Skip to main content

Privacy

Privacy policy

We appreciate your visit to our website. Data protection is a high priority for us and we want you to feel safe while visiting our website. 

 

General Information

Peter Greven Physioderm GmbH, attaches great importance to the protection and confidentiality of your personal data. We act responsibly within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations. We only collect, process and use personal data if you have consented to the collection, processing and use or if there is a corresponding contractual or legal basis.

With this privacy policy, we inform you about the nature, scope and purpose of the personal data collected, used and processed, as well as your rights regarding the protection of your personal data. 

 

Name and Address of the Responsible Person

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Peter Greven Physioderm GmbH 
Procter-&-Gamble-Str. 26
D-53881 Euskirchen
Tel.: +49 (0)2251 77617-0
E-Mail: info@pgp-skincare.com

Data protection officer at Peter Greven Physioderm GmbH

Jessica Trapp
Peter Greven GmbH & Co. KG
Peter Greven Straße 20-30
53902 Bad Münstereifel
Tel.: +49 (0) 2253 - 313 – 0
Email: Datenschutz@peter-greven.de

 

Subject of Data Protection and Definition of Terms

According to Article 4 (1) of the GDPR, the subject of data protection is any information relating to an identified or identifiable natural person, so‐called personal data. According to Article 4 (2) of the GDPR, processing means any operation related to personal data, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

Purpose and Legal Basis for the Processing of Personal Data

Peter Greven Physioderm GmbH processes your personal data in accordance with Art. 6 Para. 1 lit. a-f GDPR exclusively on the basis of your prior consent given to us, for the performance of a contract or for the implementation of pre‐contractual measures taken at your request, for the fulfilment of a legal obligation and for the protection of a legitimate interest.

If the processing of your personal data is based on Article 6 I lit. f GDPR, our legitimate interest, unless otherwise stated, is the performance of our business activities.

Only such data is stored that is required for the fulfilment and maintenance of the above‐mentioned purposes. 

 

Data Deletion and Storage Period

The personal data will only be stored until the purpose of the storage no longer applies or you have revoked your consent. If you have provided us with personal data, we will only use it to respond to your inquiries, to process contracts concluded with us and for technical administration. Your personal data will only be passed on or transmitted to third parties if this is necessary for the purpose of processing the contract, if this is necessary for billing purposes, or if you have given your prior consent. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the responsible party is subject. If the purpose of storage no longer applies, if you revoke your consent or if a storage period prescribed by the European Directive and Regulation or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions, unless there is a need for further storage of the data for the conclusion or performance of a contract.

You have the right to revoke your consent at any time with effect for the future. The deletion of stored personal data takes place if you revoke your consent to storage, if their knowledge is no longer necessary for the fulfilment of the purpose pursued with the storage or if their storage is inadmissible for other legal reasons.

If your data is no longer required for the aforementioned purposes, it will be deleted. If you wish to revoke your consent and have your data deleted, please send an e‐mail to info@peter-greven.de or to datenschutz@peter-greven.de. If data must be retained for legal reasons, it will be blocked. The data will then no longer be available for further use.

 

Affected Party Rights

(1) Pursuant to Art. 15 GDPR, you have the right to receive from us at any time, free of charge, information about the personal data stored about you and a copy of this information. You also have a right to information regarding the following information:

  • the purposes of processing,
  • the categories of personal data that are processed,
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations,
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,
  • the existence of a right to obtain the rectification or erasure of personal data concerning them or to obtain the restriction of processing by the controller or a right to object to such processing,
  • the existence of a right of appeal to a supervisory authority,
  • if the personal data are not collected from the data subject: any available information on the origin of the data as well as,
  • the existence of automated decision‐making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, you have the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.

Upon request, we will be happy to provide you with information about the personal data we have stored about you. For this purpose, or if you have any questions about the handling of your data, please contact us at info@peter-greven.dedatenschutz@peter-greven.de or by post at the address given above.

(2) In accordance with Art. 18 GDPR, you have the right to demand that we restrict processing if one of the following conditions is met:

  • The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data.
  • The controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the assertion, exercise or defense of legal claims.
  • The data subject has objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

(3) Pursuant to Art. 17 GDPR, you have the right to request that we delete the personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary:

  • The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
  • The data subject revokes the consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR and there is no other legal basis for the processing.
  • The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
  • The personal data have been processed unlawfully.
  • The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  • The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

If the personal data have been made public by us and we as a controller are obliged to erase the personal data pursuant to Article 17 (1) of the GDPR, we shall implement reasonable measures, including technical measures, considering the available technology and the cost of implementation, in order to inform other data controllers which process the published personal data that the data subject has requested from those other data controllers the erasure of all links to the personal data or copies or replications of the personal data, unless the processing is necessary.

The right to erasure does not exist insofar as the processing is necessary:

  • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in
  • the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
  • for the assertion, exercise or defense of legal claims.

(4) In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or completion of your personal data stored by us.

(5) If you have asserted the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction (Art. 18 GDPR) of processing against us, we are obliged under Art. 19 GDPR to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients.

(6) Pursuant to Article 20 (1) of the GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine‐readable format. Pursuant to Art. 20(1) GDPR, you also have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(2) of the GDPR, you have the right to have the personal data transferred directly from us to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 20(3) GDPR).

(7) In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Pursuant to Article 22(1) of the GDPR, you have the right not to be subject to a decision based solely on automated processing ‐ including profiling ‐ which produces legal effects concerning you or similarly significantly affects you, where the decision is

  • is not necessary for the conclusion or performance of a contract between you and us, or
  • is permitted by legislation of the Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  • is done with your express consent.

Is the decision

  • necessary for the conclusion or performance of a contract between you and us or
  • it is done with your express consent,

we take reasonable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

We do not perform automated decision making or profiling.

(8) Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, pursuant to Article 77 GDPR, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

To safeguard your data subject rights or if you have any questions about the treatment of your data, please contact us at info@peter-greven.dedatenschutz@peter-greven.de or by post at the address given above. 

 

Right of Objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR, in accordance with Article 21 GDPR. This also applies to profiling based on these provisions.

We will no longer process the personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is associated with such direct advertising. If you object to us processing your personal data for direct marketing purposes, we will no longer process it for these purposes.

You also have the right to object, on grounds relating to your particular situation, to processing of your personal data which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise your right to object, you may contact us at any time, for example at info@peter-greven.dedatenschutz@peter-greven.de or by post at the above address. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications. 

 

Security

Peter Greven Physioderm GmbH uses technical and organizational security measures in order to protect the data you have made available from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. In the case of collection and processing of personal data, the information is transmitted in encrypted form to prevent misuse of the data by third parties. Our security measures are continuously revised in accordance with technological developments. 

 

Children

Peter Greven urges all parents and guardians to instruct their children in the safe and responsible use of personal data on the Internet. Children should not transmit any personal data to the website of Peter Greven Physioderm GmbH without the consent of their parents or guardians! Peter Greven assures that it will not knowingly collect personal data from children, use it in any way or disclose it to third parties without authorization. 

 

Specific Privacy Information for the Data Processing Operations on the Website
Use of Our Website

When using our website, it is unavoidable that data transmitted to us by your browser is automatically stored in the server statistics. These are browser type and browser version, the operating system used, the referrer URL (the previously visited page), the host name of the accessing computer (IP address) and the time of the server request. This storage is only for internal system-related and statistical purposes. Further personal data is only collected if you provide this information voluntarily, for example in the context of an inquiry and registration. As a rule, the above‐mentioned data cannot be assigned to specific persons and this data is not merged with other data sources.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR, our legitimate interest is the operation of our website and the associated presentation of our company. 

 

E-Mail and Contact Form

Due to legal requirements, we provide information on our website that enables a quick electronic contact to us as well as an immediate communication with us. This includes our e‐mail address as well as our contact form. To use the contact form, information about your last name and e‐mail address is required so that we can reach you and address you appropriately. You can provide further information voluntarily. If you contact us by e‐mail or via our contact form, the personal data you provide will be automatically stored. The other personal data processed during contact serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of data transmitted in the course of sending an e‐mail or using the contact form is Art. 6 (1) lit. f GDPR. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

We use the personal data you provide exclusively for processing your specific request. The data provided will always be treated confidentially.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e‐mail, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

You have the option to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. 

 

Newsletter

Peter Greven Physioderm GmbH reserves the right to offer you a free newsletter service. With the newsletter, Peter Greven Physioderm GmbH will inform you about new products or services as well as general company‐related information that may be of interest to you.

To receive the newsletter via e‐mail, we need your consent. In addition, you must provide information on your salutation, name, e‐mail address, company and postal code and city. We need the salutation, the name and the e‐mail address to send you the newsletter and to be able to address you. The legal basis for the processing of your personal data for the purpose of sending you the newsletter is thus Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by unsubscribing from the newsletter. Each newsletter contains all necessary information on how the newsletter can be unsubscribed by you with effect for the future. 

 

Cookies, Analytics Tools, Plugins and Other Third-Party Elements

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar). Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity. Analysis tools evaluate the user behavior of website visitors and enable the operator of a website to optimize it and adapt marketing measures. Plugins and other third‐party elements are used to integrate content from these providers into the website.

a) Required First-Party Cookies

The use of our required first‐party cookies serves on the one hand to make the use of our offer more pleasant for you. Thus, we use so‐called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user‐friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made, so that you do not have to enter them again.

This data is deleted after 6 months at the latest.

We process their data based on our legitimate interest in the external presentation of our company via the website you accessed and to promote user‐friendliness. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f GDPR.

Most browsers accept these cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before such a cookie is created. However, the complete deactivation of cookies may result in the website not being displayed correctly or you not being able to use all the functions of our website.

b) Third-Party Cookies, Plugins and Third-Party Elements

The third‐party cookies, plugins and other third‐party elements listed below and used by us are only used with your express consent and thus on the basis of Art. 6 (1) p. 1 lit. a GDPR. You can revoke your granted consent at any time with effect for the future. Failure to grant or revocation of consent may result in the website not being displayed correctly to you or you not being able to use all the functions of the website.

With the third‐party cookies, plugins or other third‐party elements that are used, we want to ensure a needs‐based design and the ongoing optimization of our website.

The respective function descriptions, any recipients of the data, information on possible transfers to a third country and the storage period can be found in the following notes on the individual processing processes provided with third‐party cookies, plugins or other third‐party elements.

(1) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Analytics"). In this context, pseudonymized usage profiles are created and cookies are used. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand‐oriented design of these Internet pages.

In no case will your IP address be merged with other data from Google. By activating IP anonymization on our website using "anonymizeIp", the IP address is shortened before transmission within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area (so‐called IP masking), so that an assignment is not possible. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help https://support.google.com/analytics/answer/6004245?hl=en) and at https://marketingplatform.google.com/about/analytics/terms/gb/ or at https://policies.google.com/?hl=en&gl=de.

We have concluded the standard contractual clauses with Google in order to counteract the possible lack of or limited legal protection options and the lower level of data protection in the USA in contrast to the EU.

We also use Google Analytics to evaluate data from AdWords and the Double Click cookie for statistical purposes. If you do not wish this, you can deactivate it if necessary.

 

(2) Google Tag Manager

We use the Google Tag Manager of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Tag Manager") on our website. This tool allows us to centrally install and manage code sections from Google Analytics. Google Tag Manger itself does not set any cookies and only collects certain aggregated data for tag triggering, which, according to its own information, does not contain IP addresses or other personal data. For more information on data protection in connection with Google Tag Manager, please visit https://support.google.com/tagmanager/answer/9323295?hl=en.

 

(3) YouTube

We embed videos of the social network youtube.com on our website, which is operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA ("YouTube"). YouTube LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043‐1351, USA. We use YouTube videos to improve the external presentation of our website and to inform visitors to our website about our company and products.

We use the two‐click method when using YouTube, so that videos on our website are initially displayed only in the form of an image with a "play" icon, which does not establish a connection to YouTube's servers until you click on the image and thereby call up the YouTube video. With another click, you can play the video. Only when you call up the YouTube video is a connection to the YouTube servers established. As part of this technical process, YouTube receives knowledge of which specific subpage of our website you are visiting.

If you use the videos, the corresponding information ‐ e.g. pressing the play button ‐ is transmitted from your browser to YouTube, linked to your user account and stored.

If you are logged in with your personal Google account while visiting our website, YouTube can associate your visit and the specific subpages of our website that you visit with your account. If you do not have a Google account, it is still possible that YouTube stores your IP address.

If you do not wish such processing, you must log out of your Google account and delete your cookies before visiting our website.

For more information on data protection, please refer to YouTube's privacy policy at https://policies.google.com/privacy?hl=en&gl=de.

 

(4) Google Maps

This website uses the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Maps") to illustrate our location.

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, may be transmitted to Google in the USA. When you call up a web page of our website that contains Google Maps, your browser establishes a direct connection with Google's servers, provided that you have consented to the use of Google Maps. Until you consent to the use of Google Maps, the service will not be loaded and no connection to Google's servers will be established.

The map content is transmitted by Google directly to your browser, which then integrates it into the website. Therefore, we have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:

  • Date and time of the visit to the website in question,
  • Internet address or URL of the accessed web page,
  • IP address, (start) address entered as part of route planning.

We have no influence on the further processing and use of the data by Google and therefore cannot assume any responsibility for this.

The terms of use of Google Maps can be found at https://www.google.com/intl/gb_gb/help/terms_maps/.

Cookie-List:

Google Analytics Opt-out. Status: Opt-in.

Contact

If you have any problems, questions or suggestions, please contact us by e‐mail at info@pgp-hautschutz.de, datenschutz@peter-greven.de or by mail at the above mentioned address.

The constant development of the Internet makes it necessary to adjust our privacy policy from time to time. We reserve the right to make corresponding changes at any time.

Status: November 2022