Privacy Policy

Responsible for the processing of personal data on this website in the sense of
that of the EU General Data Protection Regulation (GDPR) is:


Sanos Group UG
Kyllmannstrasse 8a
14109 Berlin
info@sanosgroup.co


1. Server log files
Type and purpose of processing:
When you access our website, information of a general nature is automatically generated
detected. This information (server log files) includes, for example, the type of web browser that
operating system used, the domain name of your Internet service provider, your IP
Address and the like.


In particular, they are processed for the following purposes:

  •  Ensuring a problem-free connection to the website

  •  Ensuring that our website can be used smoothly

  •  Evaluation of the system security and stability as well as


Legal basis:
The processing takes place in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of our legitimate
Interest in improving the security, stability and functionality of our website.


Receiver:
The recipients of the data are technical service providers who are responsible for the operation and maintenance of our
Website. As contract processors, the service providers are only obliged to provide the data in
To process within the scope of our instructions.


Storage period:
The server log files are deleted after 6 months at the latest.
Provision of the data prescribed or required:
The provision of the aforementioned personal data is neither legal nor
stipulated by contract. Without the IP address, however, is the service and functionality
our website is not guaranteed.


2. Opening a customer account
Type and purpose of processing:
When opening a customer account, the following personal data is collected in order to
enable use in accordance with the Sanos Group Terms of Use:

Name, address, contact and communication data (e.g. telephone number and email address),
Date of birth


Legal basis:
The legal basis for the processing of the data is Article 6 Paragraph 1 lit. b GDPR.


Receiver:
The recipients of the data are service providers who, as hosting providers, provide the infrastructure for our
Provide website. As contract processors, the service providers are only obliged to provide the data in
To process within the scope of our instructions.


Storage period:
The data that you provide to us when you open your customer account will last for a long time
saved until you delete your customer account.


Provision required or required:
The provision of your personal data is voluntary. Without providing your
You cannot open a customer account with personal data.


3. Orders / fulfillment of contracts
Type and purpose of processing:
We process your personal data in particular in order to deal with them
To conclude and fulfill contracts for the purchase of our products.


Legal basis:
The processing of the data necessary for the conclusion and performance of the contract
is based on Art. 6 Para. 1 lit. b GDPR. The following data are required for this:
Name, address, contact and communication data (e.g. telephone number and email address),
Date of birth


Receiver:
The recipients of the data are processors who work for us in the area of ​​payment processing and
Logistics. As contract processors, the service providers are only obliged to provide the data in
To process within the scope of our instructions.


Storage period:
We store data that are tax-relevant up to the legal ones
Retention periods have expired. These are generally 6 or 10 years. Other
Personal data will be deleted after the purpose has been fulfilled (fulfillment of the contract).
We also reserve the right on the basis of our legitimate interests (Art. 6 Para. 1 lit. F
GDPR) of effective legal defense, personal data until the expiry of the
to save the statutory limitation period for (defect) warranty claims. they
can object to processing at any time in accordance with Art. 21 Paragraph 1 GDPR

Provision required or required:
The provision of your personal data is voluntary. Without providing your
We cannot conclude or fulfill any contract with you regarding personal data.


4. Comment function
Type and purpose of processing:
When users leave comments on our website, this information will be added
also the time of their creation and that previously selected by the website visitor
Username saved. This is for our protection, as we are responsible for illegal content
our website, even if they were created by third parties.


Legal basis:
The processing of the data entered as a comment is based on a
legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the comment function, we want you to have an uncomplicated interaction
enable. The information you provide will be used for the purpose of processing the request as well
saved for possible follow-up questions.


Receiver:
The recipients of the data are service providers who, as hosting providers, provide the infrastructure for our
Provide website. As contract processors, the service providers are only obliged to provide the data in
To process within the scope of our instructions.


Storage period:
The data will be deleted as soon as it is no longer required for the purpose of the survey
are. This is basically the case when the communication is no longer on the website
is published, but at least after 5 years.


Provision required or required:
The provision of your personal data is voluntary. Without providing your
personal data, it is not possible to use the comment function.


5. Newsletter
Type and purpose of processing:
Your data will only be used to send you the newsletter you have subscribed to by email
to send.
For an effective registration we need a valid email address. To check,
We set this so that registration is actually carried out by the owner of an e-mail address
"Double-opt-in" procedure. For this purpose, we log the order for the newsletter, the
Sending a confirmation email and receipt of the requested answer.


Legal basis:

We will send you this based on your consent (Art. 6 Para. 1 lit. a GDPR)
regularly our newsletter by e-mail.
Consent to the storage of your personal data and its use for the
You can cancel the sending of the newsletter at any time. There is a for this in every newsletter
corresponding link or you write us an email with your request.


Receiver:
The recipients of the data are processors. As contract processors, the service providers are
obliged to process the data only in accordance with our instructions.


Storage period:
In this context, the data will only be processed as long as the relevant
Consent is given. Then they will be deleted.


Provision required or required:
The provision of your personal data is voluntary. Without consent we can
Not send you our newsletter.


6. Product recommendations and check-out reminder
Type and purpose of processing:
As an existing customer of our online shop, you will regularly receive product recommendations from us
by email. You will receive these product recommendations from us regardless of whether you have one
Subscribed to the newsletter. Here we use the information provided by you as part of the purchase
specified e-mail address for advertising your own goods and / or services that
are similar to those that you have purchased from us on the basis of an order that you have already placed.
You can also receive a reminder from us by e-mail if you have already given us your e-mail
You have saved your address when processing a purchase, but have not yet made the purchase
completed or temporarily interrupted.

Legal basis:
The legal basis for this data processing is Article 6 Paragraph 1 Letter f) GDPR and Section 7
Paragraph 3 UWG, from which our legitimate interests in permissible advertising emerge
derive electronic communication.


Receiver:
The recipients of the data are processors. As contract processors, the service providers are
obliged to process the data only in accordance with our instructions.


Storage period:
The data will be processed in this context until you finish processing
contradict.


Provision required or required:

The provision of your personal data takes place voluntarily as part of the order
of our products. Without the provision of the data, an order is placed through our
Online shop not possible.


7. Contact form
Type and purpose of processing:
The data you enter will be used for the purpose of individual communication with
Saved to you. A valid email address and your name are required for this
required. This is used to assign the request and the subsequent response
the same. The specification of further data is optional.


Legal basis:
The processing of the data entered in the contact form takes place on the basis of a
legitimate interest (Art. 6 Para. 1 lit. f GDPR) in an efficient and simple
Communication with you.
Depending on the nature of your request, the processing of the information entered in the contact form may be
Data are used to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).


Receiver:
The recipients of the data are processors. As contract processors, the service providers are
obliged to process the data only in accordance with our instructions.


Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory
Retention periods and delete your data after these periods have expired.
Provision required or required:
The provision of your personal data is voluntary. We can answer your request
but only process if you provide us with your name and email address.

8. Website analysis
Type and purpose of processing:
This website uses technology based on cookies, which supports the use of the us
To understand the website better. For this purpose, reports on activities on the website are created
However, from which no conclusions can be drawn about specific persons.


Legal basis:
The data is processed on the basis of the user's consent (Art. 6 Para. 1 lit.
a GDPR).


Receiver:

The recipient of the data is a processor. For this we have the corresponding Google with Google
Order processing contract concluded. As contract processors, the service providers are
obliged to process the data only in accordance with our instructions.


Storage period:
The data will be deleted after one year.
Provision required or required:
The provision of your personal data is voluntary, based solely on your
Consent. If you prevent access, this can result in too
Functional restrictions on the website.


Revocation of consent:
You can revoke your consent at any time by clicking OPT OUT LINK. It will
an opt-out cookie is installed on your device. This will prevent future detection, see above
long the cookie remains installed in your browser.

SSL encryption
In order to protect the security of your data during transmission, we use the current one
State-of-the-art encryption methods (e.g. SSL) via HTTPS.


Used contract processors
The following organizations, companies or persons were created by the operator of this website
commissioned with the processing of data:

Google Ireland Limited
Google Building Gordon House
4 Barrow St, Dublin, D04 E5W5, Ireland


Logistics service provider
Your rights as a data subject
You can exercise the following rights at any time at info@circlelabs.co:
 Information about your data stored by us and their processing (Art. 15
GDPR),
 Correction of incorrect personal data (Art. 16 GDPR),
 Deletion of your data stored by us (Art. 17 GDPR),

 Restriction of data processing, provided that we have your data based on legal
Obligations may not yet be deleted (Art. 18 GDPR),
 Objection to the processing of your data by us (Art. 21 GDPR) and
 Data portability, provided you have consented to the data processing or one
Have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can do so at any time with effect for the
Revoke future.
You can contact a supervisory authority with a complaint at any time, e.g. B. to the
competent supervisory authority of the federal state of your place of residence or to the for us as
responsible body competent authority.


Change of our data protection regulations
We reserve the right to adapt this data protection declaration so that it is always up-to-date
corresponds to legal requirements or changes to our services in the
Implement data protection declaration, e.g. when introducing new services.

The current data protection declaration applies to every visit.