Privacy Policy

Privacy Policy Website

Introduction

With the following information we want to give you an overview of the processing of your personal data on our website https://meditationsi.com/ (hereinafter referred to as “website“). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter referred to as “GDPR“) and all applicable country-specific data protection regulations.

Table of Contents

1 Controller

2 Use of Third-Party Tools

3 Provision of the Website

4 Cookies

5 Contact

6 Newsletter

7 Social Networks

8 Online Shop

9 Payment service provider

10 Your Rights

11 Status of Privacy Policy

1. Controller

The controller according to Art.4 Nr. 1 GDPR is

MSI gGmbH
Egerstr. 13

95199 Thierstein

Telefonnummer: 0049 162 25 15 579

E-Mail: silvia@meditationsi.com

Use of Third-Party Tools

We use third-party services to provide certain functions and services on our website. The specific services can be found in the corresponding chapters.

In some cases, we use service providers that are based in a third country, i.e., outside the European Union. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 GDPR have been concluded. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send us an e-mail to the e-mail address mentioned in this privacy policy.

2. Provision of the Website
   1. General Information

When you visit our website, data that your browser transmits to our serve, is automatically processed. This data is stored in the log files of the server (in so-called “server log files”). The following personal data is processed:

• Browser type and browser version
• Operating system used
• Referrer URL (previously visited website)
• Host name of the accessing computer
• Date and time of server request
• IP address

2. Purpose of Processing

We do not use the data stored in server log files to draw any conclusion about your person. The purposes pursued by us include:

• the guarantee of a smooth connection set-up of the website,
• the clarification of acts of abuse or fraud,
• problem analysis in the network, and
• the evaluation of system security and stability.

3. Legal Basis

The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.

4. Retention Period

The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.

3. Cookies
   1. General Information

We use cookies on our website. These are text files that your browser automatically creates and that are stored on your end device when you visit our website. Information that is connected to the specific end device is stored in the cookie.

2. Technically Necessary Cookies

We use technically necessary cookies. These are cookies that are technically necessary to provide all the functions of our website.

1. Purpose of Processing

We use technically necessary cookies for the following purposes:

• to provide services,
• to enable the use of our website functions, as well as 
• to offer different languages.

2. Legal Basis

The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.

3. Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.

3. Analysis and Marketing-Cookies

We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our offer.

1. Purpose of Processing

We use technically necessary cookies for the following purposes:

• to measure and track our reach, 
• to evaluate the behavior of visitors on our website,
• to optimize our offer on our website, and
• to publish targeted advertising

2. Legal Basis

The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. The cookies are set only after you have given your consent via our cookie banner.

3. Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.

4. Recipients of Personal Data

We use the following service providers:

Service	Provider	Purpose	Legal Basis	Storage Period
Google Analytics	Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland	Optimization of our online services	Your consent according to Art. 6  Para. 1 (1) a GDPR	14 Months
Google Ads	Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland	Information and advertising	Your consent according to Art. 6  Para. 1 (1) a GDPR	We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
Meta Ads	Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland	Information and advertising	Your consent according to Art. 6  Para. 1 (1) a GDPR	We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

4. Contact
   1. General Information

Through our website you can contact us by e-mail or via our form. To contact you and to answer your request, we process the following personal data from you:

• First name 
• Last name
• Name of the company
• Number of employees
• Email address
• Phone number
• Country
• Department
• Message
• Date and time of the inquiry
• IP address
• Other personal data that you provide to us while contacting us.

2. Purpose of Processing

We process your data to respond to your inquiry and other matters arising from it. 

3. Legal Basis

If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

If your request is made independently of contractual or pre-contractual measures, our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.

4. Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.

5. Newsletter
   1. General Information

We offer you the possibility to receive the newsletter of our company. With our newsletter, we inform customers and business partners about our offers at regular intervals. Within the scope of the newsletter dispatch, we process the following personal data:

• First and last name
• E-mail address
• Organization
• Preferred language
• Metadata (e.g., device information, IP address, date, and time of registration)

1. Newsletter Registration

If you register for our newsletter via our website, we will send you a confirmation e-mail. After confirming your registration through the double opt-in procedure, you will be placed in our newsletter database. This confirmation e-mail serves to verify whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter. In the process, the registration for the newsletter is logged.

2. Newsletters for Existing Customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, by e-mail. We base this processing on section 7 (3) of the German Act against Unfair Competition.

3. Newsletter Tracking

Our newsletters contain so-called tracking pixels. This is a miniature graphic that is embedded in e-mails. This allows us to track, for example, whether and when an e-mail was opened by you and which links in the e-mail were called up by you. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected by the tracking pixel is stored and analyzed by us to optimize the newsletter mailing and to better adapt the content of future newsletters to your interests.

2. Purpose of Processing

We process your personal data for the following purposes:

• Newsletter mailing: implementation of marketing measures.
• Double opt-in procedure: fulfillment of our legal obligations to provide proof.
• Newsletter tracking: display of personalized advertising, market research, performance measurement.

3. Legal Basis

The legal basis for the processing of your personal data in the context of the:

• newsletter subscription is your consent pursuant to Art. 6 (1) (a) GDPR,
• double-opt-in procedure is our legal obligation according to Art. 6 (1) (b) GDPR, 
• newsletter mailing to existing customers is our overriding interest Art. 6 (1) (f) GDPR, and 
• newsletter tracking is your consent pursuant to Art. 6 (1) (a) GDPR.

4. Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of the newsletter mailing, this is generally the case when you withdraw your consent or you object to the processing.

For this purpose, there is an opt-out link at the end of every newsletter. In addition, you also have the option of unsubscribing from the newsletter mailing at any time on our website or informing us of this in another way. When you select the unsubscribe option in our newsletters, we automatically interpret this as your withdrawal of consent or your objection to the processing.

5. Recipients of Personal Data

We use the following service providers:

Service Provider	Address	Further Information
Mailchimp	The Rocket Science Group, LLC675 Ponce de Leon Ave NESuite 5000Atlanta, GA 30308 USA	Privacy Policy:https://www.intuit.com/privacy/statement/ Data Processing Addendum/SCC:https://mailchimp.com/legal/data-processing-addendum/

6. Social Networks
   1. General Information

We maintain presences in social networks to communicate with you and inform you about our services.

2. Purpose of Processing

The purpose of the processing is the maintenance of presences in social media. 

3. Legal Basis

The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding interest corresponds to the above-mentioned purposes.

4. Recipients of Personal Data

We have company presences in the following social networks:

Social Network	Address	Further Information
Vimeo	Vimeo.com, Inc.330 West 34th Street, 5th Floor, New York, New York 10001, USA	Privacy Policy:https://vimeo.com/features/video-privacy

7. Online Shop

1. General information 

We maintain an online shop where you can purchase various products and services (e.g. digital services or merchandising). As part of the ordering and purchasing process, we process personal data.

Processed data

– First name

– Surname

– Company name

– Country / Region

– Street + house number

– Zip code 

– City 

– E-mail address

– Account/Username

– Create account password

– Notes about the order

– Metadata (e.g. device information, IP address, date and time of login)

Legal basis 

– Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 p. 1 lit. b. GDPR).

– Legitimate interests (Art. 6 para. 1 p. 1 lit. f GDPR). 

2. Payment options

We offer various payment options in our online store. There is the possibility that the respective payment service provider used by us transmits your personal data to credit agencies in order to perform an identity and credit check. Please also note the terms and conditions and data protection information of the respective payment service providers. 

Processed data 

– Inventory data (e.g. first and last name, address), 

– Payment data (e.g. bank details, invoices, payment history), 

– Contact data (e.g. e-mail address, telephone number), 

– Contract data (e.g. subject matter of contract, term of contract), 

– Usage data (e.g. websites visited, time of access), 

– Meta and communication data (e.g. IP address).

– Content data (e.g. text content entered, photographs, videos). 

Legal basis 

– Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 p. 1 lit. b. GDPR).

– Consent (Art. 6 para. 1 p. 1 lit. a GDPR), insofar as we obtain this as part of the payment process. 

– Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR). If the data processing is not based on the performance of the contract or the implementation of pre-contractual measures or your consent, our legitimate interest constitutes the legal basis. The legitimate interest corresponds to the purposes mentioned above.

3. Provider

WooCommerce

WooCommerce Ireland Ltd, Coachhouse, Blackhall House Blackhall, Balbriggan, Co Dublin.

Privacy Policy

For more information on data processing, please see the WooCommerce privacy policy: https://automattic.com/privacy/ 

8. Payment service provider

General Information

We offer you the opportunity to use various payment options. In doing so, we use banks, credit institutions as well as other payment service providers that process personal data from you. The specific personal data will only be processed by the corresponding payment service provider. We receive as information only whether a payment has been made (confirmation or negative information), but no account or credit card data. It is possible that the respective payment service provider used by us transmits your personal data to credit agencies in order to perform an identity and credit check. Please also note the terms and conditions and data protection information of the respective payment service providers. 

Processed data 

– Inventory data (e.g. first and last name, address), 

– Payment data (e.g. bank details, invoices, payment history), 

– Contact data (e.g. e-mail address, telephone number), 

– Contract data (e.g. subject matter of contract, term of contract), 

– Usage data (e.g. websites visited, time of access), 

– Meta and communication data (e.g. IP address).

– Content data (e.g. text content entered, photographs, videos). 

Purpose of processing 

– Providing contractual performance and service

– Tracking (e.g., interest and behavior-based profiling).

– Feedback (e.g., collecting feedback via online form)

– Affiliate tracking 

Legal basis 

– Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 p. 1 lit. b. GDPR)

– Consent (Art. 6 para. 1 p. 1 lit. a GDPR).

– Legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR). If the data processing is not based on the performance of a contract or the implementation of pre-contractual measures or your consent, our legitimate interest constitutes the legal basis. The legitimate interest corresponds to the purposes mentioned above. 

2. Provider

Paypal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (PayPal). 

Data protection outside the EU and EEA

We have agreed to standard contractual clauses with PayPal.

In addition, PayPal has implemented Binding Corporate Rules for intra-group data exchange. 

https://www.paypal.com/us/webapps/mpp/gdpr-readiness-requirements

Privacy Policy

Further information on data processing can be found in PayPal’s privacy policy. https://www.paypal.com/de/webapps/mpp/ua/privacy-full 

9. Your Rights
   1. Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

2. Right to Access (Art. 15 GDPR)

You have the right to obtain from us – at any time and free of charge – information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.

3. Right to Rectification (Art. 16 GDPR) 

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, considering the purposes of the processing.

4. Right to Erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

5. Right to Restriction of Processing (Art. 18 GDPR) 

You have the right to demand that we restrict the processing if one of the legal requirements is met.

6. Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.

7. Right to Object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) (e) GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 DSGVO. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In individual cases, we process personal data to carry out direct advertising. You may object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it relates to such direct advertising. If you object to us processing your personal data for direct marketing purposes, we will no longer process the personal data for these purposes. 

8. Withdrawing Consent

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

9. Right to Lodge a Complaint

You have the right to lodge a complaint about our processing of personal data with a supervisory authority.

10. Status of Privacy Policy

This privacy policy is currently valid and has the following status: December 2022.

If we continue to develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.