Data Protection

In the following, you will find information about which data is collected when you visit or use our website www.pruvit.com / www.shopketo.com and how it is used, processed or passed on.

Responsible party in the sense of data protection law:

Pruvit Ventures Inc.
c/o TLC24 s.r.o.
Krakovská 583/9
140 00 Praha 1
Czech Republic
e-mail: datacompliance@pruvithq.com
(hereinafter: PRUVIT)

Data protection officer of the responsible party is: 

Rolf van Atten
Krakovská 583/9,
140 00 Praha 1
Czech Republic
e-mail: datacompliance@pruvithq.com

For the assertion of the rights named in this data protection declaration or for questions regarding the use, collection or processing of personal data, the customer shall contact the data protection officer named above.

PRUVIT undertakes, as the body responsible under the provisions of data protection law, to protect the personal data and privacy of its customers and to treat them confidentially. The collection, storage, modification, transmission, blocking, deletion and use of personal data occur on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR).

Customer data is protected at PRUVIT by technical and organizational security measures against access by unauthorized persons, accidental or intentional manipulation, destruction or loss.

I. Definitions

The legislator requires that personal data be processed in a lawful manner, in good faith and in a way that is comprehensible to the data subject ("lawfulness, processing in good faith, transparency"). To ensure this, we inform you about the individual legal definitions, which are also used in this privacy policy:

1. Personal Data

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Processing

"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3. Restriction of processing

"Restriction of processing" means the marking of stored personal data with the aim of limiting their future processing.

4. Profiling

"Profiling" means any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

5. Pseudonymization

"Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data cannot be attributed to an identified or identifiable natural person.

6. File System

"File system" means any structured collection of personal data accessible according to specified criteria, whether such collection is maintained on a centralized, decentralized, or functional or geographic basis.

7. Responsible Person

"Responsible Person" means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law

8. Processor

"Processor" means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the responsible party.

9. Recipient

"Recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules, in line with the purposes of the processing.

10. Third Party

"Third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

11. Consent

“Consent" of the affected person means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the affected person signifies his or her agreement to the processing of his or her personal data.

II. Legitimacy of the Processing

The processing of personal data is only lawful if there is a legal basis for the processing. Legal basis for the processing can be according to Article 6 para. 1 S.1 lit. a - f DSGVO / GDPR in particular:

a. The person affected has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;

b. the processing is necessary for the performance of a contract to which the person affected is party or for the implementation of pre-contractual measures taken at the data subject's request;

c. processing is necessary for compliance with a legal obligation to which the responsible person is subject;

d. the processing is necessary in order to protect the vital interests of the person affected or another natural person;

e. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible person;

f. processing is necessary for the purposes of the legitimate interests of the responsible person or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the affected person which require the protection of personal data,  in particular where the affected person is a child.

III. Purposes and Legal basis of the processing of data

In the following, we inform about the purposes and legal basis of the processing of personal data:

1.  Opening and visit of our website - server log files

During the informational use of the website, PRUVIT only collects the personal data that the customer's browser transmits to PRUVIT's server. If the customer wants to view the website of PRUVIT, PRUVIT collects the following data, which are technically necessary to display the website to the customer and to ensure stability and security:

This information is automatically collected each time our website is accessed and automatically stored in so-called server log files. These are:

  • Browser type and version
  • Operating system
  • Website from which the access is made (referrer URL)
  • Hostname of the accessing computer
  • Date and time of access
  • IP address of the requesting computer

The storage of the aforementioned access data is necessary for technical reasons to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which necessarily takes place and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the above-mentioned purposes, we use server log files exclusively for the needs-based design and optimization of our Internet offering purely statistically and without any inference to your person. This data is not merged with other data sources, nor is the data evaluated for marketing purposes.

The access data collected in the course of using our website is only stored for the period of time for which this data is required to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.

If you visit our website in order to obtain information about our range of products and services or to use them, the basis for the temporary storage and processing of the access data is Art. 6 (1) sentence 1 lit. b DSGVO/GDPR (legal basis), which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 p. 1 lit. f DSGVO/GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.

2.  Use of cookies and related functions/technologies

We partly use so-called cookies on our website. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure and to enable the provision of certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that allows your browser to be uniquely identified when you return to the website.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your device for a specified period of time or until you delete them (so-called persistent cookies). These cookies enable us to recognize your browser on your next visit. Upon written request, we are happy to provide further information on the functional cookies used. Please then contact us using the above contact details.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. You can regularly obtain the procedure for deactivating cookies via the "Help" function of your Internet browser. When disabling cookies, the functionality and/or full availability of this website may be limited. For further cookie-specific setting and deactivation options, please also see below the individual explanations of the cookies and associated functions/technologies specifically used when visiting our website.

Some of the cookies we use on our website come from third parties that help us analyze the impact of our website content and visitors' interests, measure the power and performance of our website, or serve customized advertising and other content to our website or other websites. As part of our website, we use both first party cookies (only visible from the domain you are visiting) and third-party cookies (visible across domains and regularly set by third parties).

The cookie-based data processing is carried out on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO/GDPR (legal basis) or on the basis of Art. 6 (1) sentence 1 lit. f DSGVO/GDPR (legal basis) to protect our legitimate interests. Our legitimate interests here lie in particular in being able to provide you with a technically optimized website that is user- friendly and tailored to your needs, as well as to ensure the security of our systems. You can revoke the consent you have given us at any time, e.g. by deactivating the cookie-based tools/plugins listed in detail in the following overview. By making the appropriate settings, you can also object to processing based on legitimate interests.

Specifically, the following cookie-based tools/plugins are used within this website:

Use of Google Analytics

We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow   Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. There is no “adequacy decision” of the EU Commission for USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, viewable at: https://policies.google.com/privacy/frameworks?hl=en and in addition as to https://business.safety.google/intl/en/adsprocessorterms.

Both Google and U.S. government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices,  and any other data  Google may have about you. IP anonymization is activated on this website. This means that your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TTDSG in conjunction with. Art. 6 para. 1 lit. a DSGVO/GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO/GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can find more information on the terms of use and data protection at or at

https://policies.google.com/terms?hl=en

https://policies.google.com/privacy?hl=en

https://policies.google.com/technologies/cookies?hl=en

3.  Collection and use of personal data for contact requests 

If you contact us by e-mail or via the contact form, your data and the contact information you provide will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data to third parties.

We will delete your inquiry(s) and your contact data if your inquiry has been finally answered. Your data will generally be stored for 6 months and deleted after this period, unless you send us follow-up inquiries or we need to process the data for other purposes. In the case of the transmission of letters of application, your data transmitted on this occasion will be stored until a decision has been made on your application or until you notify us of the withdrawal of your application.

This data processing is carried out on the basis of Art. 6 Para. 1 S.1 lit. a DSGVO/GDPR in connection with the consent given by you.

4. Collection of personal data upon conclusion of the contract and payment

In the context of an order for products, the following personal data is stored in the course of the registration required for an order:

1. Salutation,

2. Name,

3. Address,

4 Phone number,

5. Email address,

6. A different delivery address,

7. Credit card, bank and wire transfer.

PRUVIT uses this data exclusively for the purpose of executing the contract and the necessary communication with the customer. This includes the initiation, conclusion, processing, warranty and, if necessary, the reversal of the contract. The data will be stored until the contract has been fully executed. Insofar as commercial and tax retention periods exist, the duration of storage may be up to 10 years.

This data processing is based on Art. 6 para. 1 p. 1 lit. b DSGVO/GDPR for the execution of the contract. The legal basis for the further storage for tax and commercial law reasons is the necessity according to the law pursuant to Art. 6 para. 1 p. 1 lit. c DSGVO/GDPR.

5. Data Transmission

Within the PRUVIT company, those departments will receive access to your data that need it to fulfill our contractual and legal obligations. Service providers and vicarious agents used by us (e.g. technical service providers, payment service providers, shipping companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary, considering the requirements of data protection law. In some cases, the recipients receive your personal data as order processors and are then strictly bound by our instructions when handling your personal data.

For the execution of the delivery, the customer's first name, last name, address, e-mail address and telephone number are forwarded to the shipping company. This data transmission takes place for the fulfillment of the contractual relationship with you as a customer. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. b DSGVO /GDPR.

For payment processing, the customer's payment data, namely first name, last name, address, e-mail, telephone number, will be forwarded to the respective payment provider. This data processing is carried out for the implementation of the contractual relationship with you as a customer or based on the consent given by you. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a or lit. b DSGVO/GDPR.

6. Use of data for advertising purposes, Newsletter

PRUVIT uses personal customer data to send the customers a newsletter only if the customers have consented to this use in advance.

The only mandatory data for sending the newsletter is the e-mail address. The provision of further, separately marked data is voluntary and is used to be able to address the customer personally. After confirmation, PRUVIT stores the e-mail address of the customer for the purpose of sending the newsletter.

The customer can revoke the consent to the sending of the newsletter at any time and unsubscribe from the newsletter. The customer can declare the revocation by clicking on the link provided in each newsletter e-mail or by e-mail to support@pruvithq.com.

PRUVIT evaluates the user behavior of the user when sending the newsletter. For this evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on the website of PRUVIT. For the evaluations, the data provided by the users and the web beacons are linked with the e-mail address and an individual ID of the user. The data is collected exclusively in pseudonymous form, i.e. the IDs are not linked to the user's other personal data, and direct personal reference is excluded. The user can object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing PRUVIT via another contact channel. The information will be stored as long as the user subscribes to the newsletter. After unsubscribing, PRUVIT stores the data purely statistically and anonymously.

This data processing is based on the consent given by the customer, the legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO/GDPR.

7. Integration of Social Media Plug-ins

We use social media plug-ins (hereinafter: plug-ins) from these providers:

Facebook, YouTube, Instagram

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

We have neither influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy:

  • YouTube: Our website uses plugins from the website YouTube. The operator of the pages is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network. As soon as you start a YouTube video on our website, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

    Furthermore, YouTube may store various cookies on your end device after starting a video. These cookies allow YouTube to obtain information about visitors to our website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts. Cookies remain on your terminal device until you delete them. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

    YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO/GDPR.

    For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=en-US

  • Instagram: Functions of the service Instagram are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.

    The use of the Instagram plugin is based on Art. 6 para. 1 lit. f DSGVO/DPR. The website operator has a legitimate interest in the widest possible visibility in social media.

    For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy.

  • Facebook: Plugins of the social network Facebook, provider Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland, are integrated on our You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=en_US.

    When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook's privacy policy at: https://www.facebook.com/about/privacy/previous.

    If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

    The use of Facebook plugins is based on Art. 6 para. 1 lit. f DSGVO/GDPR. The website operator has a legitimate interest in the widest possible visibility on social media.

8. Facebook Fan Page

PRUVIT uses the technical platform and the services "Facebook" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin, Ireland ("Meta") for the information service offered here.

According to the European Court of Justice , there is joint responsibility within the meaning of Art. 26 DSGVO between Meta and the operator of a Facebook Fanpage for the personal data processed via the Facebook Fanpage. For this reason, Meta and PRUVIT have concluded an agreement on joint responsibility, which you can access here: https://www.facebook.com/legal/controller_addendum

PRUVIT provides you with the following information regarding data processing on our Facebook fan page:

(1) Responsible Persons

The processing of your personal data on the Facebook fan page of PRUVIT is carried out under joint responsibility with:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin, Ireland

(2) Data processing

When you access a Facebook fan page, the IP address of your end device is transmitted to Meta. According to Meta, this IP address is anonymized and deleted after 90 days, at least as far as it is a German or European IP address. In addition, Meta stores further information about the end devices of its users, e.g. the Internet browser used. If necessary, Meta is thus able to assign IP addresses to individual users. If you are logged into your Facebook account while visiting our fan page, a cookie with your Facebook ID is stored on your end device. Based on this cookie, Meta can track that you have visited our fan page and how you have used it. Meta uses this information to present you with content or advertising tailored to you.

If you do not want this, you should log out of your Facebook account or deactivate the "stay logged in" function. We also recommend that you delete the cookies on your device and exit and restart your browser. This process deletes Facebook information that Meta can use to establish a link to you.

However, if you want to use the interactive functions of our fan page, you would have to log in to Facebook again with your Facebook login information. This also makes it possible for Meta to link to you again.

In what way Meta uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Meta stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Meta and is not known to us. In this respect, we can only refer you as a user of our fan page to Meta's statements on data protection.

The data collected about you in this context will be processed by Meta and may be transferred to countries outside the European Union.

Meta describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information about how to contact Meta and about the settings for advertisements.

Meta's full data policies can be found here:

https://www.facebook.com/about/privacy/previous

Objection options (so-called opt-out) can be set here:

https://www.facebook.com/settings?tab=ads

and here as well:

http://www.youronlinechoices.com

The transmission and further processing of personal data of users to third countries, such as the USA, as well as the associated possible risks for you as a user cannot be assessed by us as the operator of the Facebook fan page.

(3) Insight function

Meta also provides a range of statistical data for PRUVIT as Fanpage operator within the framework of the so-called "Insights" function. These statistics are generated and provided by Meta. We as the operator of the Fanpage have no influence on the generation, in particular we cannot prevent this function. Within the framework of the "Insights" function, the following information is presented to us for the categories "Fans", "Subscribers", "Reached Persons" as well as "Interacting Persons", in each case for a selectable period of time:

Page activity such as page views, page previews, actions on the page; Reach activity such as "likes", people reached and recommendations, Post activity such as post interactions, video views, comments, content shared.

In addition, we are provided with statistical information about the Facebook groups that are linked to our fan page. In accordance with the Facebook Terms of Use, which each user has agreed to as part of creating a Facebook profile, we may also identify subscribers and fans of the page and view their profiles and other shared information from them.

Meta provides more detailed information on this at the following link:

https://www.facebook.com/help/pages/insights

PRUVIT uses this data, which is available in aggregated form, to make posts and activities on the Fanpage more attractive to users, such as for planning the content and timing of posts. The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. f DSGVO/GDPR, namely our legitimate interest in optimizing our offer.

(4) Storage period

We store the information transmitted by Meta at most as long as your interest in deletion or anonymization does not prevail.

If you no longer wish to have the data processing described here in the future, please cancel the connection of your user profile to our fan page by using the functions "I no longer like this page" and/or "Do not subscribe to this page".

(5) Your rights as a person affected

We recommend that you address any requests for information or other questions regarding your rights, which are listed at the end of this privacy policy, directly to Meta, as only Meta has full access to the user data. Should you nevertheless address your inquiry to us, it will of course still be processed and additionally forwarded to Meta.

9. Children /Minors

Our offer is basically directed at adults. Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians.

10. Other Processing purposes

a) Compliance with legal requirements: We also process your personal data to comply with other legal obligations that may apply to us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. We process your personal data in accordance with Article 6 (1) sentence 1 lit. c DSGVO/GDPR (legal basis) to fulfill a legal obligation to which we are subject.

b) Law enforcement: We also process your personal data in order to be able to assert our rights and enforce our legal claims. Likewise, we process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences. In this context, we process your personal data to protect our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DSGVO/GDPR (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal acts (legitimate interest).

c) Consent: If you have given us consent to process personal data for certain purposes (e.g. sending information material and offers), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. Please note that the revocation is only effective for the future and processing until then is not affected.

11. Data Transfer to Third Countries 

In the context of the use of the above-mentioned tools, e.g. Google, we may transfer your IP address to third countries (see above). The data transfer is based in each case on your explicit consent. Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations, unless explicitly stated otherwise in this privacy policy.

12. Duration of Data storage

We initially process and store your personal data for the duration for which the respective purpose of use requires corresponding storage (see above for the individual processing purposes). If applicable, this also includes the periods of the initiation of a contract (pre-contractual legal relationship) and the processing of a contract. On this basis, personal data is regularly deleted as part of the fulfillment of our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:

  • Fulfillment of legal storage obligations
  • Preservation of evidence in consideration of the statute of limitations

13. Data Security

Personal data is protected by us by means of suitable technical and organizational measures in order to ensure an appropriate level of protection and to safeguard the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data from unauthorized disclosure by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your contact requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of data against access by third parties is therefore not possible.

14. Your Rights as a Person affected

You are entitled to the following rights as a person affected under the statutory conditions:

a) Right of Information: You are entitled to request confirmation from us at any time within the scope of Art. 15 DSGVO/GDPR as to whether we are processing personal data relating to you; if this is the case, you are also entitled within the scope of Art. 15 DSGVO/GDPR to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate safeguards) and a copy of your data.

b) Right to Rectification: Pursuant to Art. 16 DSGVO/GDPR, you are entitled to demand that we rectify the personal data stored about you if it is inaccurate or incorrect.

c) Right to Erasure: You have the right, under the conditions of Art. 17 DSGVO/GDPR, to demand that we delete personal data relating to you without delay. The right to erasure does not exist if the processing of the personal data is necessary, for example, to comply with a legal obligation (e.g. legal retention obligations) or to assert, exercise or defend legal claims.

d) Right to restrict Processing: You are entitled to demand that we restrict the processing of your personal data under the conditions of Art. 18 DSGVO/GDPR.

e) Right to Data portability: You are entitled, under the conditions of 20 DSGVO/GDPR, to demand that we hand over the personal data concerning you that you have provided to us in a structured, common and machine-readable format.

f) Right of Revocation: You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the applicability of the DSGVO/GDPR, e. before 25.5.2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. To declare the revocation, an informal communication, e.g. by e-mail to us, is sufficient.

g) Right of Objection: You are entitled to object to the processing of your personal data under the conditions of Art. 21 DSGVO/GDPR, so that we must stop processing your personal The right to object exists only within the limits provided for in Art. 21 DSGVOGDPR. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection. We will consider an objection to any direct marketing measures immediately and without weighing the existing interests again.

h) Information about your Right of Objection according to 21 DSGVO/GDPR

You have the right to object at any time to the processing of your data that is carried out on the basis of Art. 6 (1) sentence 1 lit. f DSGVO/GDPR (data processing on the basis of a balance of interests) or Art. 6 (1) sentence 1 lit. e DSGVO/GDPR (data processing in the public interest) if there are grounds for doing so that arise from your particular situation.

i) If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

j) Right of Appeal to a supervisory authority: Under the conditions of Art. 77 DSGVO/GDPR, you have a Right of Appeal to a competent supervisory authority.

We hope that this information will help you to exercise your rights. If you would like to get more detailed information on the data protection provisions, we are at your disposal.

k) A list of all European data supervisory authorities can be found in the following link:

https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

The German data protection supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender- node.html

The Italian data protection supervisory authorities and their contact details can be found at the following link: http://www.garanteprivacy.it/

I) Other concerns: We are available to address any further data protection questions or concerns you may Relevant inquiries as well as the exercise of your above rights should, if possible, be sent in writing to our address above or by e-mail to support@pruvithq.com.

 

Status of the Privacy Policy: 31 May 2022

Was this article helpful?
0 out of 0 found this helpful

Have more questions? Submit a request
Comments

Article is closed for comments.