Bioforce Canada Inc. publishes healthcare information under the healthcare brand A.Vogel, Natur, Herbatint and Aromaforce. The company respects the privacy of all visitors to its website – www.avogel.ca – and ensures that any personal information that you make available is treated confidentially. A.Vogel does not pass on any personal data to third parties and only makes this data available when it is required to fulfil your order in our online shop or for prize contests. Bioforce Canada inc. takes the protection of your data very seriously. Our employees and any third parties commissioned by us are obliged to respect the confidentiality of your data.
The following data privacy policy is intended to provide you with further details of this. You can print this document out or save it using the standard functions of your browser (usually under File / Save). You can also download and store this document in PDF format by clicking here. In order to open the PDF file, you will need the free application Adobe Reader (www.adobe.com) or a similar programme that can read PDF format.
1 Name and address of the data controller and of the data protection officer
1.1 Name and address of the data controller
The contact person for the so-called data controller responsible for the collection, processing and use of data in terms of the Federal Act on Data Protection, the General Data Protection Regulation and service provider in terms of the Broadcast Media Act is:
Bioforce Canada Inc
66 Brunswick
Dollard-des-Ormeaux, QC
Canada
H9B 2L3
514-421-3441
514-421-6446
1.2 Name and address of the data protection officer representing the data controller
Sonia Chartier
514-421-3441 #219
schartier@bioforce.ca
2. Collection, processing and use of personal data
When you use our online offering or interact with our website (e.g. by completing and submitting the contact form), personal data will be collected, processed and used.
2.1 Personal data
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
They include, above all, information that allow conclusions to be made about your identity, for example, your name, phone number, address or email address. Statistical data that we may, for example, collect during your visit to our online offering and that cannot be associated with your person is not included in the concept of personal data.
2.2 Use for informational purposes
We do not collect any personal data when you simply use our online offering for informational purposes, with the exception of data that your browser passes on in order to allow you to visit our website. Such data includes the:
User IP addresses are deleted or anonymised after use terminates. In the event of anonymisation, the IP addresses are modified in such a way that particulars about personal or material circumstances can no longer be attributed to an identified or identifiable natural person, or only with a disproportionately great investment of time, cost and effort. We analyse data in so-called log files in an anonymised form in order to further improve A.Vogel’s online offering, to make it more user-friendly and to allow errors to be found and rectified more quickly. They are also used to manage service capacities and, where necessary, to allow adequate data volumes to be made available.
2.3 Contact form and other interactions
In addition to the purely informational use of our online offering and the customer portal, there are various ways for you to interact with us, and for us to offer services that you may be interested in using. These include, in particular, the contact form and registration for our newsletter as well as tests and checks and prize contests. In order to make use of these, you must provide additional personal data that we will use to provide the service in question and which we will also save. We will only use the data for the underlying purpose and in compliance with principles of data protection.
2.4 Storage period for personal data
We will only store your personal data for as long and to the extent that it is required for the purpose for which it was collected. Personal data subject to a legal retention obligation will be deleted when the legal retention period expires. Other personal data will be deleted as soon as it is no longer required for its purpose or in order to assert, exercise or defend legal claims.
2.5 Newsletters
We offer you the option on our website to subscribe to free newsletters on selectable subject areas.
We use Klaviyo to send out our newsletter. We use the so-called double opt-in method for registration to our newsletter. This means that we will send you a confirmation email to the address you indicate asking you to confirm that you wish to receive the newsletter. Your registration will be automatically deleted if you do not provide confirmation within 24 hours. If you confirm your request to receive the newsletter, we will store your email address until you unsubscribe from the newsletter. We only store this information for the purpose of being able to send you the newsletter. Moreover, we store your IP address and the times of registration and confirmation in order to prevent any misuse of your personal data.
Your email address is the only mandatory information required to send you the newsletter. The disclosure of additional, specially marked information is voluntary and is only used to personalise the newsletter for you. To be checked on web
You can revoke your consent to receive the newsletter at any time. You can do this by clicking on the link provided in every newsletter email, by sending an email to info@bioforce.ca or by informing us of your revocation in any other manner. Any details disclosed will not be passed on to third parties. Your data will be deleted completely after your revocation.
2.6 Disclosure of data to third parties
Data collected by A.Vogel will only be passed on to a third party if this is necessary for the purpose of executing a contract or payment, or you have given your consent to this in advance. Our service providers may only use any such disclosed data to perform their task. They were carefully chosen by us and given instructions in writing. They are obliged to follow our instructions and are monitored by us at regular intervals. It is forbidden for information to be used for any other purpose, and none of the service providers we commission will do so.
3. Cookies
Cookies are small files that are stored on your data storage medium and which store specific settings and data required for the exchange of information with our system via your browser. Cookies cannot execute any programmes or transfer viruses to your computer. They are used to make our overall online offering more user-friendly and effective.
There are two basic different types of cookie: session cookies, which are deleted when you close your browser (i.e. at the end of the session); and temporary/permanent cookies, which are stored for a longer period, or permanently, on your data storage medium. Storing these cookies helps us to design our website and makes it easier for you to use it, for example, by remembering certain input that you make in such a way that you do not have to constantly re-enter it.
You can delete the cookies in your browser’s security settings at any time and also configure your browser settings in accordance with your wishes (e.g. accept third-party cookies or reject all cookies). The help function in the menu bar of your web browser will generally show you how you can reject new cookies and delete those already received. In this case, however, we wish to point out that you may not be able to use all the functions of our online offering.
3.1 Cookies at A.Vogel
Most of the cookies we use are session cookies and are automatically deleted from your hard drive at the end of the browser session. In addition, we also use cookies that remain on your hard drive. When you visit us again, we automatically recognise that you were previously on our site and what your preferred entries and settings are. These cookies are stored on your hard drive and will be deleted automatically after the specified period.
The cookies we use cannot be attributed to a specific person and thus not to you either. When a cookie is activated, it is assigned an identification number. It is not possible to attribute your personal data to this identification number at any time, and no attempt is made to do so either. We do not store your name or similar data that make it possible to attribute the cookie to you.
3.2. Web analysis with Google Analytics
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses cookies to analyse websites in terms of user behaviour. The information generated by the cookies on the use of such websites is transferred to a Google server in the USA and stored there. However, your IP address is abbreviated prior to the analysis of usage statistics in such a way that no conclusions about your identity can be drawn. For this purpose, Google Analytics in our online offering was extended to include the ‘anonymizeIp’ code to ensure the anonymised collection of IP addresses.
Google will use the information obtained by the cookies to analyse your use of the website, to compile reports about website activities on behalf of the website operator and to provide additional services associated with website and Internet use. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
As explained above, you can configure your browser in such a way that it rejects cookies, or you can prevent the data generated by the cookie relating to your use of this website (including your IP address) from being collected and processed by Google by downloading and installing this browser plug-in.
As an alternative to the browser add-on, or when using a browser on mobile devices, you can activate an opt-out cookie in order to prevent any future collection of data by Google Analytics on this website (the opt-out only works in the browser and for the domain). If you delete your cookies in this browser, you will have to click on this link again.
You can find more information about Google and data privacy in its Overview on data privacy and its Data privacy policy.
4. Data subject rights
4.1 Right to information
You may at any time request information regarding the data stored about you, about the processing purposes, the categories of personal data that are processed, recipients or categories of recipients to whom personal data has been disclosed or are to be disclosed, and if possible, the planned duration of retention of personal data or, if this is not possible, the criteria used to define this period.
You can contact our data protection officer or any other employee of our company any time to make use of this right to information.
4.2 Right to correction, erasure or restrictions to processing
You are entitled to request immediate correction to your personal data at any time.
Furthermore, you can request the erasure of your personal data if the data is no longer required for the purpose for which it was collected, you wish to revoke your consent to processing and there is no other legal basis for its processing, you wish to object to processing, and there are no overriding, justifiable reasons for processing, or you wish to object to the processing of data for direct marketing when personal data was processed unlawfully, or when erasure is legally binding for us.
Moreover, you can request a restriction to the processing of your personal data if you dispute the accuracy of your personal data – namely for as long as it takes us to check the accuracy of data – if processing is unlawful but you reject the erasure and instead wish to restrict the use, if we no longer require your personal data for processing but you require data to assert, exercise or defend legal claims, or if you have objected to processing but it has not yet been clarified whether justified reasons on our part outweigh your reasons.
You can contact our data protection officer or any other employee of our company any time to assert the aforementioned rights.
4.3 Right to object
You are entitled to object at any time to the processing of your personal data for reasons arising from your particular situation if processing is necessary for the performance of a task carried out in the public interest or subject to the exercise of official authority vested in us, or if processing is performed in pursuit of our legitimate rights or those of third parties, and your basic rights or basic freedoms requiring the protection of personal data do not have priority. In this case, we will not continue to process your personal data unless we can provide proof of compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or if processing serves the assertion, exercise or defence of legal claims.
The right to object also exists when we use personal data for direct marketing; this also applies to profiling when it is associated with direct marketing. Your personal data will no longer be used for direct marketing purposes following objection.
You can contact our data protection officer or any other employee of our company at any time to make use of this right to objection.
4.4 Right to revoke your consent
You also have the right to revoke your consent to the processing of your personal data at any time without affecting the legitimacy of the processing based on your consent up to the time of revocation.
You can contact our data protection officer or any other employee of our company at any time to make use of this right of revocation.
5. Social plug-ins
5.1. Facebook
Facebook is a social network operated by Facebook Ireland Limited (Hanover Reach, 5–7 Hanover Quay, Dublin 2, Ireland). Facebook functions can be recognised by the Facebook logo. Depending on the type of functions, additional information may also appear (e.g. ‘Share’, ‘Like’).
When an A.Vogel page contains a Facebook button and you click on this button, your browser or the application will establish a direct connection with the Facebook servers and the button for the function in question will be loaded from there. In doing so, the information that the respective Internet page of A.Vogel has been accessed shall be transmitted to Facebook.
An exception is made, however, when you visit a page where we use a Facebook plug-in by means of which we present A.Vogel’s latest Facebook activities on www.avogel.ca. In this case, your browser or the application will establish a direct connection with the Facebook servers.
If you are simultaneously logged into Facebook as a user, it is also possible that a page visit can be allocated to your profile on Facebook. If you click on integrated Facebook buttons and then log into Facebook (or are already logged in), the information that was ‘liked’ or ‘recommended’ can be published on Facebook in your profile and your timeline in an abbreviated form. Facebook may thus collect and store additional usage data, if applicable. It is therefore possible for Facebook user profiles to be created that go beyond what you yourself disclose on Facebook.
At no time does A.Vogel find out which Facebook buttons you have used and when; instead Facebook only receives summarised, non-personal statistics about the use of A.Vogel’s fan pages on Facebook and summarised statistics about the use of Facebook buttons.
You can learn in detail about what data Facebook collects for its own purposes in Facebook’s data privacy policy; there you will also find further information regarding data collection and processing by Facebook and regarding your rights in this regard. Facebook’s data privacy policy can be accessed at: https://www.facebook.com/policy.php
5.2. Twitter
Twitter is a micro blogging service operated by the US company Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). If you access one of our web pages that contains a Twitter button and click on that Twitter button, your browser will establish a direct connection with Twitter servers, and the button will load from there. In doing so, the information that the respective Internet page of A.Vogel has been accessed shall be transmitted to Twitter. It is thus possible for Twitter to collect and also store usage data even when you are not logged in.
An exception is made, however, when you visit a page where we use a Twitter plug-in by means of which we present A.Vogel’s latest Twitter activities on www.avogel.ca. In this case, your browser or the application will establish a direct connection with the Twitter servers without you specifically clicking on the Twitter button.
When you click on the Twitter buttons and ‘tweet’ information via the Twitter window that opens up, the tweeted information will be transferred to Twitter. This information will then be published in your Twitter user profile.
You can obtain further information about how Twitter collects, analyses and processes your data and about your related rights in Twitter’s data privacy policy, which can be accessed at: http://twitter.com/privacy.
5.3. Pinterest
Pinterest is a social network operated by the US company Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. If you access one of our web pages that contains a ‘Pin it’ button and click on that button, your browser will establish a direct connection with Pinterest servers, and the button will load from there. In doing so, the information that the respective Internet page of A.Vogel has been accessed shall be transmitted to Pinterest. It is thus possible for Pinterest to collect and also store usage data even when you are not logged in.
When you actively use a Pinterest function, for example, by clicking on the ‘Pin it’ button, it is possible for Pinterest to process additional data. Pinterest can, for example, activate a cookie that Pinterest can use on other websites that also have integrated Pinterest buttons to identify that you have already clicked on the button.
If you are simultaneously logged into Pinterest as a user, it will also be possible to assign a page visit to your profile on Pinterest. If you click on integrated Pinterest buttons and then log into Pinterest (or are already logged in), it is possible, for example, for the ‘pinned’ information to be published in you profile. Pinterest may thus collect and store additional usage data, if applicable. If you wish to prevent this, you must log out of you Pinterest account before clicking on the button.
You can obtain further information about how Pinterest collects, analyses and processes your data and about your related rights in Pinterest’s data privacy policy, which can be accessed at: https://policy.pinterest.com/en/privacy-policy.
You can also change the settings used to store your data at https://help.pinterest.com/en/articles/personalization-and-data#info-ad even if your do not have a Pinterest account.
5.4. YouTube
The video platform ‘YouTube’, where users can upload videos and make them publicly available, is operated by YouTube LLC, C901 Cherry Ave., San Bruno, CA 94066, USA and is a subsidiary of Google Inc., based in San Bruno, California, USA.
We have integrated YouTube video clips in our online offering. These are stored on http://YouTube.com and can be played directly on our web pages. The videos have all been integrated in ‘advanced data protection mode’, i.e. no data about you as a user will be transferred to YouTube if you do not play the videos. It is only when you play the videos that the following data is sent. We have no influence on the transfer of data.
By playing the video, the third party receives the information that you accessed the corresponding sub-page of our website. Moreover, additional information about the purpose and extent of data collection and about the processing of such data is collected by the plug-in provider. You can obtain more information about how YouTube collects, processes and uses your data in the information provided on data privacy at: https://policies.google.com/privacy. You will also find additional information on your associated rights and the setting options you can use to protect your privacy.
The information that you accessed the corresponding sub-page of our website will be sent to YouTube irrespective of whether you are logged into a YouTube user account, or whether such an account exists. If you are logged into YouTube as a user, the data will be attributed directly to your account. If you do not want this information to be attributed directly to you, you must log out of your user account before activating the button.
YouTube stores the data as user profiles and uses it for the purposes of advertising, market research and/or a custom design of its web page. This type of evaluation is used in particular (including for users not logged in) to create user-specific advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles. Please contact YouTube if you wish to exercise your right to object.
5.5. Data privacy policy for the use of Google +1
You can use the Google +1 button to publish information globally. The Google +1 button provides you and other users with personalised content from Google and our partners. Google stores information made available by you as +1 content, together with information about the page which you were viewing when you clicked on +1. Your +1 button may be displayed as information together with your profile name and photo in Google services, for example in search results or in your Google profile, or at other places on websites and ads on the Internet. Google records information about your +1 activities in order to improve Google services for you and for others. In order to be able to use the Google +1 button, you require a globally visible public Google profile that must at least include the name chosen for the profile. This name is used in all Google services. This name may in some cases replace a different name that you used when sharing content via your Google account. The identity of your Google profile may be displayed to users who know your email address or who have other identifying information from you. Use of captured information: In addition to the uses described above, the information you provide will be used in accordance with Google’s currently applicable data privacy policy. Google may possibly publish summary statistics about +1 activities of users or pass these on tousers and partners, such as publishers, advertisers and associated websites.
6. Google Maps
This website uses the map service Google Maps operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). This service is used by us in particular to provide the integrated ‘store finder’ service. In order for the Google map material to be integrated and displayed in your web browser, your web browser must establish a link to a Google server that may be located in the USA when it accesses a contact page. This provides Google with information that the contact page of our online access was accessed by your device’s IP address. You can find additional information in the Google Maps Terms of Service.
7. Data security
We undertake the latest technical, state-of-the-art measures to ensure data security, in particular with the aim of protecting your personal data against risks during data transfers and against access by third parties. These are constantly adapted to reflect the current state of the art.
8. Purpose of data collection and legal basis
We process personal data in order to ensure a smooth connection establishment to our website and ease of use for visitors, to evaluate system security and stability and for other administrative purposes. The legal basis is article 6 section 1 p. 1 lit. f of the GDPR (General Data Protection Regulation). Moreover, we process data with your explicit consent in accordance with article 6 section 1 p. 1 lit. a of the GDPR as well as to meet our contractual obligations to you or to perform pre-contractual measures in response to your enquiry in accordance with article 6 section 1 p. 1 lit. b of the GDPR.
9. Special Note on Children
Children (persons under the age of eighteen (18)) may not use the Site without supervision. In addition, we ask them not to give us Personal Information. If you are under eighteen (18) years of age, you can use this Site only under the supervision of your parents or guardian.
10. Disclosure of personal information
A. Vogel will not disclose Personal Information for purposes other than those for which it was collected, except with the express consent of the Site's user or as required by law or by a competent authority.
There are a variety of circumstances in which we may be required to disclose Personal Information to third parties. For example, A. Vogel may disclose Personal Information to third parties hired to perform functions on our behalf or to a public authority or an agent of a public authority if, upon reasonable notice by A. Vogel, it appears that there is an imminent threat to the life or to private property that could be avoided or minimized by the disclosure of that information.
In situations where we disclose Personal Information in accordance with this Privacy Policy, we disclose only the information that is required and, if it is reasonable and practical to do so, we sign a confidentiality agreement with third parties to whom we disclose the Personal Information.
It is also possible that we retain the services of third parties which we consider as service providers to facilitate or outsource one or more aspects of the business and operations relating to the products and services provided to you, especially for aspects related to web hosting, programming and payment. We can send some of your Personal Information directly to these providers. These service providers are subject to a duty of confidentiality towards A. Vogel and to all the legal provisions that prevent them from using your Personal Information for any purpose other than to facilitate or carry out the mandate given by A. Vogel, unless we have your express consent or your permission to use additional information. In some cases, the service provider may collect information from you directly. If so, we will inform you of the involvement of the service provider, and you will be responsible for any additional information you provide, as well as additional uses for them. If you provide additional information directly to a service provider, its use of your information is governed by that service provider's own privacy policies.
Because of the rules and regulations in place, we cannot assure you that all of your Personal Information will never be disclosed in a manner that is not described in the present Privacy Policy. For example, and without limiting the generality of the foregoing, it is possible that we may be forced to disclose, in some cases, Personal Information to the government or to third parties. Some third parties may also unlawfully intercept transmissions or private communications, or access thereto; or users can make abusive or malicious misuse of the Personal Information they collect on the Site. Therefore, although we use practices conform to industry standards to protect your privacy, we cannot guarantee you that your Personal Information or your private communications will always remain private, and you should not expect them to remain private.
11. Managing your password
You are responsible for any actions taken using your user name and password, including fees charged to your account. We recommend that you never reveal you're A. Vogel password to any third party. If you choose to share your user name and password or your Personal Information with third parties, you will be liable for any actions taken through your account and you therefore have an interest in reading the privacy policy of this third party beforehand. If you disclose your password, you may lose considerable control over your Personal Information and you may take the risk that legally binding actions be taken on your behalf. Thus, if the security of your password has been compromised, for whatever reason, you should immediately change it in accordance with the approach outlined in Section 9 of the present Privacy Policy.
12. Severability
Should any provision of this Privacy Policy be contrary to the law, void or unenforceable for any reason whatsoever, that provision shall be deemed severable from the Privacy Policy and shall not affect the validity or enforceability of other provisions.
13. Applicable Law and Jurisdiction
This Privacy Policy and its interpretation are subject to the laws that are in force in the province of Quebec and in Canada, without giving effect to any principles of conflicts of laws. The courts of the District of Montreal, in the Province of Quebec, have exclusive jurisdiction to hear any dispute related to the present Privacy Policy, including its interpretation and its effects.
14. Changes to the data privacy policy
This data privacy policy was issued in May 2018. Bioforce Canada Inc. may occasionally revise this online data privacy policy. Any changes to this data privacy policy will be communicated immediately on this page.
Dollard-des-Ormeaux, QC, Canada, May 2018
Inspiration for a healthy life!