PRIVACY POLICY
1) Introduction and Contact Details of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sabine Hierl, Academy for Animal Health, Birkenweg 7, 92546 Trisching, Germany, Tel.: 01793201554, Email: info@sabinehierl.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website solely for informational purposes, that is, when you do not register or provide us with information in any other way, we only collect data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
– The website visited
– Date and time of access
– Amount of data sent in bytes
– Source/referral from which you arrived at the site
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively should there be concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the prefix “https://” and the padlock symbol in your browser’s address bar.
3) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close the browser (so-called “session cookies”), while others remain on your device longer and allow the saving of site settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of a contract, pursuant to Art. 6(1)(a) GDPR in the case of given consent, or pursuant to Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can set your browser to inform you about the setting of cookies and to decide individually about their acceptance or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting Us
4.1 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business Version” of WhatsApp.
If you contact us via WhatsApp in the context of a specific business (for example, a placed order), we store and use the mobile phone number you use on WhatsApp as well as, if provided, your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) to be able to assign your inquiry to a specific process.
If you use our WhatsApp contact for general inquiries (such as about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as, if provided, your first and last name in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data will always only be used to respond to your inquiry via WhatsApp. There is no transfer to third parties.
Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact data of users who have also contacted us via WhatsApp are stored.
This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts according to Art. 6(1)(a) GDPR by accepting WhatsApp’s terms of use when first using the app on their device. A transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
Please refer to WhatsApp’s privacy notices for the purpose and scope of data collection and further processing and use of data by WhatsApp, as well as your related rights and settings to protect your privacy: [WhatsApp Privacy Policy](https://www.whatsapp.com/legal/?eea=1#privacy-policy)
As part of the above-mentioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.
The provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection for data transfers to the USA.
4.2 When contacting us (e.g., via contact form or email), personal data is collected. The data collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your inquiry according to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been processed. This is the case if it can be inferred from the circumstances that the affected matter has been conclusively resolved and provided there are no statutory retention obligations.
5) Use of Customer Data for Direct Marketing
Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking an appropriate link that you want to receive the newsletter in the future.
By activating the confirmation link, you grant us your consent for the use of your personal data according to Art. 6(1)(a) GDPR. When subscribing to the newsletter, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of subscription to be able to trace any potential misuse of your email address at a later date. The data we collect when subscribing to the newsletter is used exclusively for marketing purposes via the newsletter. You can unsubscribe from the newsletter at any time via the provided link in the newsletter or by sending a corresponding message to the aforementioned responsible party. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use the data beyond that, which is legally permissible and about which we inform you in this statement.
6) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text components stored on your device and collect certain information, including your IP address, which Google shortens by the last digits to exclude direct personal identification.
The information is transmitted to Google servers and further processed there. This may include transfers to Google LLC based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.
All the processing described above, especially the setting of cookies on the used device, only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. Without your consent, the use of Google Analytics 4 does not occur during your site visit. You can revoke your consent at any time with effect for the future. To exercise your right to revoke, please deactivate this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
For further legal information on Google Analytics 4, please visit [Google Privacy Policy](https://policies.google.com/privacy?hl=en&gl=us) and [Google Technologies Policy](https://policies.google.com/technologies/partner-sites)
Demographic Features
Google Analytics 4 uses the special function “demographic features” and can create statistics that provide information about the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and is deleted after being stored for two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have personalized ads enabled and your devices are linked to your Google account, Google can, subject to your consent to the use of Google Analytics according to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the “Personalized Advertising” function in your Google account settings. Follow the instructions on this page: [Google Ads Help](https://support.google.com/ads/answer/2662922?hl=en). Further information on Google Signals can be found at the following link: [Google Analytics Help](https://support.google.com/analytics/answer/7532985?hl=en).
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6(1)(a) GDPR, set up an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
7) Retargeting/Remarketing and Conversion Tracking
Facebook Pixel for Creating Custom Audiences
Within our online offerings, we use the “Facebook Pixel” service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
When a user clicks on an advertisement we have placed on Facebook, the URL of our linked page is extended with a parameter using “Facebook Pixel.” This URL parameter is then entered into the user’s browser via a cookie set by our linked page after redirection.
This allows Facebook to determine the visitors of our online offerings as a target group for displaying advertisements (so-called “Facebook Ads”). Accordingly, we use the service to display the Facebook Ads we have placed only to Facebook users who have shown interest in our online offerings or who have certain characteristics (e.g., interests in specific topics or products determined based on visited websites) that we transmit to Facebook (so-called “Custom Audiences”).
On the other hand, “Facebook Pixel” can track whether users were redirected to our website after clicking on a Facebook advertisement and what actions they perform there (so-called “Conversion Tracking”).
The collected data is anonymous to us, meaning it does not provide us with conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes.
All the processing described above, especially the setting of cookies to read information on the used device, only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
The information generated by Facebook is usually transmitted to a Facebook server and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
8) Site Functionalities
8.1 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transmitted to: Google LLC, USA.
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.
If you start playing embedded videos via the plugin, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your site visit, your data will be directly associated with your account when you click on a video. If you do not want your account to be associated, you must log out before clicking the play button.
All the above-mentioned processing, especially the setting of cookies to read information on the used device, only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
8.2 FontAwesome
This site uses web fonts from the following provider for uniform display of fonts: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA.
When you access a page, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in this process.
The processing of personal data during the connection with the font provider only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer is used.
For data transfers to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with the European level of data protection.
8.3 Google Web Fonts
This site uses web fonts from the following provider for uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you access a page, your browser loads the necessary web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in this process.
Data may also be transmitted to: Google LLC, USA.
The processing of personal data during the connection with the font provider only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer is used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
9) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain effective user consents for consent-requiring cookies and cookie-based applications. The “Cookie Consent Tool” is displayed to users upon page access in the form of an interactive user interface, where consents for certain cookies and/or cookie-based applications can be granted by checking boxes. By using the tool, all consent-requiring cookies/services are only loaded if the respective user has granted corresponding consents by checking boxes. This ensures that such cookies are only set on the user’s device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, the storage, assignment, or logging of cookie settings leads to the processing of personal data (such as the IP address), this is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in compliant, user-specific, and user-friendly consent management for cookies and thus in a compliant design of our website.
Another legal basis for processing is Art. 6(1)(c) GDPR. As controllers, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
If necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.
Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
10) Rights of the Data Subject
10.1 The applicable data protection law grants you the following data subject rights (access and intervention rights) against the controller regarding the processing of your personal data, with reference to the legal basis cited for the respective exercise requirements:
– Right of access according to Art. 15 GDPR;
– Right to rectification according to Art. 16 GDPR;
– Right to erasure according to Art. 17 GDPR;
– Right to restriction of processing according to Art. 18 GDPR;
– Right to notification according to Art. 19 GDPR;
– Right to data portability according to Art. 20 GDPR;
– Right to withdraw given consents according to Art. 7(3) GDPR;
– Right to lodge a complaint according to Art. 77 GDPR.
10.2 Right to Object
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERWEIGHING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERCOME YOUR INTERESTS, BASIC RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
11) Duration of Storage of Personal Data
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and – if applicable – additionally based on the respective statutory retention period (e.g., commercial and tax-related retention periods).
When processing personal data based on explicit consent according to Art. 6(1)(a) GDPR, the affected data is stored until you withdraw your consent.
If there are statutory retention periods for data processed within the framework of legal or quasi-legal obligations based on Art. 6(1)(b) GDPR, this data will be routinely deleted after the expiration of the retention periods, provided it is no longer necessary for the fulfillment or initiation of the contract and/or there is no legitimate interest on our part in further storage.
When processing personal data based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object according to Art. 21(2) GDPR.
Unless otherwise indicated by other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.