Offinger Str. 3-7, 88525 Hailtingen

+49 (0) 73 71 / 95 27 0

Data Protection Declaration

Thanks for visiting our website. Combustin pharmazeutische Präparate GmbH (hereinafter “Combustin”, “we” or “us”) attaches great importance to the security of user data and compliance with data protection regulations.

Therefore, we would like to inform you below about the processing of your personal data on our website.

Responsible site and data protection officer

Responsible site:

Combustin pharmazeutische Präparate GmbH

Offinger Straße 3-7

88525 Hailtingen

Germany

Phone: +49 7371 95270

E-Mail: info@combustin.de


External data protection officer:

Deutsche Datenschutzkanzlei

Maximilian Musch

Phone: +49 7542 949 21 - 02

E-Mail: datenschutz@combustin.de


Terms

The technical terms used in this data protection declaration are to be understood as they are legally defined in Art. 4 DSGVO. 


Notes on data processing

Automated data processing (Log files etc.)

You can visit our site without actively providing any information about yourself. However, we automatically save access data (server log files) each time the website is accessed, such as the name of your Internet service provider, the operating system used, the website from which you are visiting us, the date and duration of the visit or the name of the requested file as well as - for security reasons - the IP address of the computer used for a period of 7 days, e.g. to detect attacks on our website.

These data are evaluated exclusively to improve our offer and do not allow any conclusions to be drawn on your person. This data is not combined with other data sources.

The legal basis for the processing of the data is Article 6 (1) lit. f) DSGVO.

We process and use the data for the following purposes:

1. Availability of our website, 2. Improvement of our website and 3. Prevention and detection of errors/faults and misuse of the website.

 

The processing is carried out to pursue legitimate interests in ensuring the functionality and error-free as well as secure operation of the website and adapting this website to the requirements of the users.


Use of cookies (in general, functionality, opt-out links, etc.)

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our website. The use of cookies serves our legitimate interest in making your visit to our website as pleasant as possible and is based on article 6 paragraph 1 lit. f) DSGVO. Cookies are a standard Internet technology for storing and retrieving login and other usage information for all users of the website. Cookies are small text files that are stored on your device. Among other things, they enable us to save user settings so that our website can be displayed in a format tailored to your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (so-called permanent cookies).

You can set your browser so that you are informed about the setting of cookies and can individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Furthermore, the cookies can be deleted afterwards in order to remove data that the website has stored on your computer. The deactivation of cookies (so-called opt-out) can lead to some restrictions on the functionality of our website.


Affected categories:                

Website visitors, users of online services

Opt-Out:                                   

Internet Explorer:

https://support.microsoft.com/de-de/help/17442  

Firefox:

https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen

Google Chrome:

https://support.google.com/chrome/answer/95647?hl=de

Safari

https://support.apple.com/de-de/HT201265

Legal bases:                           

Consent (Art. 6 Para. 1 lit. a) DSGVO); legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)

 The relevant legal basis is specifically named in the corresponding tool.

Legitimate interests:               

Storage of opt-in preferences, presentation of the website, ensuring the functionality of the website, preservation of the user status over the entire website, recognition for next website visitors, user-friendly online offer, ensuring chat function


Web analysis and optimization

We use tools for web analysis and range measurement so that we can evaluate the flow of visitors to our online offer. For this purpose, we collect information about the behavior, interests or demographic information about our visitors, for example age, gender, etc. This helps us to recognize the time at which our online offer, which functions or content are most frequently used, or which one invites you to call up again. In addition, we can use the information collected to determine whether our online offering needs to be optimized or adapted.

The information collected for this purpose is stored in cookies or similar processes which are used for range measurement and optimization. The data stored in the cookies can include the following: content viewed, online presences visited, settings, functions and systems used. However, no clear user data is regularly processed for the purposes described. In this case, the data is changed in such a way that the actual identity of the user is known neither to us nor to the provider of the tool used. The data changed in this way are often saved in user profiles.


Affected categories:                Website visitors, users of online services

Categories of data:                  User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data, content data

Purposes of processing:         Website analysis, range measurement, utilization and evaluation of website interaction, lead evaluation

Legal bases:                           Consent (Art. 6 Para. 1 lit. a) DSGVO); legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)

Legitimate interests:               Optimization and further development of the website, profit increase, customer loyalty and acquisition of new customers


Matomo (formerly PIWIK)

Deployed Service:        InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand

Data protection:            https://matomo.org/privacy-policy/

Opt-Out-Link                 MATOMO OPT-OUT-IFRAME  https://matomo.org/docs/gdpr/#gdpr-resources

Legal basis:                  Legitimate interest (Art. 6 Para. 1 lit. f) DSGVO)

Legitimate interests:      Range measurement, improvement of the website and user experience, etc.

Online marketing

In order to constantly increase our reach and the awareness of our online offer, we process personal data in the context of online marketing, in particular with regard to potential interests and to measure the effectiveness of our marketing activities.

For the purpose of measuring the effectiveness of our marketing measures and identifying potential interests, relevant information is stored in cookies or similar processes are used.

The data stored in the cookies can include content viewed, websites visited, settings as well as functions and systems used. However, no clear user data is regularly processed for the purposes described. The data is changed in such a way that the actual identity of the user is known neither to us nor to the provider of the tool used. The data changed in this way are often saved in user profiles.

If user profiles are stored, the data can be read out, supplemented and supplemented on the server of the online marketing process when visiting other online offers that use the same online marketing process.

We can determine the success of our advertisements on the basis of summarized data made available to us by the provider of the online marketing process (so-called conversion measurement).

As part of these conversion measurements, we can understand whether a marketing measure resulted in a purchase decision for visitors to our online offer or not. This evaluation is used to analyze the success of our online marketing.


Affected categories:                

Website visitors, users of online services, interested parties, communication partners, business and contractual partners

Categories of data:                  

User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data

Purposes of processing:         

Marketing (partly also interest-based and behavior-related), conversion measurement, target group formation, click tracking, development of marketing strategies and increasing the efficiency of campaigns

Legal bases:                           

Consent (Art. 6 Para. 1 lit. a) DSGVO)

Legitimate interests:               

Optimization and further development of the website, profit increase, customer loyalty and acquisition of new customers



Google DoubleClick

Deployed Service:         Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Data protection:            https://policies.google.com/privacy

Opt-Out-Link:                https://tools.google.com/dlpage/gaoptout?hl=de 

                                    or https://myaccount.google.com/


Social media presences 

We maintain an online presence on social networks and career platforms in order to exchange information with the users registered there and to be able to contact them easily.

Some of the data from users in social networks are used to conduct market research and thus pursue advertising purposes. User profiles can be created and used via the usage behavior in order to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the users' end devices, sometimes regardless of whether you are a registered user of the social network or not. Depending on where the social network is operated, the user data may be processed outside the European Union or outside the European Economic Area. This can result in risks for users, for example  it can be difficult to enforce their rights.


Affected categories:                registered users and unregistered users of the social network

Categories of data:                  Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP -Address)

Purposes of processing:         Extension of range, networking

Legal bases:                            Legitimate interests (Art. 6 Para. 1 lit. f) DSGVO), Consent (Art. 6 Para. 1 lit. a) DSGVO)

Legitimate interests:               Interaction and communication on social media presence, profit increase, knowledge about target groups



Facebook

Deployed Service:                     Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Data protection:                       https://www.facebook.com/privacy/explanation

                                               and https://www.facebook.com/legal/terms/page_controller_addendum

Opt-Out-Link:                            https://www.facebook.com/settings?tab=ads


Plug-ins and integrated third-party content

We have integrated functions and content that are obtained from third-party providers into our online offer. For example, videos, registration functions, presentations, buttons or posts (hereinafter referred to as content) can be integrated.

In order to show content to the visitors of our online offer, the respective third-party provider processes the IP address of the user, among other things, so that the content can be transmitted to the browser and displayed. Without this processing, it is not possible to integrate third-party content.

In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offer, technical information about the user's browser or operating system, the time of visit or the websites to be referred to. The data obtained in this way is stored in cookies on the user's device.


Affected categories:                Users of the plug-in

Categories of data:                  Access data (user name, password), usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address)

Purposes of processing:         Designing our online offer, increasing the range of advertisements in social media, sharing posts and content, interest- and behavior-based marketing, cross-device tracking, access to specialist groups and specialist information

Legal bases:                            Consent (Art. 6 Para. 1 lit. a) DSGVO)


DocCheck

Deployed Service:                    DocCheck Community GmbH, Vogelsanger Str. 66, 50823 Köln

Data protection:                        http://info.doccheck.com/de/privacy/

 

Google Fonts

Deployed Service:        Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data protection:            https://policies.google.com/privacy?hl=de&gl=de

Opt-Out-Link:                https://tools.google.com/dlpage/gaoptout?hl=de 

                                    or https://myaccount.google.com/

 

Facebook Social Plugins

Deployed Service:         Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Data protection:            https://www.facebook.com/privacy/explanation

Opt-Out-Link:                https://www.facebook.com/settings?tab=ads


YouTube

Deployed Service:        Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data protection:            https://policies.google.com/privacy?hl=de&gl=de

Opt-Out-Link:                https://tools.google.com/dlpage/gaoptout?hl=de  

                                    or https://myaccount.google.com/

 

Newsletter and broad communication (possibly with tracking)

On our online offer, users have the option of subscribing to our newsletter or notifications via various channels (hereinafter collectively called newsletter). We only send newsletters to recipients who have consented to receive the newsletter and within the framework of the statutory provisions. In oder to subscribe to a newsletter from us, you need to provide an email address. If necessary, we collect additional data, for example to provide our newsletter with a personal salutation.

Our newsletter is only sent after the so-called double opt-in procedure has been completed. If visitors to our online offer decide to subscribe to our newsletter, they will receive a confirmation e-mail, which serves to prevent the fraudulent entry of incorrect e-mail addresses and to prevent the newsletter being sent by a simple, possibly accidental click. The subscription to our newsletter can be ended at any time for the future. An unsubscribe link (opt-out link) is included at the end of each newsletter.

We are also obliged to provide evidence that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and save the IP address and the time of registration and deregistration.


Affected categories:                Newsletter subscribers

Categories of data:                  Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)


Purposes of processing:         Marketing, customer loyalty and new customer acquisition, analysis and evaluation of the success of the campaign

Legal basis:                            Consent (Art. 6 Para. 1 lit. a) DSGVO)



Online conferences and meetings

We make use of the possibility of holding online conferences and online meetings. For this, we use the offer of another provider, which we have carefully selected. With the active use of such offers, data of the communication participants are processed and stored on the servers of the third-party providers used, insofar as the data is required for the communication process. Usage and metadata can also be processed.

Affected categories:                Participants in the respective online offer (conference, meeting, webinar)

Categories of data:                  Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), meta and communication data (e.g. device information, IP addresses)

Purposes of processing:         Processing of inquiries, increasing efficiency, promoting cross-company or cross-location cooperation

Legal basis:                            Consent (Art. 6 Para. 1 lit. a) DSGVO)


Cisco WebEx

Deployed Service:        Cisco Systems, Inc., 170 West Tasman Dr., San Jose, CA 95134, USA

Data protection:            https://www.cisco.com/c/de_de/about/legal/privacy-full.html

Legal basis:                  Consent (Art. 6 Para. 1 lit. a) DSGVO)


Commercial communication

We also use the data provided to us for advertising purposes, in particular to provide information on various channels about news from us or in our product portfolio. However, we will only be addressed for advertising purposes within the framework of the legal requirements and - if required thereafter - after obtaining consent. If the recipients of our advertising do not want this, they can inform us at any time for the future. Of course, we will comply with your request.


Affected categories:                Communication partner

Categories of data:                  Master data (e.g. name, address), contact details (e.g. e-mail address, telephone number)

Purposes of processing:         Direct marketing

Legal bases:                            Consent (Art. 6 Para. 1 lit. a) DSGVO), legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)

Legitimate interests:                Retention of existing and acquisition of new contacts or contractual partners


Contact

On our online offer, we offer the opportunity to contact us directly or to obtain information via various contact options.

If you contact us, we process the data of the person making the request to the extent which is necessary to answer or process the request. The processed data may vary depending on how you contact us.

 

Affected categories:                Inquirers

Categories of data:                  Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address)

Purposes of processing:         Processing of inquiries

Legal bases:                            Consent (Art. 6 Para. 1 lit. a) DSGVO), Contract performance or contract initiation (Art. 6 Para. 1 lit. b) DSGVO)

Online shop

We offer our customers the opportunity to use our online shop and purchase our products from it. For this purpose, we collect the data required for contract initiation and execution. In addition, we collect data in order to provide our customers with advertising or discounts tailored to their interests. If it is necessary, we pass the data on to third parties who help us to process the order or if we are legally obliged to provide certain data.


Affected categories:                Buyers in our online shop, shop visitors upon registration

Categories of data:                  Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), contract data (e.g. order history, payment data), billing address, possibly delivery address, meta and communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interests, access times)

Purposes of processing:         Contract initiation and implementation, interest-based advertising, possibly customer account-related rewards or discounts, outsourcing

Legal bases:                            Contract initiation and implementation (Art. 6 Para. 1 lit. b) DSGVO), legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)

Legitimate interests:               Simplification of work processes, resource-efficient fulfillment, market research, marketing


Registration for (new) customers / registration for specialist circles

We offer the possibility to create a user account on our online offer. As part of the registration process, we collect the necessary data from interested visitors, which we need to provide a user account and to provide the associated functions.

In order to protect the use of the internal area, we collect the IP addresses and the time of access in order to prevent misuse of a user account and unauthorized use. We do not pass this data on to third parties, unless this is necessary to pursue our claims or we are legally obliged to do so.


Affected categories:                registered users

Categories of data:                  Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), meta and communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interests, access times)

Purposes of processing:         Simplification of the website function, contract fulfillment, customer loyalty

Legal bases:                            Consent (Art. 6 Para. 1 lit. a) DSGVO)


Provision of information and brochures by e-mail or mail 

On our website we offer you the opportunity to request information material and product brochures via various contact channels. In order to be able to provide you with this information, we need your contact details according to the contact method you require.


Affected categories:                Contact details (email address or first and last name, address)

Categories of data:                  Interested parties who request our information material separately

Purposes of processing:         Marketing, acquisition of new customers, increasing sales

Legal bases:                            Consent (Art. 6 Para. 1 lit. a) DSGVO)


Data transfer

We transmit the personal data of visitors to our online offer for internal purposes (e.g. for internal administration or to the HR department in order to comply with legal or contractual obligations). The internal data transfer or disclosure of the data takes place only to the necessary extent in compliance with the relevant data protection regulations.

In order to execute contracts or to fulfill a legal obligation, it may be necessary for us to pass on personal data. If necessary data is not made available to us, it can occur that the contract with the data subject cannot be concluded.

A transfer of data to a third country does not take place.


Storage period

We generally save the data of visitors to our online offer as long as it is necessary to provide our service or if this has been provided for by the European directives and regulations or another legislator in laws or regulations which we are subjected to. In all other cases, we delete the personal data after the purpose has been completed, with the exception of data that we have to continue to save in order to fulfill legal obligations (e.g. due to retention periods under tax and commercial law, we are obliged to keep documents such as contracts and invoices available for a certain period of time).

 

Automated decision making

We do not use automated decision-making or profiling, in accordance with Article 22 DSGVO.

 

Legal bases

The relevant legal bases mainly result from the DSGVO. These are supplemented by national laws of the member states and may be applicable together with or in addition to the DSGVO.


Consent:                                             Art. 6 Para.1 lit. a) DSGVO serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose.

Contract performance:                        Art. 6 Para. 1 lit. b) DSGVO serves as the legal basis for processing that is necessary for the performance of a contract to which the affected person is a party or for the implementation of pre-contractual measures that are carried out at the request of the affected person.

Legal obligation:                                 Art. 6 Para. 1 lit. c) DSGVO serves as the legal basis for processing that is necessary to fulfill a legal obligation.

Vital interests:                                     Art. 6 Para. 1 lit. d) DSGVO serves as the legal basis if the processing is necessary to protect the vital interests of the affected person or another natural person.

Public interest:                                    Art. 6 Para. 1 lit. e) DSGVO serves as the legal basis for processing that is necessary for the performance of a task that is in public interest or takes place in the exercise of official authority that has been transferred to the responsible person.

Legitimate interest:                             Art. 6 Para. 1 lit. f) DSGVO serves as the legal basis for processing that is necessary to safeguard the legitimate interests of the responsible person or a third party, provided that the interests or fundamental rights and freedoms of the affected person, which require the protection of personal data, do not prevail, in particular if the affected person is a child.

 

Rights of the affected persons 

Right of information:                          According to Art. 15 DSGVO, affected persons have the right to request a confirmation whether we are processing data relating to them or not. You can request information about this data as well as further information listed in Art. 15 Para. 1 DSGVO as well as a copy of your data.

Right of rectification:                          According to Art. 16 DSGVO, affected persons have the right to request correction or completion of the data relating to them and processed by us.

Right of cancellation:                          According to Art. 17 DSGVO, affected persons have the right to request immediate deletion of the data concerning them.

Alternatively, you can request that we restrict the processing of your data, according to Art. 18 DSGVO.

Right of data portability:                     According to Art. 20 DSGVO, affected persons have the right to request provision of the data they have made available and to request their transmission to another responsible person.

Right of appeal:                                  Affected persons also have the right to complain to the supervisory authority responsible for them in accordance with Art. 77 DSGVO.

Right of contradiction:                        If personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 Clause 1 lit. f) DSGVO, affected persons have the right to object to the processing of their personal data in accordance with Art. 21 DSGVO, if there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In last case, affected persons have a general right of objection, which we will take into account without specifying a particular situation.

Revocation

Some data processing operations are only possible with the explicit consent of the affected persons. You have the option of revoking your consent at any time. An informal message or email to datenschutz@combustin.de is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

External links

Links to online offers of other providers can be found on our website. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.

Amendments 

We reserve the right to adapt this data protection information at any time in the event of changes to our online offer and in compliance with the applicable data protection regulations so that they comply with the legal requirements.


This privacy policy was created by

German data protection law firm - Maximilian Musch