Many thanks for visiting our website. Data protection is very important to us, and we want you to feel secure when you visit our website.
Peter Greven Physioderm GmbH takes the protection and confidentiality of your personal data very seriously. We act responsibly in accordance with the General Data Protection Regulation (GDPR) and other national data protection legislation of the Member States and other data protection regulations. We collect, process and use personal data only insofar as you have consented to such collection, processing and use, or if a corresponding contractual or legal basis exists.
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection legislation of the Member States and other data protection regulations is:
Peter Greven Physioderm GmbH
Tel.: +49 (0)2251 77617-0
Data protection officer at Peter Greven Physioderm GmbH
Peter Greven GmbH & Co. KG
Peter Greven Straße 20-30
53902 Bad Münstereifel
Tel.: +49 (0) 2253 - 313 – 0
Subject of the data protection and definition of terms
The subject of the data protection pursuant to Art. 4 para 1 GDPR is all information relating to an identified or identifiable natural person, i.e. “personal data”. Under Art. 4 para 2 GDPR, this corresponds to all processes relating to personal data including the collection, capture, organisation, classification, storage, adaptation or modification, reading out, request for, use or disclosure by submission, distribution or any other form of provision, comparison or association, restriction, erasure or destruction of such data.
The purpose and legal basis for the processing of personal data
Peter Greven Physioderm GmbH processes personal data in accordance with Art. 6 para 1 letters a-f GDPR solely on the basis of your prior consent to fulfil a contract or pre-contractual measures which are carried out at your request, to perform a legal obligation and to protect a legitimate interest.
If the processing of your personal data is based on Article 6 I letter f GDPR, our legitimate interest, unless otherwise stated, is the performance of our business.
We will only store information that is required to fulfil and safeguard the above purposes.
Deletion of data and period of storage
Personal data will only be stored until the purpose of the storage expires or you have revoked your consent. Insofar as you have provided personal data to us, we will only use it to respond to your enquiries, to process contracts concluded with us and for technical administration. Your personal data will only be transmitted or disclosed to third parties if this is necessary for the purpose of performing the contract, for billing purposes or if you have granted your prior consent. In addition, such storage may take place where stipulated by the European or national legislator in EU legislation, laws or other regulations to which the controller is subject. If the purpose of the storage expires, if you revoke your consent or if the period of storage specified by the European Directives or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the relevant legislation, unless there is a requirement to store the data for a further period to conclude or perform a contract.
You have the right to revoke your consent at any time with effect for the future. We will delete the personal information stored about you, if you revoke your consent to such storage, if the knowledge of such is no longer necessary for the fulfilment of the purpose for which it was stored or if the storage of the data is unlawful for other legal reasons.
Your data will be deleted if it is no longer required for the above purposes. If you wish to revoke your consent and request a deletion of your data, please send an email to info(at)pgp-skincare.com or datenschutz(at)peter-greven.de. Insofar as the data must be retained for legal reasons, it will be blocked, and the data will then no longer be available for further use.
Rights of data subjects
In accordance with Art. 15 GDPR, you have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have the right to information with respect to the following:
- the purposes of processing
- the categories of personal data that is processed
- the recipients or categories of recipients to whom personal data has been or will be disclosed, in particular recipients in third countries or international organisations
- if possible, the anticipated period for which the personal data will be stored or, if this is not possible, the criteria for determining such duration
- the existence of a right to rectification or deletion of your personal data or to restrict the processing of such by the controller or a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data is not collected from the data subject: all the information available regarding the origin of the data and
- the existence of automated decision-making, including profiling, in accordance with Article 22 para 1 and 4 GDPR and, at least in such cases, substantial information with respect to the logic involved and the scope and intended impact of such processing on the data subject.
You also have the right to know if personal data has been transmitted to a third country or to an international organisation. In this case, you also have the right to obtain information about the respective guarantees regarding such data transfer.
We will provide you with information about the personal data we have stored about you on request. If you have any questions regarding the processing of your data, please contact us at info(at)pgp-skincare.com, datenschutz(at)peter-greven.de or by post to the address provided above.
In accordance with Art. 18 GDPR, you have the right to request that we restrict the processing if one of the following conditions applies:
- The correctness of the personal data is disputed by the data subject for a period of time that allows the controller to verify the correctness of the personal information.
- The processing is unlawful and the data subject does not delete personal data but requests the restriction of the use of the personal data.
- The controller no longer requires personal data for processing purposes, but the data subject requires them to assert, exercise or defend legal claims.
- The data subject has filed an objection to the processing pursuant to Art. 21 para 1 GDPR, and it is unclear if the legitimate reasons of the controller prevail over those of the data subject.
If the processing of personal information about you has been restricted, the data may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State.
If the restriction of the processing under the above conditions are limited, you will be informed by us before the restriction is lifted.
In accordance with Art. 17 GDPR, you have the right to request that the personal data relating to you is deleted immediately if one of the following applies and processing is not required:
- Personal data has been collected or processed for purposes for which it is no longer necessary.
- The data subject withdraws their consent on which the processing was based pursuant to Art. 6 para 1 letter a GDPR or Art. 9 para 2 letter a GDPR and there is no other legal basis for such processing.
- The data subject objects to the processing pursuant to Art. 21 para 1 GDPR, and there are no legitimate reasons for such processing or the data subject objects to processing according to Art. 21 para 2 GDPR.
- The personal data was processed unlawfully.
- The deletion of personal data is required to fulfil a legal obligation under Union or national legislation to which the data controller is subject.
- The personal data was collected relating to information society services offered in accordance with Art. 8 para 1 GDPR.
If the personal data was made public by us and if we as the data controller under Article 17 para 1 GDPR are obliged to delete the personal data, we will take appropriate measures, including technical measures and considering the available technology and the implementation costs, to notify other data controllers responsible for data processing who process the published personal data, that the data subject has requested the deletion of all links to their personal data or copies and duplications of such data insofar as the processing is not required.
The right to deletion does not exist if the processing is required:
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation whereby processing is required pursuant to the legislation of the Union or the Member States to which the controller is subject, to perform a mission in the public interest, or to exercise an official authority delegated to the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para 2 letters h and i and Art. 9 para 3 GDPR;
- for archival purposes, scientific or historical research projects or for statistical purposes of public interest pursuant to Art. 89 para 1 GDPR, insofar as the legislation referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of such processing, or
- to assert, exercise or defend legal claims.
If you have asserted a claim against us to correct, delete or restrict data processing, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification to or deletion of data or the restriction of the data processing, unless such notification is impracticable or involves a disproportionate effort.
You have the right to request information regarding such recipients.
You have the right to receive the personal data you have provided to us in a structured, standard and machine-readable format. You also have the right to transfer this data to another data controller without impediment from us if such processing is based on consent pursuant to Art. 6 para 1 letter a GDPR or Art. 9 para 2 letter a GDPR or relates to a contract in accordance with Art. 6 para 1 letter b GDPR and the processing is automated, insofar as the processing is necessary to perform a mission in the public interest or to exercise an official authority that has been delegated to us.
If you exercise your right to data portability in accordance with Art. 20 para 1 GDPR, you have the right to request that personal data is forwarded by us to another data controller insofar as this is technically feasible and if such transfer does not compromise the rights and freedoms other persons.
The right to data portability does not apply to the processing of personal data required to perform a mission in the public interest or to exercise an official authority that has been delegated to the controller.
You have the right to object to the processing of your personal data arising from your particular situation at any time pursuant to Art. 6 para 1 letters e or f GDPR. This also applies to profiling based on these provisions.
If you object to the processing of your data, we will no longer process such data unless we can demonstrate compelling legitimate reasons for such processing that prevail over your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct advertising, you may object to the processing of your personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to the processing of your personal information for direct marketing, we will cease to process your personal data for such purposes.
You also have the right, for reasons arising from your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para 1 GDPR, unless such processing is necessary to fulfil a mission in the public interest.
You can contact us at any time to exercise the right of revocation. You can also exercise your right of revocation via automated procedures using technical specifications in the context of the use of information society services, notwithstanding Directive 2002/58/EC.
You have the right to revoke your consent to the processing of personal data at any time in accordance with Art. 7 para 3 GDPR. The revocation of consent does not affect the legality of the processing carried out based on the consent granted until the withdrawal of such consent.
Profiling: based on a decision that is subject to legal effect, you have the right not to rely solely on automated processing, including a decision that would affect you to an extensive or significant extent, if the decision
- is not required to conclude or perform a contract between you and us, or
- is permitted under Union or Member State legislation to which we are subject and where such legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests, or
- occurs with your explicit consent.
If the decision
- is to conclude or perform a contract between you and us, or
- occurs with your explicit consent
we will take reasonable steps to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person designated by us to present our position and to challenge the decision.
We do not carry out automatic decision-making or profiling.
Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data is in violation of the provisions of the GDPR.
The supervisory authority to which the complaint has been submitted shall notify the plaintiff of the status and outcome of the complaint, including a potential judicial remedy in accordance with Art. 78 GDPR.
If you would like to safeguard your rights as a data subject or if you have any queries regarding the processing of your data, please contact us at info(at)pgp-skincare.com, datenschutz(at)peter-greven.de or by post to the above address.
Use of our website
When using our website, the server statistics inevitably and automatically store the data your browser transmits to us. This information is the browser type and version, the operating system used, the referrer URL (the previously visited page), the host name of the accessing computer (IP address) and the time of the server request. This information is stored exclusively for internal and statistical purposes. Additional personal data is only collected if you submit this information on a voluntary basis, for example in the context of a request or registration. The above data is generally not assigned to specific persons and a merger of this data with other data sources does not occur.
We use "cookies" on our website to make the visit to our website attractive and to enable the use of certain functions. Cookies are small files that are placed on your hard disk and which store specific settings and data to exchange with our system via your browser. There are two types of cookies: session cookies which are deleted when you close your browser and temporary/permanent cookies that are stored for a longer or unlimited period on your hard disk. The storage of cookies enables us to tailor our website and offers to your requirements and makes it easier for you to use them, for example by saving specific data entries so you do not have to re-enter the information on your next visit.
Most of the cookies used by Peter Greven Physioderm GmbH are automatically deleted from your hard disk at the end of the browser session (end of the session), and this also applies to session cookies. Session cookies are required e.g. to use the selected language over multiple pages.
The cookies used by Peter Greven Physioderm GmbH do not store personal data. The cookies we use are therefore not assigned to a specific individual and cannot be attributed to you personally. When the cookies are activated, only settings values, e.g. the language selected, are saved and no personal values are stored. Your name, IP address or similar data that would allow the cookie to be associated with you will never be used. Based on the cookie technology, we only receive pseudonymous information, e.g. the pages of our website visited, products viewed, etc.
The legal basis for the processing of personal data using cookies is Art. 6 para 1 letter f GDPR.
Data is collected on the Peter Greven Physioderm GmbH website based on a cookie technology to optimise our advertising and our entire online offer; this is on-site targeting. This data is not used to identify you personally but serves solely to carry out a pseudonymous evaluation of the use of the homepage. Your data will never be merged with the personal data stored by us. We can use this technology to display advertisements and/or special offers and services, the content of which is based on information obtained as part of the clickstream analysis. Our aim is to make our online information service as useful as possible to you.
Our legitimate interest in the processing of personal data for this purpose is pursuant to Art. 6 para 1 letter f GDPR.
Our website uses re-targeting technologies which we implement to make our Internet offer more interesting to you. This technology allows Internet users who are already interested in our website and products to engage with the websites of our partners via advertising. We believe that personalised, interest-based advertising is generally more attractive to Internet users than ads with no personal reference. The integration of this advertising material on partners’ sites is based on a cookie technology and an analysis of previous usage behaviour. This form of advertising is totally anonymous. We neither store your personal data nor merge usage profiles with your personal data.
Our legitimate interest in the processing of personal data for this purpose is pursuant to Art. 6 para 1 letter f GDPR.
You can adjust your browser settings to only accept cookies if you consent to such. If you only wish to accept Peter Greven Physioderm GmbH cookies and decline those set by our service providers and partners, please select the browser setting "Block third-party cookies". The Help menu in your web browser menu bar will generally provide information on how to decline new cookies and disable them.