Data Privacy Policy
Welcome to the Relaxound website. As the responsible body according to the General Data Protection Regulation, we are obliged to comply with the statutory provisions on data protection. It goes without saying that the protection of your personal data and fair and transparent data processing are important to us. In the following, we would like to provide you with all the information you need to check and exercise your data protection rights.
1. Responsible body for data protection and data protection officer
The person responsible is:
Relaxound GmbH
Wilhelm-von-Siemens-Str. 12-14
12277 Berlin
[email protected]
If you have any questions about data protection, please contact our data protection officer. This is
Christian Scholtz, LL.M.
WS Datenschutz GmbH
Dircksenstraße 51
10178 Berlin
[email protected]
2. Legal basis
The basis for the collection and processing of personal data is always the latest European law. You will find all of the following legal bases in the General Data Protection Regulation (GDPR). Depending on the purpose of the data collection, one or more of the following legal bases apply:
– Consent – Basis: Article 6 (1) (a) of the General Data Protection Regulation (GDPR). What is meant by this: Consent is an expression of will (e.g .: “I agree that …”). Consent can either be given in writing in the form of a declaration or with some other clear confirmatory act. Regardless of this, consent must always be voluntary! In addition, it must apply to a very specific case and clearly state that the data subject consents to the processing of their personal data. To do this, the data subject must be adequately informed and understand the consent.
– Necessity to fulfill the contract or to carry out preparatory measures – Basis: Article 6 Paragraph 1 lit. b GDPR. What is meant by this: The data is either required so that we can fulfill our contractual obligations towards you or we need the data to prepare a contract with you.
– Processing to fulfill legal obligations – Basis: Article 6 Paragraph 1 lit c GDPR. What is meant by this: It is e.g. processing of the data is required due to a law or other (state / official) regulations.
– Processing to safeguard legitimate interests in accordance with Article 6 Paragraph 1 lit. f GDPR. What is meant by this: The processing of the data is necessary in order to safeguard legitimate interests on our part or third parties, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail.
3. Rights of data subjects
You are the data subject when it comes to your personal data. Therefore, you have the following rights with regard to data processing by us – to the extent in accordance with the respectively listed articles of the General Data Protection Regulation:
– Right to information according to Art. 15 GDPR
– Right to rectification in accordance with Art. 16 GDPR
– Right to erasure (“right to be forgotten”) in accordance with Art. 17 GDPR
– Right to restriction of processing in accordance with Art. 18 GDPR
– Right to data portability in accordance with Art. 20 GDPR
– the right of objection in accordance with Art. 21 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data Data violates the GDPR.
4. Data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data in order to conclude or fulfill a contract.
5. Concrete data processing
5.1 Data processing on our website
5.1.1 Customer account / use of your email address
When you visit our website, our web server collects and stores the following data:
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– content of the request (specific page)
– Access status / HTTP status code
– Amount of data transferred in each case
– Website from which the request comes so-called referrer
– Browser
– Operating system and its interface
– Language and version of the browser software
– screen resolution
– Unique device names (MAC addresses or, for mobile devices, the IMEI)
The IP address and the host name are only available to us in anonymized form in the log files. The other data is stored in the log files of our system. This data is not stored together with other personal data of the user.
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. f GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the functionality of our website and its availability.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To do this, the user’s IP address must be saved for the duration of the session.
The data is stored to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Duration of storage
The log files are deleted from the system after 6 weeks at the latest. If there is a need to retain the data for the aforementioned purpose due to specific events, additional storage is possible. In any case, as already mentioned, the IP addresses of the users are anonymized so that they can no longer be assigned to a specific user.
Opposition and removal option
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.
5.1.2 Customer account
You have the option of registering on our website and creating a customer account.
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR. You give your consent by voluntarily creating a customer account.
Purpose of data processing
In order to protect your customer account against access by third parties, we save your user name and password. An evaluation of the data for marketing purposes does not take place in this context.
Duration of storage
We save your data as long as your customer account exists. Storage beyond this is possible as long as it involves commercial letters that are subject to retention under commercial and tax law. The statutory retention period then applies.
Opposition and removal option
You have the option to delete your customer account at any time.
5.1.3 Orders
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. b GDPR.
Purpose of data processing
In order to be able to deliver the order as requested, we save your contact data, your order and payment information. We can also use your e-mail address to inform you about your credit card that is about to expire, failed payments or for other reasons necessary for the execution of the contract.
Duration of storage
According to commercial and tax law, orders are commercial letters that must be retained. The respective statutory retention period applies. Opposition and removal option A deletion can only take place if there is no statutory retention period; in this case, however, the data will be blocked for other use.
5.1.4 Payment for your order
Your payment data will be transmitted to the corresponding payment service provider depending on the payment method you have selected. The payment service provider is responsible for your payment data. Information, in particular about the responsible office of the respective payment service provider, the contact details of the data protection officer of the payment service provider and the categories of personal data processed by the payment service providers, can be obtained from the following addresses:
– PayPal (Europe) S.à.r.l. et Cie., Luxembourg, data protection declaration: www.paypal.com/de/webapps/mpp/ua/privacy-full
5.2 Contacting Relaxound
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. f and possibly. also lit. a GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in answering a customer request or answering a contact request on other topics.
Purpose of data processing
You can use the contact form, our e-mail address or the telephone number to ask us questions and send us messages. In this context, we only process your data in order to contact you in the desired way and to answer your request.
Duration of storage
The data will be stored for as long as is necessary to process the request. Insofar as these are commercial letters that are required to be retained under commercial and tax law, these are also stored for the statutory retention period.
Opposition and removal option
The contact seeker has the option at any time to revoke his consent to the processing of personal data or to object to further use. If the contact seeker contacts us by e-mail, he can object to the storage of his personal data at any time. A deletion can only take place if there is no statutory retention period; in this case, however, the data will be blocked for other use. In such a case, the conversation cannot be continued.
5.3 Participation in competitions
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a and possibly. also lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. The legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR lies in the implementation of the respective competition.
Purpose of data processing
If you take part in one of our competitions, we collect data that is necessary for the execution of the competition. This is usually an individual competition entry (e.g. a comment or a photo), as well as your name and contact details. It is possible that we transmit this data to our competition partners, e.g. to send you the profit. Data processing and data transfer can vary depending on the competition and is therefore specifically described in the respective conditions of participation. Participation in the competition and the associated data collection is of course voluntary.
Duration of storage
We save your data as long as it is necessary to carry out the competition. Storage beyond this is possible as long as it involves commercial letters that are subject to retention under commercial and tax law. The statutory retention period then applies.
Opposition and removal option
A deletion can only take place if there is no statutory retention period; in this case, however, the data will be blocked for other use.
5.4 Newsletter
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.
Purpose of data processing
Advertising information will only be sent to your e-mail address as part of our newsletter if you are an existing customer and have consented to the use of your e-mail address for these purposes. In addition, we save the IP address you used and the time of your registration and confirmation. This enables us to prove your registration and, if necessary, to investigate possible misuse of your personal data.
Duration of storage
We save your data as long as you have registered for the newsletter. Any further storage will only take place if there are additional statutory retention periods. In this case, your data will be blocked from sending newsletters. Opposition and removal option You can revoke your consent to the sending of newsletters at any time, either by clicking the unsubscribe link in the newsletter, by updating the communication settings in your customer account, or by sending us a message [email protected] send with the subject “Unsubscribe newsletter”.
5.5. Social Media Plug-Ins: Facebook, Google+
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Article 6 Section. 1 lit. f GDPR.
Purpose of data processing
We have integrated social media plugins on our blog, which you can use to share certain content via social networks. In order to protect your privacy, we offer you these social plugins as so-called “2-click buttons”. The “2-click solution” prevents data (e.g. your IP address) from being transmitted to social networks when you open our website. For this purpose, the buttons are deactivated by default and are only activated when the social plugins are clicked for the first time. After activation, the plugins also collect personal data such as your IP address and send this to the server of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website concerned is accessed. This enables the providers to create profiles of your usage behavior. The data is used to show you personalized advertising and for the purposes of market and opinion research.
Duration of storage
We do not store your data directly ourselves. Our system only sets cookies that save whether or not you have activated a social plugin.
Opposition and removal option
The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned to your existing account with the plug-in provider. We do not have any precise information about the specific use of the data or the storage period. Please read the data protection declaration of the respective provider. We have integrated the plugins of the following providers on our website:
– Facebook (Facebook Inc., USA, data protection declaration: www.facebook.com/policy.php)
– Google+ (Google Inc., USA; privacy policy:www.google.com/policies/privacy/partners/?hl=de)
6. Cookies
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 Para. 1 lit. f GDPR.
Purpose of data processing
Cookies are small text files that are stored on your computer when you visit our website and that allow your browser to be reassigned. Cookies store information such as your language setting, the duration of your visit to our website or the entries you make there. This avoids having to re-enter all required data each time it is used. Cookies also enable us to recognize your preferences and to align our website to your areas of interest. Relaxound uses cookies with the help of which pseudonymous user profiles are created in compliance with the legal requirements, but also to make the use of our website as optimal as possible. We can evaluate the usage profiles in order to understand the use of our website, to determine target groups for our products and thus to optimize our offers. When we create pseudonymous usage profiles, we do not directly associate this data with you and therefore cannot trace any specific activities back to you. We use the cookie consent tool “Borlabs” to manage the various cookies. Here you have the option to agree to or disagree with the use of cookies.
Duration of storage
The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.
Opposition and removal option
With the exception of the essential cookies, which are necessary to display the website, you can object to the activation of cookies at any time for the future. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”. Change cookie settings
6.1 Google Analytics, Google Conversion Tracking, Google reCAPTCHA
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Article 6 Para. 1 lit. f GDPR.
Purpose of data processing
Our website uses Google Analytics, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics enables us to evaluate your use of the website in order to compile analyzes of website activity and to make use of other services related to website activity and internet usage. Further information on terms of use and data protection can be found at www.google.com/analytics/terms/de.html or underwww.google.de/intl/de/policies/. In addition, we use the Google Conversion Tracking service in connection with Google Analytics. This enables us to record the behavior of our website visitors. For example, we can see how often the contact form has been filled out. We are also shown how many clicks on advertisements from external sources (AdWords, LinkedIn, Xing, Bing) have led to our website.
Duration of storage
The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.
Opposition and removal option
You can object to the activation of Google Analytics at any time after you have given your consent using the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”. Change cookie settings
6.1.1 Google reCAPTCHA V3
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
6.2 Facebook
6.2.1 Custom Audience Pixel
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 Para. 1 lit. f GDPR.
Purpose of data processing
This website uses Custom Audience Pixel, a service provided by Facebook Inc., USA. Custom Audience Pixel is a Java script code that we have integrated on each of our websites. We use Custom Audience Pixels to collect information about the way visitors use our website. This pixel collects and reports to Facebook information about the user’s browser session, a hash value of the Facebook ID and the URL that is being viewed. Every Facebook user has a unique and device-independent Facebook ID, which enables us to address and recognize users across multiple devices on the Facebook social network, so that we can address our visitors again for advertising purposes in the context of Facebook ads . For more information about Facebook and its privacy settings, please refer to the data protection information and the terms of use of Facebook Inc.
Duration of storage
After 180 days, the user information is deleted until the user visits our website again. No personal information is therefore given to Relaxound about the individual website visitors and we can only advertise website target groups in advertisements as soon as these have reached a significant number in terms of numbers.
Opposition and removal option
You can object to the activation of Custom Audience Pixel at any time for the future after you have given your consent via the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.
6.2.2 Custom Audience List Procedure
Legal basis
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR and, after consent has been given, Art. 6 Para. 1 lit. f GDPR.
Purpose of data processing
In order to only be able to show our customers relevant advertising measures, we use Facebook Custom Audience (list procedure). We transmit pseudonymized email addresses to Facebook. The email addresses are encrypted before being transmitted to Facebook, i.e. A hash value is formed from the e-mail addresses (a combination of different letters and numbers). Facebook can compare these hash values with the corresponding hash values of the email addresses of Facebook users. In this way, it is determined which customers are also Facebook users, and targeted advertising can be displayed or not displayed on the Facebook platform. You can find more information about Facebook Custom Audiences at www.facebook.com/legal/terms/customaudience.
Duration of storage
The duration of the storage depends on the respective cookie. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.
Opposition and removal option
You can object to the activation of Custom Audience list procedures at any time after you have given your consent via the Cookie Consent Tool. For details, please refer to the cookie settings of the cookie consent tool “Borlabs”.