Data privacy policy

I. Basic explanations on data protection

I.1.) Person responsible for data processing on this website

As the operator/owner of this website I am,

Bianka Kerres

Rua Baltazar Guimarães 17, 2º Esqdº
2925-786 Azeitão

PORTUGAL

e-mail: info@naturheilpraxis-kerres.de

Tel.: +351 935 692 419

responsible for the data processing that occurs to you as a result of your visit to this website. All information about me can be found in the imprint of this website.

I.2 Scope of application

This privacy policy is intended to inform the users of this website in accordance with the Federal Data Protection Act and the Telemedia Act about the nature, scope and purpose of the collection and use of personal data by the website operator Bianka Kerres - Naturheilpraxis für Mensch und Tier.

I.3. access data

What is personal data and how is it processed on this website?

Personal data is any data that can make you personally identifiable, for example your name, address or e-mail address. Non-personal data is not subject to the Data Protection Act and can be stored and processed in anonymous form.

When you visit my website www.naturheilpraxis-kerres.de, the browser used on your end device automatically sends information to the server of my website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention (by the provider, 1&1 Internet AG, Eigendorfer Straße 57, 56410 Montabaur, temporarily in a log file and stored until automatic deletion:

• IP address of the requesting computer
• Date and time of access
• Content of the request (concrete page)
• Access status/HTTP status code
• Data volume transferred in each case
• Name and URL of the retrieved file
• Website from which the access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
• Language and version of the browser software.

Further data is collected by you providing it to me, for example by using a contact form.

In addition, I use cookies and analysis services when you visit my website. You will find more detailed explanations of this below under II.1. and II.2. of this data protection declaration.

The legal basis for the data processing is Art. 6 para. 1 p. 1 f DSGVO.

I point out that data transmission over the Internet (eg communication by e-mail) may have security gaps. A complete protection of data against access by third parties is not possible.

I.4 Purpose of data collection and data disclosure
I process the aforementioned data in order to display my website to you and to ensure stability and security in the process. In particular, the data are needed

• to ensure a smooth connection of the website
• to ensure a comfortable use of my website
• for the evaluation of system security and stability as well as
• for other administrative purposes.

Your personal data will not be transferred to third parties for purposes other than those listed below.

I will only share your personal information with third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 a DSGVO,
• the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 para. 1 p. 1 f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 p. 1 c DSGVO, as well as
• this is legally permissible and required according to Art. 6 para. 1 p. 1 b DSGVO for the processing of contractual relationships with you.

II. detailed information on data collection

II.1 Technically necessary cookies

I use cookies on my website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit my site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that I thereby gain knowledge of your identity.

The use of cookies serves on the one hand to make the use of my offer more pleasant for you. I use so-called session cookies to recognize that you have already visited individual pages of my website. These are automatically deleted after you leave my site.

In addition, I also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit my site again to use the services, it is automatically recognized that you have already been with me and what entries and settings you have made, so that you do not have to enter them again.

The data processed by cookies is necessary for the aforementioned purposes to protect my legitimate interests as well as those of third parties pursuant to Art. 6 (1) p. 1 f DSGVO.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of my website.

II.2 Technically non-essential cookies

II.2.a. Data protection provisions on the use and application of analysis tools

The tracking measures listed below and used by me are carried out on the basis of Art. 6 para. 1 p. 1 f DSGVO. With the tracking measures used, I would like to ensure a needs-based design and continuous optimization of my website. On the other hand, the tracking measures are used to statistically record the use of my website and to evaluate it for the purpose of optimizing my offer for you. These interests are considered legitimate in the sense of the aforementioned provision.

For my website I use 1&1 WebAnalytics, a web analytics service provided by 1&1 AG (1&1). 1&1 WebAnalytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by 1&1 on servers in the United States. 1&1 will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. 1&1 may also transfer this information to third parties where required to do so by law, or where such third parties process the information on 1&1's behalf.

1&1 will not associate your IP address with any other data held by 1&1.

II.2.b. Privacy policy on the use and application of social media plugins

This website uses Facebook social plugins, which is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations are recognizable by the Facebook logo or the terms "Like", "Share" in Facebook's colors (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/

The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence on the nature and extent of the data that the plugin transmits to the servers of Facebook Inc. You can find information about this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you have visited this website. There is a possibility that your IP address will be stored. If you are logged into your Facebook account during your visit to this website, the aforementioned information will be linked to it.

If you use the functions of the plugin - for example, by sharing or "liking" a post - the corresponding information is also transmitted to Facebook Inc.

If you would like to prevent Facebook. Inc. linking this data to your Facebook account, please log out of Facebook before visiting this website.

Furthermore, this website uses the "+1" button from Google Plus. This is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you visit a page that contains the "+1" button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence on the nature and extent of the data that the plugin transmits to the servers of Google Inc. If you click on the "+1" button while logged into Google +, you share the content of the page on your public profile.

According to Google Inc., personal data is only collected when you click on the button. Even for logged-in Google users, the IP address, among other things, is stored. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
Information about the "+1" button can be found here: https://developers.google.com/+/web/buttons-policy.

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, US

By each call of one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognizes which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

II.3 Contact by e-mail

You can also contact me by e-mail (SSL encryption). If you write me an e-mail, the data you provide (e.g. your e-mail address, your name and your phone number, if applicable), will be stored initially to answer your questions. If storage is no longer necessary, I delete the personal data collected. If there is a legal obligation to retain the data, I restrict the processing. Without your consent, this data will not be disclosed to third parties.
The legal basis for the data processing for the purpose of contacting us results from Art. 6 para. 1 p. 1 DSGVO.

II.4 Online appointment allocation

In order to make an appointment with you, I need several details about the appointment: Your name, phone number, email address, address and date of birth. The collected data is used exclusively for the provision of services (online appointment) to you. I will process and use this data only to the extent necessary to provide the online appointment allocation you have requested. The data will be transmitted to the service provider in encrypted form and deleted from the online servers after processing.

I proceed according to the principle of data economy and data avoidance, i.e. only as much data is used and recorded as is necessary for booking appointments.
The pages of the online appointment service are secured by SSL encryption. By using the online appointment service, you consent to the processing of the aforementioned data. You can revoke your consent at any time.

Your data is securely cached in a data center in Germany: Address: 1&1 Internet SE, Elgendorfer Str. 57 in 56410 Montabaur, Germany

We use the following service providers for appointment reminders / appointment confirmations / appointment rejections via email:
1&1 Internet SE - Elgendorfer Str. 57 - 56410 Montabaur - https://hosting.1und1.de/terms-gtc/terms-privacy/
III. data subject rights

Regarding your privacy, you have the right,
in accordance with Art. 15 DSGVO to request information about your personal data processed by me. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or opposition, the existence of a right of complaint, the origin of your data;

• gemäß Art. 17 DSGVO die Löschung Ihrer bei mir gespeicherten personenbezogenen Daten zu verlangen, soweit nicht die Verarbeitung zur Ausübung des Rechts auf freie Meinungsäußerung und Information, zur Erfüllung einer rechtlichen Verpflichtung, Gründen des öffentlichen Interesses oder zur Geltendmachung, Ausübung oder Verteidigung von Rechtsanspruch erforderlich ist;

• to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;

• pursuant to Art. 20 DSGVO to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request the transfer to another controller;

• in accordance with Art. 7 para. 3 DSGVO to revoke your consent once given to me at any time. This has the consequence that I may no longer continue the data processing based on this consent for the future and

• to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or my office.
IV. Data security

Within the website visit, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect the data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
V. Right of objection and possibility of removal

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by me without specifying a particular situation.

If you wish to exercise your right of revocation or objection, an e-mail to info@naturheilpraxis-kerres.de is sufficient. Please note the comments under II.3.

The responsible data protection authority:

State Commissioner for Data Protection and Freedom of Information
North Rhine Westphalia
Helga Block
Kavalleriestraße 2-4
40213 Düsseldorf
02 11/384 24-0
E-mail: poststelle@ldi.nrw.de
Website: http://www.ldi.nrw.de/
VI. Actuality and change

This privacy policy is currently valid and has the status May 2018.

Due to the further development of my website and the offers provided by me or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website at www.naturheilpraxis-kerres/datenschutzerklärung.