Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only to the extent that no other indication is made in the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web hoster / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offer.

 

Contact

Responsible person
Contact us if you wish. The person responsible for data processing is: BerryPharma GmbH this represented by the managing director Rolf Philipp, Weidboden 1, 83339 Chieming Germany, +49 8664 75681 00, office@rubyni.com

Initiative contact of the customer by e-mail
If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request. If the contact serves the implementation of pre-contractual measures (e.g. consultation in case of interest in purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b DSGVO. If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest in processing and responding to your request..
In this case, you have the right to object at any time to this processing of personal data relating to you based on Art. 6(1)(f) DSGVO for reasons arising from your particular situation. We will only use your e-mail address to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have consented to further processing and use.

Customer account     Orders    

Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

When ordering, we collect and process your personal data only to the extent necessary for the fulfillment and processing of your order and to process your requests. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 (1) lit. b DSGVO and is necessary for the performance of a contract with you.
A transfer of your data takes place, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

 

Advertising    

Use of your personal data for sending postal advertisements
We use your personal data (name, address), which we have received in the context of the sale of a product or service, to send you postal advertising, unless you have objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.
The processing is based on Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Use of the e-mail address for sending newsletters
We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a DSGVO with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.

Enterprise Resource Planning    

Use of an external enterprise resource planning system
We use an enterprise resource planning system for contract processing within the scope of order processing. For this purpose, your personal data collected in the context of the order is transferred to myfactory.Center Ammersee, Kunissastraße 13, 86911 Dießen, Germany transmitted.

Payment service provider     

Use PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of being able to offer you payment via the payment service. With the selection and use of payment via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing is based on Art. 6 para. 1 lit. b DSGVO.

All PayPal transactions are subject to the PayPal privacy policy. You can find this under https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Consent Manager
We use the consent management tool Consentmanager by Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”) on our website. The tool allows you to give consent to data processing via the website, in particular the setting of cookies, as well as to exercise your right to withdraw consent you have already given. Data processing serves the purpose of obtaining and documenting required consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Consentmanager: Date and time of the page view, information about the browser you are using and the device you are using, anonymized IP address, opt-in and opt-out data. This data is not passed on to other third parties. Data processing is carried out to fulfill a legal obligation on the basis of Art. 6 (1) lit. c DSGVO. You can find more information about data protection at Consentmanager at: https://www.consentmanager.net/privacy.php



Analysis      Advertising tracking   

Use of Google Analytics
We use the Google Analytics web analytics service provided by Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated by this about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, there is no adequacy decision of the EU Commission. The data transfer is carried out, among others, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and U.S. government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you.
IP anonymization is activated on this website. This means that your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/ and https://policies.google.com/technologies/cookies?hl=de.

Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The following information, among others, may be collected: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information thus generated about your use of this website is usually transferred to a Google server in the USA and stored there. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks. Both Google and U.S. government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in anonymized form. The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
The processing of your personal data is based on Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in the demand-oriented and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time on grounds relating to your particular situation.


You can prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de


To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. If you delete the opt-out cookie, requests will be sent to Google again. If you click here, the opt-out cookie will be set: Disable Google Analytics.
You can find more information on terms of use and privacy at https://policies.google.com/technologies/partner-sites and under https://policies.google.com/privacy?hl=de&gl=de.

Use of Hotjar
We use the analysis tool of Hotjar Ldt. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”) on our website.
The data processing serves the purpose of demand-oriented design, optimization and analysis of our website. The tool is used to randomly record movements of page visitors on the website. This creates a log of mouse movements, scrolling behavior, dwell time and clicks on the website (so-called heat map). For this purpose, Hotjar uses cookies, among other things. In the process, the following information may be collected, among other things: IP address (in anonymized form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (only about the country), preferred language for displaying the website, operating system used. Detailed information about the cookies used, their function and storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
User profiles are created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not merged with personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the USA. There is no adequacy decision of the EU Commission for the USA. The transfer of data is based, among other things, on appropriate protective measures. Hotjar will provide you with further information on the measures taken upon request.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f DSGVO from our overriding legitimate interest in the demand-oriented and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
To prevent the collection and storage of data by Hotjar, you can here: https://www.hotjar.com/legal/compliance/opt-out set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must execute the opt-out cookie on all systems and devices used for this to work across devices. If you delete the opt-out cookie, data will be sent to Hotjar again.
For more information about privacy when using Hotjar, click here: https://www.hotjar.com/legal/policies/privacy#enduserenglish

Use of the Facebook Pixel
We use the “Custom Audiences” remarketing function of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.
Meta Platforms Ireland and we are jointly responsible for the collection of your data and transmission of this data to Facebook when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum accessible. Thereafter, we are responsible in particular for complying with the information obligations pursuant to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the Service, and for complying with the obligations pursuant to Art. 33, 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta Platforms Ireland is responsible for enabling data subject rights under Art. 15 – 20 GDPR, for complying with the security requirements of Art. 32 GDPR with respect to the security of the Service, and for complying with the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects Meta Platforms Ireland’s obligations under the Joint Processing Agreement. The application serves the purpose of targeting the visitors of the website with interest-based advertising on the social network Facebook. For this purpose, the remarketing tag from Facebook has been implemented on the website. This tag establishes a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalized, interest-related Facebook ads. Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The processing of your personal data is based on Art. 6 para. 1 lit. f DSGVO from our overriding legitimate interest to target the site visitors with interest-based advertising. You have the right to object to this processing of personal data relating to you at any time for reasons arising from your particular situation. You can deactivate the “Custom Audiences” remarketing function here.
For more information about the collection and use of data by Facebook, about your rights in this respect and options for protecting your privacy, please refer to Facebook’s privacy policy at https://www.facebook.com/about/privacy/. 

Plug-ins and other

Use of social plug-ins via “Shariff
We use social network plug-ins on our website. To keep you in control of your data, we use the privacy-safe “Shariff” buttons.
Without your express consent, no links are established to the servers of the social networks and consequently no data is transmitted.
“Shariff” is a development of the specialists of the computer magazine c’t. It enables more privacy on the net and replaces the usual “share” buttons of social networks. You can find more information about the Shariff project here: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click on the buttons, a pop-up window appears in which you can log in to the respective provider with your data. Only after this active login by you, a direct connection to the social networks is established.
By logging in, you consent to the transfer of your data to the respective social media provider. Here, among other things, both your IP address and the information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the collected information will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The following named social networks are integrated by means of the “Shariff” function.
For more information on the scope and purpose of the collection and use of the data, as well as your rights in this regard and options for protecting your privacy, please refer to the linked data protection notices of the providers.

Facebook, Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transferred to the USA. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://www.facebook.com/legal/EU_data_transfer_addendum.

Instagram, Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) https://help.instagram.com/155833707900388.
Your data may be transferred to the USA. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

Pinterest the Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://about.pinterest.com/de/privacy-policy
Your data may be transferred to the USA. For the USA, no adequacy decision of the EU Commission is available.

Use Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to integrate videos from the portal “Vimeo”.
If you call up pages of our website that are provided with such a plug-in, a connection is established to the servers of Vimeo and the plug-in is displayed on the page by notifying your browser. This transmits to the servers of Vimeo both your IP address and the information about which of our pages you have visited.
If you are logged in to Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transferred to the USA. There is no adequacy decision of the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, viewable at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
For more information on the purpose and scope of the collection as well as on the further use and processing of the data by Vimeo, as well as on your rights in this regard and options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy

Data subject rights and storage period

Duration of storage
After complete processing of the contract, the data will initially be stored for the duration of the warranty period, thereafter taking into account statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, unless you have consented to further processing and use.

Rights of the data subject
You have the following rights according to Art. 15 to 20 DSGVO if the legal requirements are met: right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 (1) DSGVO, you have the right to object to processing based on Art. 6 (1) f DSGVO and to processing for the purpose of direct marketing.

Right of complaint to the supervisory authority
In accordance with Art. 77 DSGVO, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach at the following contact details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail: poststelle@lda.bayern.de

Right of objection
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f DSGVO, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.
After the objection has been made, the processing of the data concerned shall be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will terminate the processing of the data concerned for the purpose of direct marketing.

last update: 11/29/2022