Privacy Policy Haarmed Mannheim
General Information
This privacy policy explains what happens to your personal data when you visit haarmed.com. Personal data includes any information that can identify you personally. We process data in accordance with applicable laws, especially the General Data Protection Regulation (GDPR), and take website security seriously. The controller responsible for collecting and processing personal data is:
Managing Director & Owner: Göksel Burhan Soyoglu
Address: K1, 20 – 2nd Floor, 68159 Mannheim, Germany
Email: info@haarmed.com
Phone: +1 (718) 839-0785
Access Data (Server Logs)
When you access our website, we automatically collect and store access data transmitted by your browser in server log files. This includes:
- Browser type and version
- Operating system used by your computer
- Referrer URL (the website from which you came to our site)
- Host name of the accessing device
- Date and time of the server request
- The current IP address of your device (possibly anonymized)
We generally cannot and do not intend to identify individuals from this data. Processing is carried out under Article 6(1)(f) GDPR to protect our
legitimate interest in improving the stability and functionality of our website.
Cookies. We use cookies to make our website easier to use and enable certain features. Cookies are small text files stored on your device. They cannot run programs or transmit viruses to your computer.
Cookies required for electronic communications or functions you request are stored on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in operating our services reliably and efficiently. Other cookies, for example for analyzing browsing behavior, are addressed separately in this privacy policy.
Most cookies we use are session cookies and are deleted automatically after your visit. Other cookies remain stored until you delete them and allow us to recognize your browser when you return.
You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject them in specific cases or entirely, and delete them automatically upon closing the browser. Disabling cookies may limit the functionality of this site.
Social Media – 0.1 Facebook Plugins (Like & Share)
Our website includes plugins from Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can identify Facebook plugins by the Facebook logo or Like button. An overview is available at: https://developers.facebook.com/docs/plugins/?locale=de_DE.
To enhance data protection, Facebook plugins are integrated using HTML links (the Shariff solution from c't) rather than unrestricted embedding. Merely visiting a page with such links does not establish a connection to Facebook's servers. A new browser window opens Facebook only when you click the relevant button. Information on the purposes and extent of data collection and further processing
and use by Facebook, along with your privacy rights and settings, can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.
0.2 Google+ Plugin. Our website uses Google+ plugins from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. They can be recognized by the '+1' icon. An overview is available at: https://developers.google.com/+/plugins
To enhance data protection, Google+ plugins are integrated using HTML links (the Shariff solution from c't), not unrestricted embeddings. Merely visiting a page with such links does not establish a connection to Google's servers. Clicking a Google+ button opens the associated Google page in a new browser window.
Information about Google's data collection, processing and use, and about your related privacy rights and settings, is available in Google's privacy policy: https://policies.google.com/privacy?hl=de.
0.3 Instagram Plugin
Our website includes features from Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Instagram plugins can be recognized by an Instagram logo. To enhance privacy, Instagram functions are integrated through HTML links (the Shariff solution from c't). Opening a page with such links does not establish a connection to Instagram's servers. Clicking an Instagram button opens the associated Instagram page in a new browser window.
Information on the purpose and scope of Instagram's data collection and processing, together with your privacy rights and settings, can be found in Instagram's privacy policy: https://instagram.com/about/legal/privacy/.
0.4 X (Twitter) Plugin
Our website uses functions of X (Twitter), provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
To enhance data protection, X (Twitter) functions are integrated through HTML links (the Shariff solution from c't), not unrestricted plugins. Merely visiting the page does not connect to X's servers. Clicking an X button opens the relevant page in a new window.
Using X's Repost/Retweet function can link websites you have visited to your X account and publish them in your feed. Data is thereby transmitted to X. We do not know the content or subsequent use of the transmitted data. See X's privacy policy: https://twitter.com/privacy.
You can change your privacy settings for X (Twitter) here: https://twitter.com/account/ settings
Further information about the purpose, scope and processing of data by X, as well as your related rights and options, is available in X's privacy policy: https://twitter.com/privacy.
0.5 YouTube Plugin
Our website uses YouTube plugins to integrate and display video content. The provider is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
To enhance privacy, YouTube functions are integrated through HTML links (the Shariff solution from c't), not unrestricted plugins. Viewing the website does not itself connect to YouTube's servers; a new browser window opens the corresponding YouTube page when you click the button.
Information on the purpose, scope and processing of data by YouTube and your related privacy rights and settings can be found in YouTube's privacy policy: https://www.google.de/intl/de/policies/privacy.
Google Maps
Our website uses the Google Maps service through an API provided by Google.
To protect your data, Google Maps is deactivated when you first visit our website. A connection to Google's servers is established only if you activate Maps yourself (consent under Article 6(1)(a) GDPR). This is intended to prevent the transfer of data when you first access the site.
Once activated, Google Maps will store your IP address, which is generally transmitted to and stored on Google's servers in the United States. The website operator has no control over the transfer after activation.
For more information about how user data is handled, see Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
Contact Form
If you contact us by email or through a contact form, the information you provide, including your contact details, will be stored to process your inquiry and answer follow-up questions. We will not share this information without your consent.
We process data entered in the contact form exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by sending us an informal email. Withdrawal does not affect the lawfulness of data processing carried out before withdrawal.
Data submitted via our contact form remains with us until you request deletion, withdraw consent to storage or the purpose for which the data was stored no longer applies. Mandatory legal requirements, particularly retention periods, remain unaffected.
Use and Disclosure of Data
We will neither sell nor otherwise market personal data that you provide to us, such as your name, address or email address. We process your data only to correspond with you and for the purpose for which it was provided. To process payments, we pass the necessary payment information to the financial institution responsible for the transaction.
Data collected automatically when you visit our website
is used only for the purposes described above. It is not used for any other purpose.
We do not otherwise disclose your personal data to third parties unless required to do so by law or unless you have given your prior consent.
SSL or TLS Encryption
For security and to protect confidential information, such as inquiries sent to us as the website operator, our website uses SSL or TLS encryption. An encrypted connection is indicated by 'https://' instead of 'http://' in your browser's address bar and by the padlock icon.
When SSL or TLS encryption is enabled, data that you transmit to us cannot be read by third parties while in transit.
Section 1 – Storage Period
Personal data shared with us through our website is stored only for as long as necessary to fulfill the purpose for which it was provided. Where commercial or tax-law retention obligations apply, certain data may need to be retained for up to ten years.
Section 2 – Data Subject Rights
Under the applicable legal provisions, you have the following rights regarding your personal data against the controller:
2.1 Right to Withdraw Consent
Many data processing activities require your express consent. If processing is based on your consent, you have the right under Article 7(3) GDPR to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before the withdrawal. Data retained for accounting or billing obligations remains unaffected.
2.2 Right of Access
Under Article 15 GDPR, you have the right to request confirmation from us as to
whether we process personal data concerning you. If so, you have the right to information about the data processed, the purposes of processing, the categories of personal data, recipients or categories of recipients, the planned retention period or criteria used to determine it, the rights to rectification, erasure, restriction and objection, your right to lodge a complaint with a supervisory authority, the source of data not collected directly from you, any automated decision-making including profiling and meaningful information about the logic, significance and expected consequences of such processing, and safeguards under Article 46 GDPR when personal data is transferred to third countries.
2.3 Right to Rectification
Under Article 16 GDPR, you have the right to request prompt correction of inaccurate personal data concerning you and completion of incomplete data.
2.4 Right to Erasure
Under Article 17 GDPR, you have the right to request erasure of your personal data if one of the following applies:
a) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
b) You withdraw consent on which processing was based under Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for processing.
c) You object to processing under Article 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object under Article 21(2) GDPR.
d) The personal data has been processed unlawfully.
e) Erasure is necessary to comply with a legal obligation under EU law or the law of a Member State to which we are subject.
f) The personal data was collected in connection with information society services offered under Article 8(1) GDPR.
However, this right does not apply where processing is necessary:
a) To exercise the right to freedom of expression and information;
b) To comply with a legal obligation requiring processing under EU or Member State law to which we are subject, or to perform a task in the public interest or in the exercise of official authority vested in us;
c) For reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR;
d) For archiving in the public interest, scientific or historical research or statistical purposes under Article 89(1) GDPR, insofar as erasure would be likely to render impossible or seriously impair the objectives of that processing; or
e) For establishing, exercising or defending legal claims.
If we have made your personal data public and are obliged to erase it, we will take reasonable steps, including technical measures, taking account of available technology and implementation costs, to inform other controllers processing that data that you have requested erasure of any links to, or copies or replications of, your personal data.
2.5 Right to Restriction of Processing
Under Article 18 GDPR, you have the right to request restriction of processing of your personal data. You can contact us at the address in the legal notice at any time. This right applies in the following cases:
a) If you contest the accuracy of personal data stored by us, we generally need time to verify it. During verification, you may request restriction of processing.
b) If your personal data has been or is processed unlawfully, you may request restriction instead of erasure.
c) If we no longer need the personal data but you require it for establishing, exercising or defending legal claims, you may request restriction instead of erasure.
d) If you have objected under Article 21(1) GDPR, a balancing of your interests and ours is required. Pending determination of the overriding interests, you may request restriction of processing.
Where processing is restricted, your personal data may, apart from storage, be processed only with your consent, for establishing, exercising or defending legal claims, protecting the rights of another natural or legal person, or for reasons of important public interest of the EU or a Member State.
2.6 Right to Notification
If you exercise your rights to rectification, erasure or restriction, we must inform all recipients to whom your personal data was disclosed of the relevant action, unless this proves impossible or involves disproportionate effort. Under Article 19 GDPR, you have the right to be informed of those recipients upon request.
2.7 Right Not to Be Subject to Decisions Based Solely on Automated Processing, Including Profiling
Under Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision
a) Is necessary for entering into or performing a contract between you and us;
b) Is authorized by EU or Member State law applicable to the controller and that law includes suitable measures to safeguard your rights, freedoms and legitimate interests; or
c) Is based on your explicit consent.
However, the decisions described in (a) to (c) may not be based on special categories of personal data under Article 9(1) GDPR unless Article 9(2)(a) or (g) applies and suitable measures are taken to protect your rights, freedoms and legitimate interests.
In the cases described in (a) and (c), we take appropriate measures to protect your rights
and freedoms and your legitimate interests, including at least the right to obtain human intervention by the controller, to express your point of view and to contest the decision.
2.8 Right to Data Portability
If processing is based on your consent under Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract under Article 6(1)(b) GDPR and is carried out by automated means, Article 20 GDPR gives you the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller, or to request direct transmission where technically feasible.
2.9 Right to Object
If we process your personal data based on a balancing of interests under Article 6(1)(f) GDPR, you have the right to object at any time for reasons arising from your particular situation, including any related profiling. The applicable legal basis is described in this privacy policy. If you object, we will cease processing the relevant data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary for establishing, exercising or defending legal claims (Article 21(1) GDPR).
If your personal data is used for direct marketing, you may object at any time to processing for this purpose, including related profiling. Following an objection, your personal data will no longer be used for direct marketing (Article 21(2) GDPR).
When using information society services, you may exercise your right to object by automated means using technical specifications, notwithstanding Directive 2002/58/EC.
2.10 Right to Lodge a Complaint with the Competent Supervisory Authority Under Article 77 GDPR
If the GDPR has been infringed, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, workplace or the place of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
PO Box 10 29 32, 70025 Stuttgart
or:
Lautenschlagerstraße 20, 70173 Stuttgart
Phone: 07 11/61 55 41-0
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de
Webflow
We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter 'Webflow'). When you visit our website, Webflow collects various log files, including IP addresses.
Webflow is a website-building and hosting platform. It stores cookies or uses other recognition technologies necessary to display the website, provide certain website functions and maintain security (essential cookies).
For details, please see Webflow's privacy policy: EU & Swiss Privacy Policy | Webflow 200.
We use Webflow on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in displaying our website as reliably as possible. Where consent is requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG insofar as the consent covers storing cookies or accessing information on the user's device, such as device fingerprinting, within the meaning of TTDSG. Consent can be withdrawn at any time.
Data transfers to the United States are based on the European Commission's Standard Contractual Clauses. Further details are available here: EU & Swiss Privacy Policy | Webflow 200.
Data Processing Agreement
We have entered into a data processing agreement (DPA) with the provider mentioned above. This legally required agreement ensures that the provider processes our website visitors' personal data only in accordance with our instructions and the GDPR.
Validity and Amendments to This Privacy Policy
This privacy policy has been effective since November 1, 2023. We reserve the right to amend it at any time in compliance with applicable data protection laws, for example to reflect new legislation, changes to our website or new services. The version available when you visit the site applies.
If this privacy policy is amended, we intend to announce the changes on this page so that you remain informed about the personal data we collect, how we process it and under which circumstances it may be disclosed.