1. DATA PROTECTION AT A GLANCE

GENERAL INFORMATION

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be identified personally. Detailed information on the subject of data protection can be found in our Data Protection Statement set out under this text.

COLLECTION OF DATA ON OUR WEBSITE

Who is responsible for data collection on this website?

The processing of data on this website is carried out by the website operator. The operator’s contact data can be found in the Legal Notice on this website.

How do we collect your data?

Your data are collected on the one hand by means of you communicating them to us. This can involve for example data entered by you in a contact form.

Other data are automatically collected by our IT systems when you visit our website. These are above all technical data (e.g. Internet browser, operating system or time at which the site is called up). These data are collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data are collected to ensure error-free provision of the website. Other data can be used to analyze your user patterns.

Data processing is carried out on the basis of your inquiry and is required under Art. 6 (1) Sentence 1 letter b GDPR for the said purposes, for the appropriate processing of your inquiry and for mutual fulfillment of obligations under the contract.

The personal data collected by us will be erased if they are no longer required for the purposes for which they have been collected or otherwise processed, unless we are obliged under Art. 6 (1) Sentence 1 letter c GDPR to store them for a longer period as a result of fiscal and commercial-law retention and documentation obligations, or if you have consented to farther-reaching storage pursuant to Art. 6 (1) Sentence 1 letter a GDPR.

Forwarding of data to third parties

Your personal data will not be forwarded to third parties for purposes other than those set out below. If this is necessary under Art. 6 (1) Sentence 1 letter b GDPR for the handling of contractual relationships with you, your personal data will be forwarded to third parties.

What are your rights concerning your data?

You have the right to free information at any time concerning the origin, recipients and purpose of your stored personal data. You also have a right to demand the rectification, blocking or erasure of these data. You can contact us at any time concerning this and other questions on the subject of data protection via the address stated in the Legal Notice. You also have a right to complain to the responsible supervisory authority.

Rights as data subject

You have the right:
• to revoke your consent, already issued to us, at any time pursuant to Art. 7 (3) GDPR. This will mean that we are no longer entitled to continue the data processing based on this consent in the future;
• to demand access to your personal data processed by us pursuant to Art. 15 GDPR. In particular, you can demand information concerning the purposes of processing, the category of the personal data, the categories of recipients to  whom your data have been or will be disclosed, the planned storage duration, the existence of a right of rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if these have not been collected by us, as well as concerning the existence of an automated decision-making process including profiling, and if applicable meaningful information on the details thereof;
• under Art. 16 GDPR, to demand immediate rectification of incorrect data or the completion of your personal data stored by us;
• under Art. 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• under Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the correctness of the data, if the processing is unlawful but you reject their erasure and we no longer require the data, but you require them for the assertion, exercise or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR;
• under Art. 20 GDPR, to receive your personal data, provided to us, in a structured, commonly-used and machine-readable format or to demand transfer to another Controller, and
• under Art. 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence, your place of work or the registered office of our company in this respect.

5. Right of objection If your personal data are processed on the basis of justified interests pursuant to Art. 6 (1) Sentence 1 letter f GDPR, you have a right to object to the processing under Art. 21 GDPR.

ANALYSIS TOOLS AND TOOLS OF THIRD-PARTY PROVIDERS

Your surfing patterns can be analyzed statistically when you visit our website. This is done above all with cookies and so-called analysis programs. As a rule, the analysis of your surfing patterns is anonymous; the surfing patterns cannot be traced back to you. You can object to this analysis or prevent it by not using specific tools. Detailed information is available in the following Data Protection Statement.

You can object to this analysis. We will inform you of the possibilities of objection in this Data Protection Statement.

2. GENERAL INFORMATION AND COMPULSORY INFORMATION

DATA PROTECTION

The operators of these sites take the protection of your personal data very seriously. We treat your personal data as confidential, and in accordance with both the statutory data-protection regulations and this Data Protection Statement.

Various personal data are collected when you visit this website. Personal data are data with which you can be identified personally. The present Data Protection Statement explains which data we collect and what we use them for. It also explains how and for what purpose this is carried out.

We draw attention to the fact that data transfer in the Internet (e.g. when communicating by email) can involve security loopholes. Complete protection of data against access by third parties is not possible.

INFORMATION CONCERNING THE CONTROLLER

The Controllers responsible for data processing on this website are:
Eva Klein
Lachnerstrasse 4 | 80639 Munich | Germany
+49 (0) 89 – 120 222 98
info@evakleinbodyfulness.com

The Controller is the natural or legal person that decides – either alone or jointly with others – on the purposes and means of the processing of personal data (e.g. names, email addresses or similar).

REVOCATION OF YOUR CONSENT TO DATA PROCESSING

Many data processing procedures are only possible with your express consent. You can revoke consent, already issued, at any time. An informal notification to us by email is sufficient. The legality of the data processing carried out prior to the revocation shall remain unaffected by the revocation.

RIGHT TO COMPLAIN TO THE RESPONSIBLE SUPERVISORY AUTHORITY

In the event of violations of data-protection law, the data subject has a right to complain to the responsible supervisory authority. The responsible supervisory authority for data protection matters is the State Data Protection Officer of the Federal State in which our company has its registered office. A list of Data Protection Officers as well as their contact details can be found via the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

RIGHT OF DATA PORTABILITY

You have the right to have data, processed by us in automated form on the basis of your consent or in fulfillment of a contract, handed over to you, or to a third party, in a commonly-used, machine-readable format. If you demand direct transfer of the data to another Controller, this will only be done if technically feasible.

SSL OR TLS ENCRYPTION

This site uses SSL or TLS encryption for security reasons or to protect the transfer of confidential content, for example orders or inquiries, sent by you to us as site operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you send us cannot be read by third parties.

ENCRYPTED PAYMENT TRANSACTIONS ON THIS WEBSITE

If, following conclusion of a paying contract, an obligation exists to forward us your payment data (e.g. account number with direct debit authorization), these data are required for processing of the payment.

Payment transactions via the commonly-used payment forms (Visa/MasterCard, direct debit) are performed exclusively via an encrypted SSL or TLS connection. An encrypted connection can be recognized by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

With encrypted communication, the payment data that you send us cannot be read by third parties.

INFORMATION, BLOCKING, ERASURE

Within the limits of the applicable statutory regulations, you have the right to receive free information at any time concerning the personal data stored on you, their origin and recipients, the purpose of the data processing, and if applicable a right to rectification, blocking or erasure of this data. You can contact us at any time concerning this and other questions on the subject of personal data via the address stated in the Legal Notice.

OBJECTION TO ADVERTISING EMAILS

Use of contact data, published in the context of the mandatory legal notice, for the sending of advertising and information material not expressly requested, is hereby objected to. The operators of the sites expressly reserve the right to take legal steps in the event of unsolicited sending of advertising information, for example via spam emails.

3. COLLECTION OF DATA ON OUR WEBSITE

COOKIES

The Internet sites in part use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, more effective and more secure.  Cookies are small text files that are deposited on your computer and stored by your browser.

Most of the cookies used by us are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us.

You can set your browser such that you are informed of the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies in specific circumstances or generally, and also activate the automatic deletion of cookies when the browser is closed.  Deactivating cookies can restrict the functionality of this website.

Cookies required for the conducting of electronic communication or for the provision of specific functions desired by you (e.g. shopping basket function), are stored on the basis of Art. 6 (1) letter f GDPR. The website operator has a justified interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for the analysis of your surfing patterns) are stored, these will be dealt with separately in the present Data Protection Statement.

SERVER LOG FILES

The provider of the sites automatically collects and stores information in so-called server log files that are automatically forwarded to us by your browser. These are:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the computer making access
• Time of the server inquiry
• IP address

These data are not brought together with other data sources.

The basis for the data processing is Art. 6 (1) letter f GDPR which permits the processing of data for the fulfillment of a contract or of pre-contractual measures.

CONTACT FORM

If you send us inquiries using the contact form, the information provided by you in the inquiry form, including the contact data provided by you there, will be stored by us for the purpose of processing your inquiry and dealing with any subsequent questions. We shall not forward these data without your consent.

The processing of the data stated in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 (1) letter a GDPR). You can revoke this consent at any time. An informal notification to us by email is sufficient. The legality of the data processing carried out prior to the revocation shall remain unaffected by the revocation.

The data entered by you in the contact form will remain with us until you request erasure by us, revoke your consent to storage or the purpose of the data storage no longer applies (e.g. following completion of the processing of your inquiry). Mandatory statutory provisions – in particular retention periods – shall remain unaffected.

4. SOCIAL MEDIA

INSTAGRAM PLUGIN

Functions of the Instagram service are integrated into our sites. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged on in your Instagram account, you can link the content of our sites to your Instagram profile by clicking on the Instagram button. This enables Instagram to allocate the visit to our sites to your user account. We draw attention to the fact that, as provider of the sites, we receive no information on the content of the data transferred or on use thereof by Instagram.

Further information can be found in the Instagram Data Protection Statement at https://instagram.com/about/legal/privacy/.

LINKEDIN PLUGIN

Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Every time one of our sites containing the LinkedIn functions is called up, a connection is established to LinkedIn servers. LinkedIn is informed that you have visited our Internet sites with your IP address. If you click on the LinkedIn “Recommend Button” and are logged on in your LinkedIn account, it is possible for LinkedIn to allocate your visit to our website to you and your user account. We draw attention to the fact that, as provider of the sites, we receive no information on the content of the data transferred or on use thereof by LinkedIn.

Further information can be found in the LinkedIn Data Protection Statement at: https://www.linkedin.com/legal/privacy-policy.

XING PLUGIN

Our website uses functions of the XING network. The provider is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany.

Every time one of our sites containing the XING functions is called up, a connection is established to XING servers. To our knowledge, personal data are not stored in this context. In particular, no IP addresses are stored and the use patterns are not analyzed.

Further information on data protection and the XING Share Button can be found in the XING Data Protection Statement at: https://www.xing.com/app/share?op=data_protection.

5. ANALYSIS TOOLS AND ADVERTISING

GOOGLE ANALYTICS

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. As a rule, the information, generated by the cookie on your use of this website, is transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 (1) letter f GDPR. The website operator has a justified interest in analyzing use patterns, in order to optimize its web offer as well as its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will first be abbreviated by Google within the member states of the European Union, or in other signatory states to the Agreement on the European Economic Area, prior to transfer to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide the website operator with additional services associated with use of the website and of the Internet. The IP address, transmitted by your browser within the scope of Google Analytics, will not be brought together with other Google data.

Browser Plugin

You can prevent storage of the cookies via a corresponding setting of your browser software; nevertheless, we draw attention to the fact that, in this case, you may not be able to use all functions of this website in full. You can also prevent the forwarding of the data, generated by the cookie and concerning your use of the website (incl. your IP address), to Google and the processing of this data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to this website: deactivate Google Analytics.

Further information on the handling of user data at Google Analytics is available in the Google Data Protection Statement: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics at Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This enables the preparation of reports containing statements on the age, gender and interests of the visitors to the site. These data stem from interest-related advertising by Google as well as from visitor data of third-party providers. These data cannot be allocated to any specific person. You can deactivate this function at any time via the display settings in your Google account, or generally prevent the collecting of your data by Google Analytics as set out under the item “Objection to data collection”.

WORDPRESS STATS

This website uses the WordPress tool Stats for the statistical evaluation of visitor access. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your computer and that enable an analysis of use of the website. The information, generated by the cookies on the use of our website, is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

“WordPress Stats” cookies remain on your end device until such time as you delete them.

The storage of “WordPress Stats” cookies is based on Art. 6 (1) letter f GDPR. The website operator has a justified interest in the anonymized analysis of use patterns, in order to optimize its web offer as well as its advertising.

You can set your browser such that you are informed of the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies in specific circumstances or generally, and also activate the automatic deletion of cookies when the browser is closed.  Deactivating cookies can restrict the functionality of our website.

You can object to the collection and use of your data for the future by clicking on this link to set an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you must again set the opt-out cookie.

6. NEWSLETTER

NEWSLETTER DATA

If you wish to receive the Newsletter offered on the website, we require your email address, as well as information allowing us to verify that you are the owner of the email address indicated and agree to receipt of the Newsletter. No further data will be collected or solely on a voluntary basis. We use these data exclusively for sending the required information and do not forward them to third parties.

The processing of the data stated in the Newsletter registration form is carried out exclusively on the basis of your consent (Art. 6 (1) letter a GDPR). Consent issued to storage of the data, of the email address as well as to use thereof for sending the Newsletter, can be revoked at any time, for example via the “Cancel” link in the Newsletter. The legality of the data processing carried out prior to the revocation shall remain unaffected by the revocation.

The data, deposited by you with us for the purpose of receiving the Newsletter, will be stored by us until such time as you cancel the Newsletter, and erased following cancellation of the Newsletter. Data stored by us for other purposes (e.g. email addresses for the members’ area) will not be affected.

7. PLUGINS AND TOOLS

YOUTUBE

Our website uses Plugins of the YouTube site operated by Google. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our sites equipped with a YouTube Plugin, a connection will be established to the YouTube servers. In this context, the YouTube server will be informed of which of our sites you have visited.

If you are logged on in your YouTube account, you enable YouTube to allocate your surfing patterns directly to your personal profile. You can prevent this by logging off from your YouTube account.

The use of YouTube is in the interests of an appealing presentation of our online offers. This constitutes a justified interest as defined in Art. 6 (1) letter f GDPR.

Further information on the handling of user data can be found in the YouTube Data Protection Statement at: https://www.google.de/intl/de/policies/privacy.

VIMEO

Our website uses Plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

If you visit one of our sites equipped with a Vimeo Plugin, a connection will be established to the Vimeo servers. In this context, the Vimeo server will be informed of which of our sites you have visited. Vimeo also obtains your IP address. This is the case even if you are not logged on with Vimeo or do not have a Vimeo account. The information collected by Vimeo is forwarded to the Vimeo server in the USA.

If you are logged on in your Vimeo account, you enable Vimeo to allocate your surfing patterns directly to your personal profile. You can prevent this by logging off from your Vimeo account.

Further information on the handling of user data can be found in the Vimeo Data Protection Statement at: https://vimeo.com/privacy.

GOOGLE WEB FONTS

This site uses so-called Web Fonts, provided by Google, to obtain a uniform presentation of fonts. When a site is called up, your browser loads the required Web Fonts in your browser cache, in order to display texts and fonts correctly.

For this, the browser used by you must establish a connection to the Google servers. In this way, Google is informed that our website has been called up via your IP address. The use of Google Web Fonts is in the interests of a uniform and appealing presentation of our online offers. This constitutes a justified interest as defined in Art. 6 (1) letter f GDPR.

If your browser does not support Web Fonts, your computer will use a standard font.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google Data Protection Statement: https://www.google.com/policies/privacy/.

GOOGLE MAPS

This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Use of the Google Maps functions requires the storage of your IP address. As a rule, this information is transferred to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer.

The use of Google Maps is in the interests of an appealing presentation of our online offers and easy location of the places stated by us on the website. This constitutes a justified interest as defined in Art. 6 (1) letter f GDPR.

Further information on the handling of user data can be found in the Google Data Protection Statement at: https://www.google.de/intl/de/policies/privacy/.

GOOGLE reCAPTCHA

We use the Google service reCaptcha to determine whether a person or computer makes a certain entry in our contact or newsletter form. Google uses the following data to determine whether you are a human or a computer: IP address of the terminal device used, the website you visit with us and on which the captcha is integrated, the date and duration of the visit, the identification data of the type of browser and operating system used, Google account if you are logged in at Google, mouse movements on the reCaptcha surfaces as well as tasks in which you have to identify images. The legal basis for the described data processing is Art. 6 para. 1 lit. f of the Data Protection Act. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated inputs (attacks).