Data privacy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens with your personal data when you visit our website. Personal data is all data by means of which you can be personally identified. Detailed information concerning data protection can be found in the data protection declaration below.

Data recording on our website

Who is responsible for the data recording on this website?

The data processing on this website is undertaken by the website operator. Its contact details can be found in the legal notice of this website.

How do we record your data?

On the one hand, data is gathered when you disclose it to us. For example, this could be data which you enter into a contact form.

Other data is recorded automatically by our IT systems when you visit the website. Above all, this concerns technical data (for example Internet browser, operating system or time of accessing the Internet site). The recording of this data takes place automatically when you visit our website.

What do we use your data for?

Part of the data is gathered in order to ensure a defect-free operation of the website. Other data can be used in order to analyse your user behaviour.

What rights do you have in relation to your data?

At all times, you have the right to receive free-of-charge information concerning the origin, recipients and purpose of your personal data which has been saved. You also have a right to request the correction, blocking or deletion of this data. Should you have any questions in this respect or any other queries relating to data protection, you can contact us via the address stated in the legal notice. In addition, you have the right to complain to the competent supervisory authority.

Analysis tools and tools of third party providers

When visiting our website, your surfing behaviour can be evaluated statistically. Primarily, this takes place with cookies and so-called analysis programs. The analysis of your surfing behaviour generally takes place anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent this by not using certain tools. Detailed information in this regard can be found in the following data protection declaration.

You can object to this analysis. We will inform you of your options for raising the objection in this data protection declaration.

2. General notice and obligatory information

Data protection

The operators of this sites take the protection of your personal data extremely seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, as well as this data protection declaration.

When you use this website, various personal data is gathered. Personal data is data by means of which you can be personally identified. This data protection declaration explains what data we gather and what we use it for. It also explains how and for what purpose this takes place.

We wish to point out that data transfers over the Internet (for example communication by email) can represent security risks. It is not possible to fully protect the data against third party access.We wish to point out that data transfers over the Internet (for example communication by email) can represent security risks. It is not possible to fully protect the data against third party access.

Data protection co-ordinator

The data protection officer of our company is

Hans-Christian Huber

Marktplatz 4/8, 3313 Wallsee, Austria

Telephone: +43 (0)7433 20001

Email: office@onesmartdiet.eu

Revocation of your consent to the processing of data

Many data processing procedures are only possible with your express consent. You can revoke consent which has already been issued at any time. An informal notification to us by email suffices. The lawfulness of the data processing which took place prior to the revocation is not affected.

Right to complain to the competent supervisory authority

In case of breaches of data protection laws, the data subject has the right to complain to the competent supervisory authority. The competent supervisory authority in matters relating to data protection laws is the state data protection authority of the state in which our company maintains its place of business. A list of the data protection officers and their contact details can be found via the following link; https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right of data portability

You have the right to have data which we process in an automated manner on the basis of your consent or in fulfilment of a contract transferred to you or a third party in an up-to-date, machine readable format. Should you request a direct transfer of the data to another controller, this only takes place if technically possible.

SSL and TLS encryption

For security reasons and in order to protect the transfer of confidential content, such as orders or enquiries which you send to as the site operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser changing from“https://” to“https://” and the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data which you send to us cannot be read by any third parties.

Encrypted payment processing on this website

Should an obligation to provide us with your payment details (for example account number in case of a direct debit mandate) exist following the completion of a chargeable process, this data will be required in order to process the payment.

The payment traffic via the usual payment methods (VISA/MasterCard, direct debit) takes place exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the address line of the browser changing from“https://” to“https://” and the lock symbol in your browser line.

In case of encrypted communication, the payment data which you provide to us cannot be read by any third parties.

Information, blocking, deletion

Within the framework of the applicable statutory provisions, you have at all times the right to free-of-charge information concerning the personal data relating to you which is saved, its origin and recipients and the purpose of the data processing, and, if applicable, the right to have this data corrected, blocked or deleted. Should you have any questions in this respect or any other queries relating to data protection, you can contact us via the address stated in the legal notice at any time.

Objection to advertising emails

The use of contact data published in the legal notice in order to send advertising and information materials which have not been expressly requested is hereby being objected to. The operators of the sites expressly reserve the right to take legal action in case of the unsolicited sending of advertising information, for example through spam emails.

3. Data recording on our website

Cookies

The Internet sites use so-called cookies in part. Cookies do not cause any damage to your computer and do not contain any viruses. The purpose of cookies is to make our service more user friendly, more effective and more secure. Cookies are small text files which are deposited on your computer and saved by your browser.

Most cookies used by us are so-called “session cookies”. These are automatically deleted after the end of your visit. Other cookies remain saved on your end device until you delete these. These cookies enable us to recognise your browser next time you visit us.

You can set your browser in such a way that you are informed of the setting of cookies and can permit these only in individual case, can exclude the acceptance of cookies in certain cases or generally or can activate the automatic deletion of cookies when you close the browser. Should cookies be de-activated, the functionality of this website may be restricted.

Cookies which are necessary to carry out the electronic communication process or in order to provide certain functions requested by you (for example shopping basket function) will be saved in accordance with Article 6 Paragraph 1 Letter f) GDPR. The website operator has a legitimate interest in the saving of cookies so that it can provide its service without any technical defects and in an optimised manner. Should other cookies be saved (for example cookies which analyse your surfing behaviour), these will be treated separately in this data protection declaration.

Server log files

The provider of the sites automatically gathers and saves information in so-called server log files, which your browser transfers to us automatically.

These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address

This data will not be combined with other data sources.

The basis for the data processing is Article 6 Paragraph 1 Letter f) GDPR which permits the processing of data in order to fulfil a contract or carry out pre-contractual measures.

Contact form

Should you send us queries via the contact form, your information in the contact form (including the contact details provided by you) will be saved by us in order to process the query and in case of any follow up questions. We do not pass this data on without your consent.

The processing of the data provided in the contact form therefore takes place exclusively on the basis of your consent (Article 6 Paragraph 1 Letter a) GDPR). You can revoke this consent at any time. An informal notification to us by email suffices. The lawfulness of the data processing which took place prior to the revocation is not affected.

The data which you enter in the contact form remains with us until you request its deletion, revoke your consent to the saving or the purpose for the saving no longer applies (for example once the processing of your query is complete). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Registration on this website

You can register on this website in order to use its additional functions. The data which is entered for this purpose is used by us only for the purpose of use of the respective service for which you have registered. The obligatory information requested during the application process must be entered in full. Otherwise, we will reject the registration.

For important changes, for example to the scope of service or in case of technically necessary alterations, we use the email address which you provided during the registration process in order to contact you.

The processing of the data provided during the registration takes place exclusively on the basis of your consent (Article 6 Paragraph 1 Letter a) GDPR). You can revoke consent which has already been issued at any time. An informal notification to us by email suffices. The lawfulness of the data processing which took place prior to the revocation is not affected.

The data recorded during the registration is saved by us once you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

Processing of data (customer and contract data)

We only gather, process and use personal data if this is necessary in order to conclude, define or alter the legal relationship (core data). This takes place on the basis of Article 6 Paragraph 1 Letter b) GDPR which permits the processing of data in order to fulfil a contract or carry out pre-contractual measures. Personal data concerning the use of our Internet sites (use data) is only gathered, processed and used by us to the extent that this necessary to allow the user to use the service or to bill the service used.

The customer data which is gathered will be deleted following completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer at the time of conclusion of the contract for online shops, dealers and the shipping of goods

We only transfer personal data to third parties if this is necessary in order to perform the contract, for example to a company responsible for the delivery of the goods or a bank responsible for handling the payment transaction. No further transfer of data will take place or will only be carried out if you have expressly agreed to the transfer. Your data will not be transferred to third parties without your express consent, for example for advertising purposes.

The basis for the data processing is Article 6 Paragraph 1 Letter b) GDPR which permits the processing of data in order to fulfil a contract or carry out pre-contractual measures.

4. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files which are saved on your computer and which enable an analysis of the use of the website by you. The information generated by the cookie concerning your use of this website is generally transferred to a server of Google in the USA and saved there.

The saving of Google Analytics cookies takes place on the basis of Article 6 Paragraph1 1 Letter f) GDPR. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise both its web service and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. By means of this, your IP address will be shortened by Google within Member States of the European Union or in other European Economic Area Member States prior to being transferred to the USA. Only in exceptional cases will the full IP address be transferred to a server of Google in the USA and shortened there. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports concerning the website activities and to provide additional services for the website operator concerning the use of the website and the use of the Internet. The IP address transferred by your browser in the course of Google Analytics will not be combined with other data by Google.

Browser plugin

You can prevent the saving of cookies by setting your browser software accordingly; however we wish to point out that in such a case, you may not be able to fully use all functions of this website. You can also prevent the saving by Google of the data generated by the cookie which relates to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data recording

You can prevent the recording of your data by Google Analytics by clicking on the following link. An opt out cookie will be set which prevents the recording of your data when you visit this website in the future. De-activate Google Analytics.

Further information concerning the handling of user data by Google Analytics can be found in the data protection declaration of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded an order data processing contract with Google an implement the strictest guidelines of the German data protection authorities when using Google Analytics.

Demographical characteristics of Google Analytics

This website uses the “demographical characteristics” function of Google Analytics. By means of this, reports which contain statements concerning the age, gender and interests of the website visitors can be compiled. This data originates from advertising by Google which is tailored to customer interests, as well as from visitor data of third party providers. This data cannot be assigned to a specific person. You can de-activate this function at any time via the advertising settings in your Google account or you can generally prohibit the recording of your data by Google Analytics as set out in the point “objection to data recording”.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

In the course of Google AdWords, we use the so-called conversion tracking. Should you click on an advert displayed by Google, a cookie is set for the conversion tracking. Cookies are small text files which the Internet browser deposits on the computer of the user. These cookies cease to be valid after 30 days and do not serve the purpose of personally identifying the users. Should the user visit certain pages of this website and should the cookie not yet have expired, Google and ourselves can recognise that the user has clicked on the advert and was redirected to this site.

Each Google AdWords customer receives a different cookie. The cookies cannot be traced via the websites of AdWords customers. The purpose of the information obtained with the assistance of the conversion cookie is to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers are informed of the total number of users who have clicked on their adverts and who were redirected to a site which contains a conversion tracking tag. However, they do not obtain any information which allows users to be personally identified. Should you not wish to participate in tracking, you can object to this using by simply de-activating the cookie of the Google Conversion Tracking via your Internet browser under user settings. You will then not be included in conversion tracking statistics.

The saving of “conversion cookies” takes place on the basis of Article 6 Paragraph1 1 Letter f) GDPR. The website operator has a legitimate interest in the analysis of the user behaviour in order to optimise both its web service and its advertising.

Further information concerning Google AdWords and Google Conversion Tracking can be found in the data protection provisions of Google: https://www.google.de/policies/privacy/.

You can set your browser in such a way that you are informed of the setting of cookies and can permit these only in individual case, can exclude the acceptance of cookies in certain cases or generally or can activate the automatic deletion of cookies when you close the browser. Should cookies be de-activated, the functionality of this website may be restricted.

Google reCAPTCHA

We use ““Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The purpose of reCAPTCHA is to check whether a data entry on our websites (for example in a contact form) is provided by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically once the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (for example IP address, duration of visit of the website visitor or mouse movements carried out by the user). The data which is recorded during the analysis is passed on to Google.

The reCAPTCHA analyses take place fully in the background. Website visitors are not informed that an analysis is taking place.

The data processing takes place on the basis of Article 6 Paragraph1 1 Letter f) GDPR. The website operator has a legitimate interest in protecting its web service against abusive automated spying and against SPAM.

Further information concerning Google reCAPTCHA and the data protection declaration of Google can be obtained via the following links: https://www.google.com/intl/de/policies/privacy/ und https://www.google.com/recaptcha/intro/android.html.

5. Plugins and tools

Google Web Fonts

In order to display fonts in a standardised manner, this site uses so-called Web Fonts which is provided by Google. When accessing a site, your browser loads the required web fonts into your browser cache in order to correctly display texts and fonts

For this purpose, the browser used by you must establish a connection to the servers of Google. By means of this, Google is informed that our website was accessed via your IP address. The use of Google Web Fonts takes place in the interest of a standardised and attractive display of our online services. This represents a legitimate interest under Article 6 Paragraph 1 Letter f) GDPR.

Should your browser not support Web Fonts, a standardised font will be used by your computer.

Further information concerning Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the data protection declaration of Google: https://www.google.com/policies/privacy/.

6. Payment providers

PayPal

On our website, we also offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

Should you select payment by PayPal, the payment data entered by you will be passed on to PayPal.

The transfer of your data to PayPal takes place on the basis of Article 6 Paragraph 1 Letter a) GDPR (consent) and Article 6 Paragraph 1 Letter b) GDPR (processing in order to fulfil a contract). You have the option of revoking your consent to the data processing at any time. Any revocation will not affect data processing procedures which were carried out in the past.

Klarna

We also offer payment via Klarna on our website. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as “Klarna”).

Klarna offers various payment options (for example payment in instalments). Should you opt for payment with Klarna (Klarna checkout solution), Klarna will gather various personal data from you. Details in this respect can be found in the data protection declaration of Klarna which is accessible via the following link: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies in order to optimise the use of the Klarna checkout solution. The optimisation of the checkout solution represents a legitimate interest under Article 6 Paragraph 1 Letter f) GDPR. Cookies are small text files which are saved on your end device and do not cause any damage. These remain on your end device until deleted by you. Details concerning the use of Klarna cookies can be found via the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The transfer of your data to Klarna takes place on the basis of Article 6 Paragraph 1 Letter a) GDPR (consent) and Article 6 Paragraph 1 Letter b) GDPR (processing in order to fulfil a contract). You have the option of revoking your consent to the data processing at any time. Any revocation will not affect data processing procedures which were carried out in the past.

Sofort bank transfer

On our website, we offer payment via Sofort bank transfer. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as “Sofort GmbH”).

With the assistance of the “Sofort bank transfer” procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately start fulfilling our obligations.

Should you have chosen the “Sofort bank transfer” payment option, you transfer the PIN and a valid TAN to Sofort GmbH, which allows it to log into your online account. After logging in, Sofort immediately checks your account balance and carries out the transfer to us with the assistance of the TAN provided by you. We are then provided with an immediate transaction confirmation. After the login in, your sales, credit framework of the allowance and the presence of other accounts, as well as their balances are checked.

Alongside the PIN and TAN, the payment data entered by you, as well as data concerning your person is transferred to Sofort GmbH. The data relating to your person includes your first name and surname, address, telephone number(s), email address, IP address and any other data which is necessary to carry out the payment process. The transfer of this data is necessary in order to establish your identity without any doubts and to defend against attempted fraud.

The transfer of your data to Sofort GmbH takes place on the basis of Article 6 Paragraph 1 Letter a) GDPR (consent) and Article 6 Paragraph 1 Letter b) GDPR (processing in order to fulfil a contract). You have the option of revoking your consent to the data processing at any time. Any revocation will not affect data processing procedures which were carried out in the past.

Details concerning payment by Sofort bank transfer can be found via the following links: https://www.sofort.de/datenschutz.html und https://www.klarna.com/sofort/.