1. Controller
Noxygen Science Transfer & Diagnostics GmbH
Lindenmatte 42, 79215 Elzach, Germany
Phone: +49 (0) 7682 94 790‑10
E‑mail: info@vita-screen.de
2. General Information
The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, BDSG, TDDDG). Personal data is any information relating to an identified or identifiable natural person.
3. Access Data / Server Log Files
When you visit our website, the hosting provider automatically collects information that your browser transmits. This includes:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing device
- time of the server request
- IP address
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error‑free presentation and the security of our website. The data is deleted after a short period of time, unless it is needed to investigate misuse or security incidents.
4. Hosting
Our website is hosted by a service provider that processes the data on our behalf (processing on behalf of the controller pursuant to Art. 28 GDPR). The server location is within the European Union. Only data required for the operation and security of the website is processed.
5. SSL/TLS Encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by „https://" in the address bar of your browser.
6. Cookies & Consent Management
Strictly necessary cookies: We use cookies or comparable storage methods to the extent they are strictly required to operate the website (e.g. storing your chosen language, storing your cookie consent itself, protecting forms against spam). The legal basis is Art. 6(1)(f) GDPR in conjunction with § 25(2) TDDDG. These cannot be disabled.
Consent-based services: In addition, we use services for reach measurement (statistics) and ad-effectiveness measurement (marketing) — see sections 7–9. We only load and activate these after you have given your consent via our cookie banner (opt-in, Art. 6(1)(a) GDPR, § 25(1) TDDDG). On your first visit you will see a consent banner with the categories "Necessary", "Statistics" and "Marketing". The respective services are loaded only once you have actively made a choice.
Google Consent Mode: Technically, we implement this via "Google Consent Mode v2": until you make a decision, all Google storage access (analytics and advertising cookies) defaults to "denied"; only after your consent is it set to "granted" and the relevant services become active.
Storage & withdrawal of your choice: We store your decision locally in your browser (local storage) until you change it or clear your browser data. You can withdraw or change your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page.
7. Google Tag Manager
We use Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for processing outside the EEA: Google LLC, USA). Google Tag Manager is a solution that lets us centrally manage and embed website tags (e.g. analytics and marketing services). The Tag Manager itself does not set cookies and does not process personal data — it merely ensures that the tags we configure are triggered, while respecting the consent granted or denied via the consent banner (Google Consent Mode, see section 6). The legal basis for using the Tag Manager as such is our legitimate interest in an efficient, maintainable website configuration (Art. 6(1)(f) GDPR).
8. Google Analytics 4 (Statistics) — consent only
With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited (possibly Google LLC, USA). Google Analytics uses cookies or comparable technologies that allow an analysis of how our website is used (e.g. pages viewed, time spent, traffic source, interactions such as clicks on contact options). The information generated is transmitted to and processed on Google's servers; a transfer to the USA may take place in this context, based on the European Commission's standard contractual clauses.
Google Analytics 4 is configured so that IP addresses are shortened and not permanently stored in plain text ("IP anonymisation"). The legal basis is exclusively your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings; the lawfulness of the processing carried out up to the withdrawal remains unaffected. Further information: policies.google.com/privacy.
9. Google Ads Conversion Tracking (Marketing) — consent only
With your consent, we use Google Ads conversion tracking of Google Ireland Limited (possibly Google LLC, USA) to measure the effectiveness of our online ads. If you click one of our ads and then reach our website, a cookie is set. If you subsequently carry out an action defined as a conversion — in particular clicking the buttons "Book a VitaScreen consultation" or "Request studies & info material", as well as successfully submitting the respective form — this is transmitted to Google in pseudonymised form. These clicks/submissions are marked accordingly in the source code (technical marker "data-cta") so that they can be reliably recognised and evaluated as a conversion event in Tag Manager.
We do not receive any information that would allow us to identify you personally, and in particular no health or measurement data. A transfer to the USA may take place, based on the European Commission's standard contractual clauses. The legal basis is exclusively your consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings. Further information: policies.google.com/privacy.
10. Fonts (Google Fonts, cdnfonts)
For the consistent display of fonts, we currently integrate web fonts via the services Google Fonts (Google Ireland Limited or Google LLC) and cdnfonts. When a page is loaded, your browser loads the fonts from the servers of these providers; in doing so, your IP address is transmitted. A transfer to the USA may take place in this context. The legal basis is Art. 6(1)(f) GDPR (consistent, appealing presentation). Local (self‑hosted) integration of the fonts is in preparation in order to avoid this data transfer.
Further information: policies.google.com/privacy.
11. Online Appointment Booking (Calendly)
To book initial consultation appointments, we use the service Calendly provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When you book an appointment, the data you enter (e.g. name, e‑mail address, preferred appointment) is transmitted to Calendly to arrange the appointment and is processed there. In doing so, data is transferred to the USA.
The legal basis is Art. 6(1)(b) GDPR (performance of pre‑contractual measures) and Art. 6(1)(f) GDPR (efficient appointment organisation), respectively. The transfer to the USA is based on the European Commission's standard contractual clauses. Calendly's privacy notices: calendly.com/privacy.
12. Inquiry Forms and CRM (Close)
We process the information collected via our forms (e.g. „Request studies & information material") in our CRM system Close (provider: Close, USA) in order to handle your inquiry and to maintain prospect and customer contacts (e.g. name, e‑mail address, telephone number, practice/institution, specialty as well as the content and history of the communication). The transmission takes place server‑side via our own website infrastructure directly to Close. In addition, where available at the time of your visit, we transmit the campaign origin of your visit (e.g. "YouTube / Video / Masterclass" if you arrived via a correspondingly marked link) so that we can understand which content led to an inquiry. The legal basis is Art. 6(1)(b) GDPR (initiation and performance of a contract) and Art. 6(1)(f) GDPR (efficient inquiry and customer management), respectively. A transfer to the USA may take place in this context, which is based on the European Commission's standard contractual clauses. Only contact and communication data is processed — no health or measurement data.
13. Free CMA Test at Trade Shows (e.g. Life Summit) — Health Data
At trade shows (e.g. Life Summit, booth 72/73) we offer a free capillary blood test to measure cellular oxidative stress (CMA). To register via our „Life Summit" page, we collect the data you provide and assign a unique test number that serves to match your blood sample and your result.
Mandatory information is your name and e‑mail address (for the test number and the dispatch of the result). We process this, as well as your voluntary additional information (e.g. phone, age, test preferences), in our CRM Close (see section 12) and send the test number by e‑mail via our own mail server. The legal basis is Art. 6(1)(b) and (f) GDPR (carrying out the test, efficient matching at the booth).
Health data (Art. 9 GDPR): The information optionally requested in the form regarding state of health, complaints, pre‑existing conditions and medications constitutes special categories of personal data. We process this exclusively if you give your explicit consent to do so (Art. 9(2)(a) GDPR). Providing it is entirely voluntary; without consent, no health information is processed. When such data is processed in the CRM, a transfer to the USA may also take place, which is based on the European Commission's standard contractual clauses.
Measurement result: The result of your CMA measurement is health data. We transmit it to you personally afterwards by e‑mail to the address you provided; it is not published on the website.
Withdrawal: You may withdraw your consent at any time with effect for the future — an informal message to info@vita-screen.de is sufficient. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
14. Webinars (WebinarGeek)
For free live webinars (e.g. our "Masterclass") we link from our website to the registration page of the webinar provider WebinarGeek. By clicking "Register for the webinar" you leave vita-screen.de and register directly on WebinarGeek's platform; the data requested there (e.g. name, e‑mail address) is processed exclusively by WebinarGeek. WebinarGeek's own privacy policy applies, which you can review there before registering.
On our own site, only the click on the registration link is technically recorded as an anonymous event (marker "data-cta"), in order to evaluate the effectiveness of our content. This takes place under the statistics and/or marketing services described in sections 8 and 9, and therefore only if you have consented to the respective category. No health or webinar-content data is processed in this context.
15. Contact by E‑mail
If you contact us by e‑mail, we process your information in order to handle the inquiry. The legal basis is Art. 6(1)(b) GDPR (for contract‑related inquiries) and Art. 6(1)(f) GDPR (legitimate interest in responding), respectively. The data is deleted as soon as it is no longer required to achieve the purpose, provided that no statutory retention obligations prevent this.
16. Practice Area (Login)
The protected practice area is currently under construction. Once it is activated, we will process exclusively the access data required for registration and use (e.g. e‑mail address, encrypted password). No health or measurement data is processed via the website. This Privacy Policy will be supplemented accordingly before activation.
17. Your Rights
You have the right at any time to:
- access your processed data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
To exercise your rights, a message to info@vita-screen.de is sufficient.
18. Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, among others, the State Commissioner for Data Protection and Freedom of Information of Baden‑Wuerttemberg.
19. Validity and Amendment of this Privacy Policy
This Privacy Policy is currently valid (last updated as stated above). Due to the further development of our website or changed legal requirements, it may become necessary to amend this policy.