This privacy policy applies to the collection, processing and use of your personal data (“data processing”) when using the website: www.viproactive.de of the shop owner:

Proto Global GmbH
Green Way 1
12530 Frankfurt (Oder)
Germany .

The protection of your personal data is of utmost importance to us. We therefore collect and process your data exclusively in accordance with legal regulations, in particular the provisions of the German Federal Data Protection Act (BDSG) and the GDPR. In this privacy policy, we inform you about the most important aspects of data processing on our website.

Below we would like to inform you in detail about which data we collect, process and use for what purpose and how you can object to this data processing.

• 1 Name and address of the person responsible

The responsible body for data processing is

Mr. Ziya Gaziyev,

• 2 Scope of processing of personal data

In order to ensure the functionality of our website and the provision of our content and services, it is necessary for us to collect and use personal data from our users.

Personal data is stored and processed exclusively on servers in the European Union.

All data is encrypted using the SSL method.

Data processing is carried out on the basis of the legal provisions of Article 6 (1) (a) (consent) and/or (f) (legitimate interest) of the GDPR. If processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.

Any further use will only take place with the customer's express consent. Specifically, data is collected and processed as follows.

When you visit our website, our server automatically collects log file data and stores it in an internal log file, which is transmitted to us via your browser. This data includes the following:

• Type and version of the browser you use,

• Type and version of the operating system you use,

• URL of the page you came to us from,

• Search terms you used to find our site,

• Date and time of access to our website,

• Names of the subpages you access.

We collect and process this data anonymously, meaning it cannot be assigned to a specific person. The purpose of collecting and processing this data is to evaluate it for internal system-related and statistical purposes. Furthermore, it is used for technical security purposes, in particular to prevent attempted attacks on our web server; to monitor for misuse in cases of suspicion and to investigate suspected criminal use. The IP address is only evaluated in the event of attacks on our network infrastructure.

We use your email address to complete a registration process on our website via a confirmation email and to send you confirmation emails about the orders you have placed.

The legal basis for the processing of the data is Art. 6 (1) (b) (necessary for the performance of the contract) of the GDPR.

Payment information – Account or credit card information is used to process paid orders.

The legal basis for the processing of the data is Art. 6 (1) (b) (necessary for the performance of the contract) of the GDPR.

If you subscribe to our company's newsletter, the data in the respective input mask will be transmitted to the person responsible for processing.
When registering for the newsletter, the user's IP address and the date and time of registration are saved. This serves to prevent misuse of the services or the email address of the data subject. Data will not be shared with third parties. An exception applies if there is a legal obligation to share data.
The data will be used exclusively for sending the newsletter. The data subject can cancel the newsletter subscription at any time. Likewise, consent to the storage of personal data can be revoked at any time. A corresponding link for this purpose is included in every newsletter.

The legal basis for processing data after the user has registered for the newsletter, provided the user has given their consent, is Art. 6 (1) (a) GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) of the German Unfair Competition Act (UWG).

If you have consented to the use of your email address to receive our newsletter and to send you offers, you have given us the following declaration of consent.

" I hereby consent to PROTO GLOBAL sending me newsletters and offers for their products for advertising purposes via email. I have the unrestricted right to request comprehensive information from ABC at any time regarding the data stored about me.

I can request the correction, deletion, and blocking of stored personal data from ABC at any time. I have the right to withdraw, amend, or completely revoke a previously granted declaration of consent at any time without giving reasons. I have the right to send the withdrawal of consent to the contractual partner by post, email, or fax. I will bear the costs of transmitting this declaration—for example, the generally customary postage costs or the telephone charges for a fax. No further costs or fees will be incurred.

We have recorded your declaration of consent.

If you use the contact form on our website, which can be used for electronic contact, or contact us via our email address, the personal data you submit will be automatically saved. This storage serves solely for the purposes of processing your request or contacting the data subject. The data will not be passed on to third parties. The legal basis for processing the data, provided the user has given their consent, is Art. 6 (1) (a) GDPR.

The legal basis for processing data transmitted when sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

• 3 Legal basis for the processing of personal data

To the extent that we obtain consent from the data subjects for processing personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to implement pre-contractual measures.

To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 paragraph 1 letter c GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

• 4 Recipients of the data or categories of recipients

Data will not be transferred to third parties, with the exception of the transfer of credit card details to the processing company for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us to deliver the goods and to our tax advisor to fulfil our tax obligations.

Use of payment service providers

When paying via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

• 5 Routine deletion and storage of personal data

We process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as this is provided for by the European legislator or other legislator in laws or regulations to which the controller is subject.

If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

In the case of data collection for the provision of the website, this is the case when the respective session is ended.

In the case of a newsletter subscription, this is the case as long as the subscription is active.

• 6 Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

 Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from the controller:

1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
4. the planned duration for which the personal data concerning you will be stored or, if specific information is not possible, the criteria used to determine that duration;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information as to their source, where the personal data are not collected from the data subject;
8. the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
   You have the right to request information about whether your personal data will be transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.

 Right to rectification or completion

You have the right to request rectification and/or completion from the controller if the personal data concerning you that are processed are incorrect or incomplete. The controller must carry out the rectification immediately.

 Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

1. if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

1. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
2. the controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
3. if you have objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above-mentioned requirements, you will be informed by the controller before the restriction is lifted.

 Right to erasure

You may request the controller to delete your personal data immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You withdraw your consent on which the processing was based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal ground for the processing.
3. You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
4. The personal data concerning you have been processed unlawfully.
5. The erasure of personal data concerning you is necessary to fulfil a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you were collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, the controller shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, in order to inform data controllers which process the personal data that you, as the data subject, have requested the erasure by such controllers of all links to these personal data or of copies or replications of these personal data.

The right to erasure does not apply if processing is necessary

1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation required by Union or Member State law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of ​​public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in paragraph 1 is likely to make the achievement of the objectives of that processing impossible or seriously compromises it, or
5. to assert, exercise or defend legal claims.

 Right to information

If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or restriction of processing, unless doing so proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about these recipients.

 Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. Furthermore, you have the right to transmit these data to another controller without hindrance from the controller to whom the personal data was provided, provided that

1. the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
2. the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 Right of objection

You have the right to object at any time to the processing of personal data concerning you based on Article 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option of exercising your right of objection by means of automated procedures that use technical specifications, notwithstanding Directive 2002/58/EC.

 Right to revoke the data protection consent declaration

You have the right to revoke your consent to data protection at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.

 

 Automated decision-making in individual cases, including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the controller,
2. is permitted by Union or Member State law to which the controller is subject and which contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
3. with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) applies and appropriate measures to protect your rights and freedoms as well as your legitimate interests have been taken.

With regard to the cases referred to in points a. and c., the controller shall implement appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

The supervisory authority at the location of the shop is

Berlin Commissioner for Data Protection and Freedom of Information

At the Urania 4-10

10787 Berlin

• 7 Addressee

Requests for information, correction and deletion as well as the revocation or objection regarding the further use of the data of any consent given to us (see Section 6) can be declared informally as follows:

 by post:

Proto Global GmbH
Green Way 1
12530 Frankfurt (Oder)
Germany

 Or by fax and email:

• 8 cookies

We use so-called "cookies" on our website. Cookies are small text files that are stored on your computer and saved by your browser. By setting cookies, our web server can recognize your browser, your individual settings on our website, and possibly parts of your login data in encrypted form, thus making it easier for you to use our website and enabling automatic login. The following data is stored and transmitted in the cookies:

• Name of your Internet service provider
• IP address
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• browser used
• the operating system of your computer and the name of your access provider.

The purpose of using technically necessary cookies is to simplify website use for users. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after changing pages. The user data collected by technically necessary cookies is not used to create user profiles.

The legal basis for the processing of personal data using cookies is our legitimate interest, Art. 6 (1) (f) GDPR.

Cookies are stored on the user's computer and transmitted from there to our website. Therefore, as a user, you have full control over the use of cookies. You can use your browser settings to reject cookies, delete cookies from your computer, block cookies, or be prompted before a cookie is placed. The cookies we set are deleted from your computer after each session. If you deactivate cookies for our website, you may no longer be able to fully use all of the website's functions.

• 9 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, conversion tracking provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google AdWords). We can determine the success of individual advertising measures in relation to the data from the advertising campaigns. This is our interest in showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie in your internet browser's user settings. You will then not be included in the conversion tracking statistics. We use Google Adwords based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

You can find further information about Google’s privacy policy at the following internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them through the appropriate settings in your browser software or by downloading and installing the browser plug-in available under the following link:

http://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

• 10 Use of Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies." These are small text files that your web browser stores on your device and enable an analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually in the USA.

Google Analytics cookies are set on the basis of Art. 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, where applicable, our advertising.

We use Google Analytics in conjunction with the IP anonymization function. This ensures that Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. In exceptional cases, Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

You can prevent cookies from being set by your web browser. However, doing so may limit some features of our website. You can also prevent Google from collecting data relating to your website usage, including your IP address, and subsequently processing this data. This is possible by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to our website: Disable Google Analytics.

Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

In order to fully comply with the statutory data protection requirements, we have concluded a contract for order processing with Google.

Demographic characteristics in Google Analytics

Our website uses the "demographics" feature of Google Analytics. This allows us to create reports containing information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third parties. It is not possible to assign the data to a specific person. You can deactivate this feature at any time. You can do this via the ad settings in your Google Account or by generally prohibiting the collection of your data by Google Analytics, as explained in the "Objection to data collection" section.

• 11 Protection of minors

Children and individuals under the age of 18 should not submit any personal information to us without parental or guardian consent. We do not request, collect, or share personal information from children with third parties.