+43 720 500 205
+49 89 2620 12 050
DATA PROTECTION
This privacy policy explains how Herosan Healthcare GmbH (hereinafter "HEROSAN") processes personal data of customers. This processing is carried out, in particular, to fulfill the contractual relationship with the customer and for other reasons detailed below.
All data is processed automatically in accordance with legal regulations and the General Data Protection Regulation (GDPR). All personal data is only accessed by persons authorized by HEROSAN who have the right to access this data within the scope of their duties.
1. Registration
1.1 Categories and types of data
The customer has the option of registering in the customer portal via the user interface. HEROSAN initially processes the personal data that the customer has provided to HEROSAN during registration in the customer portal. This includes:
- Name (including previous names),
- Date of birth,
- residential address,
- Bank details,
- Telephone and fax numbers, and other information required for addressing that arises from modern communication technologies,
- User name,
- Password,
- Email address
On the other hand, HEROSAN processes data that arises as a result of the contract fulfillment. This includes:
- Pet species,
- ordered products,
- Order date,
- Invoice amount,
- Date and time of payment,
- Confirmation or refusal of the payment,
- Access times,
- Access and order frequencies,
- different billing/delivery address,
- Inquiries or complaints to customer support
1.2 Userlike
HEROSAN healthcare gmbh uses chat software from Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany. You can use the chat like a contact form to chat with our employees almost in real time. The following personal data is collected when you start a chat:
- Date and time of the call,
- Browser type/version,
- IP address,
- used operating system,
- URL of the previously visited website,
- Amount of data sent.
- And if provided: first name, last name, and email address.
Depending on the course of your conversation with our staff, additional personal data may be entered during the chat. The type of data depends largely on your inquiry or the problem you describe to us. Processing all this data serves to provide you with a quick and efficient way to contact us and thus improve our customer service.
All our employees have been and continue to be trained in data protection and instructed on the secure and confidential handling of customer data. All our employees are bound to confidentiality and have signed an addendum to their employment contracts, committing to maintaining confidentiality and complying with data protection regulations.
By visiting the website www.herosan.eu , the chat widget is loaded from AWS CloudFront as a JavaScript file. Technically, the chat widget represents the source code that runs on your computer and enables the chat function.
In addition, HEROSAN healthcare stores the chat history for a period of 24 months. This serves to spare you from having to provide extensive information about your inquiry history, as well as to continuously monitor the quality of our chat service. Processing is therefore permitted under Art. 6 (1) (f) GDPR. If you do not wish this, please inform us using the contact details listed below. Saved chats will then be deleted immediately.
Storing chat data also serves the purpose of ensuring the security of our information technology systems. This also constitutes our legitimate interest, which is why processing is permitted under Art. 6 (1) (f) GDPR.
Further information can be found in the privacy policy of Userlike UG (limited liability).
1.3 Purposes
The processing and transmission of personal data is carried out, on the one hand, for the fulfillment of the contract with the customer, in particular for the processing and delivery of all customer orders, as well as, if necessary, for the enforcement of legal claims arising from such a contract. The processing and transmission of personal data is also carried out for the purpose of determining the remuneration to which the customer's partner is entitled when its customers place orders via its user platform. However, personal data is also processed due to HEROSAN's legal obligations, e.g., to fulfill retention obligations under tax and commercial law. Finally, personal data is processed for marketing purposes, in particular for sending information about HEROSAN, newsletters, product offers, vouchers, and other advertising materials.
If the aforementioned personal data is not provided, HEROSAN cannot collect it and may subsequently be unable to achieve the individual purposes described. For example, an order cannot be processed.
The processing and transmission of the data takes place
- based on the customer’s consent (Article 6 (1) (a) GDPR),
- on the basis of (pre-)contractual obligations (Article 6 (1) (b) GDPR),
- on the basis of a legal obligation of HEROSAN (Art 6 para 1 lit c GDPR),
- and on the basis of a legitimate interest on the part of HEROSAN or a third party (the respective partner) (Article 6 (1) (f) GDPR).
Customer's right to object to processing: Pursuant to Article 21(1) GDPR, you have the right to object at any time to the processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing for the purposes of legitimate interests). If you object, your personal data will no longer be processed for the purposes covered by the objection, unless
- compelling legitimate grounds can be demonstrated which override the interests, rights and freedoms of the data subject,
- or the processing serves to assert, exercise, or defend legal claims. If the objection is also directed against or solely against data processing for direct marketing purposes, your personal data will no longer be processed for this purpose.
The objection can be made informally, e.g. by e-mail to info@herosan.at or by sending a message to the contact person specified under point 3.
1.4 receiver
The recipients of this data include:
- the customer’s respective partner,
- Payment institutions,
- delivery companies,
- IT service provider.
If and to the extent that the recipients of the personal data process these on behalf of HEROSAN, they will act as so-called data processors only on the instructions of HEROSAN and are contractually obligated to comply with the applicable data protection requirements vis-à-vis HEROSAN.
In order to offer you Klarna's payment methods, we may share your personal information in the form of contact and order details with Klarna at checkout so that Klarna can assess your eligibility for the payment methods and tailor these payment methods to you.
Your submitted personal data will be processed in accordance with Klarna's own privacy policy.
Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary to execute the orders or to fulfil the contract, if it is required by law (e.g. tax reporting obligations) or if consent has been given.
1.4 Duration
The above-mentioned data will be stored until the user profile is deleted or, beyond that, for as long as statutory retention periods exist or as long as legal claims arising from the contractual relationship can be asserted.
These periods can last up to 30 years (e.g. statute of limitations).
2. Cookies
HEROSAN also uses cookies and other technologies to make the website and apps more personal, clearer and more secure for users, to enable the use of certain functions or to carry out certain statistical analyses.
Cookies are small files that are assigned to and stored on the customer's device, the browser they use, or the respective app. These files allow certain information to be sent to the location that placed the cookies. Cookies can contain certain (personal) data (e.g., IP address, operating system/device settings, website from which the file was accessed, file name, or the date and time of access).
The customer can restrict or prohibit the use of cookies in their browser settings. However, in individual cases, this may result in the website and apps not being able to be used to their full extent. HEROSAN assumes no liability for external content.
The following types of cookies may be used when you visit the website:
| Name | Retention period | Purpose | monitor |
| PHPSESSID | Will be deleted as soon as your browser session expires or you close the browser. | This cookie is used to technically identify the user and thus maintain a consistent session experience. This is also necessary to log in to the website. | shop.herosan.at |
| XSRF TOKEN | 1 year | Ensures browsing security for visitors by preventing cross-site request forgery. This cookie is essential for the security of the website and the visitor. | shop.herosan.at |
| cookieconsent_status | 1 year | Saves the consent status of the user for cookies on the current domain. | shop.herosan.at |
| laravel_session | Is deleted as soon as your browser session expires or you close the browser. | This cookie is used internally by the website owners when content is uploaded or updated on the website. | shop.herosan.at |
| customer master | Persistent (52 years) | We use cookies from KundenMeister to establish the connection between our website and our merchandise management/CRM system. | www.kundenmeister.com |
| kmcsrfcookie | 1 year | We use cookies from KundenMeister to validate the forms on our website. | www.kundenmeister.com |
3. Data subject rights
4. Contact
HEROSAN healthcare gmbh
Grazer Strasse 9
8434 Neutillmitsch
+43 720 500205
+ 43 720 500205 20
Confidentiality notice / Confidentiality of emails
This privacy policy describes the processing of personal data in connection with our website, our online shop, and our communications. Emails may contain confidential information and are intended solely for the intended recipient. If you have received an email in error, please inform the sender immediately and delete the message. Any unauthorized forwarding, disclosure, or use of the content is prohibited.
