data protection

1. Information about the collection of personal data & contact details

1.1 Thank you for visiting our website. Below we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ALOEX Distribution GmbH, Mannheimer Str. 177, 69123 Heidelberg, Germany. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

1.4 In accordance with the applicable legal provisions, this website and the sale of hyaluronic acid fillers are intended exclusively for doctors, dentists and alternative practitioners. We reserve the right to check the relevant qualifications and professional affiliation of the buyer before completing an order. All data is treated in accordance with the GDPR. If it turns out that a buyer does not meet the necessary requirements, we will not process the order and may cancel it.

2. Data collection when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Visited website
• Date and time of access
• Amount of data sent
• Source/Reference
• Browser
• operating system
• IP address (possibly anonymized)

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3. Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for longer and enable you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long they are stored in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

4. Contact us

When you contact us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

5. Data processing when opening a customer account

In accordance with Art. 6 Paragraph 1 Letter b of GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website. You can delete your customer account at any time and can do so by sending a message to the above-mentioned address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary and we have no legitimate interest in continuing to store the data.

6. Data processing for order processing

To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Paragraph 1 Letter b of GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact details you provided when ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period by suitable communication channels (e.g. by post or email) within the scope of our statutory information obligations in accordance with Art. 6 Paragraph 1 Letter c GDPR. Your contact details will be used strictly for the purpose of notifying you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7. Web analysis services

Google (Universal) Analytics with Google Signals
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) is usually transferred to a Google server and stored there; this may also involve transmission to Google LLC servers in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that the IP address is anonymized by shortening it and excludes direct personal reference. This extension means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
Google Analytics also uses a special function called "demographic features" to create statistics with information about the age, gender and interests of site visitors based on an evaluation of interest-based advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures that are optimized for specific groups. However, data records collected using "demographic features" cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Without this consent, Google Analytics will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass it on to third parties. For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
This website uses the Google Signals service as an extension of Google Analytics. With Google Signals we can have Google create cross-device reports (so-called “cross device tracking”). If you have activated “personalized ads” in your Google account settings and you have linked your internet-enabled devices to your Google account, Google can analyze user behavior across devices with the corresponding consent to the use of Google Analytics in accordance with Art. 6 Paragraph 1 Letter a of GDPR (see above) and create database models based on this. This takes into account the registrations and device types of all page visitors who were logged into a Google account and made a conversion. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the associated conversion took place. We do not receive any personal data from Google, only statistics created on the basis of Google Signals. You have the option of deactivating the “personalized ads” function in the settings of your Google account and thus turning off cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information can be found here: https://support.google.com/analytics/answer/7532985?hl=de

8. Rights of the data subject

8.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising them:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR;
• Right to complain according to Art. 77 GDPR.

8.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9. Duration of storage of personal data

The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing and – if applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, these data will be stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after expiry of the retention periods, provided that they are no longer required to fulfill or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

10. Third-party services / content

10.1 Social-Media

As part of our online offering, we use content or service offerings from third parties. This is done based on our legitimate interests (interest in the analysis, optimization and economic operation of our online offering in accordance with Art. 6 Para. 1 lit. f GDPR) or on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR. This means that we integrate content from third parties such as videos or fonts (hereinafter referred to uniformly as "content"). The prerequisite for this is that the third parties perceive your IP address, as they could not send the content to your browser without knowing the IP address. The IP address is therefore required to display the content. Third parties can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. With the help of "pixel tags", information such as visitor traffic on the website can be analyzed. This pseudonymous information can also be stored in cookies on your device and contain technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering. They may also be linked to such information from other sources.

In the following overview, we have compiled information about the third-party providers, the content they offer and links to their privacy policies. In these privacy policies you will find further information about data processing and information about the possibility of objection.

Youtube: (Youtube) Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
Opt out: https://adssettings.google.com

We have integrated YouTube components into our online offerings. YouTube enables the free uploading, viewing, rating and commenting on video clips. When you access a single page of our online offerings that includes YouTube content, a connection is established to YouTube in order to download the elements required to display the corresponding video. YouTube or the Google company receives information about which subpage of our online offerings was accessed by the respective user. In addition, other information such as the IP address, the browser used, the operating system and technical device information, the date and duration of the visit are transmitted. If the user is logged into YouTube with the same device at the time of visiting our online offerings, YouTube recognizes the user when they access a single page that contains a YouTube video. This happens regardless of whether the person in question clicks on a YouTube video or not. This information can be collected by YouTube or Google and assigned to the profile of the respective user, provided the elements are not integrated in "privacy mode".

Vimeo: (Vimeo) Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA
Privacy Policy: https://vimeo.com/privacy
Opt out: https://vimeo.com/cookie_policy

We have integrated Vimeo components into our online offering. When you access such components, a connection is established to the Vimeo servers and the content is displayed. This transmits information to the Vimeo servers about which of our websites you have visited. If you are logged in to Vimeo at the same time, Vimeo assigns this information to your personal user account. For example, if you click on the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.

Meta / Instagram: (Instagram) Meta Platform Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Privacy Policy: https://help.instagram.com/519522125107875
Meta: (Meta Pixel) Meta Platform Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Privacy Policy: https://www.facebook.com/about/privacy/
Opt out: https://www.facebook.com/settings?tab=ads

Meta Marketing Pixel
With your consent, we activate a pixel from Meta Platforms Ireland when you visit our website (Meta Platforms Ltd., 4 Grand Canal Square, Dublin 2, Ireland).

The pixel transmits information about your activities on our website and potentially identifying data (such as app/browser information, language setting, time, IP address and advertising ID) to Meta Platforms Ireland.

Using this data, Meta Platforms Ireland can recognize that you have visited our website, what actions you have performed and whether you came to our website via a link on Facebook or Instagram. This allows Meta Platforms Ireland to show you interest-based advertising on Facebook, Instagram or other websites that also use this function. Facebook can link this data to your user account and use it for its own purposes. For more information about how Meta Platforms Ireland processes your data, please see the privacy policy at https://www.facebook.com/about/privacy.

We do not receive any personal data about you or other users from Meta Platforms Ireland. Instead, we receive aggregated statistics that give us information about how our offers and advertisements on Meta Platforms Ireland's platforms (Facebook, Instagram) were used by users overall. This helps us analyze which of our advertisements were successful and which were not.

The transmission of the data collected by the pixel takes place in accordance with Article 26 of the General Data Protection Regulation (GDPR) in a joint responsibility between us and Meta Platforms Ireland. For this purpose, we have entered into a separate agreement (see here: https://www.facebook.com/legal/controller_addendum). Facebook is solely responsible for the further processing of the data. If you wish to exercise your rights to information, deletion, etc. (see section "Your rights"), Meta Platforms Ireland is responsible for implementing your rights within the framework of joint responsibility.

10.2 Google Analytics

In order to continuously improve our website and tailor it to your needs, we use Google Analytics, a web analysis service provided by Google Inc. (“Google”).

Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about the use of this website by visitors is usually transferred to a Google server in the USA and stored there.

To protect your privacy, we have activated IP anonymization on this website. This means that your IP address will be shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website activity and Internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

As an alternative to the browser plug-in or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that prevents future data collection by Google Analytics on this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the link again): Deactivate Google Analytics.

The optimization of our website is based on our legitimate interest and is therefore lawful according to Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.

Google Ads/Remarketing

We use Google Ads, an online advertising platform from Google. Through the remarketing function, we enable our website users to see interest-based advertisements on other websites within the Google Display Network (both on Google itself and on other websites). When you click on such an advertisement, a cookie is placed on your device. This cookie does not contain any personal data and expires after 30 days.

If you do not want this, you can deactivate the interest-based Google advertisements in your browser by adjusting the settings at http://www.google.de/settings/ads.

The collection of data for advertising purposes represents a legitimate interest on our part and finds its legal basis in Art. 6 (1) sentence 1 lit. f GDPR.

Google reCAPTCHA

On our website we use the service "Google reCAPTCHA" (hereinafter "reCAPTCHA"), which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service is used to check whether data entered on our website (e.g. in a contact form) comes from a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various information (e.g. IP address, time spent on the website, mouse movements of the user). The analysis is carried out automatically when the website is accessed and takes place completely in the background. The website visitor receives no explicit indication of the ongoing analysis. The data collected is transmitted to Google. The legal basis for this is Art. 6 Para. 1 Clause 1 Letter f of GDPR. We have a legitimate interest in protecting our web offerings from abusive automated spying and spam. For more information about reCAPTCHA and Google’s privacy policy, please visit:

https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html .