A. Summary

I. Personal Details of the Controller (according to Art. 4 No. 7 GDPR)

Health4Brands GmbH (limited liability company)
Friedrichstraße 230
10969 Berlin
+49 30 9210 471 50
Company registration number: HRB 175893
Registration Court: District Court Berlin (Charlottenburg)
hereinafter: Havas.

II. Data Protection Supervisor

Lawyer and Company Lawyer Arne Michels (Data-Protection Officer [TÜV certified]), Bar-Certified Specialist in Criminal Law
Havas GmbH
Toulouser Allee 25
40211 Düsseldorf
datenschutz@havas.com

III. Main Aspects

In regards to the technical and statistical administration of the website and its content, we are processing personal data, allowing for the pursuit of data minimisation. We’re possibly using third party content – among others of affiliated companies (§ 15 German Stock Corporation Act) – for which the following privacy policy applies.

We are offering the opportunity to inform you about how we are processing personal data, about to the extent and the purpose of the processing of personal data. Furthermore you have the right to object to the processing of your personal data and you have the right to claim the right to be forgotten.

For extensive Information please consult the privacy policy as follows.

B. Extensive Privacy Policy Notice

I. Collection and storage of (personal) Data of your visit of our website

To technically enable your visit of our website, your device with which your visiting our website is sending Information about you to us, our service providers and third parties automatically. The technical organization of our website will be needing the following information about you and your device to enable your visit. The logs of the visitors of our website are erased automatically and periodically.

We are collecting and storing the following (personal) data automatically:

IP-address of your device
Date and time of your visit
URL of the visited data
Transferred amount of data
Status signal about the success of your attempt to access
If applicable, the referring URL
Used browser software (and the operating programme of your device), as well as
Your internet service provider
Miscellaneous Information, that serves the purpose of aversion of a danger in regards to attacks onto our infrastructure of information technology.

The aforesaid data is collected and stored by Havas SA, 29/30, Quai de Dion Buoton Puteaux, 92817 France and is carried out on our behalf for the following purposes:

Provide for an unobstructed access to our website,
Provide for an unobstructed user experience on our website,
Evaluation of the safekeeping of our infrastructure and the stability of the self-same, as well as
For statistical purposes.

The legal foundation of the processing is Art. 6 para. 1 s. 1 lit. f GDPR. We are pursuing the legitimate interests of the aforementioned purposes. Havas will not at any give time use the processed data to draw conclusions from the processed data to an individual.

To better the user experience and performance of the content Havas is using cookies on this website. Please refer to the cookie notice banner for further information on our (potential) use of cookies.

II. Collection and storage of (personal) Data of your contact of our company

In case you are trying to contact our company and downwards-vertically affiliated companies by electronic means (i.e. e-mail) or by phone we will be collecting and storing the transferred (personal) data for the purpose of reaching out to you and respond to your concern. The legal foundation of the processing is Art. 6 para. 1 s. 1 lit. a, b GDPR. We are pursuing the legitimate interests of the aforementioned purposes.

If and to the extent to which you are contacting us electronically oder by phone, your calling line identification (phone) as well as your IP-Adress, Date and time of your attempt of contacting us, the Name of you Internet Service Provider and the programme with which you are contacting us, will be processed by Microsoft Deutschland GmbH (Walter-Gropius-Straße 5, 80807 Munich, Phone: +49 89 31 76 0, Telefax: +49 89 31 76 1000, Company registration number: HRB 70438, Registration Court: District Court Munich). Microsoft Deutschland GmbH has appointed a joint Data Protection Officer with Microsoft Ireland Operations Limited Z: Data Protection Officer, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, IRELAND.

If and to the extent to which you are contacting us, Vodafone GmbH (Ferdinand-Braun-Platz 1, 40549 Düsseldorf, Telefon: +49 800 172 1212, Company registration number: HRB 38062, Registration Court: District Court Düsseldorf) is processing the above mentioned data as well. Vodavone GmbH has appointed two Data Protection Officers: Dr. Dirk Herkströter, c/o Vodafone GmbH, Ferdinand-Braun-Platz 1, 40549 Düsseldorf and Dr. Anastasia Meletiadou, c/o Vodafone GmbH, Ferdinand-Braun-Platz 1, 40549 Düsseldorf.

Your data is being processed in the European Union and the United Kingdom.

III. Collection and storage of (personal) Data of your application with Havas

We are storing beyond the above mentioned data any Information that you provide, depending on the way that you are applying with us . In case of a postal application we will erase any provided hard-copied information directly. The legal foundation of the processing is Art. 6 para. 1 s. 1 lit. a, b GDPR.

In the case of a successful application we will conclude a contract of employment we will be storing – in respect of the legal foundation – your application-data and the data we will inform you about at that point of time.

IV. Processing of (personal) data by transfer to third parties

We are transferring personal data to third parties if and to the extent,

that you have given consent to the transfer of your personal date (Art. 6 para. 1 s. 1 lit. a GDPR),
that transferring your data is in compliance with a legal obligation to which we subject (Art. 6 para. 1 s. 1 lit. c GDPR),
that transfer is necessary to plead, exercise, and defense of a legal claim, except where such interests are overridden by the interests or fundamental rights and freedoms of you (Art. 6 para. 1 s. 1 lit. f GDPR),
transfer is necessary for the performance of a contract to which you are a party of (Art. 6 para. 1 s. 1 lit. b GDPR)

We are using the Maps-Service of Google Maps on our Website to display maps interactively and give you the opportunity to plan the route to our business address. Google Maps is a maps-service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; hereinafter: Google). In the process of using Google Maps your browser may transfer data of your usage of this website to Google, including the ip-address of your device, date and time of your access, url of your access to the data of Google, quantity of transmitted data, whether your access was successful, url from which you were visiting (so called referrer-url), name of your ISP, if applicable your google-account and the addresses you’re entering into the routing-planner. By using Google Maps your browser establishes a direct connection to the servers of Google. Google transmits the depicted maps directly to your browser and your browser than depicts the map into the presentation of our website. We do not handle your data at anytime.

We do not have control over the transmitted data and are accountable for the mail-treatment of your data.

You may deactivate usage of cookies and the transferral of data of Google by refraining from using the maps-service provided. For the purposes and extend to which Google processes your data, your rights and the possibility of altering the processing to protect your personal data you may consult the privacy policy of Google (https://policies.google.com/privacy?hl=en)

We are using the Online-Streaming-Service Youtube to display pieces of our work in the form of a combined stream of moving-images and audio-input. Youtube is a platform for broadcasting streams of moving-images and audio-input and is a product of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; nachfolgend: Google). In the process of using Youtube your browser may transfer data of your usage of this website to Google, including the ip-address of your device, date and time of your access, url of your access to the data of Google, quantity of transmitted data, whether your access was successful, url from which you were visiting (so called referrer-url), name of your ISP, and if applicable your google-account. By using Youtube your browser establishes a direct connection to the servers of Google. Google transmits the depicted stream directly to your browser and your browser than depicts the map into the presentation of our website. We do not handle your data at anytime.

We do not have control over the transmitted data and are accountable for the mail-treatment of your data.

We are using the Online-Streaming-Service Vimeo to display pieces of our work in the form of a combined stream of moving-images and audio-input. Vimeo is a platform for broadcasting streams of moving-images and audio-input and is a product of Vimeo Inc. (555 West 18th Street, New York, New York 10011, USA; hereinafter: Vimeo). In the process of using Vimeo your browser may transfer data of your usage of this website to Vimeo, including the ip-address of your device, date and time of your access, url of your access to the data of Google, quantity of transmitted data, whether your access was successful, url from which you were visiting (so called referrer-url), name of your ISP, and if applicable your Vimeo-account. By using Vimeo your browser establishes a direct connection to the servers of Vimeo. Vimeo transmits the depicted stream directly to your browser and your browser than depicts the map into the presentation of our website. We do not handle your data at anytime.

We do not have control over the transmitted data and are accountable for the mail-treatment of your data.

You may deactivate usage of cookies and the transferral of data of Vimeo by refraining from using the maps-service provided. For the purposes and extend to which Google processes your data, your rights and the possibility of altering the processing to protect your personal data you may consult the privacy policy of Google (https://vimeo.com/privacy)

V. Your rights as a data subject on the basis of GDPR

You have the opportunity according to Art. 15 GDPR to demand information as to your personal data. Especially you have the opportunity to demand information as to

the purpose of the processing,
the categories of processing of your personal data,
the categories of recipients of your personal data,
the timely limitation of storage of your personal data,
the origin of your data, if we did not collect the data with you directly,
a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects.

Furthermore your have the right to rectification, erasure, restriction of processing and to object in processing of your data.

In particular you have the right

to obtain from us the rectification of inaccurate or claim the completion of incomplete personal data concerning yourself according to Art. 16 GDPR,
to obtain from us the erasure of your personal data according to Art. 17 GDPR, as long as the data is not necessary for the purposes of our legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests and fundamental rights and freedoms,
to obtain from us restriction of processing of your data according to Art. 18 GDPR,
to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which personal have been provided according to Art. 20 GDPR,
to withdraw your consent at any time according to Art. 7 para. 3 GDPR and
gemäß Art. 77 DSGVO sich bei einer Aufsichtsbehörde zu beschweren. In der Regel können Sie sich hierfür an die Aufsichtsbehörde Ihres üblichen Aufenthaltsortes oder Arbeitsplatzes oder unseres Kanzleisitzes wenden.

You may execute your rights by calling (+49 211 9916 241), sending a fax (+49 211 9916 214) or contacting us via e-mail (datenschutz@havas.com).

VI. Technical and organizational measures

To securely transfer data between our content manage and your browsing device we are using the SSL-procedure (i.e.: Secure Socket Layer) iwith the highest possible level of encryption, your browser is operating with. You may notice a encrypted communication because of a closed-lock-symbol or a key in the status bar of your browser.