Datenschutzerklärung | Caroline Hillmayer

Controller responsible for data processing:
Caroline Hillmayer
Rheinstraße 7
80803 Munich
Germany
info@schlafstressfrei.de

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how your data is handled.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access.

These access data are evaluated exclusively for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the correct presentation of our offer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, which prevail within the framework of a balancing of interests. All access data are processed only as long as necessary for the purposes described above.

Hosting

The services for hosting and displaying the website are partly provided by our service providers within the framework of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Brazil, Mexico, India, Ukraine. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on these safeguards: Standard Contractual Clauses of the European Union.

2. Data Processing for Contact and Customer Communication

Contacting Us

As part of contacting us, we collect personal data pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR in order to process your inquiries if you voluntarily provide this information to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such because we require these data to process your inquiry. The data collected can be seen from the respective input forms.

After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

After complete processing of your customer inquiry, your data will be restricted for further processing and deleted after expiration of tax and commercial retention periods pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

3. Advertising by Email

3.1 Email Newsletter with Registration and Newsletter Tracking

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

Please note that we analyze your user behavior when sending the newsletter. For this purpose, we also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click rates in order to design future newsletter campaigns (“newsletter tracking”).

For this analysis, the emails sent contain one-pixel technologies (e.g., web beacons, tracking pixels) stored on our website. For the analyses, we link in particular the following “newsletter data”:

the page from which the page was requested (referrer URL),
the date and time of access,
the description of the type of web browser used,
the IP address of the requesting computer,
the email address,
the date and time of registration and confirmation,
and the one-pixel technologies with your email address or IP address and, if applicable, an individual ID.

Links contained in the newsletter may also contain this ID.

If you do not wish newsletter tracking, you may unsubscribe from the newsletter at any time as described above.

The information is stored as long as you remain subscribed to the newsletter.

3.2 Newsletter Distribution

The newsletter and the newsletter tracking described above may also be sent by our service providers within the framework of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Canada.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada.

There is a decision by the European Commission on an adequate level of data protection for the USA as the basis for a third-country transfer, insofar as the respective service provider is certified. Until certification by our service providers, data transfer continues to be based on the following safeguards: Standard Contractual Clauses of the European Commission.

Our service providers are located and/or use servers in the following countries: India. No adequacy decision by the European Commission exists for this/these country/countries. Our cooperation with them is based on these safeguards: Standard Contractual Clauses of the European Commission.

4. Cookies and Other Technologies

4.1 General Information

To make visiting our website attractive and enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files automatically stored on your device. Some cookies are deleted after the browser session ends, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).

Protection of Privacy on End Devices

When using our online services, we use strictly necessary technologies to provide the telemedia service expressly requested. The storage of information on your device or access to information already stored on your device does not require consent in this respect.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if consent is not granted, parts of the website may not be fully usable. Any consent you have given remains valid until you adjust or reset the relevant settings on your device.

Subsequent Data Processing by Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain functions of our website (e.g., website preference settings). Through these technologies, IP address, time of visit, device and browser information, and information about your use of our website (e.g., information about your preferences) are collected and processed. Within the framework of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our offer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

In addition, we use technologies to fulfill legal obligations to which we are subject (e.g., to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

If you have consented to the use of technologies pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, you may revoke your consent at any time by contacting us via the contact option described in this privacy policy.

4.2 Use of the Wix Consent Manager Tool for Consent Management

We use the Wix Consent Manager Tool on our website to inform you about the cookies and other technologies we use on our website and to obtain, manage, and document your consent to the processing of your personal data by these technologies where required. This is necessary pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR to fulfill our legal obligation under Art. 7 para. 1 GDPR to be able to prove your consent to the processing of your personal data.

The Wix Consent Manager Tool is provided by Wix.com Ltd., 40 Nemal St., Tel Aviv 6350671, Israel (“Wix”). After submitting your cookie declaration on our website, Wix’s web server stores your IP address, date and time of your declaration, browser information, language and URL from which the declaration was sent, as well as information about your consent behavior. In addition, a cookie is used containing information about your consent behavior.

Your data are deleted after 365 days unless you have expressly consented to further use of your data pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: Israel, United Kingdom, USA.

The adequacy decision for the USA applies as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

5. Use of Cookies and Other Technologies for Web Analytics and Advertising Purposes

We use the following cookies and other technologies from third-party providers on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

After the purpose ceases and the use of the respective technology by us ends, the data collected in this context will be deleted. You may revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section “Cookies and Other Technologies.”

Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.

6. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta)

If you have given your consent to the respective social media operator pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, your data will automatically be collected and stored for market research and advertising purposes when you visit our online presences on the social media mentioned above. User profiles are created using pseudonyms. These may be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose.

For detailed information on the processing and use of data by the respective social media operator, as well as contact options and your rights and settings options for protecting your privacy, please refer to the privacy notices of the providers linked below. If you still require assistance in this regard, you may contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our Facebook presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Data processing in connection with visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (Insights data information) can be found here.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA applies as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on these safeguards: Standard Contractual Clauses of the European Commission.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our Instagram presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

Data processing in connection with visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (Insights data information) can be found here.

The adequacy decision for the USA applies as the basis for third-country transfers insofar as the respective service provider is certified. Certification is in place.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us within the scope described therein;
pursuant to Art. 16 GDPR, the right to request immediate correction of inaccurate or completion of your personal data stored by us;
pursuant to Art. 17 GDPR, the right to request deletion of your personal data stored by us, unless further processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise, or defense of legal claims;
pursuant to Art. 18 GDPR, the right to request restriction of processing of your personal data insofar as:
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose its deletion;
- we no longer need the data, but you require them for the establishment, exercise, or defense of legal claims; or
- you have objected to processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or our company headquarters.

Right to Object

If we process personal data as explained above to safeguard our overriding legitimate interests within the framework of a balancing of interests, you may object to this processing with effect for the future.

If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If processing is carried out for other purposes, you only have a right to object on grounds relating to your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

7.2 Contact Options

If you have questions regarding the collection, processing, or use of your personal data, requests for information, correction, restriction, or deletion of data, as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details provided in our legal notice.