Data Protection Declaration
Data Protection Declaration
A very warm welcome to our website. We are delighted that you are interested in our company and our products. Protecting your data is extremely important to us. Hence why we would like to tell you below which data we use from your visit and for what purpose. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
I. Controller’s Name and Address
The controller as defined in the General Data Protection Regulation and other national data protection laws within the member states and other provisions of data protection legislation is:
LOREMA Wellness s.r.o.
Data Protection
Pakoměřice 87
250 65 Líbeznice u Prahy
Czech Republic
Tel.: +420 283 090 770
E-mail:
info@lorema-wellness.cz
Website:
https://www.lorema-wellness.cz
II. General Data Processing Information
- Extent of the processing of personal data
We only ever process our users’ personal data where necessary to provide a functional website and our content and services. Moreover, personal data will only be collected from our users and used with their consent.
- Data erasure and storage period
The data subject’s personal data will be erased or blocked as soon as the purpose of the storage ceases to apply. Data may also be stored when required by European or national legislators under union regulations, laws or other stipulations to which the controller is subject. Such data will then be blocked or erased when a retention period stipulated by one of these standards expires, except where there is a need to continue to store the data for the conclusion of an agreement or fulfilment of an agreement.
III. Provision of the Website and Creation of Log Files
Our web server automatically records the following information upon every visit to our website:
- User’s IP address
- Host name (which LOREMA Wellness page was visited, e.g. www.lorema-wellness.cz)
- Date and time of the access (Time)
- Type and nature of the enquiry (Request)
- Information about the browser type and the version used
Data will also be saved in our system’s log files. This data will not be stored together with other personal data about the user.
The legal basis for the temporary storage of the data and log files is Art. 6 (1) (f) of the GDPR. We have a legitimate interest in processing the data because the temporary storage of the IP address by the system is necessary to enable delivery of the website on the user’s computer. For this reason, the user’s IP address must remain stored for the duration of the session. Data is stored in log files to ensure the functionality of the website. We also use this data to optimise the website and to safeguard the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. Where data is recorded for delivery of the website, this will be the case once the session in question ends. For data stored in log files, this will be the case after 30 days at the latest. The log files will also be retained in backup files for up to 12 months. Such backups are only accessed in exceptional cases.
IV. Use of Cookies
In addition to the data referred to above, cookies will be stored on your computer when you use our website. Cookies are text files which can be saved in the internet browser or can be saved by the internet browser to the user’s computer system. These cookies contain a distinctive character string which enables the unique identification of that browser next time the user visits the website. Cookies cannot run any programs or transfer viruses to your computer. Using cookies enables us to make the internet site more user friendly and effective overall. Cookies are saved to the user’s computer and are transferred to us from there. You, as the user, therefore have complete control over the use of cookies. By changing the settings in your browser, you can disable or restrict the transfer of cookies. Previously saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our site, it may not be possible to make full use of all of the website's functions.
This website uses cookies as follows:
- Transient cookies (temporary use)
- Permanent cookies (time-limited use)
- Third-party cookies (from third-party providers)
Transient cookies will be deleted automatically when you close your browser. These include in particular session cookies. These save a so-called session ID which is used to attribute various requests from your browser to the joint session. This means that your computer will be recognised when you return to our website.
Permanent cookies are automatically deleted after a specified period which can differ from cookie to cookie. You can delete the cookies in your browser’s security settings at any time.
The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) of the GDPR. Our legitimate interest here lies in facilitating the use of our website for the user.
V. Google Analytics
On the basis of our own legitimate interests (in other words, our interest in the analysis, optimisation and cost-effective operation of our online site pursuant to Art. 6 (1) (f) of the GDPR), we use Google Analytics, a web analysis service from Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the user’s use of the website will usually be transmitted to a Google server in the USA and stored there. Data recorded in this way by the cookies will be deleted automatically once a month after 36 months.
Google is certified under the Privacy Shield Agreement and hereby warrants that it complies with
European data protection legislation.
Google will use this information on our behalf to analyse the user’s use of our website in order to compile reports about website activities and also to provide us with services associated with the use of this website and internet usage. As a result, aliased usage profiles may be created for the user from the processed data.
We use Google Analytics to only show the advertisements placed within Google’s advertising services and those of its partners to those users who have also expressed an interest in our website, or have the specific characteristics (e.g. interested in certain topics or products, determined based on the websites visited) we submit to Google (so-called “remarketing” or “Google Analytics audiences”). Using remarketing audiences, we would also like to ensure that our advertisements are in line with users’ potential interests and are not annoying.
For users who make use of the Google Analytics advertising features, functions such as remarketing within the Google display network will be enabled for products such as AdWords using Google cookies for ad preference functions. Further information about the use of such cookies by Google can be found in the Frequently Asked Questions about the Google Privacy Policy. You can change the cookie settings or disable these functions in the advertising settings.
We only use Google Analytics with IP anonymisation enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will not associate the IP address transmitted by the user’s browser with any other data held by Google. The user can prevent cookies being stored with a corresponding setting in their browser software. The user can also prevent Google from recording the data generated by the cookie and data relating to your use of the website, and restrict the processing of such data by Google, by downloading and installing
the browser plugin.
For more information about data usage by Google, the available settings and the options to object, see Google’s website:
VI. Google marketing services
On the basis of our own legitimate interests (in other words, our interest in the analysis, optimisation and cost-effective operation of our online site pursuant to Art. 6 (1) (f.) of the GDPR), we use the marketing and remarketing services (“Google Marketing Services” for short) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google”).
Google is certified under the Privacy Shield Agreement and hereby warrants that it complies with
European data protection legislation.
Google Marketing Services enable us to display advertisements for and on our website in a targeted manner so that users are only shown adverts that may match their interests. For example, when a user is shown advertisements for products in which he or she has expressed an interest on other websites, this is called “remarketing”. For this purpose, when accessing our website, or other websites on which Google Marketing Services are enabled, a code is run by Google directly and so-called (re)marketing tags (invisible graphics or codes, also referred to as “web beacons”) are incorporated into the website. With these, an individual cookie is placed on the user’s device (similar technologies may be used instead of cookies). The cookies can be used by various domains, including by google.com , doubleclick.net , invitemedia.com , admeld.com , googlesyndication.com or googleadservices.com . It is noted in this file which websites the user visits, what type of content they are interested in and which offers they have clicked, along with technical information about the browser and operating system, linking websites, visit time and other information about use of the website. The IP address will not be associated with the user’s data within other Google offerings. The information specified above may also be associated by Google with such information from other sources. When the user then visits other websites, they may be shown advertisements tailored to them which match their interests.
The user’s data will be aliased within the Google Marketing Services. In other words, Google does not save and process, for example, the user’s name or e-mail address but processes the relevant cookie-related data within aliased user profiles. In other words, as far as Google is concerned, the advertisements are not being controlled and shown for a specific identified individual but for the cookie owner, regardless of who that cookie owner is. This is not the case when a user has expressly consented to Google processing the data without such aliasing. The information collected about the user by Google Marketing Services is transmitted to Google and stored on Google’s servers in the USA.
We also use the “Google Tag Manager” to incorporate and manage Google Analytics and Marketing Services within our website.
For more information about data usage for marketing purposes by Google, see the
overview page and
Google’s Privacy Policy.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the
personalisation and opt-out options provided by Google.
VII. Newsletter
On our website there is the option to subscribe to a free newsletter. When registering for the newsletter, the data from the input form will be transmitted to us. This includes:
- E-mail address
- Title
- Academic title
- First name
- Last name
- Country
- Only the e-mail address and country are required fields
- Subject area (industry, other)
- Source
The following information is also collected upon registration:
- User’s IP address
- Date and time of registration
- Indication that the data protection declaration has been read
During the registration process, your consent to data processing will be obtained and reference will be made to this data protection declaration. For newsletter orders, we use the so-called double opt-in procedure, in other words your order will only be completed once you have confirmed your registration via a confirmation e-mail sent to you for this purpose, by clicking the link contained therein. This confirmation will be deemed consent. If you do not confirm in this way within 100 days, your registration will be deleted from our database automatically. That way we can ensure that no one else has signed you up for our newsletter.
No data will be passed on to third parties in connection with the data processing for the purposes of sending out our newsletters. The data will only be used to send the newsletter. The user’s e-mail address will be collected in order to deliver the newsletter. The collection of other personal data as part of the registration process is to avoid misuse of the services or abuse of the e-mail address used.
The legal basis for the processing of data following registration for the newsletter by the user is the presence of consent from the user pursuant to Art. 6 (1) (a) of the GDPR.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. The user’s e-mail address will be stored for as long as the newsletter subscription remains active.
Subscription to the newsletter may be cancelled by the user in question at any time. There is a corresponding link for this purpose contained in every newsletter. This also enables revocation of the consent to the storage of the personal data collected during the registration process.
- Tracking newsletter responses within the Ecomail newsletter system
Tracking means the monitoring and saving of recipient behaviour within Ecomail Professional. In so doing, recipient behaviour refers to the following three actions by your recipients:
- Opening of a mail
- Clicking on text and image links
- Downloading images in an e-mail program
- Personal tracking (Unique Count Tracking)
When a recipient opens a mail, clicks on a link or downloads images in their e-mail program, this can be recorded and stored by Ecomail. These actions by recipients are referred to as recipient responses in Ecomail. Using Ecomail, these recipient responses can be used to create an interest profile for the recipient. Thus, for example, we are able to determine which specific links the recipient clicked. Based on these clicks, we can create target groups and send recipients additional information tailored to their areas of interest. The personal tracking option is currently not used. If this changes, we will inform newsletter recipients immediately.
By consenting to receive the newsletter, you consent to having your user behaviour personally tracked in accordance with Art. 6 (1) (a) of the GDPR. To optimise the content of the themed newsletters, we compare opening rates and recipient responses to various mails in general. The personal data stored will be erased immediately when a recipient unsubscribes from the newsletter.
VIII. Contact form and E-mail Contact
There is a contact form on our website which can be used to contact us electronically. If a user makes use of this option, the data entered in the input form will be transmitted to us and stored. This includes:
- Title, first name, last name
- Company name
- Customer number
- E-mail address
- Telephone number
- Street, house number, postcode, town/city, country
- Academic title
- Product interests
- Your message to us
- Attachments (documents)
- Callback request, if this option has been selected
When the message is submitted, the following information will also be stored:
- Date and time of registration
- User’s IP address
Alternatively, contact can be made by e-mail. In this case, the user’s personal data transmitted in the e-mail will be saved. No data will be passed on to third parties in this context. The data will only be used to process the exchange.
The personal data from the input form will only be used by us to process the contact request. In the case of contact by e-mail, the legitimate interest in the data processing required in accordance with the legal basis set out in Art. 6 (1) (f) of the GDPR is also present here. Where the purpose of the e-mail contact is to conclude an agreement, Art. 6 (1) (b) of the GDPR will also apply as the legal basis for further processing.
Other personal data processed during the submission process is used to prevent misuse of the contact form and to safeguard the security of our information technology systems.
The data will be erased as soon as it is no longer needed for the purpose behind its collection. For personal data from the contact form input screen and data sent by e-mail, this will be the case when the conversation with the user in question has ended. The conversation will end when it is clear from the circumstances that the facts in question have been clarified conclusively.
When the user contacts us by e-mail, they may object to their personal data being stored at any time. In such cases however, the conversation cannot be continued.
If you are logged in to your profile on one of the aforementioned social networks when you visit our website, the operator of that network may collect and store additional information about your visit to our website. If you do not want such an association to take place, we recommend that you log out of your social networks prior to visiting our website.
Please check with the respective social network operator to find out how your data is used and processed. You can find information from the operators about the relevant privacy provisions and, where applicable, the settings to protect your privacy here:
IX. Data Subject’s Rights
You have the following rights in respect of us regarding the personal data held about you:
- in accordance with Art. 7 (3) of the GDPR, you may revoke the consent you initially granted us at any time. This means that we may no longer continue with the data processing the consent related to in the future;
- in accordance with Art. 15 of the GDPR, a right of access;
- in accordance with Articles 16 and 17 of the GDPR, a right to rectification or erasure;
- in accordance with Art. 18 of the GDPR, a right to restrict the processing;
- in accordance with Art. 20, a right to data portability;
- in accordance with Art. 77 of the GDPR, a right to lodge a complaint about our processing of your personal data with a data protection supervisory authority.
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 (f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 of the GDPR. If you wish to assert your right to object, please send an e-mail to
info@lorema-wellness.cz. When exercising your right to object, we ask you to state the reason your personal data may no longer be processed by us. We will then check the situation and cease or modify the data processing or present to you our compelling legitimate grounds on the basis of which we will continue with the processing.
You may object to the processing of your personal data for advertising and data analysis purposes at any time. You can let us know about your objection to advertising using the following contact details:
LOREMA Wellness s.r.o.
Pakoměřice 87
250 65 Líbeznice u Prahy
Czech Republic
Tel.: +420 283 090 770
E-mail:
info@lorema-wellness.cz
Website:
https://www.lorema-wellness.cz
X. Amendment of the Data Protection Provisions
We will update these data protection provisions from time to time to protect your personal data. You should view these data protection provisions occasionally to stay up to date with how we are protecting your data and constantly improving the content of our website.
By using the www.wellnessrealizace.cz site, you declare your agreement with the terms and conditions of these data protection provisions on the protection of personal data.
Valid from 25.05.2018