Privacy Policy
Privacy Policy
1. Data protection at a glance
General information
The following informationprovides a simple overview of what happens to your personal data when you visitthis website. Personal data is any data that can be used to personally identifyyou. For detailed information on the subject of data protection, please referto our privacy policy listed below.
Data collection on this website
Who is responsible for datacollection on this website?
Data processing on this websiteis carried out by the website operator. You can find their contact details inthe section "Information on the controller" in this privacy policy.
How do we collect your data?
Some of your data is collectedwhen you provide it to us—for example, data you enter into a contact form.Other data is collected automatically—or with your consent—by our IT systemswhen you visit the website. This primarily consists of technical data (e.g.,internet browser, operating system, or the time the page was accessed). Thisdata is collected automatically as soon as you enter the website.
For what purpose do we useyour data?
Some of the data is collected toensure the website functions correctly. Other data may be used to analyze youruser behavior. If contracts can be concluded or initiated via the website, thedata provided will also be processed for contract offers, orders, or otherservice requests.
What rights do you haveregarding your data?
You have the right to obtaininformation about the origin, recipients, and purpose of your stored personaldata at any time, free of charge. You also have the right to request thecorrection or deletion of this data. If you have given your consent for dataprocessing, you may revoke this consent at any time with effect for the future.Furthermore, under certain circumstances, you have the right to request therestriction of the processing of your personal data. You also have the right tolodge a complaint with the competent supervisory authority. You may contact usat any time regarding this or any other questions concerning data protection.
2. Hosting
We host the content of ourwebsite with the following provider:
IONOS
The provider is IONOS SE,Elgendorfer Str. 57, 56410 Montabaur (hereinafter "IONOS"). When youvisit our website, IONOS collects various log files, including your IPaddresses. Please refer to the IONOS privacy policy for details: https://www.ionos.de/terms-gtc/terms-privacy.The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interestin ensuring the most reliable presentation of our website possible. Whereconsent has been requested, processing is carried out exclusively on the basisof Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers thestorage of cookies or access to information on the user's device (e.g., devicefingerprinting) within the meaning of the TDDDG. Consent may be revoked at anytime.
Data Processing Agreement
We have entered into a dataprocessing agreement (DPA) for the use of the aforementioned service. This is acontract required by data protection law that ensures the service providerprocesses the personal data of our website visitors solely in accordance withour instructions and in compliance with the GDPR.
3. General Information andMandatory Disclosures
Data Protection
The operators of these pages takethe protection of your personal data very seriously. We treat your personaldata confidentially and in accordance with statutory data protectionregulations and this privacy policy.
When you use this website,various personal data are collected. Personal data refers to data that can beused to personally identify you. This privacy policy explains what data wecollect and what we use it for. It also explains how and for what purpose thistakes place.
Please note that datatransmission over the Internet (e.g., when communicating via email) can involvesecurity vulnerabilities. Complete protection of data against access by thirdparties is not possible.
Information on the Controller
The controller responsible fordata processing on this website is:
Herz an Herz Familienbegleitung
Brigitte Mostisch
Gutenbergstr. 107
70197 Stuttgart
Phone: 015567673493
Email:brigitte@herzanherz-familienbegleitung.de
The controller is the natural orlegal person who, alone or jointly with others, decides on the purposes andmeans of processing personal data (e.g., names, email addresses, or similar).
Storage Period
Unless a more specific storageperiod is stated in this privacy policy, your personal data will remain with usuntil the purpose for data processing no longer applies. If you assert alegitimate request for deletion or withdraw your consent to data processing,your data will be deleted unless we have other legally permissible reasons forstoring your personal data (e.g., statutory retention periods under tax orcommercial law); in the latter case, deletion will occur once these reasons nolonger apply.
General Information on theLegal Bases for Data Processing on This Website
If you have consented to dataprocessing, we process your personal data based on Art. 6(1)(a) GDPR or Art.9(2)(a) GDPR (where special categories of data pursuant to Art. 9(1) GDPR areprocessed). In the event of explicit consent to the transfer of personal datato third countries, data processing also takes place based on Art. 49(1)(a)GDPR. If you have consented to the storage of cookies or access to informationon your device (e.g., via device fingerprinting), data processing additionallytakes place based on Section 25(1) TDDDG. Consent may be withdrawn at any time.If your data is required for the performance of a contract or to take stepsprior to entering into a contract, we process your data based on Art. 6(1)(b)GDPR. Furthermore, we process your data based on Art. 6(1)(c) GDPR ifprocessing is necessary for compliance with a legal obligation. Data processingmay also take place based on our legitimate interests pursuant to Art. 6(1)(f)GDPR. Information regarding the specific legal bases applicable in eachindividual case is provided in the subsequent sections of this privacy policy.Recipients of personal data
As part of our businessoperations, we work with various external entities. In some cases, thisrequires the transfer of personal data to these external entities. We onlydisclose personal data to external entities if this is necessary for theperformance of a contract, if we are legally obliged to do so (e.g.,transferring data to tax authorities), if we have a legitimate interest in thedisclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits thedata transfer. When engaging data processors, we only disclose our customers'personal data on the basis of a valid data processing agreement. In the eventof joint processing, a joint processing agreement is concluded.
Revocation of your consent todata processing
Many data processing operationsare only possible with your express consent. You may revoke consent you havealready given at any time. The lawfulness of the data processing carried outprior to the revocation remains unaffected by the revocation.
Right to object to datacollection in specific cases and to direct marketing (Art. 21 GDPR)
WHERE DATA PROCESSING IS BASED ONART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TOYOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA;THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THISPRIVACY POLICY FOR THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED. IFYOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CANDEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDEYOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THEESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART.21(1) GDPR). WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETINGPURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OFPERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILINGTO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOURPERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES(OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaintwith the competent supervisory authority
In the event of violations of theGDPR, data subjects have the right to lodge a complaint with a supervisoryauthority, particularly in the Member State of their habitual residence, placeof work, or the place of the alleged infringement. This right to lodge acomplaint exists without prejudice to any other administrative or judicialremedies.
Right to data portability
You have the right to have datathat we process automatically based on your consent or in fulfillment of acontract handed over to you or to a third party in a common, machine-readableformat. If you request the direct transfer of the data to another controller,this will only be done to the extent that it is technically feasible.
Access, rectification, anderasure
Subject to applicable legalprovisions, you have the right at any time to obtain information free of chargeregarding your stored personal data, its origin and recipients, and the purposeof the data processing, as well as—where applicable—the right to have this datarectified or erased. You may contact us at any time regarding this matter orfor further questions concerning personal data.
Right to restriction ofprocessing
You have the right to request therestriction of the processing of your personal data. You may contact us at anytime to do so. The right to restriction of processing applies in the followingcases:
\- If you contest the accuracy ofthe personal data we hold about you, we generally require time to verify this.For the duration of this verification, you have the right to request therestriction of the processing of your personal data.
\- If the processing of yourpersonal data was or is unlawful, you may request the restriction of dataprocessing instead of erasure. -If we no longer require your personal data butyou need it to establish, exercise, or defend legal claims, you have the rightto request the restriction of the processing of your personal data instead ofits erasure.
\-If you have lodged an objectionpursuant to Art. 21(1) GDPR, a balancing of your interests against ours must becarried out. Until it is determined whose interests prevail, you have the rightto request the restriction of the processing of your personal data.
If the processing of yourpersonal data has been restricted, such data—with the exception of storage—mayonly be processed with your consent, for the establishment, exercise, ordefense of legal claims, for the protection of the rights of another natural orlegal person, or for reasons of important public interest of the European Unionor of a Member State.
SSL or TLS encryption
For security reasons and toprotect the transmission of confidential content—such as orders or inquiriesthat you send to us as the site operator—this site uses SSL or TLS encryption.You can recognize an encrypted connection by the fact that the browser'saddress line changes from "http://" to "https://" and bythe lock symbol in your browser bar. When SSL or TLS encryption is activated,the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Contact form
If you send us inquiries via thecontact form, the information provided in the inquiry form—including thecontact details you enter there—will be stored by us for the purpose ofprocessing the inquiry and handling any follow-up questions. We do not sharethis data without your consent. The processing of this data is based on Art.6(1)(b) GDPR if your inquiry is related to the performance of a contract or isnecessary for the implementation of pre-contractual measures. In all othercases, processing is based on our legitimate interest in the effective handlingof inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art.6(1)(a) GDPR), provided this has been requested; consent may be revoked at anytime. The data you enter in the contact form remains with us until you requestits deletion, revoke your consent for storage, or the purpose for data storageno longer applies (e.g., after your inquiry has been fully processed).Mandatory statutory provisions—particularly retention periods—remain unaffected.Inquiries via email, telephone, or fax
If you contact us via email,telephone, or fax, your inquiry—including any personal data arising from it(such as your name and the details of the inquiry)—will be stored and processedby us for the purpose of handling your request. We do not share this datawithout your consent. The processing of this data is based on Art. 6(1)(b) GDPRif your inquiry is related to the performance of a contract or is necessary forthe implementation of pre-contractual measures. In all other cases, processingis based on our legitimate interest in effectively handling inquiries addressedto us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided suchconsent has been requested; consent may be withdrawn at any time. The data youtransmit to us via contact inquiries will remain with us until you request itsdeletion, withdraw your consent for storage, or the purpose for data storageceases to apply (e.g., after your request has been fully processed). Mandatorylegal provisions—particularly statutory retention periods—remain unaffected.
5. Social Media
Features of the Instagram serviceare integrated into this website. These features are provided by Meta PlatformsIreland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When the socialmedia element is active, a direct connection is established between your deviceand the Instagram server. Through this, Instagram receives information aboutyour visit to this website. If you are logged into your Instagram account, youcan link the content of this website to your Instagram profile by clicking theInstagram button. This allows Instagram to associate your visit to this websitewith your user account. Please note that, as the provider of these pages, wehave no knowledge of the content of the transmitted data or how it is used byInstagram. Use of this service is based on your consent pursuant to Art.6(1)(a) GDPR and Section 25(1) TDDDG. This consent may be revoked at any time.To the extent that personal data is collected on our website and transmitted toFacebook or Instagram using the tool described here, we and Meta PlatformsIreland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) are jointlyresponsible for this data processing (Art. 26 GDPR). This joint responsibilityis limited exclusively to the collection of data and its transmission toFacebook or Instagram. Any processing carried out by Facebook or Instagramafter the transmission is not part of the joint responsibility. The obligationsincumbent upon us jointly have been set out in a joint processing agreement.You can find the text of the agreement at:https://www.facebook.com/legal/controller_addendum. Under this agreement, weare responsible for providing data protection information regarding the use ofthe Facebook or Instagram tool and for implementing the tool on our website ina manner that complies with data protection laws. Facebook is responsible forthe data security of Facebook and Instagram products. You may assert the rightsof data subjects (e.g., requests for information) regarding data processed byFacebook or Instagram directly with Facebook. If you exercise your data subjectrights with us, we are required to forward them to Facebook. Data transfer tothe USA is based on the EU Commission’s Standard Contractual Clauses. Detailscan be found here: https://www.facebook.com/legal/EU_data_transfer_addendum,https://privacycenter.instagram.com/policy/, andhttps://de-de.facebook.com/help/566994660333381. Further information on thissubject is available in Instagram’s privacy policy:https://privacycenter.instagram.com/policy/. The company holds certificationunder the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement betweenthe European Union and the USA designed to ensure compliance with European dataprotection standards for data processing in the USA. Any company certifiedunder the DPF commits to adhering to these data protection standards. You canobtain further information from the provider at the following link:https://www.dataprivacyframework.gov/participant/4452. Source: <https://www.e-recht24.de>
6. WhatsApp
What is WhatsApp?
I use the instant messagingservice WhatsApp on our website. The service provider is the American companyWhatsApp Inc., a subsidiary of Meta Platforms Inc. (formerly Facebook Inc.until October 2021). For the European region, the company responsible is WhatsAppIreland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We probably don't need tointroduce WhatsApp to you in more detail. The likelihood that you yourself usethis well-known messaging service on your smartphone is relatively high. Formany years, there have been voices criticizing WhatsApp and its parent company,Meta Platforms, regarding its handling of personal data. The main criticism inrecent years has focused on the merging of WhatsApp user data with Facebook.Facebook responded to this in 2021 and adjusted its terms of service. Facebookstated that currently (as of 2021), no personal data of WhatsApp users isshared with Facebook.
Nevertheless, WhatsApp naturallyprocesses a considerable amount of your personal data if you use WhatsApp andhave consented to data processing. This includes your phone number and chatmessages, as well as sent photos, videos, and profile data. However, photos andvideos are only temporarily stored, and all messages and calls are end-to-endencrypted. Therefore, they should not be visible even to Meta itself.Information from your address book and other metadata are also stored byWhatsApp.
Why do I use WhatsApp?
I want to stay in touch with you,and WhatsApp is the best way to do that. Firstly, because the service worksflawlessly, and secondly, because WhatsApp is still the most widely usedinstant messaging tool worldwide. The service is convenient and allows foruncomplicated and quick communication with you.
What data does WhatsApp process?
By using WhatsApp, various typesof data, including personal data, may be processed. This includes accountinformation such as your phone number, profile picture, username, and otherinformation you provide to WhatsApp when creating and managing your account.WhatsApp also stores the content of your messages (text, photos, videos, voicemessages). WhatsApp also stores metadata, such as the date and time a messagewas sent or received. Phone numbers of the people involved and technical datalike device type, operating system, and location data are also stored.
How long and where is the datastored?
Generally, WhatsApp stores datafor as long as necessary for legitimate purposes and to fulfill legalobligations. The exact storage duration cannot be specified here, as it dependsheavily on the type of data. Messages are typically stored in encrypted form byWhatsApp only during delivery and are deleted from the servers as soon as theyare delivered. Messages are stored longer only on your own device. When mediais sent, WhatsApp stores this data in encrypted form for up to 30 days tooptimize delivery. Account data is stored as long as you have an activeWhatsApp account. If you delete or deactivate your account, your account datawill normally also be deleted. WhatsApp stores the data it uses on its ownservers, which are located worldwide. To operate the web-based WhatsAppservices, data is also collected using cookies.
How can I delete my data orprevent data storage?
You have the right to access,correct, delete, and restrict the processing of your personal data at any time.You can also withdraw your consent to data processing at any time.
If you do not want cookies to beset and data stored by the desktop version, you can prevent cookies from beingset in your browser. You can manage, disable, or delete cookies in yourbrowser. The process varies slightly depending on your browser. You can findmore information in our section on cookies.
How to do this ##### Legal Basis
With the help of WhatsApp, we canrespond to your inquiries more quickly and effectively, send you importantmessages, and thus take our service to the next level. The legal basis for thisis Article 6(1)(f) GDPR (Legitimate Interests). However, we only use WhatsAppif you have given your consent.