Your submitted data via the contact form will stay with me until you ask me for deletion, contradict your consent for filing, or the purpose of data filing is invalid (for example after fulfilled processing of your request). Compelling legal agreements, especially time frames for storage, will be untouched by this.

 

E-mail contact

If you get in touch with me via e-mail, your data for fulfilling your request is being saved as well as in the case of consequent questions. In this lies my rightful interest according to article 6 paragraph 1 page 1 f) DSGVO.

 

  1. Legal foundation for processing

 

Article 6 I letter a DS-GVO serves my company as a legal foundation for processing purposes, in which I ask for consent for a specific process. Is the processing of personalized data necessary for the fulfillment of a contract, in which the contracting party is the concerned person (e.g. in processing cases in which the supply of goods or the provision of other services or equivalent services are necessary), the processing is based on article 6 I, letter b DS-GVO. The same applies to processing purposes, which are necessary for fulfillment of pre-contract measures, for example in cases of requests regarding my products or other services. Underlies my company a lawful obligation, by which a personalized data processing becomes necessary (e.g. the fulfillment of tax-related duties), the processing is based on article 6 I letter c DS-GVO. In rare cases, the processing of personal data is necessary to protect vital interests of the concerned person or other individuals. For example, a visitor in my company is being hurt and consequently, his/her name, address, data of health insurance or other vital information have to be conferred to a doctor, hospital or other third parties. Then the processing of data would be based on article 6 I letter d DS-GVO. Lastly, processing activities can only be based on article 6 I letter f DS-GVO. Processing activities are based on this statutory source, which are not covered by the above stated lawful basics, and if the data processing serves to protect justified interests of my company or a third party, in case these interests do not outweigh basic rights and basic liberties of the concerned. Such processing activities are permitted to me, because they are mentioned by the European legislative authority in particular. In this respect, perception of the existence of a lawful interest is perceived by the European legislative authority, when the concerned person is a customer of the responsible person (recital 47 sentence 2 DS-GVO).

 

  1. Time period for filing of personalized data

 

The criterion for the period of the filing of personal data is the respective legal period of safekeeping. After completion of the period, respective data are routinely deleted if they are not needed anymore for contract completion or contract initiation.

 

  1. Legal or contractual regulations for providing personalized data; requirement for contract completion; commitment of the concerned person to provide personal data; possible consequences by not providing personal data

 

Hereby, I explain to you that providing of personal data are partly instructed by law (for instance tax rules), or they result from regulations in a contract (for example information on your contracting party). Occasionally it might be necessary for contract completion that a concerned person provides me with personal data, which are consequently processed by. For example, the concerned person is to provide me with personal data in case my company completes a contract with him/her. Non-provision of personal data leads the non-completion of a contract with the concerned person. Prior to providing me with personal data by the concerned person, the concerned person needs to contact me.

 

  1. Existence of an automated decision making process

 

As a responsible company, I renounce an automatic decision making process or a profiling.

 

  1. Payment provider PayPal

 

On my website, I provide payments via PayPal among others. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (in the following “PayPal”).

 

If you choose payment via PayPal, your stated data of payment will be transferred to PayPal.

The transfer of your data to PayPal is being made on the basics of article 6 paragraph 1 letter a DSGVO (agreement) and article 6 paragraph 1 letter b DSGVO (processing for fulfillment of contract). You have the possibility of contradicting your consent for data processing at any time. A contradiction does not have any consequences for the effectiveness of past data procedures.