Data privacy policy

I. Basic explanations on data protection

I.1.) Person responsible for data processing on this website

As the operator/owner of this website I am,

Bianka Kerres

Rua Baltazar Guimarães 17, 2º Esqdº
2925-786 Azeitão

PORTUGAL

e-mail: info@naturheilpraxis-kerres.de

Tel.: +351 935 692 419

responsible for the data processing that occurs when you visit this website. All information about me can be found in the imprint of this website.

I.2 Scope of application

This privacy policy is intended to inform the users of this website in accordance with the Federal Data Protection Act and the Telemedia Act about the nature, scope and purpose of the collection and use of personal data by the website operator Bianka Kerres - Naturheilpraxis für Mensch und Tier.

I.3. access data

What is personal data and how is it processed on this website?

Personal data is all data that can be used to identify you personally, such as your name, address, or email address. Non-personal data is not subject to data protection law and may be stored and processed anonymously.

When you visit my website www.naturheilpraxis-kerres.de, the browser used on your device automatically sends information to my website's server. This information is temporarily stored in a so-called log file. The following information is temporarily recorded in a log file without your intervention (by the provider, 1&1 Internet AG, Eigendorfer Straße 57, 56410 Montabaur) and stored until automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Content of the request (concrete page)
• Access status/HTTP status code
• Data volume transferred in each case
• Name and URL of the retrieved file
• Website from which the access is made (referrer URL),
browser used and, if applicable, the operating system of your computer as well as the name of your access provider
• Language and version of the browser software.

Further data is collected when you provide it to me, for example by using a contact form.

In addition, I use cookies and analytics services when you visit my website. Further information can be found below in sections II.1 and II.2 of this privacy policy.

The legal basis for the data processing is Art. 6 para. 1 p. 1 f DSGVO.

I point out that data transmission over the Internet (eg communication by e-mail) may have security gaps. A complete protection of data against access by third parties is not possible.

I.4 Purpose of data collection and data disclosure
I process the above-mentioned data to display my website to you and to ensure stability and security. In particular, the data is required

• to ensure a smooth connection of the website
• to ensure a comfortable use of my website
• for the evaluation of system security and stability as well as
• for other administrative purposes.

Your personal data will not be transferred to third parties for purposes other than those listed below.

I will only share your personal information with third parties if:

• you have given your express consent in accordance with Art. 6 (1) (a) GDPR,
• the transfer is necessary according to Art. 6 Para. 1 S. 1 f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not transferring your data,
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 p. 1 c DSGVO, as well as
• this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Para. 1 S. 1 b GDPR.

II. detailed information on data collection

II.1 Technically necessary cookies

I use cookies on my website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit my site. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device used. However, this does not mean that I gain knowledge of your identity.

The use of cookies serves, on the one hand, to make using my services more pleasant for you. For example, I use so-called session cookies to recognize that you have already visited individual pages of my website. These are automatically deleted after you leave my site.

In addition, to optimize user experience, I also use temporary cookies that are stored on your device for a specific period of time. If you visit my site again to use the services, it will automatically recognize that you have already visited me and which entries and settings you have made, so you don't have to enter them again.

The data processed by cookies is necessary for the aforementioned purposes to protect my legitimate interests as well as those of third parties pursuant to Art. 6 (1) p. 1 f DSGVO.

Most browsers automatically accept cookies. However, you can configure your browser to refuse cookies or to always prompt you before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of my website.

II.2 Technically non-essential cookies

II.2.a. Data protection provisions on the use and application of analysis tools

The tracking measures listed below and used by me are carried out on the basis of Art. 6 (1) (f) GDPR. With the tracking measures used, I want to ensure a needs-based design and the continuous optimization of my website. Furthermore, the tracking measures are used to statistically record the use of my website and to evaluate it for the purpose of optimizing my offering for you. These interests are considered legitimate within the meaning of the aforementioned provision.

For my website, I use 1&1 WebAnalytics, a web analytics service provided by 1&1 AG (1&1). 1&1 WebAnalytics uses "cookies," text files placed on your computer, to help analyze your use of the website.

The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored on a 1&1 server. 1&1 will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website activity and internet usage. 1&1 may also transfer this information to third parties where required to do so by law, or where third parties process the data on 1&1's behalf.

Under no circumstances will 1&1 associate your IP address with other 1&1 data.

II.2.b. Privacy policy on the use and application of social media plugins

This website uses Facebook Social Plugins, which are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be recognized by the Facebook logo or the terms "Like," "Like," and "Share" in Facebook's colors (blue and white). Information about all Facebook plugins can be found at the following link: https://developers.facebook.com/docs/plugins/

The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the nature and extent of the data that the plugin transmits to the Facebook Inc. servers. Information about this can be found here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you, as a user, have visited this website. Your IP address may be saved. If you are logged into your Facebook account while visiting this website, the information will be linked to your Facebook account.

If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information will also be transmitted to Facebook Inc.

If you would like to prevent Facebook Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website.

This website also uses the Google Plus "+1" button. This button is operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you visit a page containing the "+1" button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence whatsoever on the nature and extent of the data that the plugin transmits to the Google Inc. servers. If you click the "+1" button while logged into Google+, you share the page's content on your public profile.

According to Google Inc., personal data is only collected when you click the button. Even for logged-in Google users, the IP address, among other things, is stored. If you want to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
Information about the “+1” button can be found here: https://developers.google.com/+/web/buttons-policy.

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, US

By each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognizes which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

II.3 Contact by e-mail

You can also contact me via email (SSL encryption). If you send me an email, the information you provide (e.g., your email address, your name, and your phone number if applicable) will initially be stored to answer your questions. Once storage is no longer necessary, I will delete the collected personal data. If there is a legal obligation to retain data, I will restrict processing. This data will not be shared with third parties without your consent.
The legal basis for the data processing for the purpose of contacting us results from Art. 6 para. 1 p. 1 DSGVO.

II.4 Online appointment allocation

In order to schedule an appointment with you, I need various information about the appointment: your name, telephone number, email address, address, and date of birth. The collected data is used exclusively to provide the services (online appointment scheduling) to you. I will only process and use this data to the extent necessary to provide the online appointment scheduling service you have requested. The data is transmitted to the service provider in encrypted form and deleted from the online servers after processing.

I proceed according to the principle of data economy and data avoidance, i.e. only as much data is used and recorded as is necessary for booking appointments.
The online appointment scheduling pages are secured with SSL encryption. By using the online appointment scheduling, you consent to the processing of the aforementioned data. You can revoke your consent at any time.

Your data will be securely stored in a data center in Germany: Address: 1&1 Internet SE, Elgendorfer Str. 57 in 56410 Montabaur

We use the following service providers for appointment reminders / appointment confirmations / appointment rejections via email:
1&1 Internet SE - Elgendorfer Str. 57 - 56410 Montabaur - https://hosting.1und1.de/terms-gtc/terms-privacy/
III. data subject rights

With regard to your data protection, you have the right
Pursuant to Art. 15 GDPR, you can request information about your personal data processed by me. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, and the origin of your data.

• to request the deletion of your personal data stored by me in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request that it be transmitted to another responsible party;

• to revoke your previously granted consent at any time in accordance with Art. 7 (3) GDPR. This means that I may no longer continue the data processing based on this consent in the future and

• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or the location of my office.

IV. Data security

During your visit to our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted encrypted by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect the data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
V. Right of objection and possibility of removal

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which I will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@naturheilpraxis-kerres.de. Please note the comments under Section II.3.

The responsible data protection authority:

State Commissioner for Data Protection and Freedom of Information
North Rhine Westphalia
Helga Block
Kavalleriestraße 2-4
40213 Düsseldorf
02 11/384 24-0
E-mail: poststelle@ldi.nrw.de
Website: http://www.ldi.nrw.de/
VI. Actuality and change

This privacy policy is currently valid and has the status May 2018.

Due to the ongoing development of my website and the services I provide, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at www.naturheilpraxis-kerres/datenschutzerklärung.