Privacy Policy

Privacy policy of the Hair Loss Research Collective for the website www.HairLossCollective.com & www.HairLossResearchCollective.com

‍

Types of Data collected

§ 1 Information on the collection of personal data

(1) We provide information about the collection of personal data in our services. Personal data refers to you personally, such as name, address, e-mail addresses and user behavior.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

Hair Loss Research Collective

Angerfeldstraße 1b

82205 Gilching

Managing director: Julian Stadie

Telephone: -

E-mail address: support@HairLossResearchCollective.com

Internet address: www.HairLossCollective.com & www.HairLossResearchCollective.com

(3) If you contact us by e-mail or form, we store your data (surname, first name, e-mail address, age, address, financial circumstances, professional objectives, telephone number) in order to process your inquiry or application in the best possible way. We delete the data when it is no longer required or restrict the processing if there are statutory retention obligations. If you do not make use of our services, we will delete your data after 4 weeks at the latest. Your data is processed in accordance with Art. 6 para. 1 sentence 1 lit. a, b and f GDPR.

(4) If we use external service providers for certain functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the processes and state the specified criteria for the storage period.

‍

§ 2 Your rights

You have various rights regarding your personal data, including the right to information, rectification or erasure, restriction of processing, objection to processing and data portability. You also have the right to complain to the data protection supervisory authority about the processing of your data by us.

‍

§ 3 Collection of personal data when using our services

(1) When using the website for purely informational purposes, we only collect personal data that the browser transmits to the server. The following technically required data is collected to display the website and to ensure stability and security: IP address, date and time of the request, content of the request, access status, amount of data transferred, website, browser, operating system, interface, language and version of the browser software (legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR).

(2) We use cookies on our websites to make the website more user-friendly and effective overall. Cookies are small text files that are stored on your hard disk and cannot cause any damage. They may contain data that enables the device used to be recognized, but do not directly identify the user.

In terms of their function, a distinction is made between cookies:

Session cookies, which are deleted when the browser is closed, and permanent cookies, which are stored beyond the session. Cookies can be divided into technical, performance, advertising, targeting and sharing cookies. Technical cookies are necessary for the use of the website, performance cookies collect anonymous information to improve the website, advertising and targeting cookies provide personalized advertising and sharing cookies improve interactivity with other services. Advertising, targeting and sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not technically necessary requires your express and active consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. This applies in particular to advertising, targeting or sharing cookies. Personal data processed by cookies will only be passed on to third parties if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

‍

§ 4 Further functions and offers

(1) In addition to purely informational purposes, we offer various services that you can use if required. For this purpose, you must generally provide further personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) We occasionally use external service providers to process your data. These have been carefully selected, are bound by our instructions and are regularly monitored. As a rule, these are processors who may have access to your personal data:

• We may engage service providers to operate our website and process the data stored or transmitted, e.g. for data center services, payment processing and IT security. The legal basis for the transfer is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR, unless they are processors.
• Government bodies and authorities may disclose personal data if this is necessary to fulfill a legal obligation. The legal basis for this disclosure is Art. 6 para. 1 sentence 1 lit. c GDPR.
• Persons who work for our business operations, such as auditors, banks, insurance companies, legal advisors, supervisory authorities or parties involved in company acquisitions or the establishment of joint ventures, receive personal data in accordance with Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR.

(3) In addition, your personal data will only be passed on to third parties if you have expressly consented to this in accordance with Article 6(1) sentence 1(a) GDPR.

‍

§ 5 Objection to or revocation of the processing of your data

(1) You can revoke your consent to the processing of your personal data at any time, which affects the permissibility of processing after revocation. Please send your revocation by e-mail or post to the contact details of our company.

(2) If we process your personal data on the basis of a balancing of interests, you may object unless the processing is necessary for the performance of a contract with you. If you object, you must state the reasons. We will then either stop or adapt the processing or demonstrate our compelling legitimate grounds for continuing the processing.

‍

§ 6 Newsletter / mailings

(1) By giving your consent, you can subscribe to our newsletter/mailing, through which we will keep you continuously informed about our services and programs.

(2) We use the double opt-in procedure to subscribe to the newsletter. After registration, we will send you an e-mail to confirm that you wish to receive the newsletter. Without confirmation, your data will be blocked and automatically deleted. We store your IP address and time of registration as evidence and to clarify cases of misuse.

(3) Only your e-mail address and first name are required to receive the newsletter/mailing. The provision of further data is optional and is used to address you personally. After confirmation, we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) You can revoke your consent to receive the newsletter at any time by clicking on the link in every newsletter email or by sending an email to support@HairLossResearchCollective.com or by sending a message to the contact details provided in the legal notice.

(5) We store the data you provided when registering for the newsletter exclusively for the purpose of sending the newsletter until you unsubscribe from the newsletter.

‍

§ 7 Use of social media plug-ins

(1)We currently use the following social media plug-ins:

• Facebook

In accordance with § 3 of this declaration, data is transmitted to Facebook and stored for 90 days. The IP address is anonymized. By activating the plug-in, personal data is transmitted to the provider and stored. It is recommended that you delete all cookies before clicking on the box.

(2) We have no control over the data collected and processing operations, and we do not know the full extent of the data collection, the purposes of the processing or the storage periods. We also have no information about the deletion of the collected data by the plug-in provider.

(3) Facebook stores and uses the data collected about you as usage profiles for advertising, market research and the needs-based design of the website. These profiles are also used for users who are not logged in to display tailored advertising and to inform other users about your activities on the website. You can object to the creation of these profiles by contacting the plug-in provider. The plug-ins enable interactions with social networks and other users in order to improve the offer and make it more interesting for you. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) Regardless of whether you have an account with the plug-in provider and are logged in, your data collected by us will be passed on. If you are logged in, your data will be assigned directly to your account with the plug-in provider. If you click the button, the provider also saves this information in your user account and shares it publicly. We recommend that you log out after using a social network to avoid being assigned to your profile with the provider.

(5) You will find further information on the purpose and scope of data collection and processing by Facebook as well as your rights and settings options to protect your privacy in the data protection declarations provided below.

(6) Address of Facebook and URL with data protection information:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

‍

§ 8 Use of Google AdWords Conversion

(1) We use Google AdWords to advertise our services on external websites. We analyze the data from the advertising campaigns in order to evaluate the effectiveness of the measures. Our aim is to show you relevant advertising, make our website more attractive and charge fair advertising costs.

(2) Google delivers these advertisements via ad servers and uses ad server cookies to measure success. If you access the website via a Google ad, a cookie is stored on your PC, which generally loses its validity after 30 days and is not used for personal identification. The unique cookie ID, number of ad impressions per placement, last impression and opt-out information are stored.

(3) These cookies enable Google to recognize the user's Internet browser and to recognize whether the user has clicked on an ad and has been redirected to the Adwords customer's site. Each Adwords customer receives a different cookie that cannot be tracked via the websites of other customers. No personal data is collected or processed, but only statistical evaluations are provided in order to recognize the effectiveness of the advertising measures.

(4) By using marketing tools, your browser automatically establishes a connection with the Google server. We have no influence on the data that is collected through the use of these tools. By integrating AdWords Conversion, Google receives information about whether you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google, the provider can save your IP address.

(5) There are various options for not participating in a tracking process: You can change your browser settings so that third-party cookies are suppressed in order not to receive ads from third-party providers. You can block cookies for conversion tracking by setting your browser to block cookies from the domain"www.googleadservices.com". You can disable interest-based ads from providers that are part of the "About Ads" self-regulatory campaign or permanently disable them in Firefox, Internet Explorer or Google Chrome. Please note, however, that in this case you may not be able to use all the functions of the offer in full.

(6) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

‍

§ 9 Google Remarketing

In addition to Google Adwords Conversion, we use Google Remarketing to contact you again and show you advertisements. Cookies are stored in your browser in order to record and evaluate your usage behavior when you visit various websites. Google uses pseudonymization and stores the cookies for 24 months. No merging with personal data takes place. The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f GDPR.

‍

§ 10 DoubleClick by Google

(1) This website uses DoubleClick by Google to serve relevant ads to users and improve campaign performance reports. DoubleClick uses cookies to prevent users from seeing the same ads more than once and to record conversions related to ad requests. The cookies do not contain any personal information.

(2) By using marketing tools, your browser automatically establishes a connection with the Google server. We have no influence on the data that is collected through the use of this tool. Through DoubleClick, Google receives the information that you have visited our website or clicked on an advertisement. If you are registered with Google, the visit can be assigned to your account. Even without registration, it is possible that Google will store your IP address.

(3) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

(4) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google. de/intl/en/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, [https://www.privacyshield.gov/EU-US-Framework.](https://www.privacyshield.gov/EU-US-Framework)

(5) Doubleclick cookies from Google are stored for 24 months.

‍

§ 11 TikTok

On our website, we use the pixel of the provider TikTok, a service of TikTok Technology Limited based in Dublin, Ireland (10 Earlsfort Terrace, Dublin, D02 T380).

Thanks to the TikTok pixel, we can identify visitors to our website as a target group for advertising within TikTok. We can only serve ads to users who are interested in our offers and track the effectiveness of our ads on TikTok for statistical and market research purposes.

TikTok's privacy policy contains information about the TikTok pixel and its functions. The privacy policy is available at https://www.tiktok.com/legal/privacy-policy-eea?lang=de

The use of the TikTok pixel and the storage of cookies takes place with the consent of the data subject in accordance with Art. 6 para. 1 lit. a GDPR.

You can object to the collection of your data by the TikTok pixel and its use within TikTok advertisements at any time by following the link "Update advertising tracking settings" at the end of the privacy policy and adjusting your settings accordingly.

‍

§ 12 Further information

(1) Our websites use Facebook's remarketing function "Custom Audiences" to present users with interest-based advertisements and thus display advertisements that are of interest to the user.

(2) By using marketing tools, your browser automatically establishes a connection to the Facebook server. We have no influence on the data that Facebook collects through the use of these tools. By integrating Facebook Custom Audiences, Facebook receives information about whether you have visited our website or clicked on an ad. If you are registered with Facebook, Facebook can assign the visit to your account. Even if you are not registered with Facebook, the provider can save your IP address and other identification features.

(3) Logged-in users can deactivate the "Facebook Custom Audiences" function at https://www.facebook.com/settings/?tab=ads#_.

(4) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data processing by Facebook can be found at [https://www.facebook.com/about/privacy.](https://www.facebook.com/about/privacy)

‍