We also inform you in detail about:
The data controller is iAmHealth Distribution UG (hereinafter referred to as "we" or "us").
If you have any questions or comments about this information or would like to contact us about exercising your rights, please direct your inquiry to
The term "personal data" under data protection law refers to any information relating to an identified or identifiable individual.
We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. Data processing by us only takes place on the basis of a legal permission. We process personal data
Unless otherwise stated in the following notes, we store personal data only as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such legal obligations to retain data may arise in particular from commercial or tax law regulations.
We use order processors as part of the processing of their data. These include, for example, shipping service providers in the context of package notifications and updates on shipment status, hosting, maintenance and support of IT systems, the provision of certain service and functions on our website, order processing, marketing measures or file and data carrier destruction. A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the data controller and are contractually obligated to ensure appropriate technical and organizational measures for data protection.
In addition, we transmit their personal data, if necessary, to bodies such as postal and delivery services, house bank, tax advisor/auditor or the tax authorities.
If their data are transmitted to other recipients, we inform you under the respective processing process.
When you exercise your rights under Articles 15 to 22 of the GDPR, we process the personal data provided for the purpose of implementing those rights by us and to be able to provide evidence thereof. We will process data stored for the purpose of providing information and its preparation only for this purpose and for the purpose of data protection control and otherwise restrict processing in accordance with Art. 18 DSGVO.
These processing operations are based on the legal basis of Art. 6 para. 1 lit. c) DSGVO in conjunction with. Art. 15 to 22 DSGVO and Section 34 (2) BDSG.
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
In accordance with Art. 21 (1) DSGVO, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) DSGVO on grounds relating to your particular situation. If personal data about you are processed by us for the purpose of direct marketing, you may object to such processing pursuant to Article 21 (2) and (3) DSGVO.
You can reach our data protection officer at the following contact details: Nina Wlodarczyk, email@example.com, +49 721 986 157-80
When you use the Website, we collect information that you provide yourself. In addition, during their visit to the website, certain information about their use of the website is automatically collected by us. In data protection law, the IP address is also generally considered a personal data. An IP address is assigned to any device connected to the Internet by the Internet provider so that it can send and receive data.
Visiting our website may involve the transfer of certain personal data to third countries, that is, countries where the GDPR is not applicable law. Such transfer will take place in a permissible manner if the European Commission has determined that an adequate level of data protection is warranted in such third country.
If such an adequacy decision of the European Commission does not exist, a transfer of personal data to a third country shall only take place in the presence of appropriate safeguards pursuant to Article 46 of the GDPR or if one of the conditions of Article 49 of the GDPR is met.
Unless otherwise stated below, we use the EU standard contractual clauses for the transfer of personal data to processors in third countries as appropriate safeguards: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087
We use the store system Shopify for the purpose of hosting and displaying our website. Shopify is offered by the service provider Shopify International Limited (Ireland). Unless otherwise stated in the following notices, all data collected on our website is processed on our behalf on the servers of Shopify International Limited.
As part of the aforementioned services, data may be transferred to Canada to the company Shopify Inc. For the data transfer to Canada as a third country, i.e. a country in which the GDPR is not applicable law, an adequacy decision of the European Commission is available. The European Commission has thus decided that an adequate level of protection exists in Canada and that the transfer can take place in a permissible manner.
For more information about Shopify's privacy practices, please visit: https://www.shopify.de/legal/datenschutz.
When you use our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type / version, operating system used, requested page, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) f) DSGVO. This processing serves the technical administration and security of the website.
The stored data will be deleted after 30 days, unless there is a justified suspicion of unlawful use based on concrete evidence and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11(2) of the GDPR, unless you provide additional information that enables us to identify you in order to exercise your rights set out in those articles.
If your request is directed towards the conclusion or performance of a contract with us, Article 6 (1) (b) DSGVO is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting inquiring persons. The legal basis for data processing is then Art. 6 para. 1 lit. f) DSGVO.
If you order a product via our website, we process personal data for the purpose of processing the contract or to provide them with the ordered product. We process in the booking or ordering process only the data that you yourself have provided in the input mask. In order to be able to deliver the ordered products to them, we transmit their data required for delivery to one of our shipping service providers as specified in the order.
Legal basis for the processing is in each case Art. 6 para 1 letter b) DSGVO. All data fields marked as mandatory are required for processing their booking or order. Failure to provide this data will result in us not being able to process your booking or order. The provision of further data is voluntary.
We offer you the possibility to pay by credit card. Please note that the respective payment information is collected and processed by the respective payment service providers on their own responsibility. For this purpose, we use the payment service provider Pinwheel Pay:
196E Campden Hill Road
Payment data provided by you during the order process will be transmitted to Pinwheel Payment, insofar as this transmission is necessary for the execution of the payment process. The legal basis for this transmission is Art. 6 para. 1 letter b) DSGVO. Pinwheel Payment cooperates with Trust Payments for the processing of payment data in the course of the subsequent payment transaction:
Trust Payments Ltd.
No.1 Royal Exchange
Trust Payments is committed to protecting the personal data we process about you in accordance with the data protection principles set out in the European Union (EU) General Data Protection Regulation 2016/679 (GDPR).
The controller of personal data is Trust Payments Ltd of European Operations Centre, Parc Menai, Bangor, Gwynedd, UK LL57 4BL. You can send requests regarding the processing of your data by email to firstname.lastname@example.org.
We offer on our website the opportunity to sign up to receive marketing emails such as our newsletter. Once you sign up, we will provide you with regular updates on our offers and events, and may remind you of store items in your shopping cart. A valid email address is required to sign up. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as their email address and name based on the consent they have given.
The processing is based on the legal basis of Art. 6 (1) a) DSGVO. You can revoke the consent given at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting us via the channels mentioned above. The legality of the use of the data that has already taken place remains unaffected by the revocation. When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document their consent (Art. 6 para. 1 lit. c) in conjunction with. Art. 7 para. 1 DSGVO).
The newsletters contain a so-called "web-beacon", i.e. a pixel file that is retrieved when the newsletter is opened. When opened, technical information such as their browser and system information, IP address and the time of opening are collected. This data and information is used to technically improve our service based on your reading behavior. This also includes recording when an e-mail or newsletter was opened and whether a link was clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is not our intention to observe individual users. The statistical collection and evaluation of the data serves us to recognize the reading habits of our users and thus to better adapt our content to the users. This also serves to send users different content, according to the interest of our users.
Legal basis for statistical collection and the evaluation is Art. 6 para 1 letter f) DSGVO. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users.
You have the right to opt-out of the statistical collection and analysis.
You can object to the statistical collection and evaluation by unsubscribing from the newsletter. A separate revocation of the statistical analysis is unfortunately not possible.
We offer them on our website the opportunity to submit reviews about our store and our products. We use the service yotpo of the company Yotpo ltd. for this purpose. If you buy a product through our website, we will send a message to the email address provided and ask you to rate whether you would recommend us. We hereby pursue our legitimate interest in measuring the satisfaction of our customers. The legal basis for this use of the e-mail address provided is Art. 6 para. 1 lit. f) DSGVO in conjunction with. § Section 7 (3) UWG. You can object to this at any time without incurring any costs other than the transmission costs according to the prime rates. To do so, you can notify us of your objection by clicking on the unsubscribe link contained in each mailing, by e-mail to email@example.com or via another of the contact channels listed above.
The processing of personal data in connection with a product review, and in particular the use of the e-mail address provided, will only take place if you have previously given your consent to receive marketing e-mails. The processing is based on the legal basis of Art.6 para. 1 letter a) DSGVO. You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in a marketing email sent or by contacting us via the channels mentioned above.
We use the Shopify statistics feature on our website. This allows us to measure the reach of our website and obtain statistical analysis of visitor behavior on our website. The data is processed on servers of Shopify International Limited (Ireland), which we have commissioned with the processing.
The legal basis for the data processing in connection with the Shopify Statistics function is Art. 6 (1) (f) DSGVO and the processing serves our legitimate interest in analyzing user behavior on our website and the design that is thus possible according to needs. You can object to this processing at any time in the cookie settings.
We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other data from Google.
We use the Google Universal Analytics variant. This allows us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to contextualize individual user actions and analyze long-term relationships.
Data about user actions is stored for a period of 14 months and then automatically deleted. In this process, the deletion of data whose storage period has expired occurs automatically once a month.
The setting of cookies and the further processing of personal data described here takes place with their consent. The legal basis for data processing in connection with the Google Analytics service is therefore Art. 6 (1) a) DSGVO. They can revoke their consent at any time under the item "Cookie Settings"
You can also prevent the storage of cookies by Google Analytics via an appropriate setting of your browser software. You can also prevent the collection of information generated by the cookie by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. If you visit our website via a mobile device, you can deactivate Google Analytics by clicking on this link. Please also note that we document consent given by them in order to comply with our obligation to provide evidence under Article 7 (1) DSGVO. As we are obliged to do so, this storage is based on the legal basis of Art. 6 para. 1 lit. (c) DSGVO).
We use services, services and content (hereinafter collectively referred to as "content") provided by third parties on our website. For such integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to the respective third-party providers.
These data processing operations are carried out in each case to protect our legitimate interests in the optimization and economic operation of our website and are based on the legal basis of Art. 6 (1) f) DSGVO. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. One such extension is, for example, the Matrix-based firewall uMatrix for the browsers Firefox and Google Chrome. Please note that this may result in functional restrictions on the website.
We have integrated into our website content from the following services provided by third-party providers:
We are represented on several social media platforms with a company page. Through this, we would like to offer further opportunities for information about our company and for exchange. Our company has company pages on the following social media platforms:
When you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile used also regularly constitutes personal data. This also covers messages and statements made while using the profile. In addition, during your visit to a social media profile, certain information about it is often automatically collected, which may also constitute personal data.
When you visit our Facebook or Instagram page, through which we present our company or individual products from our range, certain information about you is processed. The sole controller of this processing of personal data is Facebook Ireland Ltd (Ireland/EU - "Facebook"). For further information about the processing of personal data by Facebook, please visit https://www.facebook.com/privacy/explanation.
Facebook offers the possibility to object to certain data processing; related notices and opt-out options can be found at https://www.facebook.com/settings?tab=ads.
We also process information that you have provided to us via our company page on the relevant social media platform. Such information may be the username used, contact details or a message to us. We regularly process this personal data only if we have previously expressly requested you to provide us with this data, for example as part of a survey. These processing operations by us are carried out as the sole responsible party.
We process this data based on our legitimate interest in contacting inquiring persons. The legal basis for the data processing is Article 6 (1) (f) DSGVO.
In addition, we may process such communicated data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art. 6 (1) (f) DSGVO and serve our interest in further developing our offer and informing you specifically about our offers. Further data processing may take place if you have consented (Art. 6 para 1 letter a) DSGVO) or if this serves the fulfillment of a legal obligation (Art. 6 para 1 letter c) DSGVO).
For the establishment or implementation of the contractual relationship with our customers, the processing of personal master data, contract data and payment data provided to us is regularly required. The legal basis for this processing is Art. 6 (1) b) DSGVO. We also process customer and prospective customer data for evaluation and marketing purposes. These processing operations are carried out on the legal basis of Art. 6 (1) (f) DSGVO and serve our interest to further develop our offer and to inform you specifically about offers of iAmHealth Distribution UG. Further data processing may take place if you have consented (Art. 6 para 1 letter a) DSGVO) or if this serves the fulfillment of a legal obligation (Art. 6 para 1 letter c) DSGVO).
We may use your email address provided during registration or ordering to inform you about iAmHealth Distribution UG's own similar products and services. The legal basis is Art. 6 para. 1 lit. f) DSGVO in conjunction with. § Section 7 (3) UWG. You can object to this at any time without incurring transmission costs other than those according to the prime rates. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an e-mail to firstname.lastname@example.org.
If you order a product by e-mail or by telephone, we process personal data for the purpose of processing the contract or to provide them with the ordered product. We process within the ordering process only the data that you yourself have provided. In order to be able to deliver the ordered products to you, we transmit your data required for the delivery to one of our shipping service providers as specified in the order. The legal basis for the processing is in each case Art. 6 para. 1 letter b) DSGVO. All data fields marked as mandatory are required for processing your order. Failure to provide this data will result in us not being able to process your order. The provision of further data is voluntary.
Date: June 2021