Data protection
Privacy Policy
With this privacy policy, we aim to transparently inform you about the type, scope, and purpose of the personal data we collect, use, and process, and to explain your rights. The processing of personal data is governed by the General Data Protection Regulation (GDPR) and the provisions of the Federal Data Protection Act (BDSG).
Content:
- General Information
- Data Processing on My Website
- Further Data Processing
- Data Processing on Our Social Media Presences
General Information
Name and Contact Details of the Controller
Hybrid Wellness LLC
3833 Powerline Rd 100-88A
FT Lauderdale, Florida 33309, United States of America
Represented by: Lee Paulina Pape (General Manager) & Lisa Emmer (Secretary Manager)
Email: lee@hormonic.de, lisa@hormonic.de
Types of Personal Data Processed
Personal data is information that can be directly or indirectly attributed to you. In this regard, we process, for example, the following data:
- Inventory data (e.g., names, addresses)
- Applicant data (e.g., personal details, postal and contact addresses, as well as documents related to the application such as cover letters, CVs, certificates)
- Content data (e.g., text entries, photographs, videos)
- Contact data (e.g., email, phone numbers)
- Meta/communication data (e.g., device information, IP addresses)
- Usage data (e.g., visited websites, interest in content, access times)
- Location data (data indicating the location of an end-user's device)
- Contract data (e.g., subject matter of the contract, term, customer category)
- Payment data (e.g., bank details, invoices, payment history)
Categories of Data Subjects
In the course of our activities, we process personal data of various categories of data subjects:
- Business and contractual partners
- Prospective customers
- Communication partners
- Customers
- Users (e.g., website visitors, users of online services)
- Suppliers
- Employees (e.g., staff, applicants, former employees)
Purposes of Processing
We process personal data for various purposes to provide you with our services in the best possible way. In principle, we only process your data to the extent necessary to achieve the stated purposes and in compliance with the principles of data minimization and purpose limitation. Below is an overview of the purposes of processing:
- Provision of contractual services
- Customer service
- Contact inquiries and communication
- Office and organizational procedures
- Marketing and conversion measurement
- Provision of our online offering and user-friendliness
- Visitor action evaluation
- Application procedures (establishment, potential execution, and termination of employment relationship)
- Cross-device tracking (cross-device processing of user data for marketing purposes)
- Remarketing
- Reach measurement (e.g., access statistics, recognition of returning visitors)
- Security measures
- Tracking (e.g., interest-based/behavioral profiling, use of cookies)
- Server monitoring and error detection
Legal Bases
We process this personal data only on the basis of legal permission in accordance with the General Data Protection Regulation. This is the case, for example, if:
- You have explicitly given us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
- The processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures, in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.
- To fulfill a legal obligation in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.
- The processing is necessary for the protection of our legitimate interests or the interests of a third party, in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
Data Storage Period
How long we store your personal data depends on the type of data concerned. In principle, we store your data only as long as it is necessary for the fulfillment of our contractual or legal obligations or until you withdraw your consent.
Disclosure of Data
We only pass on your personal data to third parties under the following conditions:
- You have explicitly given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
- The disclosure takes place in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR to protect our legitimate interests.
- A legal obligation to disclose exists in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR.
- The disclosure is necessary for the processing of contractual relationships in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.
Data Processing on My Website
Website Provision
When you access our website, information, including personal data, is automatically sent from the browser used on your device to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
The legal basis for the temporary storage of data and log files is our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR. The mentioned data is processed by us for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- For further administrative purposes
The data will be deleted or blocked as soon as it is no longer required for the purpose of its collection. Your IP address will not be further processed once the respective session (your visit to our website) has ended.
Contacting Us
Our website offers you various ways to contact us and to use various services (e.g., booking appointments for our Telehealth services). This is possible via:
- The contact form
- Booking a telemedicine consultation appointment (via Calendly)
- By email
- By phone
If you use one of these contact options, we store and process the data you voluntarily provide to us. This may include the following data:
- Name/first name and address
- Email address
- Phone number
- Content of the message
- Account details
- Health data
The legal basis for the processing is our legitimate interest in answering the contact request in accordance with Art. 6 para. 1 lit. f) GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.
Newsletter
On our website, we offer you the opportunity to subscribe to a newsletter. In the newsletter, we would like to regularly inform you about new products and news. For sending the newsletter, we use the external service provider Klaviyo to provide you with an efficient and secure sending system.
To subscribe to the newsletter, the provision of an email address is required. Further data is only collected on a voluntary basis. To verify the email address, you will first receive a registration email that you must confirm via a link. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The legal basis for this is Art. 6 para. 1 lit. a) GDPR. You can revoke the granted consent to the storage of data at any time, e.g., via the "unsubscribe" link in the newsletter. The revocation of consent does not affect the legality of the processing carried out based on the consent until revocation. Further details on the Klaviyo privacy policy can be found here: https://www.klaviyo.com/legal/privacy-notice.
Use of Cookies
Our website uses cookies in several places. These are small text files that your browser automatically creates and that are stored on your device when you visit our website. This identifies the browser used and allows it to be recognized by our web server.
Website Provision
Most of the cookies on our website are session cookies. These serve to ensure the functionality and security of our website. As soon as you leave our site, they are automatically deleted. If personal data is processed and stored in this context, this is done on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR to protect our legitimate interests.
Cookie Consent Manager
Secondly, we use cookies to statistically record and evaluate the use of our website. The basis for the storage and processing of personal data here is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. In this context, we use the consent manager from Pandectes. Details on Pandectes' privacy policy can be found here: Privacy Policy – Pandectes.
Online Payment Services
For cashless payment of our goods and services, we offer you the option of processing payments via Stripe or PayPal. Data processing takes place in accordance with Art. 6 para. 1 lit. b) GDPR. Details can be found here:
Further Data Processing
Other Contractual Relationships
We process personal data of individuals with whom we enter into contractual or business relationships. In this context, personal data such as name, address, telephone number, email address, and contract data are provided to us for processing inquiries or orders.
The legal basis is Art. 6 para. 1 lit. b) and f) GDPR. Further information on disclosure and storage period can be found under the general information.
Data Processing on Our Social Media Presences
We maintain online presences on the following social networks:
You can find the privacy policies of the respective platforms here:
For details on processing operations and your rights, please refer to the respective privacy policies of the platforms.
Data Security
We apply utmost care and appropriate technical and organizational security measures to protect your data against unauthorized third-party access or data loss. Our security measures are continuously improved in line with technological developments. Please note, however, that data transmission over the Internet (e.g., when communicating by email) always poses a security risk, as complete protection is not possible.
Changes to This Privacy Policy
This privacy policy is currently valid. Due to the further development of our website or due to changed legal or official requirements, it may become necessary to amend this privacy policy. In this case, the privacy notices on this website will be adjusted accordingly.
Your Rights
Under certain conditions, you have the following rights towards us:
- Right of access: You have the right to request from us, in accordance with Art. 15 GDPR, whether and to what extent personal data concerning you is stored or processed by us.
- Right to rectification: In accordance with Art. 16 GDPR, you have the right to have your data rectified and/or completed if the personal data concerning you that is processed is inaccurate or incomplete.
- Right to erasure: You can request that personal data concerning you be erased in accordance with Art. 17 GDPR, provided that other legal regulations or an overriding interest on our part do not prevent this.
- Right to restriction of processing: Under the conditions of Art. 18 GDPR, you can request us to restrict the processing of your data.
- Right to data portability: You have the right, under the conditions of Art. 20 GDPR, to receive your personal data in a structured, commonly used and machine-readable format.
- Right to withdraw consent: Some data processing operations are only possible with your explicit consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to object: In accordance with Art. 21 GDPR, you have the right to object to the processing of personal data if there are reasons arising from your particular situation.
If you wish to exercise your rights, an email to lee@hormonic.de or lisa@hormonic.de is sufficient.
Privacy notices for our social media presences
We maintain online presences on the following social networks:
- YouTube: https://www.youtube.com/@hormonicgermany
- Instagram: https://www.instagram.com/hormonic.de
- Facebook: https://www.facebook.com/hormonic.de
- TikTok: https://www.tiktok.com/@hormonic.de
In this context, we process user data to communicate with active users there or to offer information about us.
Controller
Hybrid Wellness LLC
3833 Powerline Rd 100-88A
FT Lauderdale, Florida 33309, United States of America
Represented by: Lee Paulina Pape (General Manager) & Lisa Emmer (Secretary Manager)
Email: hello@hormonic.de
General Information
When you visit our page on a social media platform, personal data may be processed. The sole controller for the processing of personal data within the online presence is the company providing the service. You therefore use our social media pages and their functions at your own risk.
We point out that user data may be processed outside the European Union. This may pose risks for users, as for example, the enforcement of user rights could be made more difficult.
Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on user behavior and resulting interests. These usage profiles can in turn be used to display advertisements within and outside the networks that presumably match the users' interests.
Joint Responsibility
Regarding the operation of social media plugins and the associated processing of personal data, there is a joint responsibility between us and the respective providers of social networks in accordance with Art. 26 GDPR. The social networks are solely responsible for further processing after forwarding to the respective server. For more information on data protection, please refer to the respective privacy policies of the providers.
Facebook and Instagram
Facebook and Instagram are services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). Meta is solely responsible for the processing of personal data within the online presence. You use the interactive functions, such as commenting, sharing, liking or rating, on your own responsibility.
When you visit our Facebook or Instagram page, Meta collects, among other things, your IP address and other information present in the form of cookies on your device (PC, tablet, smartphone).
We, as the page operator, cannot influence the use of this data. You can find out how Meta uses the data from visiting Facebook or Instagram for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://www.facebook.com/privacy/policy.
Personal data collected during visits to the online presences may be transferred by Meta to countries outside the European Union, for example, to the USA. For data transfer to the USA, the adequacy decision EU-U.S. Data Privacy Framework ensures an adequate level of protection for certified companies for personal data. Meta is DPF certified.
When we use our Facebook page, Meta provides us with statistical information and insights about the use of the online presence by users. For this processing of personal data, Meta and we act as joint controllers in accordance with Art. 26 para. 1 GDPR. Through an agreement on joint controllership, Meta and we have defined the data protection obligations.
Due to the joint responsibility, you can assert your data subject rights both with us and with Meta. Further information can be found in Meta's privacy policy: https://www.facebook.com/privacy/explanation.
YouTube
YouTube is a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. ("Google"). Google is solely responsible for the processing of personal data. You use the interactive functions, such as commenting or rating, on your own responsibility.
When you visit our YouTube page, Google collects, among other things, your IP address and other information present in the form of cookies on your device.
We, as the page operator, cannot influence the use of this data. You can find out how Google uses the data from visiting the page for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://policies.google.com/privacy.
Personal data collected during visits to the online presences may be transferred by Google to countries outside the European Union, for example, to the USA. For data transfer to the USA, the adequacy decision EU-U.S. Data Privacy Framework ensures an adequate level of protection for certified companies for personal data. Google is DPF certified.
TikTok
TikTok is a service of Beijing Bytedance Technology Ltd. For the European region, the Irish company TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, is responsible. TikTok is solely responsible for the processing of personal data. You use the interactive functions, such as duets and reactions, on your own responsibility.
When you visit our TikTok page, among other things, your IP address and other information present in the form of cookies on your device are collected.
We, as the page operator, cannot influence the use of this data. You can find out how TikTok uses the data from visiting the page for its own purposes, to what extent activities are assigned to individual users, how long the data is stored, and whether data from a visit to the online presence is passed on to third parties here: https://www.tiktok.com/legal/page/global/privacy-policy-eea-archive/de.
Personal data collected during visits to the online presences may be transferred by TikTok to countries outside the European Union, for example, to China. There is currently no adequacy decision for data transfer to China, which is why data transfer here can be risky.
Contacting us, commenting, etc.
The data you voluntarily enter on our online presences, for example, in the context of a comment or a message to us, in particular your username and the published or communicated content, may be processed by us so that we can respond to the posts and messages or share them. This processing is carried out by us to get in touch with you and to exchange information with you. The legal basis for the processing of data is then Art. 6 para. 1 lit. f) GDPR.
We reserve the right to delete comments or posts in individual cases, for example, in the case of infringing or unlawful posts, hate comments, or suggestive comments. We have no influence on the deletion of your data by the operator itself.