Thanks for visiting our website. Combustin pharmazeutische Präparate GmbH (hereinafter “Combustin”, “we” or “us”) attaches great importance to the security of user data and compliance with data protection regulations.
Therefore, we would like to inform you below about the processing of your personal data on our website.
Responsible site:
Combustin pharmazeutische Praeparate GmbH
Offinger Strasse 3
D-88525 Duermentingen
Germany
Phone: +49 7371 95270
E-Mail: info@combustin.de
External data protection officer:
Markus Altenburg
DataGAP GmbH
E-Mail: datenschutz@combustin.de
The technical terms used in this data protection declaration are to be understood as they are legally defined in Art. 4 DSGVO.
You can visit our site without actively providing any information about yourself. However, we automatically save access data (server log files) each time the website is accessed, such as the name of your Internet service provider, the operating system used, the website from which you are visiting us, the date and duration of the visit or the name of the requested file as well as - for security reasons - the IP address of the computer used for a period of 7 days, e.g. to detect attacks on our website.
These data are evaluated exclusively to improve our offer and do not allow any conclusions to be drawn on your person. This data is not combined with other data sources.
The legal basis for the processing of the data is Article 6 (1) lit. f) DSGVO.
We process and use the data for the following purposes:
1. Availability of our website, 2. Improvement of our website and 3. Prevention and detection of errors/faults and misuse of the website.
The processing is carried out to pursue legitimate interests in ensuring the functionality and error-free as well as secure operation of the website and adapting this website to the requirements of the users.
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our website. The use of cookies serves our legitimate interest in making your visit to our website as pleasant as possible and is based on article 6 paragraph 1 lit. f) DSGVO. Cookies are a standard Internet technology for storing and retrieving login and other usage information for all users of the website. Cookies are small text files that are stored on your device. Among other things, they enable us to save user settings so that our website can be displayed in a format tailored to your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (so-called permanent cookies).
You can set your browser so that you are informed about the setting of cookies and can individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Furthermore, the cookies can be deleted afterwards in order to remove data that the website has stored on your computer. The deactivation of cookies (so-called opt-out) can lead to some restrictions on the functionality of our website.
Affected categories:
Website visitors, users of online services
Opt-Out:
Internet Explorer:
https://support.microsoft.com/de-de/help/17442
Firefox:
https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=de
Safari
https://support.apple.com/de-de/HT201265
Legal bases:
Consent (Art. 6 Para. 1 lit. a) DSGVO); legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)
The relevant legal basis is specifically named in the corresponding tool.
Legitimate interests:
Storage of opt-in preferences, presentation of the website, ensuring the functionality of the website, preservation of the user status over the entire website, recognition for next website visitors, user-friendly online offer, ensuring chat function
Web analysis and optimization
We use tools for web analysis and range measurement so that we can evaluate the flow of visitors to our online offer. For this purpose, we collect information about the behavior, interests or demographic information about our visitors, for example age, gender, etc. This helps us to recognize the time at which our online offer, which functions or content are most frequently used, or which one invites you to call up again. In addition, we can use the information collected to determine whether our online offering needs to be optimized or adapted.
The information collected for this purpose is stored in cookies or similar processes which are used for range measurement and optimization. The data stored in the cookies can include the following: content viewed, online presences visited, settings, functions and systems used. However, no clear user data is regularly processed for the purposes described. In this case, the data is changed in such a way that the actual identity of the user is known neither to us nor to the provider of the tool used. The data changed in this way are often saved in user profiles.
Affected categories: Website visitors, users of online services
Categories of data: User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data, content data
Purposes of processing: Website analysis, range measurement, utilization and evaluation of website interaction, lead evaluation
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO); legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)
Legitimate interests: Optimization and further development of the website, profit increase, customer loyalty and acquisition of new customers
Deployed Service: InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand
Data protection: https://matomo.org/privacy-policy/
Opt-Out-Link MATOMO OPT-OUT-IFRAME https://matomo.org/docs/gdpr/#gdpr-resources
Legal basis: Legitimate interest (Art. 6 Para. 1 lit. f) DSGVO)
Legitimate interests: Range measurement, improvement of the website and user experience, etc.
In order to constantly increase our reach and the awareness of our online offer, we process personal data in the context of online marketing, in particular with regard to potential interests and to measure the effectiveness of our marketing activities.
For the purpose of measuring the effectiveness of our marketing measures and identifying potential interests, relevant information is stored in cookies or similar processes are used.
The data stored in the cookies can include content viewed, websites visited, settings as well as functions and systems used. However, no clear user data is regularly processed for the purposes described. The data is changed in such a way that the actual identity of the user is known neither to us nor to the provider of the tool used. The data changed in this way are often saved in user profiles.
If user profiles are stored, the data can be read out, supplemented and supplemented on the server of the online marketing process when visiting other online offers that use the same online marketing process.
We can determine the success of our advertisements on the basis of summarized data made available to us by the provider of the online marketing process (so-called conversion measurement).
As part of these conversion measurements, we can understand whether a marketing measure resulted in a purchase decision for visitors to our online offer or not. This evaluation is used to analyze the success of our online marketing.
Affected categories:
Website visitors, users of online services, interested parties, communication partners, business and contractual partners
Categories of data:
User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data
Purposes of processing:
Marketing (partly also interest-based and behavior-related), conversion measurement, target group formation, click tracking, development of marketing strategies and increasing the efficiency of campaigns
Legal bases:
Consent (Art. 6 Para. 1 lit. a) DSGVO)
Legitimate interests:
Optimization and further development of the website, profit increase, customer loyalty and acquisition of new customers
We maintain an online presence on social networks and career platforms in order to exchange information with the users registered there and to be able to contact them easily.
Some of the data from users in social networks are used to conduct market research and thus pursue advertising purposes. User profiles can be created and used via the usage behavior in order to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the users' end devices, sometimes regardless of whether you are a registered user of the social network or not. Depending on where the social network is operated, the user data may be processed outside the European Union or outside the European Economic Area. This can result in risks for users, for example it can be difficult to enforce their rights.
Affected categories: registered users and unregistered users of the social network
Categories of data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP -Address)
Purposes of processing: Extension of range, networking
Legal bases: Legitimate interests (Art. 6 Para. 1 lit. f) DSGVO), Consent (Art. 6 Para. 1 lit. a) DSGVO)
Legitimate interests: Interaction and communication on social media presence, profit increase, knowledge about target groups
Deployed Service: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://www.facebook.com/privacy/explanation
Opt-Out-Link: https://www.facebook.com/policies/cookies/
Deployed Service: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://help.instagram.com/519522125107875
Opt-Out-Link: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/
We use our online presence to organise raffles and/or organise competitions. In doing so, we process the data of necessary for the realisation of the respective campaign participants. This also includes data that we need to to inform the winner and, if applicable, to pay out a prize.
Depending on the type of campaign, contributions by or about the campaign participants may be published, for example when reporting on the respective campaign or if a vote on a contribution submitted by the participant is part of the campaign. Your name may be published. Which data we process in individual cases depends on the specific action carried out and which data we receive from the participant.
The implementation of the respective campaign on our presence in a social network is also subject to the terms of use and data protection provisions of the respective network.
Affected categories:
Participants in the competition/raffle
Categories of data:
Master data (e.g. name, address), contact data (e.g. e-mail address), content data (e.g. text entries, depending on what participants wish to provide)
Purposes of processing:
Realisation of the prize draw including, if applicable, prize distribution and, if applicable, announcement of the winner in the media
Legal bases:
Consent (Art. 6 Para. 1 lit. a) DSGVO)
We have integrated functions and content that are obtained from third-party providers into our online offer. For example, videos, registration functions, presentations, buttons or posts (hereinafter referred to as content) can be integrated.
In order to show content to the visitors of our online offer, the respective third-party provider processes the IP address of the user, among other things, so that the content can be transmitted to the browser and displayed. Without this processing, it is not possible to integrate third-party content.
In some cases, additional information is collected via so-called pixel tags or web beacons, whereby the third-party provider receives information about the use of the content or visitor traffic on our online offer, technical information about the user's browser or operating system, the time of visit or the websites to be referred to. The data obtained in this way is stored in cookies on the user's device.
Affected categories: Users of the plug-in
Categories of data: Access data (user name, password), usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. e-mail address, telephone number), master data (e.g. name, address)
Purposes of processing: Designing our online offer, increasing the range of advertisements in social media, sharing posts and content, interest- and behavior-based marketing, cross-device tracking, access to specialist groups and specialist information
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO)
Deployed Service: DocCheck Community GmbH, Vogelsanger Str. 66, 50823 Köln
Data protection: http://info.doccheck.com/de/privacy/
Deployed Service: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data protection: https://policies.google.com/privacy?hl=de&gl=de
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de
or https://myaccount.google.com/
Legitimate interests:
In order to make our website appealing, Combustin uses fonts provided by Google Fonts. A change to another provider is not planned due to the preservation of our corporate design. Google fonts currently offer a variety of designs with no alternative. By using them directly, we can guarantee a higher level of user-friendliness, as, for example, the effort of maintenance, such as the installation of updates and patches by Google, is low for us and the speed of page views (loading time) is reduced for our website visitors. No cookies are sent when you visit the website. Corresponding requests (page views) from website visits are retrieved from separate Google Fonts (APIs) domains/servers. These requests are made separately and are not aggregated if, for example, website visitors are still logged into a Google account on their device. This means that the data is not merged.
For technical reasons, the fonts cannot be integrated locally.
Deployed Service: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Data protection: https://www.facebook.com/privacy/explanation
Opt-Out-Link: https://www.facebook.com/settings?tab=ads
Deployed Service: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data protection: https://policies.google.com/privacy?hl=de&gl=de
Opt-Out-Link: https://tools.google.com/dlpage/gaoptout?hl=de
or https://myaccount.google.com/
On our online offer, users have the option of subscribing to our newsletter or notifications via various channels (hereinafter collectively called newsletter). We only send newsletters to recipients who have consented to receive the newsletter and within the framework of the statutory provisions. In oder to subscribe to a newsletter from us, you need to provide an email address. If necessary, we collect additional data, for example to provide our newsletter with a personal salutation.
Our newsletter is only sent after the so-called double opt-in procedure has been completed. If visitors to our online offer decide to subscribe to our newsletter, they will receive a confirmation e-mail, which serves to prevent the fraudulent entry of incorrect e-mail addresses and to prevent the newsletter being sent by a simple, possibly accidental click. The subscription to our newsletter can be ended at any time for the future. An unsubscribe link (opt-out link) is included at the end of each newsletter.
We are also obliged to provide evidence that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and save the IP address and the time of registration and deregistration.
Affected categories: Newsletter subscribers
Categories of data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)
Purposes of processing: Marketing, customer loyalty and new customer acquisition, analysis and evaluation of the success of the campaign
Legal basis: Consent (Art. 6 Para. 1 lit. a) DSGVO)
We make use of the possibility of holding online conferences and online meetings. For this, we use the offer of another provider, which we have carefully selected. With the active use of such offers, data of the communication participants are processed and stored on the servers of the third-party providers used, insofar as the data is required for the communication process. Usage and metadata can also be processed.
Affected categories: Participants in the respective online offer (conference, meeting, webinar)
Categories of data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photographs, videos), meta and communication data (e.g. device information, IP addresses)
Purposes of processing: Processing of inquiries, increasing efficiency, promoting cross-company or cross-location cooperation
Legal basis: Consent (Art. 6 Para. 1 lit. a) DSGVO)
We also use the data provided to us for advertising purposes, in particular to provide information on various channels about news from us or in our product portfolio. However, we will only be addressed for advertising purposes within the framework of the legal requirements and - if required thereafter - after obtaining consent. If the recipients of our advertising do not want this, they can inform us at any time for the future. Of course, we will comply with your request.
Affected categories: Communication partner
Categories of data: Master data (e.g. name, address), contact details (e.g. e-mail address, telephone number)
Purposes of processing: Direct marketing
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO), legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)
Legitimate interests: Retention of existing and acquisition of new contacts or contractual partners
Service used: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Place of data processing: European or German data centres
Data protection: https://privacy.microsoft.com/de-de/privacystatement
Opt-Out-Link: https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings
Legal bases:
Consent (Art. 6 Para. 1 lit. a) DSGVO)
On our online offer, we offer the opportunity to contact us directly or to obtain information via various contact options.
If you contact us, we process the data of the person making the request to the extent which is necessary to answer or process the request. The processed data may vary depending on how you contact us.
Affected categories: Inquirers
Categories of data: Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address)
Purposes of processing: Processing of inquiries
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO), Contract performance or contract initiation (Art. 6 Para. 1 lit. b) DSGVO)
We offer our customers the opportunity to use our online shop and purchase our products from it. For this purpose, we collect the data required for contract initiation and execution. In addition, we collect data in order to provide our customers with advertising or discounts tailored to their interests. If it is necessary, we pass the data on to third parties who help us to process the order or if we are legally obliged to provide certain data.
Affected categories: Buyers in our online shop, shop visitors upon registration
Categories of data: Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), contract data (e.g. order history, payment data), billing address, possibly delivery address, meta and communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interests, access times)
Purposes of processing: Contract initiation and implementation, interest-based advertising, possibly customer account-related rewards or discounts, outsourcing
Legal bases: Contract initiation and implementation (Art. 6 Para. 1 lit. b) DSGVO), legitimate interests (Art. 6 Para. 1 lit. f) DSGVO)
Legitimate interests: Simplification of work processes, resource-efficient fulfillment, market research, marketing
Registration for (new) customers / registration for specialist circles
We offer the possibility to create a user account on our online offer. As part of the registration process, we collect the necessary data from interested visitors, which we need to provide a user account and to provide the associated functions.
In order to protect the use of the internal area, we collect the IP addresses and the time of access in order to prevent misuse of a user account and unauthorized use. We do not pass this data on to third parties, unless this is necessary to pursue our claims or we are legally obliged to do so.
Affected categories: registered users
Categories of data: Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), meta and communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interests, access times)
Purposes of processing: Simplification of the website function, contract fulfillment, customer loyalty
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO)
On our website we offer you the opportunity to request information material and product brochures via various contact channels. In order to be able to provide you with this information, we need your contact details according to the contact method you require.
Affected categories: Contact details (email address or first and last name, address)
Categories of data: Interested parties who request our information material separately
Purposes of processing: Marketing, acquisition of new customers, increasing sales
Legal bases: Consent (Art. 6 Para. 1 lit. a) DSGVO)
We transfer the personal data of visitors to our website for internal purposes (e.g. for internal administration or to the HR department in order to fulfil legal or contractual obligations). The internal transfer or disclosure of data only takes place to the extent necessary in compliance with the relevant data protection regulations.
It may be necessary for us to disclose personal data for the performance of contracts or to fulfil a legal obligation. If we are not provided with the data required in this respect, it may not be possible to conclude the contract with the data subject.
Your data may also be processed outside the EU/EEA, in so-called third countries (e.g. USA), using or accessing certain services, e.g. Google services (e.g. YouTube).
There is no adequacy decision by the European Commission for the transfer of data to the USA, which is considered an unsafe third country. Adequacy only exists if the European Commission has determined that a country outside the EU offers an adequate level of data protection (see https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). Such a decision/determination means that personal data from the EU (and Norway, Liechtenstein and Iceland) can be transferred to this third country by way of data processing without the need for further protective measures. Transfers to the country in question are treated in the same way as data transfers within the EU. Since the determination/decision for the third country in question (e.g. USA) does not exist, other guarantees pursuant to Art. 44 et seq. GDPR in order to be allowed to process/transfer data via these providers. For this reason, we conclude a separate agreement on data protection (Data Processing Agreements) with these third-party providers, including standard contractual clauses (as a guarantee) in accordance with Art. 44 et seq. GDPR and define additional measures to ensure the highest possible level of protection for the personal data of data subjects.
Guarantees used (standard contractual clauses):
Google services: https://privacy.google.com/businesses/processorterms/ (https://privacy.google.com/businesses/processorterms/mccs/
Guarantees used (standard contractual clauses, Binding Corporate Rules):
Guarantees used for third country transfers:
Angemessenheitsbeschluss der Europäischen Kommission gem. Art. 45 DSGVO
for the Matomo service with headquarters in New Zealand
Right of information: According to Art. 15 DSGVO, affected persons have the right to request a confirmation whether we are processing data relating to them or not. You can request information about this data as well as further information listed in Art. 15 Para. 1 DSGVO as well as a copy of your data.
Right of rectification: According to Art. 16 DSGVO, affected persons have the right to request correction or completion of the data relating to them and processed by us.
Right of cancellation: According to Art. 17 DSGVO, affected persons have the right to request immediate deletion of the data concerning them.
Alternatively, you can request that we restrict the processing of your data, according to Art. 18 DSGVO.
Right of data portability: According to Art. 20 DSGVO, affected persons have the right to request provision of the data they have made available and to request their transmission to another responsible person.
Right of appeal: Affected persons also have the right to complain to the supervisory authority responsible for them in accordance with Art. 77 DSGVO.
Right of contradiction: If personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 Clause 1 lit. f) DSGVO, affected persons have the right to object to the processing of their personal data in accordance with Art. 21 DSGVO, if there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In last case, affected persons have a general right of objection, which we will take into account without specifying a particular situation.
Some data processing operations are only possible with the explicit consent of the affected persons. You have the option of revoking your consent at any time. An informal message or email to datenschutz@combustin.de is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Links to online offers of other providers can be found on our website. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.
We reserve the right to adapt this data protection information at any time in the event of changes to our online offer and in compliance with the applicable data protection regulations so that they comply with the legal requirements.
This privacy policy was created on behalf of Combustin pharmazeutische Präparate GmbH.
