Privacy policy

DATA PROTECTION INFORMATION

1. Name andcontact details of the Data Controller

This dataprotection information applies to data processed by

Proforá (small business)
Owner Isabelle Métrope
Breitscheidstraße 36
70176 Stuttgart
Germany
Tel.: +49 (0)152 26648059
E-mail: info@profora.net

2. Collection and storage of personal data and the nature, purpose and use thereof

a) When visiting the website
When you visit our website at https://www.profora.net, information is automatically sent to our website’s server by the browser usedon your end device. This information is temporarily stored in a log file. The following information is collected without any input from you and stored untilit is automatically deleted:

- IP address of the requesting computer,
- Date and time of access,
- Time zone difference from Greenwich Mean Time(GMT),
- Name and URL of the file accessed,
- Website used to gain access (referrer URL),
- Access status/HTTP status code,
- Browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the aforementioned data for the following purposes:
- To ensure trouble-free connection to thewebsite,
- To ensure our website is convenient to use,
- To evaluate the system’s security andstability, and
- To complete other administrative tasks.

The legal basisfor the data processing is Article 6 Para. 1.1 lit. f GDPR. Our legitimateinterest is based on the data collection purposes listed above. On no account do we use the collected data for the purpose of drawing conclusions about yourperson.

In addition, we use cookies when you visit our website. A more detailed explanation is available below.

b) When making contact via e-mail
When youcontact us by e-mail, the data you provide, i.e. your e-mail address and, if applicable, your name and other contact details, are stored by us so we cananswer your enquiry. We delete any data accruing in this context as soon asstorage is no longer necessary or restrict the processing if there arestatutory retention obligations.

For the purpose of contacting us, data is processed in accordance with Article 6 Para. 1.1 lit.a GDPR on the basis of you voluntarily giving consent or in accordance with Article 6 Para. 1.1 lit. b GDPR for implementing pre-contractual measures,which is carried out in response to your request.

c) When using our contact form
For questions of any kind, you are able to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know from whom the request originates and so that we can answer it. Additional information can be provided voluntarily.

For the purpose of contacting us, data is processed in accordance with Article 6 Para. 1.1 lit.a GDPR on the basis of you voluntarily giving consent or in accordance with Article 6 Para. 1.1 lit. b GDPR for implementing pre-contractual measures,which is carried out in response to your request.

The personal data we collect through using the contact form will be deleted once yourenquiry has been resolved, provided that no contractual relationship is established with you as a result.

d) When subscribing to our newsletter
You can consent to subscribing to our newsletter, which will provide you with information aboutour latest interesting offers.

We use the ‘double-opt-in’ procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address provided, asking you to confirm that you are the owner of the e-mail address provided and that you wish to receive the notifications.

We also store your IP address and the times at which you register and confirm yourregistration. This procedure is intended to prove your registration and, ifnecessary, to clarify any possible misuse of your personal data. To receive the newsletter, you are only obliged to provide your e-mail address. Following yourconfirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis is Article 6 Para. 1.1 lit. a GDPR. You may revokeyour consent to receive the newsletter and unsubscribe at any time. You canrequest to unsubscribe by clicking the link provided in every newslettere-mail, by e-mailing info@profora.net or by sending a message addressed to thecontact details stated in the legal notice.

3. Sharing data

Your personal data will not be shared with third parties for purposes other than those listedbelow. We will only share your personal data with third parties if:

- You have given your express consent to thisin accordance with Article 6 Para. 1.1 lit. a GDPR,
- The disclosure is necessary in accordancewith Article 6 Para. 1.1 lit. f GDPR to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms or those of another data subject requiring the protection of personal data override these,
- There is a legal obligation for thedisclosure in accordance with Article 6 Para. 1.1 lit. c GDPR, and
- This is legally permissible and necessaryaccording to Article 6 Para. 1.1 lit. b GDPR for processing contractualrelationships with you or implementing pre-contractual measures.

4. Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not damage your end device and do not contain viruses, Trojans or other malware.

Cookies store information that is linked to the specific end device used. However, this doesnot mean that we subsequently gain direct knowledge of your identity.

A distinction is made between session cookies, which are deleted again as soon as you close your browser, andpermanent cookies, which are stored beyond the individual session. With regardto their function, a distinction is made between the cookies we use:

· Technical/necessary cookies: These aremandatory to navigate the website, use basic functions and ensure the securityof the website; they do not collect information about you for marketingpurposes nor do they store which pages you have visited;

· Performance/functional cookies: These collectinformation about how you use our website, which pages you visit and, forexample, whether errors occur during website use; they do not collectinformation that could identify you – any information collected is anonymousand is only used to improve our website and find out what interests our users;

· Advertisement cookies: These offer usersneeds-based advertising on the website or offers from third parties, while alsomeasuring the effectiveness of these offers;

 · Analytical cookies: These record how our website is used.

Any use of cookies that is absolutely technically necessary is required to protect ourlegitimate interests in accordance with Article 6 Para. 1.1 lit. f GDPR. Insofar ascookies are used that are not absolutely technically necessary, each useconstitutes data processing that is only permitted with your express and activeconsent in accordance with Article 6 Para. 1.1 lit. a GDPR. In particular, thisapplies to the use of advertising, performance or analytical cookies.

5. Analysis tools

Tracking tools
The tracking measures listed below and used by us are carried out on the basis ofArticle 6 Para. 1.1 lit. f GDPR. With the tracking measures used, we want toensure a needs-based design and to optimise our website on an on-going basis.On the other hand, we use tracking measures to statistically record the use ofour website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of theaforementioned provision.

Google Analytics
Forthe purpose of demand-oriented design and continuous optimisation of our pages,we use Google Analytics, a web analysis service provided by Google Inc. (https://about.google/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookies about your use of this website, such as your

_ Browser type/version,
_ Operating system used,
_ Referrer URL (the site visited previously),
_ Host name of the accessing computer (IP address),
_ Time of the server request

are transferred to a Google server in the USA and stored there. The information isused to evaluate the use of the website, to compile reports on website activity, to provide other services associated with the use of the website and the Internet for the purposes of market research, and to design these Internet pages in line with requirements. This information may also be transferred tothird parties if this is required by law or if third parties process this dataon our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymised so that it is impossible to identify you (IP masking).

 You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use thefull functionality of this website.

You can also prevent data generated by cookies and related to your use of the website (incl. your IP address) from being collected, and also prevent this data from being processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on, especially for browsers on mobile end devices, you can also prevent Google Analytics from collecting data by clicking this link. An opt-out cookie will be set to prevent your data from being collected when visiting this website in future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics Help pages, for example (https://support.google.com/analytics/answer/6004245?hl=en).

6. YouTube videos

We have incorporated YouTube videosinto our online offer, which are stored on YouTube.com and can be playeddirectly from our website. The legal basis for displaying the videos is Article6 Para. 1.1 lit. a GDPR, i.e. the videos are only incorporated once you havegiven your consent.

By visiting the website, YouTube isinformed that you have accessed the corresponding sub-page of our website. Inaddition, basic data such as your IP address and time stamp are also shared. Thistakes place regardless of whether you are logged in to your YouTube useraccount or whether no user account exists. If you are logged in to Google, yourdata will be directly assigned to your account. If you do not wish to beassociated with your YouTube profile, you must log out before clicking the button. YouTube stores your data as usage profiles and uses these profiles for the purposes of advertising, market research and/or designing its websiteaccording to needs. In particular, such an evaluation is carried out (even for users who are not logged in) to provide needs-based advertising and to informother social network users about your activities on our website. You have the right to object to these user profiles being created, and you must contact YouTubeto exercise this right.

The information collected is stored on Google servers, also located in the USA. In these cases, the provider has – according to its own statements – imposed a standard on itself in which the data protection laws applicable to international data transfers are compliedwith.

For more information on the purposeand scope of data collected and processed by YouTube, please see the privacypolicy. There you will also receive further information on your rights andsettings options designed to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en.

7. Data subjects’rights

You have the right to:
- Request information about your personal datawe process in accordance with Article 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients with whom your data has been or will be shared, theplanned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint,the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, where applicable, conclusive information about its details;
- Demand the immediate correction of incorrector incomplete personal data stored by us in accordance with Article 16 GDPR;
- Request the erasure of your personal datastored by us, unless processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, forreasons of public interest or for the establishment, exercise or defence oflegal claims, in accordance with Article 17 GDPR;
- Request the restriction of the processing ofyour personal data in accordance with Article 18 GDPR, insofar as the accuracyof the data is contested by you, the processing is unlawful, but you oppose its erasure and we no longer require the data, but you need it for the establishment, exercise or defence of legal claims or you have objected to theprocessing in accordance with Article 21 GDPR;
- Receive your personal data that you haveprovided to us in a structured, commonly used and machine-readable format or transmit your personal data to another controller in accordance with Article 20GDPR;
- Withdraw your consent at any time in accordance with Article 7 Para. 3 GDPR. This means that we may no longer continue to process your data in the future based on this consent; and
- Complain to a supervisory authority inaccordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your habitual place of residence or place or work, or our company headquarters for this purpose.

8. Right of objection

Insofar as your personal data is processed on the basis of legitimate interests in accordance with Article 6 Para. 1.1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you havea general right of objection, which is implemented by us without specifying aparticular situation. If you wish to exercise your right to revoke or object, simply send an e-mail toinfo@profora.net.

9. Data security

We use the widespread SSL procedure (Secure Socket Layer) as part of the website visit. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or completeloss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Actuality andamendments of this privacy policy

This privacy policy is currently valid as of March 2022. By further developing our website and any offers on it, or as a result of amended legal orofficial requirements, it may become necessary to change this privacy policy.You can access and print out the currently applicable privacy policy by visiting the website www.profora.net at any time.