Data protection
Data Protection
Information obligation according to Art. 13 GDPR
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies provided that no other information is given during the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of retrieval, the IP address, the volume of data transferred, and the requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
Your data is also transmitted to Canada, among other places. An adequacy decision by the EU Commission is in place for data transfers to Canada.
Contact
Controller
Please feel free to contact us. You can find the contact details of the person responsible for data processing in our legal notice (Impressum).
The controller has appointed a data protection officer, who can be reached as follows: "Guoqiang Shen, DH FitLife GmbH, Papenstraße 27A, 22089 Hamburg, Phone: +49 (0)40 /188812426, gq.shen@DH-FitLife.com"
Initiating contact by the customer via email
If you initiate business contact with us via email, we will collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of processing and responding to your contact request.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice in case of purchase interest, preparation of a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contact.
If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice in case of purchase interest, preparation of a quote) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Customer Account Orders
Customer Account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will subsequently be deleted.
Collection, processing, and transfer of personal data for orders
When placing an order, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order as well as for the handling of your inquiries. The provision of data is required for the conclusion of a contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you.
Your data will be passed on, for example, to the shipping companies selected by you and dropshipping providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.
Your data is also transmitted to Canada, among other places. An adequacy decision by the EU Commission is in place for data transfers to Canada.
Reviews Advertising
ProvenExpert Customer Review
We use the ProvenExpert customer review tool from Expert Systems AG | Quedlinburger Straße 1 | D-10589 Berlin on our website. After your order, we would like to ask you to rate and comment on your purchase with us.
For this purpose, we will contact you by email, using the technical system of the provider of the ProvenExpert review tool as part of order processing.
The processing of your data takes place either with your consent or on the basis of our legitimate interest.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided you have expressly agreed to receive the review request. You can revoke your consent at any time using the corresponding link in the email, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your email address will then be removed from the distribution list.
Processing without express consent is carried out on the basis of Art. 6(1)(f) GDPR due to the legitimate interest in truthful, verified reviews of our services as part of direct advertising. For this purpose, we send an electronic review request for our own goods or services that you have already purchased from us. The dispatch is made to the email address that we received from you in the course of selling a product or service. Sending the review request is subject to the condition that you have not objected to this use of your email address.
You may object at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice. You can also use the link provided for this purpose in the review request. There are no costs other than the transmission costs according to the basic rates for this.
The personal data stored in the technical system of the ProvenExpert review tool in this context will be deleted 3 months after the delivery of the goods recorded for the review.
Use of the email address for sending newsletters
We use your email address, regardless of contract processing, exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.
Shipping service providers Merchandise management
Data processing for the purpose of shipping handling
For the fulfillment of the contract in accordance with Art. 6(1)(b) GDPR, we pass your data on to the shipping service provider commissioned with the delivery, provided this is necessary for the delivery of ordered goods.
Data transfer to shipping service providers for the purpose of shipment notification
If you have given us your express consent during or after your order, we will pass on your email address and telephone number to the selected shipping service provider on the basis of this consent in accordance with Art. 6(1)(a) GDPR, so that they can contact you before delivery for the purpose of shipment notification or coordination.
Consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
Use of an external merchandise management system
We use a merchandise management system for contract processing within the framework of order processing. For this purpose, your personal data collected during the order will be transferred to
ViA-Online GmbH, Kimplerstraße 296, 47807 Krefeld
.
Payment service providers
Data processing for payment processing
When processing payments in our online shop, we work with these partners: technical service providers, credit institutions, payment service providers.
Data processing for transaction handling
Depending on the selected payment method, we pass the data necessary for the execution of the payment transaction to our technical service providers who work for us as order processors, or to the commissioned credit institutions or to the selected payment service provider, as far as this is necessary for the execution of the payment. This serves the fulfillment of the contract in accordance with Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g., on their own website or through technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
Data processing for the purpose of fraud prevention and the optimization of our payment processes
If necessary, we provide our service providers with further data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g., invoicing, processing of contested payments, support for accounting). This serves to protect our legitimate interests in our protection against fraud or in efficient payment management, which prevail in the context of a balancing of interests, in accordance with Art. 6(1)(f) GDPR.
Use of PayPal
All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Amazon Payments
We use the payment service Amazon Payments from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.
The data processing serves the purpose of being able to offer you payment via the Amazon Payments service.
To integrate this payment service, it is necessary that Amazon Payments collects, stores, and analyzes data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies allow your browser to be recognized.
The use of cookies or comparable technologies is based on § 15(3) TMG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of personal data concerning you.
By selecting and using “Amazon Payments”, the data required for payment processing is transmitted to Amazon Payments in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Further information on data processing when using the Amazon Payments service can be found in the associated privacy policy at: https://pay.amazon.com/de/help/201212490
Use of personal data when selecting Klarna payment options
In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you can take advantage of the payment options offered via Klarna and to adapt the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data will be handled by Klarna in accordance with the applicable data protection regulations and as described in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually about their acceptance, as well as prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.
You can find out how to manage (including disabling) cookies in the most common browsers via the links below:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in this privacy policy, we only use those technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies allow our systems to recognize your browser even after you have navigated to another page and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized again after navigating to another page.
The use of cookies or comparable technologies is based on § 15 (3) sentence 1 of the German Telemedia Act (TMG). The processing of your personal data is based on Art. 6 (1) lit. f of the GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services.
You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
Analysis
Use of Google Analytics
We use the web analytics service Google Analytics from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.
Data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide further services to the website operator associated with the use of the website and the internet. The following information may be collected, among other things: IP address, date and time of the page request, click path, information about the browser you are using and the device you are using, visited pages, referrer URL (website via which you accessed our website), location data, and purchase activities. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data by Google.
Google Analytics uses technologies such as cookies, web storage in the browser, and tracking pixels that enable an analysis of your use of the website. The information generated thereby about your use of this website is generally transmitted to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. Data transmission is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and all other data that Google has about you.
IP anonymization is activated on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The use of cookies or comparable technologies is based on § 15 (3) sentence 1 TMG. The processing of your personal data is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
You can prevent the collection of the data generated by Google Analytics and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. If you delete the opt-out cookie, requests will again be transmitted to Google. If you click here, the opt-out cookie will be set: Disable Google Analytics.
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/ as well as at https://policies.google.com/technologies/cookies?hl=de.
Facebook Services
Use of Facebook Pixel
We use the Facebook Pixel as part of the technologies described below from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). With the Facebook Pixel, data (IP address, time of the visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or newsletter registration) is automatically collected and stored, from which usage profiles are created using pseudonyms. As part of so-called advanced matching, information is also hashed and stored for matching purposes, with which individuals can be identified (e.g., names, email addresses, and telephone numbers). For this purpose, when you visit our website, a cookie is automatically set by the Facebook Pixel, which allows your browser to be recognized when visiting other websites via a pseudonymous CookieID. Facebook will merge this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalized and group-based advertising.
The information automatically collected by Facebook technologies about your use of our website is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. To the extent that data transmission to the USA falls under our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in Facebook's privacy policy.
Facebook Analytics
As part of Facebook Analytics, statistics about visitor activities on our website are created from the data collected via the Facebook Pixel regarding your use of our website. Data processing is based on an agreement on data processing by Facebook. Its analysis serves the optimal presentation and marketing of our website.
Facebook Ads
We use Facebook Ads to advertise this website on Facebook and on other platforms. We determine the parameters of the respective advertising campaign; Facebook is responsible for the precise implementation, in particular the decision regarding the placement of the ads for individual users. Unless otherwise stated for the individual technologies, data processing is based on an agreement between joint controllers according to Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transmission to Facebook Ireland. Subsequent data processing by Facebook Ireland is not covered by this.
Based on the statistics on visitor activities on our website created via the Facebook Pixel, we run group-based advertising on Facebook via Facebook Custom Audience by determining the characteristics of the respective target group. As part of the advanced matching taking place to determine the respective target group (see above), Facebook acts as our data processor.
Based on the pseudonymous cookie ID set by the Facebook Pixel and the collected data about your usage behavior on our website, we run personalized advertising via Facebook Pixel Remarketing.
Via Facebook Pixel Conversions, we measure your subsequent usage behavior for web analysis and event tracking if you have reached our website via an advertisement from Facebook Ads. Data processing is based on an agreement on data processing by Facebook.
Other Providers of Web Analytics and Online Marketing Services
Use of Hotjar for Web Analytics
For the purpose of website analysis, data (IP address, time of the visit, device and browser information, as well as information about your use of our website) is automatically collected and stored using technologies from Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar"), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized usage profiles will not be merged with personal data about the bearer of the pseudonym without an express, separately granted consent. Hotjar acts on our behalf as our processor.
Use of Optimizely for Web Analytics
For the purpose of website analysis and the execution of A/B tests, data (IP address, time of the visit, device and browser information, as well as information about your use of our website) is collected and stored using technologies from Optimizely GmbH, Christophstraße 15-17, 50670 Cologne ("Optimizely"), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized usage profiles will not be merged with personal data about the bearer of the pseudonym without an express, separately granted consent. The information automatically collected by Optimizely about your use of our website is generally transmitted to a server of Optimizely, Inc. 631 Howard Street, Suite 100 San Francisco, CA 94105, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing is based on an agreement between joint controllers according to Art. 26 GDPR.
Plug-ins and Other
Use of Google Tag Manager
We use the Google Tag Manager from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. Data processing serves the purpose of needs-based design and optimization of our website.
The Google Tag Manager itself does not store any cookies, nor does it process any personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Data Subject Rights and Storage Duration
Duration of Storage
After complete contract fulfillment, the data is initially stored for the duration of the warranty period, then subsequently stored in compliance with legal, particularly tax and commercial retention periods, and then deleted after the period expires, provided you have not consented to further processing and use.
Rights of the Data Subject
Provided that the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
Furthermore, according to Art. 21 (1) GDPR, you have a right to object to processing based on Art. 6 (1) f GDPR, as well as to processing for the purpose of direct marketing.
Right to Lodge a Complaint with the Supervisory Authority
According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.
Right to Object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.
last update: 27.10.2021