Data protection
Privacy Policy
With these privacy notices, we would like to inform you transparently about the type, scope, and purpose of the personal data we collect, use, and process, and to educate you about your rights. The processing of personal data is governed by the General Data Protection Regulation (GDPR) and the provisions of the Federal Data Protection Act (BDSG).
Contents:
- General Information
- Data processing on my website
- Further data processing
- Data processing on our social media channels
General Information
Name and contact details of the data controller
Hybrid Wellness LLC
3833 Powerline Rd 100-88A
FT Lauderdale, Florida 33309, United States of America
Represented by: Lee Paulina Pape (General Manager) & Lisa Emmer (Secretary Manager)
E-Mail: lee@hormonic.de, lisa@hormonic.de
Types of personal data processed
Personal data is information that can be attributed directly or indirectly to your person. In this respect, we process, for example, the following data:
- Inventory data (e.g., names, addresses)
- Applicant data (e.g., personal information, postal and contact addresses, as well as documents belonging to the application such as cover letters, CVs, certificates)
- Content data (e.g., text inputs, photographs, videos)
- Contact details (e.g., email, telephone numbers)
- Meta/communication data (e.g., device information, IP addresses)
- Usage data (e.g., websites visited, interest in content, access times)
- Location data (data indicating the location of an end user's terminal device)
- Contractual data (e.g., subject matter of contract, term, customer category)
- Payment data (e.g., bank details, invoices, payment history)
Categories of data subjects
As part of our activities, we process personal data of various categories of data subjects:
- Business and contractual partners
- Interested parties
- Communication partners
- Customers
- Users (e.g., website visitors, users of online services)
- Suppliers
- Employees (e.g., staff, applicants, former employees)
Purposes of processing
We process personal data for various purposes in order to provide our services in the best possible way. In principle, we only process your data to the extent necessary to achieve the stated purposes and in compliance with the principles of data minimization and purpose limitation. Below you will find an overview of the purposes of processing:
- Provision of contractual services
- Customer service
- Contact inquiries and communication
- Office and organizational procedures
- Marketing and its conversion tracking
- Provision of our online offering and user-friendliness
- Visit action evaluation
- Application process (establishment, possible implementation, and termination of the employment relationship)
- Cross-device tracking (cross-device processing of user data for marketing purposes)
- Remarketing
- Reach measurement (e.g., access statistics, recognition of returning visitors)
- Security measures
- Tracking (e.g., interest-based/behavioral profiling, use of cookies)
- Server monitoring and error detection
Legal bases
We only process this personal data on the basis of a legal authorization in accordance with the General Data Protection Regulation. This is the case, for example, when:
- You have expressly given us your consent to do so in accordance with Art. 6(1) sentence 1 lit. a) GDPR.
- Processing is necessary for the performance of a contract to which you are a party or in order to take steps prior to entering into a contract in accordance with Art. 6(1) sentence 1 lit. b) GDPR.
- For the fulfillment of a legal obligation in accordance with Art. 6(1) sentence 1 lit. c) GDPR.
- Processing is necessary for the purposes of our legitimate interests or the interests of a third party in accordance with Art. 6(1) sentence 1 lit. f) GDPR.
Storage duration of data
How long we store your personal data depends on the type of data concerned. In principle, we only store your data for as long as is necessary for the fulfillment of our contractual or legal obligations or until you have withdrawn your consent.
Data transfer
We only transfer your personal data to third parties under the following conditions:
- You have expressly given your consent in accordance with Art. 6(1) sentence 1 lit. a) GDPR.
- The transfer is made in accordance with Art. 6(1) sentence 1 lit. f) GDPR to safeguard our legitimate interests.
- There is a legal obligation for the transfer in accordance with Art. 6(1) sentence 1 lit. c) GDPR.
- The transfer is necessary for the performance of contractual relationships in accordance with Art. 6(1) sentence 1 lit. b) GDPR.
Data processing on my website
Provision of the website
When you visit our website, information is automatically sent to our website's server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer and the name of your access provider
The legal basis for the temporary storage of data and log files is our legitimate interest in accordance with Art. 6(1) sentence 1 lit. f) GDPR. The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- For further administrative purposes
The data is deleted or blocked as soon as it is no longer required for the purpose for which it was collected. Your IP address is not processed further as soon as the respective session (the visit to our website) has ended.
Contact
Our website offers you various ways to get in touch with us and to take advantage of various services (e.g., scheduling appointments for our telehealth services). This is possible via:
- The contact form
- Scheduling a telemedical consultation (via Calendly)
- By email
- By phone
If you use one of these contact options, we will store and process the data you voluntarily provided to us. This may include the following data:
- Surname/first name and address
- Email address
- Telephone number
- Content of the message
- Account details
- Health data
The legal basis for the processing is our legitimate interest in responding to the contact inquiry in accordance with Art. 6(1) lit. f) GDPR. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6(1) lit. b) GDPR.
Newsletter
On our website, we offer you the opportunity to sign up for a newsletter. In the newsletter, we would like to inform you regularly about new products and news. For sending the newsletter, we use the external service provider Klaviyo to be able to offer you an efficient and secure dispatch system.
To subscribe to the newsletter, you are required to provide an email address. Further data is only collected on a voluntary basis. To verify the email address, you will first receive a registration email that you must confirm via a link. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The legal basis for this is Art. 6(1) lit. a) GDPR. You can withdraw your consent to the storage of the data at any time, e.g., via the "unsubscribe" link in the newsletter. The legality of the processing operations that have already been carried out remains unaffected by the withdrawal of consent. Further details on the Klaviyo privacy policy can be found here: https://www.klaviyo.com/legal/privacy-notice.
Use of cookies
Our website uses cookies in several places. These are small text files that your browser automatically creates and which are stored on your end device when you visit our website. This identifies the browser used and allows it to be recognized by our web server.
Provision of the website
Most of the cookies on our website are session cookies. These serve to ensure the functionality and security of our website. As soon as you leave our site, they are automatically deleted. If personal data is processed and stored in this process, this is done on the basis of Art. 6(1) sentence 1 lit. f) GDPR to safeguard our legitimate interests.
Cookie consent manager
Furthermore, we use cookies to statistically record and evaluate the use of our website. The basis for the storage and processing of personal data is your consent in accordance with Art. 6(1) sentence 1 lit. a) GDPR. In this context, we use the consent manager from Pandectes. Details on the privacy policy of Pandectes can be found here: Privacy Policy – Pandectes.
Online payment services
For cashless payment of our goods and services, we offer you the option of processing the payment via Stripe or PayPal. Data processing is carried out in accordance with Art. 6(1) lit. b) GDPR. Details can be found here:
Further data processing
Other contractual relationships
We process personal data of persons with whom we enter into contractual or business relationships. In doing so, personal data such as name, address, telephone number, email address, and contractual data are provided to us for processing inquiries or orders.
The legal basis is Art. 6(1) lit. b) and f) GDPR. Further information on the transfer and storage duration can be found under the general information.
Data processing on our social media channels
We maintain online presences on the following social networks:
The privacy policies of the respective platforms can be found here:
Details on processing operations and your rights can be found in the respective privacy policies of the platforms.
Data security
We use extreme care and appropriate technical and organizational security measures to protect your data against unauthorized access by third parties or data loss. Our security measures are continuously improved in line with technological developments. However, please note that data transmission over the Internet (e.g., when communicating via email) always represents a security risk, as complete protection is not possible.
Changes to this privacy policy
This privacy policy is currently valid. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this privacy policy. In this case, the privacy notices on this website will be adjusted accordingly.
Your rights
Under certain conditions, you have the following rights towards us:
- Right of access: You have the right to request information from us according to Art. 15 GDPR as to whether and to what extent personal data about you is being stored or processed by us.
- Right to rectification: According to Art. 16 GDPR, you have the right to rectification and/or completion of your data if the processed personal data concerning you is incorrect or incomplete.
- Right to erasure: You can request that the personal data concerning you be deleted in accordance with Art. 17 GDPR, provided that other legal regulations or an overriding interest on our part do not prevent this.
- Right to restriction of processing: Taking into account the requirements of Art. 18 GDPR, you can request that we restrict the processing of your data.
- Right to data portability: You have the right, under the conditions of Art. 20 GDPR, to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to withdraw consent: Some data processing operations are only possible with your express consent. You have the right to withdraw your consent at any time. The legality of the processing operations that have already been carried out remains unaffected by the withdrawal of consent.
- Right to object: You have the right, according to Art. 21 GDPR, to object to the processing of personal data if there are reasons arising from your particular situation.
If you would like to exercise your rights, an email to lee@hormonic.de or lisa@hormonic.de is sufficient.
Privacy notices for our social media channels
We maintain online presences on the following social networks:
- YouTube: https://www.youtube.com/@hormonicgermany
- Instagram: https://www.instagram.com/hormonic.de
- Facebook: https://www.facebook.com/hormonic.de
- TikTok: https://www.tiktok.com/@hormonic.de
In this context, we process user data in order to communicate with users active there or to offer information about us.
Responsible party
Hybrid Wellness LLC
3833 Powerline Rd 100-88A
FT Lauderdale, Florida 33309, United States of America
Represented by: Lee Paulina Pape (General Manager) & Lisa Emmer (Secretary Manager)
E-Mail: hello@hormonic.de
General information
When you visit our site on a social media platform, personal data may be processed. The sole controller for the processing of personal data within the online presence is the company providing the service. You therefore use our social media sites and their functions on your own responsibility.
We would like to point out that user data may be processed outside the European Union. This can result in risks for users, for example, because the enforcement of user rights could be made more difficult.
Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of the users. These usage profiles can in turn be used, for example, to display advertisements both inside and outside the networks that are presumed to correspond to the users' interests.
Joint Controllership
Regarding the operation of social media plugins and the associated processing of personal data, there is a joint controllership between us and the respective providers of the social networks in accordance with Art. 26 GDPR. The social networks are solely responsible for further processing after forwarding to the respective server. Please refer to the respective privacy policies of the providers for further information on data protection.
Facebook and Instagram
Facebook and Instagram are services provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). Meta is solely responsible for the processing of personal data within the online presence. You use the interactive functions, such as commenting, sharing, liking, or rating, under your own responsibility.
When you visit our Facebook or Instagram page, Meta collects, among other things, your IP address and other information that is present on your device (PC, tablet, smartphone) in the form of cookies.
As site operators, we cannot influence the use of this data. You can find out how Meta uses the data from your visit to Facebook or Instagram for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://www.facebook.com/privacy/policy.
The personal data collected during visits to the online presences may be transferred by Meta to countries outside the European Union, for example to the USA. For data transfers to the USA, the EU-U.S. Data Privacy Framework adequacy decision ensures an adequate level of protection for personal data for certified companies. Meta is DPF-certified.
When you use our Facebook page, Meta provides us with statistical information and insights regarding the use of the online presence by users. For this processing of personal data, Meta and we act as joint controllers according to Art. 26 (1) GDPR. By means of a joint controller agreement, Meta and we have established our data protection obligations.
Due to this joint controllership, you may assert your data subject rights against both us and Meta. Further information can be found in Meta's privacy policy: https://www.facebook.com/privacy/explanation.
YouTube
YouTube is a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google is solely responsible for the processing of personal data. You use the interactive functions, such as commenting or rating, under your own responsibility.
When you visit our YouTube page, Google collects, among other things, your IP address and other information present on your device in the form of cookies.
As site operators, we cannot influence the use of this data. You can find out how Google uses the data from your visit to the site for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://policies.google.com/privacy.
The personal data collected during visits to the online presences may be transferred by Google to countries outside the European Union, for example to the USA. For data transfers to the USA, the EU-U.S. Data Privacy Framework adequacy decision ensures an adequate level of protection for personal data for certified companies. Google is DPF-certified.
TikTok
TikTok is a service provided by Beijing Bytedance Technology Ltd. For the European region, the Irish company TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, is responsible. TikTok is solely responsible for the processing of personal data. You use the interactive functions, such as duets and reactions, under your own responsibility.
When you visit our TikTok page, your IP address and other information present on your device in the form of cookies are collected, among other things.
As site operators, we cannot influence the use of this data. You can find out how TikTok uses the data from your visit to the site for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://www.tiktok.com/legal/page/global/privacy-policy-eea-archive/de.
The personal data collected during visits to the online presences may be transferred by TikTok to countries outside the European Union, for example to China. There is currently no adequacy decision for data transfers to China, which is why such data transfers may involve risks.
Contact, commenting, etc.
The data you voluntarily enter on our online presences, e.g., in a comment or a message to us, particularly your username and the content published or shared, may be processed by us for the purpose of responding to or sharing posts and messages. We process this data to get in contact and interact with you. The legal basis for the processing of this data is Art. 6 (1) lit. f) GDPR.
We reserve the right to delete comments or posts in individual cases, for example in the case of infringing or illegal posts, hate speech, or offensive comments. We have no influence over the deletion of your data by the operator itself.