Privacy policy - Spa Natural
Mon-Fri from 9 a.m. to 6 p.m.
+49 (0) 210 39 95 430
Request catalog

Privacy policy

Spa Natural GmbH & Co. KG (hereinafter also "Spa Natural") offers sales information on whirlpools and swim spas on its website www.spa-natural.com. Spa Natural is aware of the importance of the personal data entrusted to it (Art. 4 No. 1 DSGVO). Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. Spa Natural ensures that this data is treated confidentially. In the following, we inform about the processing operations of personal data when using our website and about the data subject rights to which the customer and interested party are entitled.

§ 1 Information on the collection of personal data

(1) Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior (cf. Art. 4 No. 1 DSGVO).

(2) The responsible party according to Art. 4 No. 7 DSGVO is Spa Natural GmbH & Co. KG, Ellerstraße 101 (Hall 8-10), 40721 Hilden, e-mail: info@spa-natural.com (see our imprint). You can reach our data protection officer at our postal address with the addition "the data protection officer".

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context, if the inquiry is assigned to a contract, after the time limits for the term of the contract, otherwise after the storage is no longer necessary, or restrict the processing if there are legal obligations to retain data.

(4) If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

§ 2 Your rights

(1) You have the following rights with respect to a data controller regarding personal data concerning you:

  • Right to information,
  • Right to rectification or deletion,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Processing of personal data when visiting our website

During the informational use of the website, i.e. the mere viewing without registration and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (page visited)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • previously visited page
  • Browser
  • Operating system
  • Language and version of the browser software.

§ 4 Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other usual functions to analyze or market our offers, which are presented in more detail below. For this purpose, you usually have to provide further personal data or we process such further data that we use to perform the respective services. For all data processing purposes described here, the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly monitored.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.

(2) Insofar as we base the processing of your personal data on the balance of interests (Art. 6 para. 1 p. 1 lit. f. DSGVO), you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we have carried out. In the event of your objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. The best way to exercise your advertising objection is to contact us using the contact details provided above.

§ 6 Use of cookies

(1) In addition to the above data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your terminal device. When you call up our website and at any time later, you have the choice of whether you generally permit the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical point of view (2), before we go into more detail about your individual choices by describing technically necessary cookies (3) and cookies that you can voluntarily select or deselect (4).

(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the entity that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:

  • Transient cookies: Such cookies, especially session cookies, are automatically deleted when the browser is closed or by logging out. They contain a so-called session ID. In this way, various requests from your browser can be assigned to the joint session and your computer can be recognized when you return to our website.
  • Persistent cookies: Such cookies are automatically deleted after a specified duration, which is set differently depending on the cookie. You can view the cookies set and the durations at any time in the settings of your browser and delete the cookies manually.

(3) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted after the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DS-GVO.

(4) Optional cookies when you give your consent: We set various cookies only after your consent, which you can select during your first visit to our website via the so-called cookie consent tool. The functions are only activated in the event of your consent and may serve in particular to enable us to analyze and improve visits to our website, to make it easier for you to use it via different browsers or terminal devices, to recognize you when you visit, or to serve advertising (possibly also to orient advertising to interests, to measure the effectiveness of ads, or to show interest-oriented advertising). The legal basis for this processing is Art. 6 para. 1 p. 1 lit. a DS-GVO. The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation.

§ 5 Web tracking by means of Google Analytics

(1) This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable the analysis of your user interactions on our website and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.

(2) We primarily record the interactions between you as a user of the website with the help of cookies, data on the device/browser, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us as the website operator with information about which country, region or location the respective user comes from (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function ("IP masking"), i.e. that Google truncates the IP addresses by the last octet within the EU.

(3) Google acts as an order processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

(4) The legal basis for the collection and further processing of the information (which will take place for a maximum of 14 months) is your consent (Art. 6 para. 1 p. 1 lit. a DS-GVO). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke your consent is to use our Consent Manager or to install the Google browser add-on, which is available via the following link: tools.google.com/dlpage/gaoptout?hl=en/.

(5) More detailed information on the scope of services provided by Google Analytics is available at marketingplatform.google.com/about/analytics/terms/en/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

§ 6 Use of Google Ads

(1) We use the Google Ads service to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads will store a cookie in your terminal device. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent.

(2) The advertising materials are delivered by Google via so-called "ad servers". For this purpose, we and other websites use so-called ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. Through the Google Ads cookies stored on our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values.

(3) The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer, so the cookies cannot be tracked across the websites of other Ads customers. Through the integration of Google Ads, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but provide Google alone with the opportunity to collect the data. We only receive statistical evaluations from Google, which provide information about which ads were clicked on how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

(5) The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. The easiest way to revoke is via our Consent Manager or via the following functions: a) by setting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving any third-party ads; b) by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, deleting this setting when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link www.aboutads.info/choices, deleting this setting when you delete your cookies; d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer.

(6) Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/en.html.

§ 7 Google Remarketing

(1) We use Google Ads with the additional application "Google Remarketing". With this procedure, we can create advertisements based on existing information about you and address you again during your further internet use. This is done by means of cookies set when you visit our offers, via which your usage behavior when visiting various websites is recorded by Google and evaluated pseudonymously. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google.

(2) The legal basis for the processing of your data is also in this respect Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent. You can prevent or no longer use the remarketing function in the same way as described above for Google Ads.

§ 8 Advertising with Facebook (Pixel and Conversion Tracking)

(1) Furthermore, the website uses advertising measures of Meta Platforms Inc. ("Facebook"). By integrating the so-called "Facebook Pixel" on our website, we can display our advertising measures ("Facebook Ads") to users of our website and the social network Facebook and measure and evaluate the success ("Conversion Tracking"). This connection of Facebook and our website is technically carried out via the "Facebook Pixel". The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server when you visit our website. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore present the processes known to us: Through the integration of the Facebook pixel, Facebook receives the information that you have accessed the corresponding web page of our website, or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider learns your IP address and other identifiers and uses them to create a profile.

(3) The information collected is stored on Facebook servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Facebook, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

(4) You may revoke your consent at any time without affecting the permissibility of the processing until revocation. The easiest way to revoke your consent is via our Consent Manager. In addition, (only logged in users) can object via the function of the provider under the following link: www.facebook.com/settings/?tab=ads#_ possible.

(5) Further information on data processing by Facebook is available at Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; privacy policy: www.facebook.com/about/privacy.

§ 9 Google Tag Manager

This website uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

§ 10 Zendesk Chat integration

(1) On this Website, we use Zendesk Chat (formerly Zopim), a live chat software provided by Zendesk Inc, 989 Market Street #300, San Francisco, CA 94102.

(2) By means of Zendesk Chat, the user is shown whether one of our employees is currently online in order to provide an immediate response. For this purpose, all visitors to our pages are recorded with their IP address and the page they are currently visiting. The IP address is anonymized.

(3) Zendesk Chat uses cookies. The information generated by the cookie about your use of our website (including your anonymized IP address) is transmitted to and stored by Zendesk Chat on servers in the United States. The information is only visible for the moment you are on a particular page and is not stored. Conducted chats are logged and stored. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

(4) For more information on data processing by Zendesk, please see Zendesk's Privacy Policy at http://www.zendesk.com/company/privacy.

§ 11 Our appearances in social networks

(1) We have various presences in so-called social media platforms. We operate the presences with the following providers:

  • Facebook
    Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;
    https://de-de.facebook.com/spanaturalwhirlpools/
    Privacy policy: www.facebook.com/about/privacy.
  • Instagram
    Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
    https://www.instagram.com/spa_natural_wellness/?hl=de
    Privacy policy: https://help.instagram.com/519522125107875/?helpref=hc_fnav
  • YouTube<
    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
    https://www.youtube.com/channel/UCg0WMbxpBteJA_fqpwpPJNw
    Datenschutzerklärung: https://policies.google.com/privacy?hl=de
  • Pinterest
    Pinterest Inc, 505 Brannan Street San Francisco, CA 94107 United States
    https://www.pinterest.de/spanaturalcom/
    Privacy Policy: https://policy.pinterest.com/de/privacy-policy
  • LinkedIn
    LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
    https://www.linkedin.com/company/spa-natural/?originalSubdomain=de
    Privacy Policy: https://de.linkedin.com/legal/privacy-policy

(2) We use the technical platform and services of the providers for these information services. We point out that you use our appearances on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address as well as other information that is present on your terminal device in the form of cookies. This information is used to provide us, as the operator of the accounts, with statistical information about the interaction with us.

(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an appropriate level of data protection that corresponds to that of the former EU-US Privacy Shield and we have concluded the standard data protection clauses with the companies. We are not aware of how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your terminal device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track how you have moved around the network. Buttons embedded in websites enable the platforms to record your visits to these website pages and assign them to your respective profile. Based on this data, content or advertising can be offered tailored to you. If you want to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies present on your device and restart your browser.

(4) As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. If, for example, you ask a question that we can only answer by e-mail, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6 para. 1 p. 1 lit. f DS-GVO.

(5) To exercise your data subject rights, you can contact both us or the provider of the social media platform. Insofar as one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling, processing of your data when using the website. For questions about the processing of your interaction with us on our site, write to the contact details provided by us above.

(6) The providers describe what information the social media platform receives and how it is used in their privacy statements (see link in the table above). There you will also find information on contact options as well as on the setting options for advertisements. You can also find more information about social networks and how to protect your data at www.youngdata.de.

§ 12 Integration of YouTube videos

(1) We have integrated YouTube videos into our online offer, which are stored on YouTube.com and can be played directly from our website. The legal basis for the display of the videos is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

(4) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

§ 13 Integration of Google Maps

(1) On this website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent.

(2) By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.

(4) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.

§ 14 Routine deletion and blocking of personal data

(1) The processing of personal data shall only take place for as long as it is necessary to achieve the purpose of processing or for as long as data processing (in particular storage) is required by law.

(2) If the purpose of processing ceases to apply or the statutory retention period expires, personal data shall be deleted or blocked in compliance with the statutory provisions.

§ 15 Right of complaint to the competent supervisory authority

In the event of data protection violations, the data subject has the right to complain to the competent supervisory authority. The supervisory authority is the State Commissioner for Data Protection and Information Security of the Federal State of North Rhine-Westphalia. The contact details can be found at www.ldi.nrw.de.