Legal notice / Data protection

---

Data protection

1. General

This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as ‘data’) within our online offering and the associated websites, functions and content.

Personal data is data that can be used to identify you personally.

WAs the operator of this website, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Data processing on this website is carried out by the website operator. You can find our contact details under point 2. Responsible body.

2. Responsible bodies

The responsible body is: Dietz GmbH // Reutäckerstr. 12 // 76307 Karlsbad
Tel.: +49 (0) 7248 91 86-0 // Fax: +49 (0) 7248 91 86-86
E-Mail: info@dietz-reha.de

hereinafter referred to as ‘we’ or ‘us’.

3. Contact and data protection officer

For enquiries regarding the handling, scope or origin of your personal data, or for the purpose of deletion – insofar as this is possible under legal requirements – blocking or modification, our data protection officer is available to you at the following contact details:

Datenbeschützerin GmbH // Unterer Sand 9 // 94209 Regen,Germany
Tel.: +49 (0) 9921 88 22 9000
E-Mail: info@datenbeschuetzerin.de

4. Collection of personal data when visiting our websites

Each time you visit our websites and each time you download a file, log data, known as server log files, which your browser transmits to us, is automatically stored, such as:

• IP-adress,
• date and time
• page accessed
• name of the downloaded file(s)
• browser type and operating system used

as well as the website from which you visit us, are stored temporarily, i.e. for a maximum of three months. This data is stored, evaluated and then deleted solely for statistical purposes, to improve our offering and to identify and defend against attacks on our website.

This data is not merged with other data sources

The basis for data processing is Art. 6 (1) (b) GDPR (EU), which permits the processing of data for the performance of a contract or pre-contractual measures.

5. Personal data we require for your purchase

As part of your purchase, we collect individual details about your company and yourself (first name, surname, postal address, email address and bank details). We use this data to the extent necessary for the establishment, execution or termination of contracts concluded with you, in short, for contractual purposes, e.g. to process your order and payment and to deliver the goods you have ordered. We also use your email address to inform you about the status of your order or delivery or to handle general business correspondence.

6. Use of your data for contacting you

If you wish to send us a message using the contact form under this link: https://dietz-group.de/kontakt/ or this: https://shop.dietz-group.de/SERVICE-HILFE/Kontakt/ we will collect your name and email address so that we can reply to you. The stored data will then be deleted, unless we have already stored it for other purposes mentioned in this privacy policy with your consent and are permitted to use it accordingly.

7. Creating an account

If you have voluntarily created an account under ‘Register’, we will also use your collected personal data to register you as a Dietz customer for future potential visits or purchases in our online shop, so that you do not have to re-enter this data, which is required for contractual purposes, with each subsequent order and can view purchases you have already made in your customer account at any time.

8. Disclosure of data to third parties and order processing

If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if the transfer of data to third parties, such as delivery service providers, is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR (EU), you have given your consent, a legal obligation requires it, or it is based on our legitimate interests (e.g. when using web analytics).

Your data will not be transferred to third countries.

9. Storage period/deletion of data

The data we process will be deleted or restricted in its processing in accordance with Articles 17 and 18 of the GDPR (EU). Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

In accordance with legal requirements, data is stored for 6 years in particular in accordance with Section 257 (1) of the German Commercial Code (HGB) (e.g. opening balance sheets, annual financial statements, commercial letters, booking documents) and for 10 years in accordance with Section 147 (1) of the German Fiscal Code (e.g. records, booking documents, commercial and business letters, documents relevant for taxation).

10. Your rights

You have the following rights vis-à-vis us with regard to your personal data:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR (EU). In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
• to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR (EU);
• to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR (EU), unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR (EU), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have lodged an objection to the processing in accordance with Art. 21 GDPR (EU);
• to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller in accordance with Art. 20 GDPR (EU);
• to revoke your consent at any time in accordance with Art. 7(3) GDPR (EU). As a result, we will no longer be permitted to continue processing data based on this consent in the future, and
• to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR (EU). As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

11. Newsletter

The following information provides details about the content of our DIETZ GROUP newsletter, the registration, dispatch and statistical evaluation procedures, and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.

Content of the newsletter: We send emails and other electronic notifications with editorial or promotional information (hereinafter ‘newsletter’) only with the consent of the recipients or a legal permission. If the content of the newsletter is specifically described during registration, it is decisive for the consent of the users. In addition, our newsletters contain information about our products, offers, promotions and, where applicable, our company.

Registration data: To register for the DIETZ GROUP newsletter, we require your email address, first name and surname. We require your name so that we can address you personally in the newsletter.

Double opt-in and logging: Registration for our newsletter takes place in a so-called ‘double opt-in procedure’. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with someone else's email address. Newsletter registrations are logged in order to be able to verify the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.

Success measurement: Each newsletter sent contains a so-called ‘web beacon’, i.e. a pixel-sized file that is retrieved from the server of the mailing service provider when the newsletter is opened. As part of this retrieval, technical information such as information about your browser and your system, as well as your IP address and the time of retrieval, is initially collected. This information is used to improve the services on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the mailing service provider to monitor individual users. Rather, the evaluations serve to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The newsletter is sent and its success measured on the basis of the recipient's consent in accordance with Art. 6 (1) (a), Art. 7 GDPR (EU) in conjunction with § 7 (2) No. 3 UWG (German Unfair Competition Act) or on the basis of the legal permission in accordance with § 7 (3) UWG.

The registration process is logged on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR and serves as proof of consent to receive the newsletter.

Cancellation/revocation: You can cancel your subscription to our newsletter at any time, i.e. revoke your consent at any time with effect for the future. You can cancel either via the link at the end of each newsletter or online by using the unsubscribe function in the newsletter form.

12. Cookies

Cookies are small text files that are sent from our web server to your browser and stored on your computer's hard drive. They serve to automatically recognise your computer the next time you visit our website and to facilitate navigation.

We also use these so-called ID cookies to recognise your computer on other websites that participate in the Google advertising network based on the logged data (visit to our website and recent Google searches, including date and time, preferred language, browser type, operating system) and to present you with advertisements tailored to your presumed interests. You can view, remove or add the categories according to which interest-based advertising is shown to you across the entire Google Display Network using Google's Ad Preferences Manager. Using this tool, you can also object to the use of cookies for interest-based advertising in the Google Display Network altogether by clicking on the button to deactivate ID cookies. Further information is also available here. ID cookies stored on your hard drive expire automatically 30 days after your last visit to our website.

You can control whether cookies are stored at all via your browser's security settings, for example by not accepting cookies at all or only accepting them on request, or by specifying that cookies are deleted after each visit to the Internet. However, if you do not accept cookies, this may lead to restrictions in the functionality of our websites.

13. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.

On behalf of DIETZ, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide DIETZ with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

14. Social plugins from Google+ using the ‘1-click solution’

Our website uses social plugins (“plugins”) from the social network Google+. These services are provided by Google Inc. (‘provider’).

Google+ is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). An overview of Google's plugins and their appearance can be found here: https://developers.google.com/+/web/
To ensure the protection of your data, the plugins are integrated into the page using the ‘1-click for more privacy solution’ called Shariff from c't and Heise Online (source and further information: https://www.heise.de/news/Datenschutz-und-Social-Media-Der-c-t-Shariff-ist-im-Einsatz-2470103.html ). This integration ensures that when you visit a page on our website that contains such plugins, no connection is established with Google's servers. Only when you actively click on a share button and thereby give your consent to the transfer of data does your browser establish a direct connection to Google's servers. The content of the respective plugin is then transmitted directly from the relevant provider to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the relevant provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there. If you are logged in to one of the social networks, the providers can immediately assign your visit to our website to your social network profile. If you interact with the plugins, for example by clicking the ‘Like’ or ‘+1’ button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network or on your account and displayed there to your contacts. For the purpose and

Google's privacy policy: https://policies.google.com/privacy

If you do not want Google to assign the data collected via our website directly to your profile in the respective service, you must log out of the corresponding service before activating the plugins.

15. Objection or revocation of the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this consent at any time. Such revocation affects the permissibility of the processing of your personal data after you have expressed it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not necessary to fulfil a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.
(3) You can, of course, object to the processing of your personal data for advertising purposes at any time.
(4) You can inform us of your objection using the following contact details: You can reach our data protection officer at our registered address with the addition ‘The Data Protection Officer’ (no. 3)or by email at datenschutzbeauftragter@dietz-reha.de

16. SSL encryption/data security

The personal data requested by us during the ordering process is transmitted to us via a secure SSL connection (‘Secure Socket Layer’) with 128-bit encryption to protect it from unauthorised access. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line on the left. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

In addition, we take further technical and organisational security measures to prevent the loss, destruction and misuse of data. Access to your customer account, if you have one, is only possible by entering your personal password. You can help protect your data by choosing a password that is as difficult as possible to guess (e.g. by combining letters, numbers and characters) and keeping it strictly confidential.

17. Changes to the privacy policy

Due to the dynamic development of the internet, it may be necessary for us to make adjustments to our privacy policy from time to time. Please therefore refer to the current version of our privacy policy.

As of 26th June 2018