Privacy Policy

Privacy policy bellicon+

Thank you for visiting our website www.bellicon.com and for your interest in our company and our offers. Despite careful control of the content, we do not assume any liability for external links to third-party content, as we did not initiate the transmission of this information, did not select or change the addressee of the transmitted information and the transmitted information itself.

The protection of your personal data during the collection, processing and use on the occasion of your visit to our website is an important concern for us and is carried out within the framework of the legal regulations, about which you can inform yourself e.g. under www.bfd.bund.de.

In the following, we explain what information we collect during your visit to our website and how it is used:

Collection and storage of personal data as well as type and purpose of their use

When visiting the website

Each time a customer (or other visitor) accesses our website, the internet browser used on your end device (computer, laptop, tablet, smartphone, etc.) automatically sends information to the server of our website. This information is temporarily stored in a so-called log file.

The following data is collected without your intervention and stored until automated deletion:

  • (pseudonymized) IP address of the requesting computer, as well as device ID or individual device identifier and device type, referral URLs,
  • Data on video retrievals that you watch in order to train with bellicon Home, in particular the name of the retrieved file and the amount of data transferred, as well as the date and time of the retrieval,
  • Message about successful retrieval,
  • requesting domain,
  • Description of the type of Internet browser used and, if applicable, the operating system of your terminal device, as well as the name of your access provider,
  • Your browser history data as well as your standard weblog information,
  • Location data, including location data from your mobile device. Please note that most mobile devices allow you to control or disable the use of location services in the mobile device's settings menu.

Our legitimate interest according to Art. 6 para. 1 p. 1 lit. f DSGVO to collect the data is based on the following purposes:

  • Ensuring a smooth connection and comfortable use of the website,
  • Evaluation of system security and stability, and
  • for other administrative purposes.

In no case do we use the collected data for the purpose of drawing conclusions about your person.

When using our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. At least the specification of a valid e-mail address is required, so that we know from whom the request originates and to be able to answer it. Further information can be provided voluntarily (e.g. file attachments).

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

Upon conclusion of a contractual relationship

  • When concluding a contractual relationship on our website (e.g. registering as a customer, purchasing a subscription), we ask you to provide the following personal data:
  • Data that personally identifies you such as name and email address, billing and shipping address/ and phone number, age, gender, height,
  • the information about your means of payment,
  • other personal data that we are required or authorized by law to collect and process and that we need for your authentication, identification or to verify the data we collect.

The aforementioned data is processed for the purpose of handling the contractual relationship. The processing of the data is based on Art. 6 para. 1 p. 1 lit. b DSGVO. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual retention obligations.

Use of payment service providers

For the processing of your order, we also work with the following payment service provider. We pass on your order data to the payment service provider selected by you within the framework of the payment processing - for the purpose of the payment - insofar as this is necessary for the payment processing. The legal basis for the transfer of data is in each case Art. 6 para. 1 p. 1 lit. b DSGVO.

  • PayPal

    If you select payment via "PayPal", you will be forwarded directly via an interface to the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, after confirmation of the conclusion of the contract, where you can enter your payment data and select your desired payment method at PayPal and then process the payment. We would like to point out that PayPal's data protection regulations apply to this. For information on the processing of your personal data by PayPal and your rights, please refer to the PayPal Privacy Policy (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

    As a precautionary measure, we would like to point out that PayPal reserves the right to conduct a credit check if PayPal is to make an advance payment due to its legitimate interest in determining your ability to pay (in each case Art. 6 (1) p. 1 lit. b DSGVO). For this purpose, PayPal may pass on your payment data to credit agencies. The result of the credit assessment with regard to the statistical probability of non-payment may include probability values (so-called score values), which are calculated on the basis of scientifically recognized mathematical-statistical methods and in the calculation of which, among other things, address data are included. According to PayPal, your interests worthy of protection are taken into account in accordance with the legal provisions. For more information, in particular regarding your rights, please refer to PayPal's applicable data protection principles (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

  • STRIPE

    In addition, we use the service of Stripe, Inc. 510 Townsend Street San Francisco, CA 94103, USA for payment processing. By filling out and sending the registration form, various personal data are automatically transmitted to STRIPE. The data transmission takes place for the purpose of processing the payment.

    The recipient of the collected data is STRIPE. Insofar as a transfer of your data to the USA takes place, this is done on the basis of an adequacy decision pursuant to Art. 45 DSGVO. This adequacy decision was issued on the basis of the EU-US Data Privacy Framework. STRIPE has certified itself according to the requirements of the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TQOUAA4&status=Active.

    The acquisition and accompanying processing of data are governed by the provisions of STRIPE: https://stripe.com/de/privacy.

  • Chargebee

    We use the service of Chargebee Inc. Inc., 909 Rose Avenue, Suite 610, North Bethesda, MD 20852, USA (hereinafter referred to as Chargebee) for the creation of our invoices. In addition to your name, your e-mail address and your address, we pass on your order data to Chargebee if this is necessary for invoicing. The legal basis for the transfer of data is in each case Art. 6 para. 1 p. 1 lit. b DSGVO.

    The recipient of the collected data is Chargebee. Insofar as a transfer of your data to the USA takes place, this is done on the basis of your consent pursuant to Art. 49 para. 1 p. 1 lit. a DSGVO. In addition, Chargebee has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

    Chargebee's terms and conditions apply to the acquisition and accompanying processing of data: https://www.chargebee.com/privacy/.

  • FusionAuth

    We use the FusionAuth service provided by Inversoft, Inc, 1630 Welton Street, Suite 600-A, Denver, CO 80202 USA (hereinafter FusionAuth). FusionAuth enables access to all of our applications through a single sign on process.

    For this purpose, FusionAuth processes your last name, first name, password and email address.

    The use of FusionAuth is intended to enable users to easily log in to our applications and to prevent the misuse of user accounts. The use of FusionAuth is therefore in our legitimate interest pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO.

    The recipient of the collected data is FusionAuth. If your data is transferred to the USA, this is done on the basis of your consent pursuant to Art. 49 (1) p. 1 lit. a DSGVO. In addition, FusionAuth has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

    The provisions of FusionAuth apply to the acquisition and accompanying processing of data: https://fusionauth.io/privacy-policy.

Disclosure of personal data

Your data will not be transferred to third parties for purposes other than those listed below.

We will only share your information with third parties if:

  • you have given your express consent to this according to (Art. 6 para. 1 p. 1 lit. a DSGVO),
  • this is necessary for the processing of contractual relationships with you (Art. 6 para. 1 p. 1 lit. b DSGVO),
  • a legal obligation to disclose exists (Art. 6 para. 1 p. 1 lit. c DSGVO),
  • the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 p. 1 lit. f DSGVO).

In these cases, however, the scope of the data transmitted is limited to the minimum required.

Our privacy policy is in accordance with applicable data protection legislation and the data is processed in the Netherlands. However, we also work with third-party providers who may process the data outside the EU. All third party providers we work with are listed in our Privacy Policy.

Data subject rights

Upon request, we will be happy to inform you whether and which personal data relating to you are stored (Art. 15 DSGVO), in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and the existence of automated decision-making, including profiling.

You also have the right to have any incorrectly collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).

Furthermore, you have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 DSGVO).

You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer to another controller (Art. 20 DSGVO).

In addition, you are entitled to the so-called "right to be forgotten", i.e. you can demand that we delete your personal data, provided that the legal requirements for this are met (Art. 17 DSGVO).

Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection has ceased to exist or the data processing has been carried out unlawfully.

According to Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.

You also have the right to object to the processing of your personal data at any time, provided that a right of objection is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 DSGVO).

If you wish to exercise your right of revocation or objection, an e-mail to: [email protected]

In the event of violations of data protection regulations, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO. The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information (https://www.datenschutz-berlin.de/) as well as any other supervisory authority.

Duration of data storage

The collected data will be stored by us as long as this is necessary for the execution of the contracts entered into with us or you have not exercised your right of deletion or your right of data transfer to another company.

Cookies

We use cookies on our website. These are small text files that are automatically created by your browser and stored on your terminal device when you visit our website. In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain immediate knowledge of your identity.

These cookies are set as so-called first-party cookies ("own cookies") or third-party cookies ("third-party cookies"). First-party cookies are set by the website you are currently on and are not made accessible by browsers across domains. A third-party cookie, on the other hand, is set by a third party, i.e. not by the actual website you are currently on.

The cookies are further differentiated into technically necessary and technically unnecessary cookies. On our website, both technically necessary cookies and technically unnecessary cookies are set in accordance with the following paragraphs.

a) Technically necessary cookies

Technically necessary cookies are mandatory for the operation of our website and lead, for example, to certain functions being made possible for you in the first place. These technically necessary cookies, which are only required and set for the individual necessary online session, are automatically deleted after you leave our website.

The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 p. 1 lit. f DSGVO.

b) Technically unnecessary cookies

Insofar as you have declared the corresponding consent, we use so-called technically unnecessary cookies on our site. The technically unnecessary cookies are mainly used to evaluate the use of the website and user behavior, to compile reports on the activities of visitors to the website and to provide other services related to the use of the website.

The technically unnecessary cookies used by us are explained in our cookie banner with regard to the mode of operation, duration and possible third-party recipients of the data. If certain third-party providers used by us set cookies as part of the service provided to us, this will also be pointed out separately in our privacy policy.

The legal basis for the use of technically unnecessary cookies is Art. 6 para. 1 p. 1 lit. a DSGVO, provided you have given your consent.

You can revoke your consent at any time. Furthermore, you have the option to configure the setting of cookies at any time. For example, you can set your browser so that it informs you in advance about the setting of cookies or completely denies cookies.

Google reCAPTCHA

To protect your requests via Internet form, we use the service reCAPTCHA offered by Google Inc. The query serves to distinguish whether the input is made by a human or abusive by automated, machine processing. The query includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other data from Google. The deviating data protection provisions of the Google company apply to this data. You can find more information about Google's privacy policy at: https://www.google.com/intl/de/policies/privacy/. You can find an opt-out option at the following link: https://adssettings.google.com/authenticated.

The recipient of the collected data is Google. Insofar as a transfer of your data to the USA takes place, this is done on the basis of an adequacy decision pursuant to Art. 45 DSGVO. This adequacy decision was issued on the basis of the EU-US Data Privacy Framework. Google has certified itself in accordance with the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

Zendesk

For faster and more efficient handling of customer inquiries we use the ticket system "Zendesk", a customer service platform of Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102. Likewise, we use the solution Zendesk Guide as a knowledge base for the FAQ available to you.

For the processing of your requests, necessary data, such as your surname, first name, address, telephone number, e-mail address are collected and processed. The legal basis for the processing of your data is our legitimate interest in a fast and efficient processing of your requests according to Art. 6 para. 1 lit. f) DSGVO.

The recipient of the collected data is Zendesk. Insofar as a transfer of your data to the USA takes place, this is done on the basis of an adequacy decision pursuant to Art 45 DSGVO. This adequacy decision was issued on the basis of the EU-US Data Privacy Framework. Zendesk has certified itself in accordance with the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TOjeAAG&status=Active.

For more information about how Zendesk handles your information, please see Zendesk's Privacy Policy: https://www.zendesk.de/company/customers-partners/privacy-policy/.

Alternatively, if you are uncomfortable with processing your request through Zendesk, you may communicate with us by email, phone, or fax.

Online marketing / analysis measures

With the statistical collection through online marketing measures and tracking tools, we want to design our website according to demand and continuously adapt it for you, as our user, and optimize its use.

The use of online marketing and tracking measures used by us is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

Google Tools

On our website we use various tools from Google.

The recipient of the collected data is Google. Insofar as a transfer of your data to the USA takes place, this is done on the basis of an adequacy decision pursuant to Art. 45 DSGVO. This adequacy decision was issued on the basis of the EU-US Data Privacy Framework. Google has certified itself in accordance with the requirements of the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

Google Analytics

Insofar as you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited "Google". The use includes the operating mode "Universal Analytics"; This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. We would like to point out that on this website, Google Analytics has been extended by IP anonymization in order to ensure anonymized collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. For more information on terms of use and data protection, please visit (https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de).

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO.

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used. If you click here (https://tools.google.com/dlpage/gaoptout?hl=de) the opt-out cookie will be set to disable Google Analytics

Google Tag Manager

If you have given your consent, the Google Tag Manager is used on our website. With the Google Tag Manager it is possible to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

For more information on Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

Hotjar

If you have given your consent, we use Hotjar, a tracking code-based web analytics tool from Hotjar Ltd, (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). Using Hotjar, interactions of randomly selected individual visitors to our website are recorded anonymously. This creates a log of, for example, mouse movements and clicks with the aim of identifying potential improvements to our offering. In addition, Hotjar analyzes information on the operating system, browser, incoming and outgoing links, geographic origin, and resolution and type of the device accessing our website for statistical purposes. The information collected is not personal, is stored by Hotjar Ltd. and is not passed on to other third parties. Supplementary information on functions and data use via Hotjar can be found at: https://www.hotjar.com/privacy.

The legal basis is your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

If you do not wish your website to be analyzed by Hotjar, you can disable it on all websites that use Hotjar by setting a DoNotTrack header in your browser (Hotjar-opt-out).

Social media

We use the social networks facebook, Twitter and Instagram on our website. Normally, social media plugins result in every visitor to the website being immediately recorded by these services with their IP address. This means that all further activities on the internet are logged; even if you do not click on one of the buttons at all.

To prevent this, we use the so-called Shariff solution, which ensures that initially no personal data is passed on to the individual providers when you visit our website. With the Shariff solution, the buttons of the individual providers are only integrated as graphics that contain a link to the individual social media services. A connection to the social media services is only established if you click on the respective button. After clicking the button and being redirected to the website of the social network, the duty to provide information no longer lies with us, but with the operator of the social network. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the corresponding provider.

We would like to point out that data of our website visitors may also be processed outside the European Union. This may result in risks for the users, because, for example, the enforcement of the rights of the users could be made more difficult. With regard to U.S. providers certified under the Privacy Shield, we point out that they have undertaken to comply with the data protection standards of the EU.

Furthermore, it is possible that user data may be processed for market research and advertising purposes by the third-party providers. For example, usage profiles can be created from the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the social networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective social network and are logged in to them).

For a detailed description of the respective processing, please refer to the information of the respective providers linked below. In the case of requests for information or the assertion of your rights as a data subject, we would also like to point out that these can be asserted most effectively with the social networks. Only they have access to the data of their users and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and https://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy Policy/ Opt-Out: https://instagram.com/about/legal/privacy/.

Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.

Data security

We take all necessary technical and organizational security measures to store your personal data in such a way that they are not accessible to third parties or the public. If you wish to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted cannot be fully guaranteed when using this method of communication. We therefore recommend that you send us confidential information exclusively by post.

Actuality and change of this privacy policy

This privacy policy is currently valid and has the status July 2023.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website https://www.bellicon.com/en-uk/video/data-protection/ .

Name and contact details of the controller

This data protection information applies to data processing by:

Person responsible:
bellicon AG
Taubenhausstrasse 14, CH 6005 Lucerne
E-Mail:[email protected]

Representative according to Art. 27 DSGVO:
bellicon Europe GmbH
Poststraße 4-5, D-10178 Berlin