1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information on how your personal data is handled when using our website. In this context, personal data refers to any data that can be used to personally identify you.
1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Montage Medicinals GmbH, Maximilianstr. 5, 67433 Neustadt an der Weinstraße, Germany; Tel.: +4963219599610, Fax: +4963219599624, E-mail: info@montagemedicinals.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 When using our website for purely informational purposes—that is, if you do not register or otherwise transmit information to us—we collect only the data that your browser transmits to the server (so-called “server log files”). When you visit our website, we collect the following data, which are technically necessary for us to display the website to you:
- The website we visited
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you arrived at the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to retrospectively examine the server log files should concrete evidence point to unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.
Hosting & Content-Delivery-Network
GoDaddy
For hosting our website and displaying its content, we use the system of the following provider: Go Daddy Operating Co LLC, 14455 North Hayden Road, Suite 226, Scottsdale, AZ 85260, USA.
All data collected on our website is processed on the provider's servers.
We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
4) Cookies
To make visiting our website appealing and to enable the use of certain functions, we use cookies—small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period, allowing site settings to be saved (so-called "persistent cookies"). In the latter case, you can view the storage duration in your web browser's cookie settings.
If personal data is processed via specific cookies we use, such processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR where consent has been granted, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible website functionality and a customer-friendly, effective user experience.
You can configure your browser to notify you when cookies are set and decide whether to accept them on a case-by-case basis, or to exclude the acceptance of cookies for specific cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting us
Personal data is collected when you contact us (e.g., via a contact form or email). The specific data collected when using a contact form is evident from the form itself. This data is stored and used solely for the purpose of responding to your inquiry or for establishing contact and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided there are no statutory retention obligations to the contrary.
6) Use of customer data for direct marketing
6.1 Sign up for our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. Your email address is the only mandatory information required to send the newsletter. Providing additional data is voluntary and is used to address you personally. We use the so-called "double opt-in" procedure for sending the newsletter. This means that we will only send you the newsletter once you have expressly confirmed your consent to receive it. We will then send you a confirmation email asking you to confirm—by clicking a specific link—that you wish to receive the newsletter in the future.
By activating the confirmation link, you provide your consent for us to use your personal data in accordance with Art. 6(1)(a) of the GDPR. When you sign up for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration; this allows us to trace any potential misuse of your email address at a later date. The data collected during newsletter registration is used exclusively for the purpose of sending you promotional communications via the newsletter. You may unsubscribe from the newsletter at any time using the link provided within the newsletter itself or by sending a corresponding message to the data controller named at the beginning of this statement. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to the continued use of your data or we have reserved the right to use the data further as permitted by law and as described in this statement.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers via email for goods or services from our range that are similar to those you have already purchased. We are not required to obtain your separate consent for this under Section 7 (3) of the UWG (Act Against Unfair Competition). In this respect, the data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Art. 6 (1) (f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you such emails.
You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time, with effect for the future, by notifying the controller named at the beginning. You will incur only the transmission costs at basic rates for doing so. Upon receipt of your objection, the use of your email address for advertising purposes will cease immediately.
7) Rights of the data subject
7.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, with reference made to the cited legal basis for the respective conditions of exercise:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
7.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE THIS RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
8) Duration of storage of personal data
The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing, and—where applicable—any relevant statutory retention periods (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.
Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data are routinely deleted after the retention periods have expired, provided they are no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in their continued storage.
When processing personal data based on Article 6(1)(f) of the GDPR, such data is stored until you exercise your right to object pursuant to Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, such data is stored until you exercise your right to object pursuant to Article 21(2) of the GDPR.
Unless otherwise indicated in the other information provided in this statement regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
