Who to contact
Controller
bauchgefühl GmbH
Dolivostraße 9
64293 Darmstadt
Germany
Tel.: +49 61 51 – 15 91 20
Fax: +49 61 51 – 15 91 220
Email: info@bauchgefuehl.com
Authorised Executive Manager
Britta Benzenhöfer
Darmstadt district court HRB 88657

Supervisory authority
The following supervisory authority is responsible for bauchgefühl GmbH
Data Protection Officer for Hesse
Prof. Michael Ronellenfitsch
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
Tel.: +49 611 1408 0
Fax: +49 611 1408 611

Data Protection Officer
Markus Sextro
SNS Connect GmbH
Hessen-Homburg-Platz 1
63452 Hanau
Germany
Tel.: +49 6181 618 355 2
Email: datenschutz@snsconnect.de

Motivation
Data privacy protects people from the consequences of the recording and processing of their personal data.
This data protection policy will provide information on the type and scope of and reasons for processing this data, as well as your rights. We use what is known as a single-site data protection policy. The following sections contain all information in simplified form and there is a link to the legal basis of the information provided at the end of each section.
Your data is processed in accordance with the European General Data Protection Regulation (GDPR) and the country-specific data protection regulations which bauchgefühl GmbH is subject to.
We pursue the principle of data minimisation and data avoidance as part of our service. Your personal data is treated confidentially and is used solely for the specified purposes. It will not be passed on to third parties without your express consent unless a processing type described in this data protection policy or a legal regulation necessitates this.
We assess the risks associated with the recording, processing and transfer of your personal data in accordance with the type and scope of the processing. Our data protection management is a cyclic system of planning, checking, adapting and introducing. We implement technical and organisational measures to reduce the risks associated with the processing of data and ask for your understanding that these measures are subject to the amount of effort and expense required. The effort involved is in a reasonable relation to the risks.
If you have any questions, please contact us and we will be happy to help. We also gladly accept any suggestions for improving the protection of your personal data.
Learn more about the terminology of data protection.

Prerequisites
We can only process personal data under certain circumstances. The following will provide an overview of these circumstances.
Transparency
The processing of personal data is conducted in a traceable and understandable manner.
Purpose
Personal data is only processed by us for specified, unambiguous and legitimate purposes. We follow the fundamental principles of data minimisation and only process personal data which is required to fulfil specific purposes.
Accuracy
Personal data should be factually correct. If this is not the case, the data will be corrected.
Storage duration
Personal data is only stored for the duration required for the processing.
Security and confidentiality
Personal data is processed in a manner which guarantees the security and confidentiality of the data.
Lawfulness
We process personal data in accordance with your consent, to fulfil a contract or a legal stipulation. In addition, we process personal data in accordance with a legitimate interest, insofar as your interests, basic rights and freedoms do not outweigh our legitimate interest. We also process your personal data in exceptional cases if this can protect vital interests.
Learn more about the prerequisites prerequisites and conditions.

Rights
Right of access
You have the right to ask us whether we process your personal data. If we process your personal data, you have the right to access the personal data that we process.
We will provide this information within a period of four weeks in the form of a data information statement. This statement is free of charge for justified requests. The data information statement provides information on the purposes for which we process your personal data. We disclose which categories of your personal data we process and whether this is passed on to third parties. If possible, you will also be informed when or on which occasion your personal data will be deleted by us. We also fulfil additional rights of access in this data protection policy.
Right to rectification, erasure and restriction of processing
You have the right to the rectification and erasure of your personal data, as well as the restriction of the processing thereof, insofar as this right is not restricted by other legal regulations.
Right to data portability
You have the right to have your personal data transmitted to you or to a third party, insofar as this right is not restricted by other legal regulations.
Right to object
You have the right to object to the processing of your personal data at all times, insofar as this right is not restricted by other legal regulations.
Notification obligation
We are obligated to inform third parties to whom we have disclosed your data of every rectification, deletion or processing restriction, insofar as this is possible and the effort required can be justified. Upon your request, we will inform you to whom we disclosed the respective personal data.
Right to complain
You can contact the supervisory authority responsible for us (see above) at any time with a complaint regarding data protection.
Learn more about your rights.

What and why
Visiting the website
Our internet offering is provided in Germany by 1&1. The restriction that your data is not processed outside the EU was imposed on the service provider by us. To protect their own technical systems, 1&1 records statistical data on its use on our behalf.
Service provider
1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

Contact data of the service provider
1&1 Internet SE

We record statistical data on the visits to the website in order to protect our internet offering from misuse. In particular, the IP address of the user, the browser type used, the previously visited website, the system configuration and the date and time are recorded. The data is deleted after seven days.
Archiving
We are legally obliged to archive business correspondence, in particular pre-contractual requests, bookings, orders, invoices and business emails, etc. We delete this data after expiration of the legal retention period. If this data is in paper form, we then destroy it in the proper manner.
Email
If you send us an email, e.g. in order to contact us prior to a contract, you give your consent to the processing of the personal data contained therein. You also consent to us contacting you via telephone, if possible.
If, after multiple attempts, it is not possible, or no longer possible, to respond to you at the email address, we then delete the email address and the corresponding profile.

Competitions
We conduct competitions on Facebook, Instagram and Twitter on behalf of our customers and hold prize draws for products from our customers. In order to send prizes, the winners contact us via email or by messaging us on the respective social media platform and provide address information for shipping to the shipping service provider or the client, who will then dispatch the product.
For personalised prizes we may request additional information, such as the first name, surname, age and gender of children in order to prepare the prize correspondingly.

Names, images and videos
Insofar as names of natural persons are mentioned or are recognisably published as a main motif on one of our offers, we have previously received the informed consent of the respective person.
Photographs of persons are our own productions or depictions or have been purchased/licensed from the following providers:

Stock photos
Shutterstock, Inc.
Empire State Building
350 Fifth Avenue, 21st Floor
New York, NY 10118 USA
Contact: https://www.shutterstock.com/contactus or 0800 724 5983

Fotolia
Fotolia Copyright Agent, Fotolia LLC, 345 Park Ave, San Jose, CA 95110, USA
Contact: Email

iStock
Getty Images International
1st Floor
The Herbert Building
The Park
Carrickmines
Dublin 18
Ireland
Contact: Email

MyFonts
In order to display text on a website, so-called fonts are required. For the provision of fonts on the sites with the address hebammen-testen.de, we use the Web-Font service from MyFonts. Your IP address is sent to the service provider to display these texts.
Service provider
Monotype Imaging Holdings Inc., Attn: Legal Department, 600 Unicorn Park Drive, Woburn, MA 01801 USA
Data protection policy of the service provider
MyFonts

Cookies
Cookies are small files which are stored on your PC, tablet or smartphone. When visiting our website, the cookie “qtrans_front_language” is set. The cookie is solely used to enable the language selection between English and German on our website and does not collect any personal data from visitors to our website.
bauchgefuehl.com

Social media platforms

We offer you online content via various social media platforms in order to provide you with information and enter into contact with you.
We have no influence over the processing of personal data by the respective platform operator. In general, when you visit our social media offerings, the platform operator will save cookies in your browser in which your usage behaviour or interests are saved for market research and advertising purposes. Platform operators use the usage profiles created in this manner to show you personalised advertisements.

This data processing can also affect persons who are not registered as users of the respective social media platform. Your data may be processed outside the European Union. However, when selecting social media platforms, we ensure that the operators commit to complying with the EU data protection standards.
The processing of your personal data when visiting one of our social media offerings is performed on the basis of our legitimate interest in a diverse external image of our company and in using an effective means for informing and communicating with you.

The legal basis for this is Art. 6 para. 1 lit. f GDPR. You may also have granted a platform operator consent to process data; in this case, the legal basis is Art. 6 para. 1 lit. a GDPR.

Facebook
Provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data protection declaration: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads

Google+ / YouTube
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Data protection declaration: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated

Instagram
Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Data protection declaration: http://instagram.com/about/legal/privacy
Opt-out: http://instagram.com/about/legal/privacy

Twitter
Provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Data protection declaration: https://twitter.com/privacy
Opt-out: https://twitter.com/personalization

LinkedIn
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Data protection declaration: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

XING
Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany
Data protection declaration: https://privacy.xing.com/en/privacy-policy
Opt-out: https://privacy.xing.com/en/privacy-policy