We are pleased that you are visiting our website. We take the protection of your personal data very seriously.
In the following, you will find information on the type and scope of the processing of your personal data in accordance with Art. 13 of the GDPR by Biologische Heilmittel Heel GmbH (hereinafter: “we” or “us”), which we are happy to provide you with in this data protection declaration.
(1) The name and contact information of the controller:
Biologische Heilmittel Heel GmbH
76532 Baden-Baden, Germany
You can find more information in the Legal notice.
(2) Contact details of the Data Protection Officer:
Biologische Heilmittel Heel GmbH
Data Protection Officer
76532 Baden-Baden, Germany
In addition, we process the data from you described below in this Section 2. The type and scope of data processing here depends in particular on which functions of the website you use or how you communicate with us:
In this context, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security:
(2) If this data constitutes personal data, we process it on the basis of our overriding legitimate interests (Art. 6 Para. 1(1) Letter f) of the GDPR).
The aforementioned data is processed by us for the following purposes:
(3) The listed data are automatically deleted after a period of seven days.
(1) If you have any questions, you can contact us using a form provided on our website. In addition to your query (including content and subject), you are required to enter your salutation, name, country and valid E-mail address so that we know who the query is coming from and will be able to respond to it personally. Other information can be entered voluntarily.
In addition to using the above-mentioned contact form, you are also welcome to contact us directly by E-mail.
Please note that data cannot always be transmitted securely on the internet. Protection cannot be guaranteed when exchanging data, especially in E-mail correspondence. Please do not send sensitive data (including health-related aspects) to us via E-mail.
We also offer you the option of contacting us by telephone using the published telephone numbers (such as the customer hotline). Other communication channels (such as post and fax) can also be used.
Last name, first name and other data depending on the selected medium (e.g. telephone numbers provided, address, notes on the content of the call) are regularly processed when this is done.
(2) The legal basis for the processing of personal data is Art. 6 Para. 1 (1) Letter b of the GDPR. According to it, we are allowed to process data if the processing is required for the fulfilment of a contract which you party to or for the performance of pre-contractual measures. Otherwise, if you are not a customer of ours and no customer relationship is being formed, we base the data processing on our overriding legitimate interests (Art. 6 Para. 1 (1) Letter f) of the GDPR). We process the data listed for the following purposes:
(3) The personal data we collect will only be stored for as long as is necessary to achieve the purpose for which the data was collected. We may be obliged to store data beyond this due to retention duties under the provisions of fiscal and commercial law.
If you have given your consent to the processing of your data, you can withdraw it at any time free of charge. Such a withdrawal will affect the admissibility of the processing of your personal data after you have given it to us.
You can easily declare the withdrawal of your consent. Depending on the processing operation, the following options are available to you:
(1) General information
These are small text files that are saved on your computer and which store certain settings and data for exchange with our system via your browser. Cookies cannot damage your computer and do not contain malicious software such as viruses.
You have the option to change your browser settings so that cookies are not saved or are erased at the end of your Internet session.
However, please note that in this case you may not be able to use all functions of our website.
(2) Technically essential cookies (category "essential").
Insofar as personal data is processed when essential cookies are used, this is done on the basis of Art. 6 Para. 1 (1) Letter f of the GDPR ("legitimate interest"). Our interests are to provide you with a pleasant user experience.
(3) Optional cookies (category "functional" or "marketing")
Furthermore, we use optional cookies for the purpose of website analysis and tracking. In Section 5, we describe the analytics and tracking tools used on this website and the optional cookies associated with them in detail.
We only use optional cookies with your consent (Art. 6 Para. 1 (1) Letter a of the GDPR). If you are visiting our website for the first time, a banner is displayed which we use to ask you for your consent to the use of optional cookies.
If you give your consent, we save a cookie on your computer and the banner will not be displayed again for the lifetime of the cookie. After this, or if you actively delete the cookie prior to this, the banner will be displayed again on your next visit to our website to obtain your consent again. You can also find a description and your settings options for this by clicking on the "Privacy settings" link at the bottom of our website.
We use third-party services on our website, such as analytics and marketing technologies. The providers of these technologies may also store information on your end device (e.g. cookies) and/or access information located on your end device (e.g. browser used, operating system, etc.). Personal data can also be processed in the process.
To give you a better overview of these services, we have divided them into the following categories:
In some cases, technologies also serve multiple purposes. This applies, for example, to analytics technologies, some of which are also used to display marketing content. The same applies to technical solutions to integrate marketing technologies more easily. In these cases, we have assigned the technology within the cookie banner as a whole to the purpose category that we believe is the main focus.
The third-party services and content used are described in this Section. You can also find a description and your settings options for these by clicking on the "Privacy settings" link at the end of our website. If you require further information on the services, please contact us using the contact options specified in Section 1.
As a rule, your data will not be transferred to third parties unless explicitly described under Section 2 or 5. In particular, we do not transfer your data to recipients based outside the European Union or the European Economic Area, with the exception of the processing operations described under Section 2 and 5.
In some cases, we use external service providers to process personal data in the context of third-party processing as per Art. 28 of the GDPR (such as IT service providers). We have selected and commissioned them carefully, and they are bound by our instructions and inspected on a regular basis.
Your data will only be transferred to bodies such as supervisory authorities and law enforcement agencies within the scope of statutory provisions if doing so is necessary to prevent and detect fraud and other criminal offences or to ensure the security of our data processing systems.
The legal basis for this is Art. 6 Para. 1 (1) Letter c (“fulfilment of legal obligations”) and Letter f of the GDPR (“protection of legitimate interests”).
If personal data are processed in a third country, a comparable level of data protection shall be ensured by means of appropriate guarantees in accordance with Art. 44 et seq. of the GDPR. In this case, you will find further information on data transmission in Section 2 or 5.
As a general rule, when transferring data outside the European Union and the European Economic Area to a country for which an up-to-date adequacy decision is in place as assessed by the European Commission (see listing under https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en), we base our actions on this adequacy decision (see Art. 45 of the GDPR). For a possible data transfer to other countries, we generally base our actions on standard data protection clauses (see Art. 46 Para. 2 Letter c of the GDPR).
If you intend to report suspected side effects or insufficient efficacy of a medicinal product, medication errors, improper or off-label use or other aspects related to the safety of a Heel product, please contact your physician, pharmacist or naturopathic practitioner, the local health authority or use the direct contact to Heel.
If you report side effects or other safety-related aspects of our Heel products, we are under legal obligation to process your notification. We may also contact you for clarification for this purpose. We may subsequently need to report the notifications you make to the relevant health authorities, but we will only transfer your information in pseudonymous form so that no information directly identifying you will be transferred. We may also have to transfer these pseudonymous notifications to our subsidiaries and partners if they are obligated to make reports to their competent health authorities.
More information on data protection and the reporting of side effects can be found in Heel Data protection statement for pharmacovigilance data.
(1) You have the following rights with respect to your personal data:
Certain legal requirements must be met in order for you to exercise your aforementioned rights, and in certain cases your rights may be limited due to legal exceptions, in particular those under Art. 17(3) and Art. 22(2) of the GDPR, or under national legislation.
(2) Right to Objection (Art. 21 of the GDPR)
Moreover, you have the right to object to our processing of your personal data at any time (i) in the case of direct marketing or (ii) in other cases on grounds relating to your particular situation if we are processing your personal data to protect our legitimate interests on the basis of Art. 6 Para. 1 (1) Letter f of the GDPR (Art. 21 Para. 1 and Para. 2 of the GDPR). Should you raise an objection, we will cease to process your personal data for the purpose of direct advertising in any case, and, in the case of data processing for other reasons, we will normally cease the processing unless we can demonstrate urgent reasons for the processing which are worthy of protection and override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
(3) You may file a complaint against our processing of your personal data with a data protection authority, in particular in the EU member state in which your habitual residence or place of work is located or if a breach of the applicable data protection laws is believed to have taken place (see Art. 77 of the GDPR).
(4) There is no automated decision-making including profiling as per Art. 22 Paragraphs 1 and 4 of the GDPR.
Our offer contains links to external websites of third parties whose content we have no influence over. For that reason, we are also unable to assume any responsibility for this third-party content. The respective provider or operator of the websites in question assume responsibility for the contents of the linked websites at all times. The linked sites were checked for possible legal violations at the time the links were made. No unlawful content could be detected at the time of linking.
Therefore, we recommend that you regularly inform yourself about changes to this webpage.
Status as of: September 2022