Source: https://www.wellnessrealizace.cz/de/ochrana-osobnich-udaju.php
Timestamp: 2019-04-19 12:49:06+00:00

Document:
A very warm welcome to our website. We are delighted that you are interested in our company and our products. Protecting your data is extremely important to us. Hence why we would like to tell you below which data we use from your visit and for what purpose. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
We only ever process our users’ personal data where necessary to provide a functional website and our content and services. Moreover, personal data will only be collected from our users and used with their consent.
The data subject’s personal data will be erased or blocked as soon as the purpose of the storage ceases to apply. Data may also be stored when required by European or national legislators under union regulations, laws or other stipulations to which the controller is subject. Such data will then be blocked or erased when a retention period stipulated by one of these standards expires, except where there is a need to continue to store the data for the conclusion of an agreement or fulfilment of an agreement.
Data will also be saved in our system’s log files. This data will not be stored together with other personal data about the user.
The legal basis for the temporary storage of the data and log files is Art. 6 (1) (f) of the GDPR. We have a legitimate interest in processing the data because the temporary storage of the IP address by the system is necessary to enable delivery of the website on the user’s computer. For this reason, the user’s IP address must remain stored for the duration of the session. Data is stored in log files to ensure the functionality of the website. We also use this data to optimise the website and to safeguard the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. Where data is recorded for delivery of the website, this will be the case once the session in question ends. For data stored in log files, this will be the case after 30 days at the latest. The log files will also be retained in backup files for up to 12 months. Such backups are only accessed in exceptional cases.
Transient cookies will be deleted automatically when you close your browser. These include in particular session cookies. These save a so-called session ID which is used to attribute various requests from your browser to the joint session. This means that your computer will be recognised when you return to our website.
Permanent cookies are automatically deleted after a specified period which can differ from cookie to cookie. You can delete the cookies in your browser’s security settings at any time.
The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) of the GDPR. Our legitimate interest here lies in facilitating the use of our website for the user.
Google is certified under the Privacy Shield Agreement and hereby warrants that it complies with European data protection legislation.
Google will use this information on our behalf to analyse the user’s use of our website in order to compile reports about website activities and also to provide us with services associated with the use of this website and internet usage. As a result, aliased usage profiles may be created for the user from the processed data.
We use Google Analytics to only show the advertisements placed within Google’s advertising services and those of its partners to those users who have also expressed an interest in our website, or have the specific characteristics (e.g. interested in certain topics or products, determined based on the websites visited) we submit to Google (so-called “remarketing” or “Google Analytics audiences”). Using remarketing audiences, we would also like to ensure that our advertisements are in line with users’ potential interests and are not annoying.
We only use Google Analytics with IP anonymisation enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will not associate the IP address transmitted by the user’s browser with any other data held by Google. The user can prevent cookies being stored with a corresponding setting in their browser software. The user can also prevent Google from recording the data generated by the cookie and data relating to your use of the website, and restrict the processing of such data by Google, by downloading and installing the browser plugin.
On the basis of our own legitimate interests (in other words, our interest in the analysis, optimisation and cost-effective operation of our online site pursuant to Art. 6 (1) (f.) of the GDPR), we use the marketing and remarketing services (“Google Marketing Services” for short) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google”).
Google Marketing Services enable us to display advertisements for and on our website in a targeted manner so that users are only shown adverts that may match their interests. For example, when a user is shown advertisements for products in which he or she has expressed an interest on other websites, this is called “remarketing”. For this purpose, when accessing our website, or other websites on which Google Marketing Services are enabled, a code is run by Google directly and so-called (re)marketing tags (invisible graphics or codes, also referred to as “web beacons”) are incorporated into the website. With these, an individual cookie is placed on the user’s device (similar technologies may be used instead of cookies). The cookies can be used by various domains, including by google.com , doubleclick.net , invitemedia.com , admeld.com , googlesyndication.com or googleadservices.com . It is noted in this file which websites the user visits, what type of content they are interested in and which offers they have clicked, along with technical information about the browser and operating system, linking websites, visit time and other information about use of the website. The IP address will not be associated with the user’s data within other Google offerings. The information specified above may also be associated by Google with such information from other sources. When the user then visits other websites, they may be shown advertisements tailored to them which match their interests.
The user’s data will be aliased within the Google Marketing Services. In other words, Google does not save and process, for example, the user’s name or e-mail address but processes the relevant cookie-related data within aliased user profiles. In other words, as far as Google is concerned, the advertisements are not being controlled and shown for a specific identified individual but for the cookie owner, regardless of who that cookie owner is. This is not the case when a user has expressly consented to Google processing the data without such aliasing. The information collected about the user by Google Marketing Services is transmitted to Google and stored on Google’s servers in the USA.
We also use the “Google Tag Manager” to incorporate and manage Google Analytics and Marketing Services within our website.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the personalisation and opt-out options provided by Google.
During the registration process, your consent to data processing will be obtained and reference will be made to this data protection declaration. For newsletter orders, we use the so-called double opt-in procedure, in other words your order will only be completed once you have confirmed your registration via a confirmation e-mail sent to you for this purpose, by clicking the link contained therein. This confirmation will be deemed consent. If you do not confirm in this way within 100 days, your registration will be deleted from our database automatically. That way we can ensure that no one else has signed you up for our newsletter.
No data will be passed on to third parties in connection with the data processing for the purposes of sending out our newsletters. The data will only be used to send the newsletter. The user’s e-mail address will be collected in order to deliver the newsletter. The collection of other personal data as part of the registration process is to avoid misuse of the services or abuse of the e-mail address used.
The legal basis for the processing of data following registration for the newsletter by the user is the presence of consent from the user pursuant to Art. 6 (1) (a) of the GDPR.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. The user’s e-mail address will be stored for as long as the newsletter subscription remains active.
Subscription to the newsletter may be cancelled by the user in question at any time. There is a corresponding link for this purpose contained in every newsletter. This also enables revocation of the consent to the storage of the personal data collected during the registration process.
When a recipient opens a mail, clicks on a link or downloads images in their e-mail program, this can be recorded and stored by Ecomail. These actions by recipients are referred to as recipient responses in Ecomail. Using Ecomail, these recipient responses can be used to create an interest profile for the recipient. Thus, for example, we are able to determine which specific links the recipient clicked. Based on these clicks, we can create target groups and send recipients additional information tailored to their areas of interest. The personal tracking option is currently not used. If this changes, we will inform newsletter recipients immediately.
By consenting to receive the newsletter, you consent to having your user behaviour personally tracked in accordance with Art. 6 (1) (a) of the GDPR. To optimise the content of the themed newsletters, we compare opening rates and recipient responses to various mails in general. The personal data stored will be erased immediately when a recipient unsubscribes from the newsletter.
Alternatively, contact can be made by e-mail. In this case, the user’s personal data transmitted in the e-mail will be saved. No data will be passed on to third parties in this context. The data will only be used to process the exchange.
The personal data from the input form will only be used by us to process the contact request. In the case of contact by e-mail, the legitimate interest in the data processing required in accordance with the legal basis set out in Art. 6 (1) (f) of the GDPR is also present here. Where the purpose of the e-mail contact is to conclude an agreement, Art. 6 (1) (b) of the GDPR will also apply as the legal basis for further processing.
Other personal data processed during the submission process is used to prevent misuse of the contact form and to safeguard the security of our information technology systems.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. For personal data from the contact form input screen and data sent by e-mail, this will be the case when the conversation with the user in question has ended. The conversation will end when it is clear from the circumstances that the facts in question have been clarified conclusively.
When the user contacts us by e-mail, they may object to their personal data being stored at any time. In such cases however, the conversation cannot be continued.
If you are logged in to your profile on one of the aforementioned social networks when you visit our website, the operator of that network may collect and store additional information about your visit to our website. If you do not want such an association to take place, we recommend that you log out of your social networks prior to visiting our website.
in accordance with Art. 77 of the GDPR, a right to lodge a complaint about our processing of your personal data with a data protection supervisory authority.
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR. If you wish to assert your right to object, please send an e-mail to info@lorema-wellness.cz. When exercising your right to object, we ask you to state the reason your personal data may no longer be processed by us. We will then check the situation and cease or modify the data processing or present to you our compelling legitimate grounds on the basis of which we will continue with the processing.
We will update these data protection provisions from time to time to protect your personal data. You should view these data protection provisions occasionally to stay up to date with how we are protecting your data and constantly improving the content of our website.
By using the www.wellnessrealizace.cz site, you declare your agreement with the terms and conditions of these data protection provisions on the protection of personal data.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77
 Art. 6
 Art. 21