Data Protection and Data Privacy Policy

Last amended: 25 May 2018

We thank you for your visit to our website www.bellicon.com and your interest in our company and our offers. Despite careful control of the contents, we do not assume any liability for external links to third-party contents, as we have not initiated the transfer of this information, did not select the addressee of the transmitted information and the transmitted information ourselves or have amended any such information ourselves.

The protection of your personal data in connection with the collection, processing of use on the occasion of your visit to our Internet pages is an important concern for us. The collection, processing and use of your personal data takes place within the scope of the statutory provisions on which you may for instance obtain information on the website www.bfd.bund.de.

In the following, we explain which information we record on the occasion of your visit to our websites and how this information is used.

Contact Data of the Controller responsible for the Processing of the Data

Controller with regard to compliance with data protection legislation is bellicon Deutschland GmbH, Carlswerk, Drahtlager 2.09, Schanzenstraße 6-20, 1063 Cologne. If you have any questions about data protection or want to exercise rights or claims with regard to your personal data, please contact us by email at info@bellicon.fr.

1. Collection and Storage of Personal Data as well as Nature and Purpose of their Use

a) When visiting the Website

Whenever a customer (or any other visitor) visits our website, the Internet browser used on your device (computer, laptop, tablet, smartphone, etc.) automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.
The following data is in this connection collected and stored, without any action on your part, until the time of automatic deletion:

  • IP-address of the accessing computer as well as device-ID or individual device identifier and type of device,
  • the name of the retrieved file and the transmitted data volume, as well as date and time of the retrieval,
  • report on successful retrieval,
  • accessing domain,
  • description of the type of Internet browser used and of the operating system of your device as well as the name of your access provider, as the case may be,
  • your browser history data as well as your default web log information,
  • location data, including location data of your mobile device. Please note that you are able to control or deactivate the use of location services on most mobile devices in the setup menu of the mobile device. 

Our justified interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR is based on the following purposes:

  • ensuring the smooth establishment of a connection and comfortable use of the website,
  • analysis of system security and system stability, and
  • other administrative purposes.

In no event will we use the collected data for the purpose of drawing any conclusions as to your person.

b) When using our Contact Form

Should you have questions of any kind, we offer you the possibility to contact us via a Contact Form provided on our website. In this connection, the specification of your name and of a valid email address is at least required, so that we know, who sent the enquiry and are able to answer it. Further information may be provided on a voluntary basis.

The data processing for the purpose of establishing contact with us takes place in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.

The personal data collected by us for the use of the Contact Form will be automatically erased after the inquiry you have sent us has been answered.

c)    When concluding a contractual Relationship

Upon the conclusion of a contractual relationship on our website (e.g. within the scope of a purchase contract for a product or registration for a seminar at bellicon Academy) or via affiliates of bellicon, we ask you to provide the following personal data:

  • data that personally identify you, such as name and email address, address for invoice and delivery, and telephone number,
  • date of birth,
  • photos,
  • information on your means of payment,
  • additional personal data to whose collection we are legally obliged or entitled and which we require for your authentication, identification or for verifying the data collected by us. 

The above-mentioned data are processed for the handling of the contractual relationship. The processing of the data is performed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR. The storage period is restricted to the contractual purpose and, if applicable, legal and contractual retention regulations.

For the handling of your orders, we cooperate with bellicon AG (Lucerne, Switzerland), on the basis of an agreement on commissioned data processing.
 
d)    When registering for our Newsletter

If you expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address for sending you our newsletter on a regular basis.

Deregistration is possible at any time, for instance via a link at the end of a newsletter. Alternatively, you can send us your deregistration request also via email to info@bellicon.fr (it is best to use the reference: "Deregistration/Abmeldung Newsletter").

e)    When submitting a Critique

We offer you the possibility to assess our products and to publish the critique on our website. Should you wish to do so, we ask you to provide the following information: Name and email address, and the product you purchased. Additional information can be provided on a voluntary basis.

The processing of data which you provided in connection with your critique takes place in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent.

The personal data provided by you when sending the critique will be erased automatically after the erasure of the critique. You can have a critique erased at any time by sending an email to info@bellicon.fr.

    2. Disclosure of personal Data

    No transmission of your data to third parties for purposes other than those listed below takes place.

    We disclose your data to third parties only, if:

    • you gave your express consent to such disclosure (Art. 6 para. 1 sentence 1 lit. a GDPR),
    • this is required for the performance of contracts to which you are a party (Art. 6 para. 1 sentence 1 lit. b GDPR),
    • there is a legal obligation to disclose the data (Art. 6 para.1 sentence 1 lit. c GDPR),
    • the disclosure is required for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 sentence 1 lit. f GDPR).

    In these cases, the volume of the disclosed data is however restricted to the necessary minimum.

    Our data protection and data privacy provisions are in compliance with the applicable provisions of data protection legislation and the data are processed only in the Federal Republic of Germany and in Switzerland. The latter country was considered a third country by the European Commission, which ensures an appropriate level of data protection. In this regard, there are no reservations on the part of the European Commission concerning transmission of data to Switzerland and the transmission is possible on the basis of Art. 44 GDPR. Further information in this connection may be obtained from the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en. No transmission is made or intended to be made to other third countries.

    3. Rights of Data Subjects

    Upon your request, we will be pleased to inform you whether and which personal data are stored with regard to your person (Art. 15 GDPR), in particular on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge complaints, the origin of your data, if these were not collected by us, and on the existence of automated individual decision-making, including profiling.

    You also have the right to rectify any incorrectly collected personal data or to have incompletely collected data completed (Art. 16 GDPR).

    Moreover, you have the right to demand the restriction of processing of your data by us, if the legal prerequisites are fulfilled (Art. 18 GDPR).

    You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to demand transmission of the data to another controller (Art. 20 GDPR).

    Moreover, you have the so-called "Right to be forgotten", i.e. you are entitled to demand that we erase your personal data as soon as the legal prerequisites for such erasure are fulfilled (Art. 17 GDPR).

    Irrespective of the above, your personal data will automatically be erased by us, when the purpose of the data collection no longer exists or the data processing has been unlawful.

    In accordance with Art. 7 para. 3 GDPR you have the right to revoke your consent given to us at any time. As a consequence, we will not be permitted to continue the processing of data that was performed on this basis in the future.

    You in addition have the right to object at any time against the processing of your personal data, if a right to object is provided for by law. In the event of a legally valid objection, your personal data will also be automatically erased by us (Art. 21 GDPR).

    If you wish to avail yourself of your right of revocation or objection, just send an email to info@bellicon.fr.

    In the event of any violations of the provisions of data protection legislation, you are able, in accordance with Art. 77 GDPR, to lodge a complaint with the competent supervisory authority. The competent supervisory authority is both the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen/Data Protection Officer for Data Protection and Freedom of Information of North Rhine-Westphalia (https://www.ldi.nrw.de/) and any other supervisory authority.

    4. Duration of Data Storage

    The collected data are stored by us as long as this is required for the performance of the contracts concluded with us or as long as you have not exercised your right to erasure or to transfer of data to another company.

    5. Cookies

    We use cookies on our website. These are small text files that are automatically generated by your browser and are saved to your device when you visit our website.

    In the cookie, information is stored that results in each case from the specifically used device. This however does not mean that we directly obtain knowledge of your identity.

    The use of cookies first and foremost serves to make the use of our offers more comfortable for you: Thus, we employ so-called session cookies, in order to see that you already visited individual subpages of our website and, if you registered with us, your password will be stored during your visit to our website and whenever you go to other subpages, so that you are not obliged to input it again every time, or products placed by you in the shopping cart are stored until you click "Place Order". These session cookies are automatically deleted when you leave our website. For optimising user friendliness, we in addition use temporary cookies, which are saved for a particular, defined period of time to your device. When you visit our site again to use our services, the system automatically recognises that you have visited us beforehand and the inputs and settings you made, e.g. which language you selected, so that you do not need to input them again.

    Moreover, we employ cookies to statistically record and analyse the use of our website and to optimise our offers for you. These cookies enable us to automatically recognise that you have already visited our website when you visit our website again. These cookies are automatically deleted after a predefined period of time.

    The data processed by cookies are required for the aforementioned purposes to safeguard our justified interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Most browsers automatically accept cookies. If you do not wish that we recognise information on your computer, kindly change the settings of your Internet browser in such a way that it deletes cookies from your computer hard disk, blocks all cookies or warns you before a cookie is saved. In the Help and Support area of your Internet browser, you will find information on how you can delete or block cookies. There, you will find instructions on how to find the file or directory in which cookies are stored.

    In any case, please note that, if you completely deactivate the use of cookies, you may not be able to use all functionalities of our website to their full extent.

    When you leave our website via a link or clicking a banner ad and thus are redirected to third-party sites, it may happen that the addressee of the target page you clicked will also store cookies on your device. We are legally not responsible for such cookies. As regards the use of such cookies and the information stored in these by our advertising partners, you may wish to compare their data privacy policies.

    When making available our website, Java-Applets and Java-Script are being used. If you do not wish to avail yourself of these utilities or contents for security reasons, you should deactivate the relevant setting of your browser.

    6. Online-Marketing-/ Analysis Measures

    On our website, we use online-marketing measures and tracking tools for analysing the behaviour of the users on our website. By means of this statistical recording, we intend to design our website appropriately and in a needs-based manner and continuously adapt it for you as our user, optimise its utilisation and enhance its attractiveness and functionality.

    The use of the online marketing and tracking measures employed by us is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, section 15 sub-section 3 TMG (German Telemedia Act). Our aforementioned interests are justified within the meaning of the aforementioned provision.

    a) Google Analytics

    For the purpose of appropriately designing and continuously optimising our web pages to respond to users' needs, we employ Google Analytics, a web analysis service offered by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google").

    In this connection, pseudonymised usage profiles are established and cookies (see also section 5 et seq.) are stored. The information generated by the cookie on your use of this website, such as browser type/version, operating system used, referrer-URL (the website visited beforehand), host name of the accessing computer (IP-address) and the time of the server request are sent to a server of Google in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activities and to render additional services in connection with the use of the website and Internet for the purposes of market research and needs-based design of these websites. These purposes also constitute our justified interest in the data processing. The legal basis for the use of Google Analytics is section 15 sub-section 3 TMG in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR.

    This information may also be transferred to third parties insofar as this is legally required or if third parties process these data on our behalf within the framework of commissioned data processing. In no event will your IP-address be combined with other data of Google. The addresses are anonymised, so that no attribution is possible any more (so-called IP-Masking).

    The data sent by us and linked to cookies, user identifiers (e.g. User-ID) or advertising-IDs are automatically erased after 14 months. The erasure of data whose retention period has expired takes place automatically once a month.

    Further information concerning the terms and conditions of use as well as data protection and data privacy of Google Analytics may be found at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html.

    You are able to prevent the installation and storage of cookies by means of corresponding settings of your browser software; we would like to point out however that, if you do so, you may not be able to use all functionalities of our website to their full extent.

    Moreover, you are able to prevent the collection of the data generated by the cookie and relating to your use of the website (incl. your IP-address) as well as the processing of these data by Google, by downloading and installing the browser plug-in available at the following link https://tools.google.com/dlpage/gaoptout?hl=de.

    As an alternative to the browser add-on, in particular in the case of browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking immediately on the following link. An opt-out cookie is set that prevents the future collection of your data when you visit this website: deactivate Google Analytics. The opt-out cookie is valid in this browser only and only for our website and is stored on your device. When you delete the cookies in this browser, you need to set the opt-out cookie again.

    b) Google AdWords / Conversion Tracking

    We in addition use the online advertising programme "Google AdWords" and the Conversion Tracking within the framework of Google AdWords. Google Conversion Tracking is an analysis service provided by Google.

    When you click an advertisement placed by Google, a cookie for the Conversion Tracking is stored on your device. These cookies expire after 30 days, do not contain any personal data and thus do not serve personal identification purposes.

    When you visit certain Internet pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked the advertisement and were redirected to this site. Each Google AdWords customer receives a different cookie. Thus, it is not possible to track cookies via websites of AdWords customers.

    The information obtained by means of the Conversion cookie serves to prepare Conversion statistics for AdWords customers who opted for Conversion Tracking. In this connection, the customers are informed of the overall number of uses who clicked their advertisement and were redirected to a site equipped with a Conversion Tracking tag. They however do not receive any information that would permit the personal identification of users. These purposes also represent our justified interest in the data processing. The legal basis for the use of Google AdWords/ Conversion Tracking is section 15 sub-section 3 TMG in conjunction with Art. 6 para. 1 sentence 1 lit. f GDPR.

    If you do not wish to participate in the Tracking, you can object to this use by preventing the installation of the cookies from the domain "googleadservices.com" by a corresponding setting of your browser software (Deactivation Option). You will then not be included in the Conversion Tracking statistics. For further information and the data privacy policy of Google, go to http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/.

    c) Google Remarketing

    This website employs Google Remarketing, a marketing service offered by Google Inc. ("Google"). Third-party providers, including Google, place advertisements on websites on the Internet. Third-party providers, including Google, employ cookies to place advertisements on the basis of prior visits by a user to this website. Users are able to deactivate the use of cookies by Google, by calling up the page for deactivating Google advertising at http://www.google.com/privacy_ads.html. Alternatively, users can deactivate the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/managing/opt_out.asp.

    d) Google Tag Manager

    The Google Tag Manager is used on this website. By means of the Google Tag Manager, it is possible to manage website tags via a user interface. The tool Tag Manager as such (which implements the tag) is a cookie-less domain and does not collect personal data. The tool provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access these data. When any deactivation was made at domain or cookie level, this remains in force for all tracking tags, which are implemented by means of Google Tag Manager.

    Further information on the Google Tag Manager may be found at https://www.google.com/intl/de/tagmanager/use-policy.html

    e) Facebook Connect/ Facebook Pixel

    With your consent, our website uses the so-called "Facebook-Pixel", which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA ("Facebook"). We use it to be able to track the behaviour of the visitors to our website when they have been redirected to the website of the seller after they clicked a Facebook advertisement. This enables the analysis of the efficiency of the Facebook advertisements for statistical and marketing research purposes and the optimisation of future advertising measures. The collected data are anonymous for us as the operator of this website; we are not able to draw any conclusions as to the identity of the users. The data are however stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook is able to use the data for their own advertising purposes, in accordance with Facebook's guideline concerning the use of data. This enables Facebook to place advertisements on the pages of Facebook as well as outside of Facebook. We, as the operator of this website, have no influence on this use of the data. Moreover, a cookie may be stored on your computer for these purposes. In the data privacy information of Facebook, you will find additional information on the protection of your privacy: https://www.facebook.com/about/privacy/.

    You are also able to deactivate the remarketing function "Custom Audiences" in the settings area for advertisements at  https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you must have registered with Facebook. When you do not have a Facebook account, you can deactivate usage-based advertising of Facebook on the website of the European Interactive Digital Advertising Alliance.

    Please click here, if you wish to revoke your consent: OPT-OUT

    f) Taboola

    The use of the technology of Taboola Inc. (1115 Broadway, 7th Floor, New York, New York 10010) enables us to recommend videos fitting your personal interests and thus to individually design our range of offers for you. Taboola determines by means of cookies, which video offers you use and how you move about on our website. For this purpose, device-based data and log data are collected and usage profiles are generated, using pseudonyms. These usage profiles are not aggregated and do not permit to draw any conclusions as regards your personal data.

    For more detailed information on Taboola and the possibility to deactivate the use of Taboola and their data privacy information, go to https://www.taboola.com/privacy-policy

    g) Outbrain

    On some of our web pages, we have integrated a so-called widget of Outbrain UK Limited, a company having its registered office in London. The service Outbrain is used for drawing your attention to supplementary contents, which are connected to the topics of the contents already read by you. If you did not declare your opt-out, the selection of the contents displayed in the widget is also made on the basis of those contents, which you currently and in the recent past have viewed on our web pages. For this purpose, Outbrain inter alia uses cookies.

    The contents displayed in the widget are controlled and delivered in terms of contents and technology by Outbrain. We do not collect and use personal data in connection with the Outbrain widget. Outbrain provides information on the collection and utilisation of usage and other data in their data privacy policy (https://www.outbrain.com/legal/privacy). There, you are also able to object to the use of usage and other data for particular purposes (Opt-out). The recommendations of contents in the widget will afterwards no longer be controlled on the basis of usage data recorded by Outbrain.

    h) Hotjar

    We employ Hotjar, which essentially is a tracking code-based web analysis tool offered by Hotjar Ltd., (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). By means of Hotjar, interactions between randomly selected, individual visitors of our website are recorded in an anonymised form. This creates a log of e.g. mouse movements and clicks, with the aim of finding possibilities for improving our offers. Moreover, information on the operating system, browser, inbound and outbound references (Links), geographic origin, as well as resolution and nature of the device accessing our website are analysed for statistical purposes. Moreover, we offer the possibility of an anonymous user feedback via Hotjar by means of so-called "Feedback Pools". The recorded information is not person-related, is stored by Hotjar Ltd. and is not passed on to other third parties. You may find supplementary information on functions and data usage by means of Hotjar at https://www.hotjar.com/privacy. If you do not desire an analysis of your web site by means of Hotjar, you can activate this on all Internet sites that employ Hotjar, by setting a DoNotTrack header in your browser (Hotjar-opt-out).

    i) sendgrid

    For the dispatch of order confirmation messages, we employ the service provider SendGrid. SendGrid is an offer of SendGrid, Inc., 1401 Walnut, Boulder, CO 80302, USA. Information on the data privacy policy of SendGrid may be found at https://sendgrid.com/privacy.

    j) MailChimp

    For the dispatch of newsletters, we utilise the services of MailChimp, an offer of Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service which inter alia enables the organisation and dispatch of newsletters. When you input data for the purpose of receiving newsletters (e.g. your email address), these are stored on the servers of MailChimp in the USA. MailChimp has received a certification in accordance with the "EU-US Privacy Shield". The "Privacy Shield" is an agreement concluded between the European Union (EU) and the USA that shall guarantee compliance with European data protection and data privacy standards in the USA.

    With the help of MailChimp, we are able to analyse our newsletter campaigns. When you open an email that has been sent by MailChimp, a file contained in the email (so-called web-beacon) establishes a connection to the servers of MailChimp in the USA. Thus, it is possible to determine whether a newsletter message was opened and which links, if any, were clicked. Moreover, technical information is recorded (e.g. time of retrieval, IP-address, browser type and operating system). We are not able to attribute this information to the respective recipients of the newsletters. They exclusively serve the purpose of statistical analysis of newsletter campaigns. We can use the results of these analyses to better adapt future newsletters to the interests of the recipients.

    If you do not wish any analysis by MailChimp, you need to unsubscribe from the newsletter. For this purpose, we provide a relevant link in each newsletter message.

    The data processing is performed on the basis of your consent (Art. 6 para. 1 lit. a GDPR), which you can revoke at any time. The lawfulness of the data processing procedures that have already taken place remains unaffected by such revocation.

    The data stored by you with us for the purpose of receiving newsletters remain stored by us until your deregistration from the newsletter and will be deleted from both our servers and from the servers of MailChimp after you unsubscribe from the newsletter. Data, which have been stored by us for other purposes (e.g. email addresses for the member section), remain unaffected thereby. For more details, you may wish to consult the data privacy provisions of MailChimp at https://mailchimp.com/legal/terms/.

    We have concluded a so-called "Data Processing Agreement" with MailChimp, in which we obligate MailChimp to protect the data of our customers and not to disclose them to any third parties.

    7. Links to our Internet Presence in Social Networks

    We have integrated links to our Internet presences in the social networks (Facebook, YouTube, Twitter, Instagram, Pinterest, Google+) on our website, which can be reached by clicking the respective button on our News Page. We would like to point out in this connection that these are only nks that redirect you to our Internet presence in the respective social network, these are not so-called plug-ins, which enable you for instance to "share" or "like" information on our website in the respective network. As far as we know, it is not technically feasible that the above-mentioned social network can collect personal data on our website by means of this mere linking. When you click any of the links, you are transferred to our Internet presence in the respective social network. As regards the purpose and scope of the data collection made by that network, you may wish to consult the data privacy information of the relevant network.

    8. Data Security and Data Privacy

    We endeavour to take any and all necessary technical and organisational security measures to store your personal data in such a way that they are not accessible by third parties or the general public. Should you wish to contact us by email, we would like to draw your attention to the fact that, when using this means of communication, the confidentiality of the transmitted information cannot be ensured in full. We therefore recommend that you send us confidential information exclusively by post.

    9. Up-to-Dateness and Amendment of this Data Privacy Policy

    This Data Privacy Policy is at present in force and effect and was last amended in May 2018. 

    The further development of our website and the offers made on it or as a result of amended legal or official regulations may necessitate an amendment of this Data Privacy Policy. The Data Privacy Policy, as amended, can at any time be retrieved by you from our website at https://www.bellicon.com/de_de/datenschutz, and printed out.