GDPR Data privacy policy

I. Name and address of the person responsible and the data protection officer The person responsible according to Art. 4 No. 7 GDPR is:

NeuraSan Uk Limited The Nook, Blithbury Road, Rugeley, Staffordshire, England, WS15 3HQ

Tel: 0333 772 1960 E: [email protected]

II. Collection of personal data when you visit our website

1. Scope of processing If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that the browser transmits to our server. This data includes:

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status / HTTP status code

• amount of data transferred in each case

• Website from which the request comes (so-called referrer)

• Browser

• Operating system and its interface

• Language and version of the browser software

2. Purpose and legal basis of processing

We collect the data because it is technically necessary for us to display our website to you and to ensure stability and security.

The data is collected on the basis of Art. 6 Paragraph 1 Clause 1 lit.f GDPR.

3. Duration until deletion

If log files are saved, they will be deleted after seven days. If the data is stored beyond this, IP addresses are anonymized so that they can no longer be assigned to the client at a later date.

4. Elimination options

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection on the part of the user.

III. Use of cookies

1. Scope of processing

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using and through which certain information flows to the place that sets the cookie (by us). Cookies are used to simplify the use of the website for the user. Cookies cannot run programs or transmit viruses to your computer.

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

Transient cookies (see b)
Persistent cookies (see c)
b) Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This means that your computer can be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, reject the acceptance of third-party cookies or all cookies. We would like to point out that in this case you may not be able to use all functions of this website.

2. Purpose and legal basis of processing

Cookies are used to make the Internet offering more user-friendly and effective overall. The data is collected on the basis of Art. 6 Paragraph 1 Clause 1 lit.f GDPR.

3. Duration until deletion

Transient cookies are automatically deleted when you close the browser. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie.

4. Elimination options

Cookies are stored on the user's computer and transmitted to our website from there. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the setting in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

IV. Use of the contact form

1. Scope of processing

There is a contact form on our website that can be used to contact us electronically. These data are:

First Name
Surname
Gender
DOB
Postcode
Email address
Telephone
Preferred appointment day

At the time the message is sent, the following data is also stored:

IP address of the user
Date and time of transmission
For the processing of the data, your consent is obtained as part of the sending process and
reference is made to this data protection declaration.

Alternatively, you can contact us using the email address provided. In this case, the personal data of the user transmitted with the email will be saved. In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

2. Purpose and legal basis of processing

If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored for the purpose of establishing contact and answering questions.

The collection of the data takes place on the basis of a voluntarily given consent according to Art. 6 Paragraph 1 Clause 1 lit. a GDPR as well as on the basis of legitimate interests according to Art. 6 Paragraph 1 Clause 1 lit. f GDPR.

3. Duration until deletion

The data is deleted after the purpose for which it was collected has been achieved or as soon as the conversation with the user has ended.

4. Elimination options

The person concerned has the possibility to revoke the given consent at any time to the person responsible under the above-mentioned contact details according to Art. 7 Para. 3 GDPR or according to Art. 21 GDPR with regard to our legitimate interests.

V. Rights of the data subjects

You have the right to:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if it has not been collected for us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information, request their details;

in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is required;

In accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert or exercise it or you need to defend legal claims or you have objected to processing in accordance with Art. 21 GDPR;

in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to have it transmitted to another person responsible;

to revoke your consent given to us at any time in accordance with Art. 7 Para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent in the future. According to Art. 77 GDPR, you have the right to complain about us to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

VI. Use of social media plug-ins

1. Scope of processing

We currently use the following social media plug-ins: Facebook. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the plug-in providers. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the opportunity to use the button to communicate directly with the provider of the plug-in. Only if you click on the marked field and thereby activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned under II. Of this declaration will be transmitted. In the case of Facebook, according to the respective provider in the UK, the IP address is anonymized immediately after it is collected. By activating the plug-in, your personal data will be transmitted to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies using the security settings of your browser before clicking on the grayed-out box.

We have no influence on the data collected and the data processing operations, nor are we aware of the full scope of the data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

2. Purpose and legal basis of processing

The plug-in provider saves the data collected about you as a user profile and uses this for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. Via the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The data is collected on the basis of Art. 6 Paragraph 1 Clause 1 lit.f GDPR.

3. Elimination options

You have the right to object to the creation of these user profiles, although you must contact the respective plug-in provider to exercise this right.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and z. If, for example, if you link the page, the plug-in provider will also save this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile with the plug-in provider.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

Addresses of the respective plug-in providers and URL with their data protection information : Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA http://www.facebook.com/policy.php

Further information on data collection:

http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and
http: //www.facebook .com / about / privacy / your-info # everyoneinfo.

Facebook has submitted to the EU-US Privacy Shield:
https://www.privacyshield.gov/EU-US-Framework .

VII. Integration of YouTube videos

1. Scope of processing

We may from time to time integrate YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under II. Of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.

2. Elimination options

These are all integrated in the "extended data protection mode", which means that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

VIII. Integration of Google Maps

1. Scope of processing

We use Google Maps on this website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function.

When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under II. Of this declaration will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on Google, you must log out before activating the button. Google saves your data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

2. Elimination options

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

X. Social media fan page

In addition to our website, we also have an online presence on the Facebook social network. There we inform our customers and other interested parties about the latest news and developments in the company.

1. Scope of processing

When you visit our online presence, cookies are stored on your computer in order to save your usage behavior and your interests. Usage profiles are created from this data in order to use them, for example, to place advertisements that are tailored to your individual person.

The cookies are stored for a period of two years, unless they are manually deleted beforehand.

2. Purposes of processing

We use our online presence to inform you about current developments in the company and to give you the opportunity to exchange experience reports. Furthermore, the data collected by the cookies are used by Facebook for advertising and market research purposes.

The data processing takes place on the basis of Art. 6 Paragraph 1 Clause 1 lit. If your consent to data processing is obtained in connection with the use of our online presence, the data processing takes place on the basis of Art. 6 Paragraph 1 Clause 1 lit. a GDPR.

3. Elimination options

We have no access to the data collected by Facebook. It is therefore recommended to contact Facebook directly to assert usage rights. Only Facebook has access to the data collected and can act accordingly if you want to exercise your rights as a data subject. However, you are also free to contact us.

For contact options and options for objection by the provider, we refer to the contact details of Facebook below:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, [email protected] Privacy Policy : https://www.facebook.com/about/privacy,

Opposition option (opt-out): https://www.facebook.com/settings?tab=ads Further information: http://www.youronlinechoices.com

4. Third country transfer

It cannot be ruled out that data will be processed outside of the European Union. Under certain circumstances, this could make it much more difficult to enforce the rights of those affected. If data is processed in the USA, it should be pointed out that numerous providers based in the USA (including, according to the current status, also include Facebook) have submitted to the EU-US Privacy Shield, which obliges them to comply with the data protection level of the European Union. You can find more information on this at: https://www.privacyshield.gov/EU-US-Framework.