We take privacy seriously
Protecting your privacy during the processing of personal data is an important concern for us. When you visit our website, our web servers automatically save the IP address of your Internet service provider, the website from which you visit us, the pages on our website that you visit, and the date and duration of your visit. This information is necessary for the technical functionality of the webpages and the secure operation of the server. A personalised evaluation of this data is not carried out.
If you send us information via the contact form, this data will be stored on our servers in the course of data backup. Your data will be used by us exclusively to process your request. Your data will be handled in a strictly confidential manner. Your data will not be passed on to third parties.
medi Canada Inc
QC Canada J3X 1P7
Website providers automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:
- Data and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status (file transferred, file not found, etc.)
- the web browser and operating system used
- complete IP address of the computer making the request
- amount of data transmitted
This data is not combined with other data sources. The processing is carried out in accordance with Art. 6(1)(f) DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.
This data is stored by us for security reasons, especially with regard to the prevention of attempts to attack our web server. It is not possible for us to draw conclusions regarding individuals based on this data. The data remains on our web server for 21 days and on a log server for 6 months. The data is processed for statistical purposes only; it is not compared with other datasets or passed on to third parties, even in extracts.
A web service of Cybot A/S, Havnegade 39, 1058 Copenhagen (hereinafter: cookiebot.com) is reloaded on our website. We use this data to ensure full functionality of our website. Your browser or personal data is transferred to cookiebot.com in this context.
The legal basis for data processing is Art. 6 (1)(f) GDPR and Art. 6 (1)(c) GDPR.
The legitimate interest here is in trouble-free functioning of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. You can find more information on handling of the transferred data in the Data Protection Statement of cookiebot.com under: https://www.cookiebot.com/en/privacy-policy/
This website uses a plugin from the Web analysis service New Relic. This service is provided by New Relic Inc., 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. It enables statistical evaluations about the speed of the website to be made. With the plugin, New Relic receives the information that a user has called up the relevant page of the website. For this purpose, New Relic collects system data on your add-ons, browsers, hardware, software and usage times – so-called application data – by setting cookies in your browser. If you are logged in to New Relic as a user during this time, New Relic can assign the visit to your account there. If you are not a member of New Relic, it is still possible for New Relic to obtain and store your IP address. You can read about the purpose and scope of the data collection, as well as information on the processing and usage of data by New Relic, and also setting options to protect the privacy of users in the Data protection information of New Relic.
If you are a member of New Relic and do not want New Relic to gather data about you on our website to link you with your membership data saved at New Relic, you should log out of New Relic before visiting our website.
Google Tag Manager
Google Analytics with anonymisation functionality
On our website, we use Google Analytics, a web analysis service by Google Ireland Limited hereinafter referred to as “Google”. Google Analytics uses so-called “Cookies”, which are text files that are saved on your computer that enable an analysis of your use of the website.
The information generated by these cookies, such as time, location and frequency of your visits to the website, including IP address, are transmitted to Google and saved there.
On our website, we use Google Analytics with the “_gat._anonymizeIp” tag. Through this, your IP address will already be truncated by Google within member states of the European Union or in other member states that are party to the Agreement on the European Economic Area."
Only in exceptional cases will the full IP address be transmitted to a Google Inc. server in the USA and anonymised there.
Google will use this information for the purpose of evaluating your usage of our website, compiling reports on website activities for us, and carrying out further services relating to website activity and Internet usage. Google may also pass this information on to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Google will not, according to its own account, associate your IP address with any other data held by Google.
If you visit our website from a mobile device (smartphone or tablet), you will need to click this link instead to prevent Google Analytics from tracking you within this site in the future. This is also possible as an alternative to the above browser Add-On. By clicking the link, an opt-out cookie is set in your browser and is valid only for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted, so you will have to click the link again.
If you’ve agreed that Google may link your web and app browsing history to your Google Account and use information from your Google Account to personalise ads, Google will use your information in conjunction with Google Analytics data to create target audience lists for remarketing purposes across multiple devices. Google Analytics will first collect your Google-authenticated ID on our website, which is linked to your Google account (i.e. personal data). Google Analytics will then temporarily associate your ID with your Google Analytics data to optimise our target audiences.
If you do not agree, you can turn it off via the corresponding settings in the “My Account” section of your Google Account.
Google Ads Conversion Tracking
We use the online advertising programme “Google Ads” on our website and, in this context, conversion tracking. Google Conversion Tracking is an analytical service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If your usual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the Google affiliate responsible for processing your data and complying with the applicable data protection laws. The cookie for “conversion tracking” is placed on your computer when you click on an ad displayed by Google. These cookies remain valid for a limited period, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the ad and been redirected to this page. Each Google Ads client receives a different cookie. There is thus no possibility for cookies to be tracked through the websites of Ads clients. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who have clicked on one of our ads and been redirected to a page that has a conversion tracking tag. However, we do not receive any information that personally identifies users. Your data may under certain circumstances be transferred to the USA. The data processing, in particular the placing of cookies, is carried out with your consent on the basis of Art. 6 1(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on your prior consent until the point of its withdrawal.
Google will transfer data to third parties only on the basis of statutory requirements or as part of contract data processing. Under no circumstances will Google combine your data with other data collected by Google.
In addition, you can prevent Google from collecting and processing the data generated by the cookies, as well as the data related to your use of the webpages, by downloading and installing the browser plug-in available under the following link under the item DoubleClick deactivation extension. Alternatively, you can disable Doubleclick cookies with this opt-out.
Facebook "Sign in with Facebook"
This website uses the “Facebook Pixel” service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
You can withdraw your consent at any time with future effect:
a) by setting your browser accordingly;
b) by logging in as a user of the social network Facebook at https://www.facebook.com/settings/?tab=ads#_
c) by deactivating your consent on the Network Advertising Initiative (NAI) website at https://thenai.org/.
We have entered into a shared responsibility agreement with Facebook in relation to the processing of your data in accordance with Art. 26 GDPR, the terms of which you can view here.
FACEBOOK CONVERSION API
Data processing takes place on the basis of Art. 6 (1) (a) GDPR. You may revoke your consent at any time with future effect; this does not affect the legality of processing carried out on the basis of your consent until the time of revocation. Beyond this, you may revoke your consent in your browser settings or as a user logged on to the Facebook social network site at https://www.facebook.com/settings/?tab=ads#_. You can also disable user-based advertising by visiting the Network Advertising Initiative (http://optout.networkadvertising.org/), the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
To the extent that personal data is collected and shared with Facebook using the Facebook Conversion API as a Facebook Business Tool, we share limited joint responsibility for this data processing with Facebook. We have concluded an agreement with Facebook regarding this joint responsibility for processing your data in accordance with Art. 26 GDPR, the details of which you may view here. According to this agreement, we are responsible for providing information on data privacy and protection and for ensuring the tool is securely implemented on our website. Facebook is responsible for data security. Data subject rights regarding data processed by Facebook can be asserted directly with Facebook and will be forwarded to Facebook in the event they are asserted with us. For more information on which personal data is processed within the scope of this joint responsibility, please visit https://www.facebook.com/legal/terms/businesstools_jointprocessing. Data that is processed by Facebook after we have forwarded it is not processed jointly.
We use the YouTube embedding function to display and play videos from the provider YouTube (hereinafter “YouTube”), which belongs to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
The privacy-enhanced mode is used here, in which, according to the provider, the storage of user information is only triggered when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider uses YouTube cookies or comparable recognition technologies to collect information about user behaviour. According to information from YouTube, these are used for purposes including the collection of video statistics, the improvement of user-friendliness and the prevention of abusive behaviour. The YouTube server is informed about which of our pages you have visited. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not want your data to be assigned to your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles which it then evaluates. Such an evaluation is carried out according to Art. 6 (1)(f) GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles. You must contact YouTube to exercise this right.
You can object to YouTube’s analysis of user behaviour and targeted advertising by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=en
We use the reCaptcha service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
This query enables us to determine whether the entry has been created by a human or fraudulently by means of automated machine processing. The service includes the sending to Google of the IP address and, if necessary, additional data required by Google for the reCAPTCHA service. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR; this consent can be withdrawn at any time. The legality of any and all data processing operations previously carried out will not be affected by your withdrawal of consent.
Otherwise, in accordance with Art. 6 (1)(f) GDPR, the use is based on our legitimate interest in establishing individual responsibility on the Internet and preventing misuse and spam. If the data processing is based on our legitimate interest, you can object to the processing at any time with future effect. In the event that IP anonymisation is activated on this website, your IP address will, however, previously be truncated by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of this service. The IP address of your browser transmitted in the reCaptcha process will not be combined with other data by Google. This data is subject to the deviating Google data protection provisions.
If we process data in countries outside the European Economic Area (“EEA”), we protect it based on an adequacy decision of the EU Commission Art. 45 (1) GDPR or use the standard contractual clauses of the EU Commission in accordance with Art. 46 (2)(c) GDPR when structuring contractual relationships with recipients in third countries.
We will store your data,
- if you have consented to the processing thereof, only until you withdraw your consent;
- if we need the data to perform a contract, only for as long as the contractual relationship with you exists;
- if we use the data on the basis of a legitimate interest, only as long as your interest in deletion or anonymisation does not outweigh this legitimate interest;
- if statutory retention obligations exist, until the end of the retention periods.
On our website we offer payment via Paypal, Visa and MasterCard, among others. The provider and technical payment provider for payment processing for the payment services is Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, D-96050 Bamberg, Germany (hereinafter “Computop”).
When you make a payment using the above payment methods, Computop collects various transaction data for forwarding to the bank with which you are registered. In addition to the data required for payment, Computop may collect other data, such as the delivery address or individual items in the shopping basket, in the course of processing the transaction.
Computop then authenticates the transaction using the bank’s authentication procedure. The payment amount will then be transferred from your account to ours. Neither we nor third parties have access to your account details.
Data processing is necessary for our contract with you to be processed.
For details on payment with Computop, please refer to the Terms and Conditions and the data protection provisions of Computop at: https://computop.com/uk/tos.
The controller has integrated PayPal components into this website. PayPal is an online payment service provider. Payments are processed via PayPal accounts, which are virtual private or business accounts. PayPal can also process virtual payments by credit card if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why no traditional account number exists. PayPal enables online payments to be made to third parties or received. PayPal also performs fiduciary functions and offers buyer protection services.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg.
If the data subject selects “PayPal” as a payment option during the ordering process in our online shop, data relating to the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transmission of the personal data required to process the payment. Data processing is necessary for our contract with you to be processed.
You have the right at any time to request information, correction, deletion or restriction of the processing of your stored data; a right to object to the processing; as well as the right to data portability and to lodge a complaint in accordance with the requirements of privacy law.
You can request information from us as to whether and to what extent we process your data.
If we process your data that is incomplete or inaccurate, you may request that we correct or supplement it at any time.
- you dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data,
- the processing of the data is unlawful, but you decline to delete it and instead demand a restriction on the use of the data,
- we no longer need the data for the intended purpose, but you still need this data to file or defend legal claims, or
- you have objected to the processing of the data.
- we process this data on the basis of an agreement given and revocable by you or for the fulfilment of a contract between us, and
- that such processing is carried out using automated procedures.
If we process your data for legitimate reasons, you may object to such processing at any time. We will then no longer process your data unless we can prove compelling and protection-worthy grounds for the processing which outweigh your interests, rights and freedoms or if the processing serves the assertion, exercise or defence of legal claims. You can object to the processing of your data for the purpose of direct marketing at any time without giving reasons.