Cookie Settings

"Personal data" refers to any information relating to an identified or identifiable natural person.

. Your data may be transferred to third countries outside the European Union for which an adequacy decision has been issued by the European Commission. In the absence of an adequacy decision by the European Commission, such as for transfers to the United States, data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Contact

Data Controller
Contact Please contact us if you wish. The data controller is: Altruan GmbH, Morolding 6, 84323 Massing, Germany, 08724285960, info@altruan.de

Customer contact via email
If you contact us on your own initiative via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact request.
If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of establishing contact.
If the contact serves the implementation of pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If contact is established for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). 
Data processing is used to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name (if provided), and other data to the extent you have made it available. We use a mobile device for this service, whose address book contains only data from users who have contacted us via WhatsApp. Personal data is therefore not shared with WhatsApp unless you have already given your consent to WhatsApp for this purpose.
Your data is processed by WhatsApp data is transferred to servers operated by Meta Platforms Inc. in the United States.
There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
If the contact serves the purpose of carrying out pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your personal data solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
For more information on the terms of use and data protection when using WhatsApp, please visithttps://www.whatsapp.com/legal/#terms-of-serviceandhttps://www.whatsapp.com/legal/#privacy-policy. 

Customer Account Orders      

Customer Account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is based on Art. 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.

Your data may be transferred to third countries outside the European Union for which an adequacy decision has been issued by the European Commission is in place. In the absence of an adequacy decision by the European Commission—as is the case, for example, with transfers to the United States—data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Reviews       Advertising      

Trustami Customer Review
The Trustami Trust Seal is integrated into this website to display collected reviews and social media feedback. This serves to implement our legitimate interests in the optimal marketing of our offerings on our own website in accordance with Art. 6(1)(f) GDPR. When the Trustami Trust Seal is accessed, the web server automatically stores data (access data) in the form of a server log file, which contains the name of the accessed webpage, the file, the date and time of access, your IP address in truncated form, the amount of data transferred, a notification of a successful access, the browser type, the user’s operating system, the referrer URL (of the previously visited page), and the requesting provider. This access data is not analyzed and is automatically overwritten no later than seven days after the end of your visit to the site. The Trustami Trust Seal and the services advertised through it are offered by Trustami GmbH, Schröderstraße 5, 10115 Berlin. The processing of data collected by Trustami is governed by Trustami’s privacy policy atwww.trustami.com/datenschutz.

Website logo for Google Customer Reviews
Our website incorporates the website logo for Google Customer Reviews from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The integration serves the purpose of displaying the number and results of our reviews received via Google to date and to promote participation in this program.
Google uses cookies to display the logo on our website and to show you personalized ads on Google. In doing so, your IP address, among other things, may be processed and transmitted to Google.
Your data may be transferred to the United States. There is no adequacy decision by the EU Commission for the United States. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://privacy.google.com/businesses/controllerterms/.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.
For more information on terms of use and data protection when using Google Customer Reviews, please visit https://www.google.com/shopping/customerreviews/static/tos/de/1_01_tos.html as well as athttps://policies.google.com/privacy?hl=de

Use of your personal data for sending postal advertising
We use your personal data (name, address) that we have received in connection with the sale of a product or service to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded.
Processing is based on Article 6(1)(f) of the GDPR, based on our legitimate interest in direct marketing.You may object to this use of your address data at any time by notifying us. You can find the contact information for exercising your right to object in the legal notice.

Use of the email address for sending direct marketing
We use youremail address, which we received in connection with the sale of a product or service, tosend you electronicmarketing for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our legitimate interest in direct marketing.You may object to this use of your email address at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice.You may also use the link provided for this purpose in the promotional email. No costs other than the transmission costs according to the standard rates will be incurred for this.

Payment Service Provider      

Use of Amazon Payments
We use the Amazon Payments service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.
The purpose of data processing is to offer you the option of paying via the Amazon Payments payment service.
To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Art. 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
By selecting and using “Amazon Payments,” the data required for payment processing is transmitted to Amazon Payments in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
For more information on data processing when using the Amazon Payments payment service, please refer to the corresponding privacy policy at: https://pay.amazon.com/de/help/201212490

Use of personal data when selecting Klarna payment options
In order to offer you Klarna’s payment options, we will transfer personal data, such as contact details and order information, to Klarna. This allows Klarna to assess whether you are eligible to use the payment options offered through Klarna and to tailor the payment options to your needs. General information about Klarna is available at:https://www.klarna.com/de/. Your personal data will be processed by Klarna in accordance with applicable data protection regulations and as described in Klarna’s Privacy Policy athttps://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of Hotjar
We use the analytics tool provided by Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”) on our website.
Data processing serves the purpose of designing, optimizing, and analyzing our website to meet user needs. 
The tool records the movements of website visitors on a random basis. This generates a log of mouse movements, scrolling behavior, time spent on the site, and clicks on the website (so-called heatmap). 
For this purpose, Hotjar uses cookies, among other things. The following information, among other things, may be collected: IP address (in anonymized form), information about the device you are using (screen size, device, unique device identifier), information about the browser you are using, location data (limited to the country), preferred language for displaying the website, operating system used. Detailed information about the cookies used, their function, and their retention period can be found here:https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
User profiles are created from this data under a pseudonym. The data is not used to personally identify the website visitor and is not combined with the personal data of the person behind the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the United States. For the United States, there is no adequacy decision by the EU Commission. Data transfers are carried out, among other things, on the basis of appropriate safeguards. Hotjar will provide you with further information regarding the measures taken upon request.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, which is grounded in our legitimate interest in designing the website in a way that is tailored to your needs and targeted. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
To prevent data collection and storage by Hotjar, you can set an opt-out cookie here:https://www.hotjar.com/legal/compliance/opt-out. Opt-out cookies prevent the future collection of your data when you visit this website. You must set the opt-out cookie on all systems and devices you use for this to take effect across all devices. If you delete the opt-out cookie, data will again be transmitted to Hotjar.
Further information on data protection when using Hotjar can be found here:https://www.hotjar.com/legal/policies/privacy#enduserenglish

Plug-ins and Other Items

Use of Social Plug-ins
We use social network plug-ins on our website. The integration of social plugins and the data processing that takes place serves the purpose of optimizing advertising for our products.
When social plugins are integrated, a connection is established between your computer and the servers of the social network providers, and the plugin is displayed on the page via a notification to your browser, provided you have expressly consented to this. In this process, both your IP address and information about which of our pages you have visited are transmitted to the provider’s servers. This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or logged in. If you are simultaneously logged into one or more of your social media accounts, the collected information may also be associated with your corresponding profiles. When using the plug-in functions (e.g., by clicking the button), this information is also associated with your user account. You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the General Data Protection Regulation (GDPR). The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
The social networks listed below are integrated into our website via social plugins. For more information on the scope and purpose of data collection and use, as well as your rights and options for protecting your privacy, please refer to the linked privacy policies of the providers.

Facebook by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are joint controllers for the collection of your data that occurs when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland regarding the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available athttps://www.facebook.com/legal/controller_addendum. According to this agreement, we are specifically responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical Implementation and configuration of the service, as well as compliance with the obligations under Articles 33 and 34 of the GDPR, to the extent that a breach of personal data protection affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subjects to exercise their rights under Articles 15–20 of the GDPR, to comply with the security requirements of Article 32 of the GDPR with regard to the security of the service, and to fulfill the obligations under Articles 33 and 34 of the GDPR, to the extent that a breach of personal data protection affects Meta Platforms Ireland’s obligations under the Joint Processing Agreement.
Your data may be transferred to the United States. There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://www.facebook.com/legal/EU_data_transfer_addendum.
For more information on the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please refer to Facebook’s Privacy Policy athttps://www.facebook.com/about/privacy/.

LinkedIn, operated by LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Your data may be transferred to the United States. There is no adequacy decision by the European Commission for the United States.

Use of Cloudflare
We use the Cloudflare CDN (Content Delivery Network) from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”). This is a transregional network of servers in various data centers to which our web server connects and through which certain content of our website is delivered.
The purpose of data processing is to optimize the loading times of our website and thereby make our offering more user-friendly.
In doing so, the following information, among other things, may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the United States. There is no adequacy decision by the EU Commission for the United States. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in designing the website in a way that is tailored to your needs and targeted. You have the right, for reasons arising from your particular situation, at any time to object to the processing of your personal data based on Article 6(1)(f) of the GDPR.
For more information on data protection when using Cloudflare, please visithttps://www.cloudflare.com/de-de/privacypolicy/.

Use of Google Maps
We use the Google Maps embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on our website.
This feature enables the visual display of geographic information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from website visitors.
Your data may also be transferred to the United States. There is no adequacy decision by the European Commission for the United States. Data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://policies.google.com/privacy/frameworks.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on the collection and use of data by Google, please refer to Google’s privacy policy athttps://www.google.com/privacypolicy.html. There, you also have the option in the Privacy Center to change your settings so that you can manage and protect your data processed by Google.

Integration of the idealo logo
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated into our website. When you visit our website, the browser on your device automatically sends information to idealo’s server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file accessed,
• Website from which the access originated (referrer URL),
• the browser used and, if applicable, your computer’s operating system, as well as the name of your Internet service provider.

The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the IT systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6(1)(f) GDPR. 

Use of Algolia
We use the search function provided by Algolia SAS (55 Rue d’Amsterdam, 75008 Paris, France; “Algolia”) on our website.
Data processing serves the purpose of making the information contained on our website easier to find and improving user-friendliness. Algolia uses technologies such as cookies. In doing so, the following information, among other things, may be collected: IP address, date and time of the page visit, information about the browser and operating system you are using. The data is stored on Algolia’s server for a period of 90 days.
Your data may be transferred to third countries such as the United States. No adequacy decision has been issued by the European Commission for the United States. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de
The processing of your personal data is based on Art. 6(1)(f) GDPR, based on our overriding legitimate interest in identifying our customers and targeting them with interest-based advertising. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
For more information on data protection and the use of cookies at Algolia, please visithttps://www.algolia.com/policies/privacy/.

Data Subject Rights and Retention Period

Retention period
After full contract fulfillment, the data is initially stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods, particularly those under tax and commercial law, and and then deleted after the retention period expires, unless you have consented to further processing and use.

Rights of the data subject
Provided the legal requirements are met, you have the following rights under Articles 15 through 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to lodge a complaintwith the supervisory authority
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaintwith the supervisory authority if you believe that the processing of your personal data is not lawful.

You may file a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: 

poststelle@lda.bayern.deRight to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
Once an objection has been lodged, the processing of the data in question will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If the processing of personal data is carried out for the purposes of direct marketing, you may object to this processing at any time by notifying us. Once the objection has been made, we will cease processing the data in question for the purposes of direct marketing.