You can visit our website anonymously. Personal data is not transmitted or stored.

Each time you access a website, your Internet browser transmits data to our web server by default, such as the IP address of your PC or the distribution point of your network provider, the http method and the http User-Agent header. However, our web server stores this data separately from other data and it is not possible for us to assign this data to a specific person. We record which pages you viewed during your visit and which functions you used. After an anonymous evaluation for statistical purposes, this data is deleted immediately.

This data processing is carried out to protect the legitimate interests of Dr. JUCHHEIM GmbH, namely the optimization of the offer. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

When you use and visit our website, cookies or similar technologies such as pixels (hereinafter generally referred to as 'cookies') are used on your computer. Cookies are small text files that are stored by your browser on your end device to store certain information, or image files such as pixels. The next time you visit our website with the same device, the information stored in cookies is subsequently sent back either to our website ('first party cookie') or to another website to which the cookie belongs ('third party cookie').

The stored and returned information enables the respective website to recognize that you have already accessed and visited it with the browser of your end device. We use this information to optimize the design and display of the website according to your preferences. Only the cookie itself is identified on your end device. Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.

This website uses the following types of cookies, the scope and function of which are explained below:

• Strictly necessary cookies (type a)
• Functional and performance cookies (type b)
• Cookies requiring consent (type c)

We will inform you which cookie types are set and used for the tools we use.

(a) Strictly necessary cookies (type a)

Strictly necessary cookies guarantee functions without which you cannot use our websites as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies is sent back to our website.

Strictly necessary cookies are used, for example, to ensure that you as a registered user always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data each time you access a new page.

The use of strictly necessary cookies on our website is possible without your consent. For this reason, strictly necessary cookies cannot be deactivated or activated individually. However, you have the option of generally deactivating cookies in your browser at any time (see below).

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

(b) Functional and performance cookies (type b)

Functional cookies enable our website to save information you have already entered (such as registered name or language selection) and to offer you improved and more personalized functions based on this. These cookies only collect and store anonymized information so that they cannot track your movements on other websites.

Performance cookies collect information about how our websites are used in order to improve their attractiveness, content and functionality. These cookies help us, for example, to determine whether and which subpages of our website are visited and what content users are particularly interested in. In particular, we record the number of visits to a page, the number of subpages accessed, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, region and, if applicable, the city from which the access is made, as well as the proportion of mobile devices that access our websites. We also record movements, 'clicks' and scrolling with the computer mouse in order to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website more specifically to the needs of our users and optimize our offering. The IP address of your computer transmitted for technical reasons is automatically anonymized and does not allow us to draw any conclusions about the individual user.

You can object to the use of functional and performance cookies at any time by adjusting your cookie settings accordingly.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

(c) Cookies requiring consent (type c)

Cookies that are neither absolutely necessary (type a) nor functional or performance cookies (type b) are only used after you have given your consent.

We also reserve the right to use information that we have obtained by means of cookies from an anonymized analysis of the usage behavior of visitors to our websites in order to show you specific advertising for certain of our products on our own websites. We believe that you as a user benefit from this because we display advertising or content that we assume, based on your surfing behavior, matches your interests and you are thus shown less random advertising or certain content that may be of less interest to you.

Marketing cookies originate from external advertising companies (third party cookies) and are used to collect information about the websites visited by the user in order to create targeted advertising for the user.

You can also manage cookies used for online advertising via the tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based http://www.youronlinechoices.com/uk/your-ad-choices.

You can revoke this consent to cookies at any time with effect for the future here.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

(d) Management and deletion of all cookies

In addition, you can set your Internet browser so that the storage of cookies is generally prevented on your end device or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can also delete them at any time. You can find out how all this works in detail in the help function of your browser.

Please note that a general deactivation of cookies may lead to functional restrictions on our website.

(a) Contact requests by e-mail/form

If you are interested in registering as a sales partner or for the purpose of making general contact, you can use the corresponding form on the website to submit data, contact us via web chat or by email. When you contact us, the data you provide (your e-mail address and your name, address and telephone number if applicable) will be stored in order to respond to your inquiry. Dr. Juchheim GmbH deletes the data collected in this context after storage is no longer necessary, e.g. when the request has been dealt with. Otherwise, processing will be restricted if statutory retention obligations exist. In the case of sending letters of application, your data transmitted for this reason will be stored until a decision on your application has been made or until you notify Dr. Juchheim GmbH of the withdrawal of your application.

This data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with the consent you have given.

(b) Data processing for the purpose of sending newsletters

Dr. Juchheim GmbH only uses personal customer data to send customers a newsletter if customers have consented to this use in advance. Only the e-mail address is mandatory for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address the customer personally. A confirmation e-mail is then sent to the e-mail address provided, in which you must confirm your newsletter registration again. This so-called "double opt-in" procedure is used to verify your registration or to check that you are the owner of the e-mail address provided. The system also records the date and time of registration and confirmation. After confirmation, Dr. Juchheim GmbH stores the customer's e-mail address for the purpose of sending the newsletter.

The customer can revoke consent to the sending of the newsletter at any time and unsubscribe from the newsletter. The customer can declare the revocation by clicking on the link provided in every newsletter e-mail, via the contact form on the Dr. Juchheim GmbH website or by e-mail to info@juchheim-methode.de.

Your registration data will be used exclusively for sending the newsletter. The newsletter is sent via the mailing service provider Mailjet (SAS Mailjet, 13-13 bis, Rue de l'Aubrac - 75012 Paris, France). You can find Mailjet's applicable privacy policy at https://www.mailjet.de/privacy-policy/.

The mailing service provider may use your data in pseudonymized form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the mailing and presentation of the newsletter or for statistical purposes. The mailing service provider uses your data from the Dr. Juchheim GmbH newsletter exclusively within the scope of order processing for Dr. Juchheim GmbH and not to write to you itself or to pass the data on to third parties.

The legal basis for the processing of your personal data in connection with the newsletter is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR. The dispatch service provider is used on the basis of an order processing contract pursuant to Art. 28 para. 3 sentence 1 GDPR.

(c) Communication via WhatsApp

We offer you the option of contacting us via the WhatsApp instant messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called "business version" of WhatsApp for this purpose.

If you contact us via WhatsApp in connection with a specific transaction (e.g. an order placed), we will store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. b GDPR to process and respond to your request. On the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you as a customer have not objected to the sending of advertising via WhatsApp or if you as a consultant have given your consent to being contacted via WhatsApp for the purpose of executing your consulting contract as part of the registration process, the legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time without giving reasons for the future by unsubscribing from WhatsApp messages via the link contained in each message or by informing Dr. Juchheim GmbH by post or e-mail of your revocation against the processing of your personal data.

If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

It will not be passed on to third parties.

We would like to point out that WhatsApp receives personal data (in particular communication metadata) that is also processed on servers in countries outside the EU (e.g. USA). WhatsApp shares this data with other companies within and outside the Facebook group of companies. Further information can be found in WhatsApp's privacy policy (https://www.whatsapp.com/legal/#privacy-policy). Dr. Juchheim GmbH has neither precise knowledge nor influence on the data processing by WhatsApp.

Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have contacted us via WhatsApp or have given their consent to do so. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp or otherwise consented to communication via WhatsApp is excluded in this respect.

(d) Use of the messenger services of Dr. Juchheim

You can use the messenger service of Dr. Juchheim GmbH if you have installed a messenger service such as Telegram, Facebook Messenger, Apple iMessage or Instagram Messenger on your mobile device. By doing so, you have agreed to the general terms and conditions of the respective services, over which Dr. Juchheim GmbH has no influence and which remain unaffected by the messenger service offered by Dr. Juchheim GmbH. As a rule, the general terms and conditions include access to telephone numbers and the contacts stored on the mobile device. We do not gain access to this data through the use of the Messenger service.

Dr. Juchheim GmbH would like to point out that the messenger services have different data protection standards than Dr. Juchheim GmbH. You can view the privacy policies of these providers here:

• Data protection with Telegram: https://telegram.org/privacy
• Data protection on Facebook: https://www.facebook.com/privacy/explanation
• Data protection at Apple: https://apple.com/de/legal/privacy
• Data protection on Instagram: https://about.instagram.com/de-de/safety

Dr. Juchheim GmbH has no influence on the data protection regulations and settings of these platforms. As far as possible, we handle your data with the utmost sensitivity. However, Dr. Juchheim GmbH is not liable for any damage caused by your use of these messenger services.

The processed data will only and exclusively be used for messenger communication with you as part of our offer, as well as for advertising purposes if you have given your consent. We do not link this data with other data and do not pass it on to third parties. The data processor is MessengerPeople GmbH, Herzog-Heinrich-Str. 9, 80336 Munich. Information on data protection at MessengerPeople can be found here: https://www.messengerpeople.com/de/datenschutzerklaerung/

If you subscribe to the messenger service of Dr. Juchheim GmbH, the following data will be processed:

Telegram:

• an ID that is assigned to your Telegram profile
• the user name entered in Telegram (not your phone number)
• if provided by you on Telegram: First name and last name
• the profile picture you entered on Telegram

Facebook Messenger:

• an ID that is assigned to your Facebook profile
• User name entered on Facebook
• First name and surname given on Facebook
• Profile picture posted on Facebook

Apple Business Chat/iMessage:

• an ID assigned to your Apple iMessage account
• the telephone number you have provided
• Name given in Apple Business Chat

Instagram Messenger:

• an ID that is assigned to your Instagram profile
• Username specified on Instagram
• First name and surname given on Instagram
• Profile picture posted on Instagram

By using one of these messengers, Dr. Juchheim GmbH will receive the ID and user name assigned to you by the service provider. This is only necessary for the delivery of the messages. However, you will not remain identifiable to Dr. Juchheim GmbH due to your registration for the messenger.

If you use Telegram, Facebook Messenger, Apple iMessage or Instagram Messenger, it cannot be ruled out that personal data will also be transferred to the USA, as these messengers store data on servers there. According to the findings of the ECJ, the level of data protection in the USA is lower than within the scope of the EU (GDPR). However, Dr. Juchheim GmbH does not transfer any of your personal data or initiate such a transfer, as you have consented to the corresponding data processing by the service providers on the basis of your registration with them.

The legal basis for the processing of your data after consent has been given is Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from Dr. Juchheim's messenger offers on Telegram, Facebook Messenger, Apple Business Chat/iMessage or Instagram Messenger at any time by revoking your consent at any time without giving reasons for the future, e.g. by sending a message to Dr. Juchheim GmbH explaining your revocation on the messenger channel you are using. It is also possible to send a message by post or e-mail.

This website uses Google Analytics, a web analysis service of Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Nutzerbedingungen:

http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The use of Google Analytics is based on the legal basis of Art. 6 para. 1 sentence 1 lit. a GDPR, your consent (cookie requiring consent).

Dr. Juchheim GmbH uses the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you access the web pages of our website that contain such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This tells the Vimeo server which of our web pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.

Further information on data processing and notes on data protection by Vimeo can be found at https://vimeo.com/privacy. We use Vimeo on the basis of our overriding legitimate interest in the analysis and optimization of our website. The legal basis is Art. 6 para. 1 sentence 1 lit. f. GDPR.

(a) For legally effective orders and their execution, we require contact details of customers with legal capacity, such as title, name, telephone number for queries, delivery and billing address and e-mail address, as well as information on the type of payment method you have chosen. This personal data is only collected if you provide it as part of the order or registration process. If incomplete or incorrect data is provided, this means that no effective purchase contract can be concluded. This data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR and is necessary for the establishment and fulfillment of a contract with you.

Your personal data is stored in our customer database when you register as a customer. You have access to this data and can use the stored address data for further orders and subsequently view order data in your customer account. This prevents errors and ensures that you receive the items you have ordered. You can revoke your consent to storage at any time by notifying the controller as long as storage is not required to document a contractual relationship and in accordance with legal requirements (see section 5 Storage/deletion below). The data will then be deleted immediately.

Storage in the customer database takes place on the basis of your voluntarily granted consent; the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(b) Personal data will only be passed on to the service partners named below, in particular payment service providers and logistics partners whose services we require to process the contractual relationship or service providers that we use as part of order processing, as well as their advisors (sales partners).

For the purpose of payment, the personal data provided will be forwarded to the respective payment provider if you have selected payment via their systems. The scope of the data transfer is determined by the selected payment method:

Your data will not be passed on to third parties as part of a SEPA transfer.

In the case of a transfer via PayPal Express, your first name, last name, address, telephone number, IP address, e-mail address, invoice number, invoice amount and the item information for your order will be forwarded to PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal may transfer, process and store personal data outside the EU that is required to process the payment. The scope of the use of your personal data by PayPal is set out in PayPal's privacy policy. You can view these here.

When paying by credit card, the payment is processed by the payment service provider VR Payment GmbH, Saonestraße 3a, 60528 Frankfurt am Main, Germany. Your invoice number, the invoice amount, the item information and the contract language and currency are transmitted to VR Payment GmbH. Reference is made to the information provided by VR Payment GmbH in accordance with the GDPR as part of the processing of credit card payments athttps://www.vr-payment.de/datenschutz-haftung.

In the case of a purchase on account or payment by installments, your first and last name, date of birth, address, e-mail address and telephone number, order data, technical data such as the IP address, browser version, language settings of your terminal device, will be forwarded to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin. Further information on the processing of your personal data by Ratepay GmbH can be found here: https://www.ratepay.com/legal-payment-dataprivacy/.

Your personal data will be transmitted to the selected payment service provider for the purpose of performing the contract concluded with you; the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

We pass on your personal data to our logistics service provider Arvato Bertelsmann Group, Carl-Bertelsmann-Straße 270, 33311 Gütersloh, Germany. An agreement on commissioned data processing has been concluded with the Arvato Bertelsmann Group, according to which this company is obliged to comply with the requirements of the GDPR and the lawful transfer of data is possible. The following data is passed on to the Arvato Bertelsmann Group and processed by the Arvato Bertelsmann Group First name, surname, delivery address, description of the goods ordered. The Arvato Bertelsmann Group stores your data only until the order processing and reporting is completed. This data processing is necessary for the execution of the delivery and thus for the fulfillment of the contract with you, legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

For the purpose of delivering your order, we pass on the following personal data to our shipping service providers such as FedEx, DPD: first name, surname, email, delivery address, description of the goods ordered. An agreement on commissioned data processing has been concluded with our shipping service providers, according to which these companies are obliged to comply with the requirements of the GDPR and the lawful transfer of data is possible. The shipping service provider only stores your data until the order processing and reporting has been completed. This data processing is necessary for the execution of the delivery and thus for the fulfillment of the contract with you, legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

We pass on your personal data to our hosting service provider Netplace Telematic GmbH, Marsstraße 26, 80335 Munich, Germany. An agreement on commissioned data processing has been concluded with Netplace Telematic GmbH, according to which this company is obliged to comply with the requirements of the GDPR and the lawful transfer of data is possible. Your data is transmitted in encrypted form via the https: protocol and initially stored on the servers of Netplace Telematic GmbH. This encryption protects your data from being viewed by third parties.

(c) In addition, order data (name, customer number, ordered products, delivered and possibly returned goods) are available to the respective distribution partner (independent consulting company), who has taken over your advice and support and transmitted the order to us, for inspection for control purposes and to enable the consulting services and customer support. This consultant is shown in the store system and in the order process for control purposes.

After the order has been processed, you can object to the further provision of the data. Data processing by the respective sales partner is carried out for the purpose of fulfilling the contract concluded with you. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

We require the following personal data from you for the conclusion and execution of a contract as a sales partner:

Title, surname, first name, address, date of birth, e-mail address, telephone number, fax number, IBAN and BIC, company name, tax number, VAT ID number.

This information is required to establish and execute the contract as a sales partner, in particular to process commission payments. The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. b GDPR.

As a sales partner, you have access to the back office. You can see a team overview in this back office. There, sales partners receive information about the sales partners they have recruited in their downline. The following information about the downline is displayed: career position, surname, first name, gross merchandise value of sales in the previous month, number of team members. This information is required for the calculation and traceability of commission claims. The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. b GDPR.

For the purpose of maintaining the sales network, the sales partners are also shown the data of the sales partners in whose upline they are in the back office. For this purpose, the sales partners receive the following information about their respective upline: Career position, surname, first name, e-mail, net merchandise value of sales in the previous month, number of team members. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Plugins from the Vimeo video portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated in the back office. Each time a page that offers one or more Vimeo video clips is accessed, a direct connection is established between the sales partner's browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. Through interactions with the Vimeo plugins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found here: https://vimeo.com/privacy. The purpose of this data processing is to optimize the performance of the back office; the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

Furthermore, sales partners have the option of booking tickets for events organized by external service providers via the back office. The respective external service provider is responsible for data processing as part of the booking process; please refer to the privacy policy of the respective service provider for more information.

We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or if this has been specified by the European legislator or another legislator in laws or regulations to which the controller is subject. Corresponding requirements exist, for example, for auditing purposes by tax authorities.

If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another competent legislator has expired, the personal data will be routinely deleted in accordance with the statutory provisions.

In the case of the collection of data for the provision of the website, this is the case when the respective session has ended (Section 1).

We will also erase your data if you have a right to erasure and request erasure (Section 7 (d)),

For the information service offered here, Dr. Juchheim GmbH uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), which also operates the social media platform "Instagram".

According to the ECJ, there is joint responsibility within the meaning of Art. 26 GDPR between Facebook and the operator of a Facebook fan page/Instagram page for the personal data processed via Facebook. For this reason, Facebook and Dr. Juchheim GmbH have concluded an agreement on joint responsibility, which you can access here.

Dr. Juchheim provides you with the following information on data processing on our Facebook fan page/Instagram page:

(a) Responsible persons

The processing of your personal data on the Facebook fan page/Instagram page of Dr. Juchheim GmbH is carried out under joint responsibility with:

Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

(b) Data processing

When you access a Facebook fan page/Instagram page, the IP address of your end device is transmitted to Facebook. According to Facebook, this IP address is anonymized and deleted after 90 days, at least if it is a German IP address. In addition, Facebook stores further information about the end devices of its users, e.g. the Internet browser used. This may enable Facebook to assign IP addresses to individual users. If you are logged into your Facebook account while visiting our fan page, a cookie with your Facebook ID will be stored on your device. This cookie enables Facebook to understand that you have visited our fan page and how you have used it. Facebook uses this information to present you with customized content or advertising.

If you do not wish to do this, you should log out of your Facebook account or deactivate the 'stay logged in' function. We also recommend deleting the cookies on your device and closing and restarting your browser. This process deletes Facebook information that Facebook can use to establish a link to you.

However, if you wish to use the interactive functions of our fan page, you must log in to Facebook again using your Facebook login information. This will also allow Facebook to link to you again.

Facebook does not conclusively and clearly state how it uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, and we are not aware of this. In this respect, we can only refer you as a user of our fan page to Facebook's privacy policy.

The data collected about you in this context will be processed by Facebook and may be transferred to countries outside the European Union.

What information Facebook receives and how it is used is described by Facebook in general terms in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link http://de-de.facebook.com/about/privacy

You can find Facebook's complete data policy here:
https://de-de.facebook.com/full_data_use_policy

Facebook's privacy policy contains further information on data processing:
https://www.facebook.com/about/privacy/

Objection options (so-called opt-out) can be set here:
https://www.facebook.com/settings?tab=ads und hier http://www.youronlinechoices.com

Facebook Inc., the US parent company of Facebook Ireland Ltd., is certified under the EU-U.S. Privacy Shield and thus undertakes to comply with the provisions of European data protection law. Further information on Facebook's Privacy Shield status can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

The transfer and further processing of users' personal data to third countries, such as the USA, and the associated potential risks for you as a user cannot be assessed by us as the operator of the Facebook fan page/Instagram page.

(c) Insight function

Facebook also provides a range of statistical data for SBS-Legal as a fan page operator as part of the so-called "Insights" function. These statistics are generated and provided by Facebook. As the operator of the fan page, we have no influence on the generation of this data and, in particular, we cannot prevent this function. As part of the "Insights" function, we are shown the following information for the categories "fans", "subscribers", "people reached" and "people interacting" for a selectable period of time:

Page activities such as page views, page previews, actions on the page; reach activities such as "likes", people reached and recommendations, post activities such as post interactions, video views, comments, shared content.

In addition, we are provided with statistical information about the Facebook groups that are linked to our fan page. In accordance with the Facebook terms of use, which every user has agreed to when creating a Facebook profile, we can also identify the subscribers and fans of the page and view their profiles and other information shared by them.

Facebook provides more information on this under the following link:
http://de-de.facebook.com/help/pages/insights.

Dr. Juchheim GmbH uses this data, which is available in aggregated form, to make posts and activities on the fan page more attractive to users, e.g. to plan the content and timing of posts. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, namely our legitimate interest in optimizing our offer.

(d) Storage period

We store the information transmitted by Facebook at most as long as your interest in deletion or anonymization does not prevail.

If you no longer wish the data processing described here to take place in future, please remove the link between your user profile and our fan page by using the functions "I no longer like this page" and/or "No longer subscribe to this page".

(e) Your rights as a data subject

We recommend that you address any requests for information or other questions regarding your rights listed at the end of this privacy policy directly to Facebook, as only Facebook has full access to user data. Should you nevertheless address your request to us, it will of course still be processed and also forwarded to Facebook.

We use the services of Zoom to hold virtual events (meetings). Zoom is a service of Zoom Video Communications, Inc, 55 Alma-den Boulevard, 6th Floor, San Jose, CA 95113, USA. However, we may also use other service providers.

When participating in virtual events, the extent to which your personal data is processed depends on the personal data you provide before or during participation. We have concluded an order processing contract with the service provider that meets the requirements of Art. 28 GDPR.

The following personal data may be processed by Zoom or the respective service provider in this context:

• First name, surname, pseudonym (nickname) if applicable, telephone (optional), e-mail address, profile picture (optional);
• Video conference metadata: Topic, description (optional), participant IP addresses, device/hardware information;
• When dialling in with the telephone: information on the incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved;
• For recordings (optional): MP4 file of all video and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat;
• Text, audio and video data: You may have the opportunity to use the chat, question or survey functions during a virtual event. In this respect, the text entries you make are processed in order to display them in the video conference and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed accordingly for the duration of the virtual event. You can switch off or mute the camera or microphone yourself at any time via the settings.

If you are registered as a user with Zoom or the service provider, reports on video conferences (meeting metadata, telephone dial-in data, questions and answers in video conferences, survey function in video conferences) can be stored by the service provider for up to one month. The possibility of software-based "attention monitoring" ("attention tracking") in the video conferences is deactivated in advance.

Further information on the processing of personal data by Zoom can be found in Zoom's privacy policy, which you can access here: https://zoom.us/de-de/privacy.html.

We have concluded so-called EU standard contractual clauses with Zoom regarding data protection. Zoom explains: "Zoom offers its customers comprehensive protection measures for data transmission both within the framework of the Standard Contractual Clauses (SCC) and within the framework of the Privacy Shield. Even though the ruling of the Court of Justice of the European Union (EU) has declared the use of the Privacy Shield invalid for the future, the SCCs remain valid .... The ruling does not change the data flow for our services. To clarify, we emphasize that you can continue to use the Zoom services in accordance with EU law." (https://blog.zoom.us/de/sicherheit-und-datenschutz-bei-zoom-unsere-antworten-auf-ihre-fragen/).

This data processing is carried out for the purpose of implementing the contract for participation in our virtual events (meetings). The legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.

Our virtual events can be recorded. The recording includes, in particular, requests to speak during the event and chat contributions. If you participate in one of our virtual events with more than just audio, your video stream will also be recorded.

This data processing is carried out on the basis of your consent to the recording of the virtual event in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. If you do not give your consent, you will not be able to participate in virtual events that we intend to record. Consent to the processing of photos and/or videos can be revoked at any time for the future. This does not affect the lawfulness of the data processing carried out on the basis of the consent until revocation.

Compliance with legal requirements: We also process your personal data in order to comply with other legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. We process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR (legal basis) to fulfill a legal obligation to which we are subject.

Enforcement: We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the prevention or prosecution of criminal offenses. We process your personal data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses (legitimate interest).

Consent: If you have given us your consent to process personal data for specific purposes (e.g. sending information material and offers), the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. Please note that the revocation is only effective for the future and processing up to that point is not affected.

As the data subject affected by the processing of your data in accordance with the GDPR, you have the following rights:

(a) Right to information

You can first request confirmation from the controller as to whether your personal data is being processed by us.

If this is the case, you can request information from the controller about the following data processing circumstances:

• the categories of personal data that are processed;
• the available data on the origin of the stored personal data, if they are not collected from you (were transmitted by you);
• the purposes for which the personal data are processed;
• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
• if given, the planned duration of storage of the personal data or otherwise criteria for determining the duration of storage;
• the existence of a right to rectification or erasure of your personal data or to restriction of processing by the controller or a right to object to processing of the data;
• the existence of a right of appeal to a supervisory authority;
• any automated decision-making, including profiling, as defined in Art. 22 (1) and (4) GDPR and specific information about the logic involved, as well as the scope and intended effects of such processing for you as the data subject.
• You also have the right to request information about whether your personal data is transferred to recipients located in a third country or to international organizations. In this case, you can also request information about suitable guarantees in accordance with Art. 46 GDPR in connection with the transfer.

(b) Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if your processed personal data is incorrect or incomplete. The controller must make the correction without delay.

(c) Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

• if you contest the accuracy of your personal data, for the period enabling the controller to verify the accuracy of the data and, if necessary, to rectify it;
• if the processing would otherwise be unlawful and you request the restriction of use instead of erasure of the data (e.g. storage without further use);
• the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.

If you have effectively restricted the processing of your personal data, this data - apart from its storage - may only be processed with your separate consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

(d) Right to erasure

You can request the controller to delete your personal data immediately. The controller is obliged to delete the data immediately if one of the following conditions applies:

• if you revoke your consent to storage and processing pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other overriding legal basis for further storage;
• the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• the personal data concerning you has been processed unlawfully. The deletion of your personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
• the personal data concerning you have been collected in relation to the offer of information society services to children in accordance with Art. 8 para. 1 GDPR.

Where the controller has made your personal data public and is obliged to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Exceptions to the right to data erasure

The right to erasure does not exist if the processing is necessary

• to exercise the right to freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in para. 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
• for the assertion, exercise or defense of legal claims.

(e) Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by the controller.

(f) Right to data portability

1. the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and
2. the processing is carried out using automated procedures.

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where one of the following applies

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(g) Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object to this processing (use) of your personal data for the purpose of such marketing at any time; this also applies to profiling insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

(h) Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time without giving reasons. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

(i) Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the controller,
2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
3. with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

(j) Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection legislation (in particular the GDPR).
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

You can withdraw your consent to the processing of personal data at any time with effect for the future and have your personal data deleted or amended. If the data is required to fulfill the contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

Requests for information, correction and deletion as well as the revocation or objection regarding the further use of the data possibly given to us can be declared informally as follows:

by post to:

Here you can find information from the EU Commission on your data protection rights

Status of the privacy policy: 06.05.2022