PRIVACY POLICY
The nacani GmbH presents the company and its product range on the website nacani.de. The website serves the sale of the products and the information about the production, the ingredients and the dosage instructions.
In the following, you will receive information about the person responsible for the processing of your personal data (Section A) as well as about your rights with regard to the processing of your personal data (Section B).In addition, you will receive information about the processing of your personal data (Section C) in connection with the website and the information provided on the website.
A. INFORMATION ABOUT THE RESPONSIBLE PERSON
nacani GmbH
Elkofener Weg 10
85567 Grafing/Schammach
phone: +49 171 5794465
e-Mail: hi@nacani.de
B. INFORMATION ON THE RIGHTS OF THE DATA SUBJECTS
1. Right to information
As a data subject, you have a right of access under the conditions of Article 15 of the General Data Protection Regulation. This means in particular that you have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you also have a right of access to this personal data and to the information listed in Article 15(1) of the General Data Protection Regulation. This includes, for example, information about the purposes of the processing, the categories of personal data processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Article 15(1)(a), (b) and (c) of the General Data Protection Regulation).
2. Right to rectification
As a data subject, you have a right to rectification under the conditions of Article 16 of the General Data Protection Regulation. This means in particular that you have the right to demand that we correct any inaccurate personal data relating to you and complete any incomplete personal data without undue delay.
3. Right to erasure (“right to be forgotten”)
As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions of Article 17 of the General Data Protection Regulation. This means that you generally have the right to request that we delete personal data concerning you without undue delay, and we are obliged to delete personal data without undue delay if one of the grounds listed in Article 17(1) of the General Data Protection Regulation applies.
The right to erasure (“right to be forgotten”) exceptionally does not apply insofar as the processing is necessary for the reasons listed in Article 17(3) of the General Data Protection Regulation. This may be the case, for example, to the extent that processing is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims (Article 17(3)(a) and (e) of the General Data Protection Regulation).
4. Right to restrict processing
As a data subject, you have a right to restrict processing under the conditions of Article 18 of the General Data Protection Regulation. This means that you have the right to request us to restrict processing if one of the conditions listed in Article 18(1) of the General Data Protection Regulation applies. This may be the case, for example, if you dispute the accuracy of the personal data, for a period of time that allows us to verify the accuracy of the personal data (Article 18(1)(a) of the General Data Protection Regulation). Restriction means the marking of stored personal data with the aim of limiting their future processing (Article 4(3) of the General Data Protection Regulation).
5. Right to data portability
As a data subject, you have a right to data portability under the conditions of Article 20 of the General Data Protection Regulation. This means that you generally have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. When exercising your right to data portability, you also have the fundamental right to have the personal data transferred directly from us to another controller, to the extent that this is technically feasible (Article 20(2) of the General Data Protection Regulation).
6. Right to object
As a data subject, you have the right to object under the conditions of Article 21 of the General Data Protection Regulation.
We will expressly inform you as a data subject of your right to object at the latest at the time of the first communication with you. In the event of an objection to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes.
7. Right to withdraw consent
If the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation, you as the data subject have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. We will inform you of this before you give your consent.
8. Right to complain to the supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority under the conditions of Article 57(1)(f) of the General Data Protection Regulation.
The competent supervisory authority is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
C. INFORMATION ON THE PROCESSING OF PERSONAL DATA
In connection with the website nacani.de, various personal data are processed for different purposes. For example, we process certain log data that is technically generated when you call up the website in order to provide the website content that you have called up.
Insofar as we, as the so-called controller, decide alone or jointly with others on the purposes and means of the processing of personal data, you will receive the following information in particular about
the personal data or categories of personal data that are processed,
- the purposes for which the personal data are to be processed,
- the legal basis for the processing and if the processing is based on Article 6(1)(f) of the General Data Protection Regulation, the legitimate interests pursued by us or a third party,
- the recipients or categories of recipients of the personal data,
Insofar as we collect your personal data from you as the data subject, the following will also provide you with information as to
- whether the provision of the personal data is required by law or contract or is necessary for the conclusion of a contract,
- whether the data subject is obliged to provide the personal data, and what the possible consequences of not providing it would be.
Insofar as we do not collect personal data from you as the data subject, the following will also provide you with information about the following
- The source of the personal data and, if applicable, whether it comes from publicly available sources.
INFORMATIVE USE OF THE WEBSITE
During the purely informational use of the website, certain information is sent to the server of our website for technical reasons by the browser used on your end device, for example your IP address. We process this information to provide the content of the website that you have accessed. To ensure the security of the IT infrastructure used to provide the website, this information is also temporarily stored in a so-called web server log file.
You will find more detailed information on this below:
1. Personal data that is processed
During the purely informational use of the website, protocol data is processed that is technically generated when the website is called up via the hypertext transfer protocol (HTTP) (“HTTP data”). This includes IP address, type and version of your Internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of access.
2. Purposes for which the personal data are to be processed
In the case of purely informational use of the website, we process HTTP data temporarily on our web server for the purpose of providing the website content accessed by the user. In order to ensure the security of the IT infrastructure used for the provision of the website, in particular for the detection, elimination and evidentiary documentation of faults (e.g. DDoS attacks), HTTP data are temporarily stored in web server log files.
3. Legal basis for processing
The legal basis for these processing operations is in each case a balancing of interests (Article 6(1)(f) of the General Data Protection Regulation).
4. Legitimate interests pursued by the controller or a third party.
With the processing operations, we pursue the legitimate interests of providing you with the website content accessed by you and of ensuring the security of the IT infrastructure used to provide the website.
5. Recipients or categories of recipients of personal data
For the purposes of these processing operations, our hosting provider receives personal data. Our hosting provider processes personal data as a so-called processor on our behalf. Our hosting provider is located in a member state of the European Union (EU).
We do not intend to transfer personal data to a third country or an international organization for the purposes of this processing.
6. Duration for which the personal data is stored.
Data will be stored in server log files in a form that allows identification of the data subjects for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of a security-relevant event, server log files are stored until the elimination and complete clarification of the security-relevant event.
7. Obligation to provide the data
The provision of this data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide the personal data. Im Falle einer Nichtbereitstellung der Daten ist ein Aufruf der Website allerdings nicht möglich.
8. Measurement of the web audience and use of Google Analytics:
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) Legal basis
The legal basis for this processing is Art. 6 para.1 f) DSGVO.
(3) Legitimate interest
Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension “anonymizeIP()” so that the IP addresses are only processed in a shortened form to exclude direct personal reference.
(4) Recipient categories
Google, partner companies
(5) Transmission to a third country
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
(6) Storage period
Unlimited
Cookies
This website uses cookies. We use cookies to personalize content and ads, provide social media features, and analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the Services. You give consent to our cookies when you continue to use our website.
Cookies are small text files used by websites to make the user experience more efficient.
By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other cookie types, we need your permission.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or withdraw your consent at any time from the cookie statement on our site.
Learn more about who we are, how to contact us, and how we process personal data in our Privacy Policy.
Your consent applies to the following domain: nacani.de
Your current state: Allow cookies (Necessary, Preferences, Statistics, Marketing).
Change your consent | Revoke your consent
Cookie statement was last updated by Cookieboton Feb 04, 2019:
Necessary (8)
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
- Name: __stripe_mid, Provider: nacani.de, Expiration: 1 year, Type: HTTP Cookie
This cookie is necessary to perform credit card transactions on the website. The service is provided by Stripe.com, which allows online transactions without storing credit card information.
- Name: __stripe_sid, Provider: nacani.de, Expiration: 1 year, Type: HTTP Cookie
This cookie is necessary to perform credit card transactions on the website. The service is provided by Stripe.com, which allows online transactions without storing credit card information.
- Name: CookieConsent, Provider: nacani.de, Expiration: 1 year, Type: HTTP Cookie
Stores the user’s consent status for cookies on the current domain.
- Name: q.stripe.com, Provider: nacani.de, Expiration: session year, Type: Pixel Tracker
This cookie is necessary to perform credit card transactions on the website. The service is provided by Stripe.com, which allows online transactions without storing credit card information.
- Name: m.stripe.network, Provider: nacani.de, Expiration session year, Type: HTTP Cookie
Purpose: This cookie is necessary to perform credit card transactions on the website. The service is provided by Stripe.com, which allows online transactions without storing credit card information.
- Name: wc_cart_hash_#, Provider: nacani.de, Expiration Session, Type: HTML Local Storage
Purpose: Pending
- Name: wc_fragments_#, Provider: nacani.de, Expiration: Session, Type: HTML Local Storage
Purpose: Pending
- Name: wp_woocommerce_session_#, Provider: nacani.de, Expiration 1 day, Type: HTML Cookie
Purpose: Pending
(3) Preferences Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.
- Name: _icl_current_language, Provider: nacani.de, Expiration: 1 day, Type: HTML Cookie
Purpose: stores preferred language of the user on the website
- Name: _icl_visitor_lang_js, Provider: nacani.de, Expiration: 1 day, Type: HTML Cookie
Purpose: stores preferred language of the user on the website
- Name: wpml_browser_redirect_test, Provider: nacani.de, Expiration: session day, Type: HTML Cookie
Purpose: stores preferred language of the user on the website
(4) Statistics Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
- Name: _ga, Provider: nacani.de, Expiration: 2 years, Type: HTML Cookie
Purpose: registers a unique ID that is used to generate statistical data on how the visitor uses the website.
- Name: _gat, Provider: nacani.de, Expiration: 1 day, Type: HTML Cookie
Purpose: Used by Google Analytics to limit the request rate.
- Name: _gid, Provider: nacani.de, Expiration 1 day, Type: HTML Cookie
Purpose: registers a unique ID that is used to generate statistical data about how the visitor uses the website.
- Name: collect, Provider: google-analytics.com, Expiration: Session, Type: Pixel Tracker
Purpose: Used to send data to Google Analytics about the visitor’s device and behavior. Captures the visitor across devices and marketing channels.
(2) Unclassified.
Unclassified cookies are cookies that we are in the process of trying to classify, along with providers of individual cookies
- Name: m, Provider: m.stripe.com, Expiration 10 years, Type:HTTP Cookie
Purpose:Pending
- Name: pum-18550, Provider: nacani.de, Expiration: Session, Type: HTTP Cookie
Purpose:Pending
USE OF THE PERSONALIZED E-MAIL NEWSLETTER AND E-MAIL-RELATED CONTACTING
By accepting the privacy policy, e.g. when placing an order, you agree to be contacted via e-mail. Possible contacts are for example, order confirmations, delivery announcements and the like.
In addition, we offer you the possibility on the website to register for our personalized e-mail newsletter. When registering for the e-mail newsletter as well as calling up the newsletter, certain information is collected, for example, your e-mail address, your first name and your last name. We process this information to provide the personalized email newsletter.
USE OF SOCIAL MEDIA PLUG-INS
So-called social media plug-ins are integrated on the website, with which you can use functionalities offered by social media providers on the website. The plug-ins are integrated on the website by way of a so-called ‘2-click solution’. With this solution, the respective plug-in is not activated directly when you call up the website, but only when you click the activation button provided for the respective plug-in. When activating the respective plug-in, the provider of the respective plug-in may receive personal data from you.
In the following, you will receive more detailed information on this: We use Facebook, Instagram and Pinterest.
FACEBOOK PLUG-INS (LIKE BUTTON).
Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the ‘Like button’ (‘Like’) on our page. You can find an overview of the Facebook plugins here:http://developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook ‘Like’ button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook’s privacy policy athttp://dede.facebook.com/policy.php. If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
INSTAGRAM
On our pages, functions of the service Instagram are integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA integrated. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/ http://instagram.com/about/legal/privacy/
USE OF PINTEREST
On our site, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA (‘Pinterest’). When you call up a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the visited websites that also contain Pinterest functions, type and settings of the browser, date and time of the request, your use of Pinterest and cookies. For more information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, please refer to the Pinterest data protection information: https://about.pinterest.com/de/privacypolicy https://about.pinterest.com/de/privacypolicy
