Data protection declaration

Sense of the data protection declaration

Visiting a website usually involves data processing processes that may affect your personal data. As your personal data is particularly worthy of protection, every website operator is obliged to provide information on this in accordance with Articles 13 and 14 of the European General Data Protection Regulation (EU GDPR). This privacy policy is intended to inform users of this website about the type, scope and purpose of the collection and use of personal data by the website operator in accordance with the Federal Data Protection Act and the Telemedia Act.

Bianka Kerres, Rua Baltazar Guimarães 17, 2º Esqdº, 2925-786 Azeitão, PORTUGAL,

and about the rights of users.

I take your data protection very seriously and treat your personal data confidentially and in accordance with the statutory provisions.

Please bear in mind that there can always be security gaps in data transmission on the Internet. Complete protection against access by third parties cannot be realised.

I. Basic explanations on data protection

I.1 Controller responsible for data processing on this website

As the operator of this website I am,

Bianka Kerres

Rua Baltazar Guimarães 17, 2º Esqdº
2925-786 Azeitão

PORTUGAL

E-Mail: info@naturheilpraxis-kerres.de

Tel.: +351 935 692 419

responsible for the data processing that occurs when you visit this website. All information about me can be found in the imprint of this website.

I.2 Scope of application

This privacy policy is intended to inform users of this website about the type, scope and purpose of the collection and use of personal data by the website operator Bianka Kerres – Naturheilpraxis für Mensch und Tier in accordance with the Federal Data Protection Act and the Telemedia Act.

I.3 Access data

What is personal data and how is it processed on this website?

Personal data is all data that can be used to identify you personally, for example your name, address or e-mail address. Non-personal data is not subject to the Data Protection Act and can be stored and processed in anonymised form.

When you visit my website www.bianka-kerres.com, the browser used on your device automatically sends information to the server of my website. This information is temporarily stored in a so-called log file. The following information is temporarily recorded in a log file without any action on your part (by the provider, 1&1 Internet AG, Eigendorfer Straße 57, 56410 Montabaur, Germany) and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Amount of data transferred in each case
• Website from which the access is made (referrer URL),
• the browser used and, if applicable, the operating system of your computer and the name of your access provider
• Language and version of the browser software.

Further data is collected when you provide it to me, for example by using a contact form.

In addition, I use cookies and analysis services when you visit my website. You will find more detailed explanations below under sections II.1. and II.2. of this privacy policy.

The legal basis for data processing is Art. 6 para. 1 sentence 1 f GDPR.

I would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

I.4 Purpose of data collection and disclosure of data

I process the aforementioned data in order to display my website to you and to ensure stability and security. In particular, the data is required

• to ensure a smooth connection establishment of the website
• to ensure a comfortable use of my website
• to evaluate system security and stability, and
• for further administrative purposes.

Your personal data will not be transferred to third parties for purposes other than those listed below.

I will only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 b GDPR.

II Detailed information on data collection

II.1 Technically necessary cookies

I use cookies on my website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit my website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that I gain knowledge of your identity.

On the one hand, the use of cookies serves to make the use of my website more pleasant for you. For example, I use so-called session cookies to recognise that you have already visited individual pages of my website. These are automatically deleted after you leave my site.

In addition, I also use temporary cookies to optimise user-friendliness, which are stored on your end device for a specified period of time. If you visit my website again to use the services, it will automatically recognise that you have already visited me and which entries and settings you have made so that you do not have to enter them again.

The data processed by cookies are necessary for the purposes mentioned to protect my legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of my website.

II.2 Technically unnecessary cookies

II.2.a. Data protection provisions about the application and use of analysis tools

The tracking measures listed below and used by me are carried out on the basis of Art. 6 para. 1 sentence 1 f GDPR. With the tracking measures used, I would like to ensure a needs-based design and the continuous optimisation of my website. On the other hand, the tracking measures are used to statistically record the use of my website and to evaluate it for the purpose of optimising my offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

For my website I use 1&1 WebAnalytics, a web analysis service of 1&1 AG (1&1). 1&1 WebAnalytics uses so-called ‘cookies’, text files which are stored on your computer and which enable your use of the website to be analysed.

The information generated by the cookie about your use of this website (including your IP address) is transmitted to a 1&1 server and stored there. 1&1 will use this information for the purpose of analysing your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. 1&1 may also transfer this information to third parties where required to do so by law, or where such third parties process the information on 1&1’s behalf.

Under no circumstances will 1&1 associate your IP address with other 1&1 data.

II.2.b. Data protection provisions about the application and use of social media plugins

This website uses Facebook social plugins, which are operated by Facebook Inc (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be recognised by the Facebook logo or the terms ‘Like’, ‘Like’, ‘Share’ in the Facebook colours (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/

The plugin establishes a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the nature and scope of the data that the plugin transmits to the Facebook Inc. servers. You can find information on this here: https://www.facebook.com/help/186325668085084

The plugin informs Facebook Inc. that you have visited this website. There is a possibility that your IP address will be saved. If you are logged into your Facebook account during your visit to this website, this information will be linked to it.

If you use the functions of the plugin – for example by sharing or ‘liking’ a post – the corresponding information is also transmitted to Facebook Inc.

If you would like to prevent Facebook. Inc. from linking this data to your Facebook account, please log out of Facebook before visiting this website.

This website also uses the ‘+1’ button from Google Plus. This is operated by Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you visit a page that contains the ‘+1’ button, a direct connection is established between your browser and the Google servers. The website operator therefore has no influence whatsoever on the nature and scope of the data that the plugin transmits to the Google Inc. servers. If you click on the ‘+1’ button while you are logged into Google +, you share the content of the page on your public profile.

According to Google Inc., personal data is only collected when you click on the button. The IP address is also stored for logged-in Google users. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.

The data controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google in this way, they can prevent the transmission by logging out of their YouTube account before accessing our website.

The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

II.3 Contact by e-mail

You can also contact me by e-mail (SSL encryption). If you send me an e-mail, the data you provide (e.g. your e-mail address, possibly your name and telephone number) will initially be stored in order to answer your questions. If storage is no longer necessary, I will delete the personal data collected. If there is a legal obligation to retain data, I will restrict the processing. This data will not be passed on to third parties without your consent.

II.4 Online appointment allocation

In order to be able to arrange an appointment with you, I need various details about the appointment: Your name, your telephone number, your e-mail address, your address and your date of birth. The data collected is used exclusively for the provision of services (online appointment allocation) to you. I will only process and use this data insofar as this is necessary to provide the online appointment service you have requested. The data is transmitted to the service provider in encrypted form and deleted from the online servers after processing.

I proceed according to the principle of data minimisation and data avoidance, i.e. only as much data is used and recorded as is necessary for the appointment booking.

The online appointment booking pages are secured using SSL encryption. By using the online appointment system, you consent to the processing of the aforementioned data. You can revoke your consent at any time.

Your data is stored securely in a data centre in Germany: Address: 1&1 Internet SE, Elgendorfer Str. 57 in 56410 Montabaur

We use the following service providers for appointment reminders / appointment confirmations / appointment cancellations by e-mail:

We use the following service providers for appointment reminders / appointment confirmations / appointment cancellations by e-mail:

1&1 Internet SE – Elgendorfer Str. 57 – 56410 Montabaur – https://hosting.1und1.de/terms-gtc/terms-privacy/

III. Rights of data subjects

You have the right with regard to your data protection, to request information about your personal data processed by me in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data;

– in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by me, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

– in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

– in accordance with Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;

– in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to me at any time. As a result, I may no longer continue the data processing that was based on this consent in the future, and

– to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of my practice.

When you visit our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect the data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

IV. Data security

When you visit our website, we use the SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect the data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

V. Right of objection and possibility of cancellation

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by me without specifying a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an email to info@naturheilpraxis-kerres.de. Please refer to the notes under Section II.3.

If you wish to exercise your right of cancellation or objection, simply send an email to info@naturheilpraxis-kerres.de. Please refer to the notes under Section II.3.

The responsible data protection authority:

State Commissioner for Data Protection and Freedom of Information

Nordrhein-Westfalen

Helga Block

Kavalleriestraße 2-4

40213 Düsseldorf

0049 2 11/384 24-0

Email: poststelle@ldi.nrw.de

Website: http://www.ldi.nrw.de/

VI. Up-to-dateness and amendment

This privacy policy is currently valid and was last updated in May 2018.

Due to the further development of my website and the offers provided by me or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website at www.bianka-kerres.com/datenschutzerklaerung.