privacy policy

privacy policy

We are pleased that you are visiting our website and its subpages (hereinafter jointly referred to as "website" or "internet site") and thank you for your interest in our company and our products and services. The protection of your privacy when using our website is important to us. Therefore, please take note of the following information:

The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes. We generally only process personal data to the extent that this is necessary to provide a functional website, when contacting us via the email addresses provided on our website and to provide our content and services, i.e. in particular for contract processing.

If we obtain consent from the data subject for processing personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (“GDPR”) serves as the legal basis. If personal data is required to fulfill a contract, Art. 6 (1) (b) of the GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

The personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Storage may also take place if this has been provided for by European or national lawmakers. The data will also be blocked or deleted if a prescribed storage period expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

Personal data is only transferred to state institutions and authorities within the framework of mandatory national legal provisions. Our employees are obliged to maintain confidentiality.


1. Collection, processing and use of personal data on our website

Each time our website is accessed, our system automatically records data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used,
• The user’s operating system,
• The user’s Internet service provider,
• The user’s IP address,
• date and time of access,
• Websites from which the user’s system accesses our website,
• Websites accessed by the user's system via our website.

The log files contain IP addresses or other data that allow an assignment to a user. This could be the case, for example, if the link to the website from which the user accesses the website or the link to the website to which the user switches contains personal data.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Storage may also occur if this has been provided for by European or national lawmakers. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. This is also our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

With the exception of the IP address, personal data will only be stored if you provide it to us voluntarily.


2. Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Paragraph 1 Letter b of GDPR, we collect and process personal data when you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time and can do so by sending a message to the data protection officer at the address below (see Section 12). We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data that is permitted by law, about which we will inform you accordingly below.


3. Collection and processing of personal data when contacting us via contact form or email

There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be sent to us and stored. The following data will also be stored when the message is sent:

• The user’s IP address,
• date and time of registration,
• Website URL on which contact details are entered,
• Data provided by the customer via the contact form.

Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.

Alternatively, you can contact us using the email addresses provided. In this case, the user's personal data transmitted with the email will be saved. The data will not be passed on to third parties in this context. The data will be used exclusively to process the conversation. The processing of the personal data from the input mask serves us solely to process the contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended, i.e. when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The legal basis for the processing of this data is Art. 6 (1) (a) GDPR if the user has given their consent. The legal basis for the processing of data transmitted when sending an email is Art. 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.


4. Transfer of personal data

We will treat your personal data confidentially. We will only pass it on to third parties if we are legally obliged to do so or if we commission an external service provider to process your information, e.g. the transport company commissioned with the delivery or a payment service. These service providers only receive the information they need to perform their tasks. They may not use it for other purposes and are obliged to treat the information in accordance with the GDPR and the Federal Data Protection Act. We also conclude appropriate confidentiality agreements and, if necessary, contract data processing agreements with each partner. In all other cases, we will inform you if personal information is to be passed on to third parties and thus give you the opportunity to give your consent.


5. Cookies

We use cookies on our website. For information about the cookies we use in connection with the operation of our store with Shopify, please visit https://www.shopify.com/legal/cookies .

We use cookies to optimize and improve our website and services, including remembering your actions and preferences, to perform analytics, and to better understand how users connect with the services. We may also allow third parties and service providers to use cookies on our website to better customize the services, products, and advertising on our website and other websites.

Most browsers accept cookies by default, but you can set your browser to remove or reject cookies through your browser controls. Please keep in mind that removing or blocking cookies may impact your user experience. It may also cause some of the Services, including certain features and general functionality, to not function properly or to become unavailable. In addition, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.

You can change the cookie preferences you set when you first visited our site here at any time.


6. Encrypted payment transactions

The entire ordering process takes place exclusively via an encrypted SSL connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” or by the lock symbol in your browser bar. With encrypted communication, your payment data cannot be read by third parties.


7. Payment providers

a. Shopify Payments, USA

Shopify Payments, USA is a service that enables payment processing in the online shop. As part of the ordering process, relevant information about your order (name, address, credit card number, invoice amount, currency, etc.) is forwarded to the payment service provider Stripe in order to process the payment.

The address of Stripe Inc. is:
510 Townsend Street
San Francisco, CA
94103, USA

Your data will be transmitted to Stripe on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). Your data will be passed on solely for the purpose of payment processing. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy .

b. PayPal

This website offers payment via PayPal , among other options. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.

As part of the ordering process, information about your order (name, address, credit card number, invoice amount, currency, etc.) relevant to processing the payment will be passed on to the payment service provider PayPal.

Your data will be transmitted to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). Your data will be passed on solely for the purpose of payment processing. You can find more information about PayPal's data protection at the URL paypal.com/privacy .


8. Use of Google Adwords Conversion Tracking

This website uses the online advertising program “Google Adwords” and, as part of Google Adwords, conversion tracking. We use Google Adwords to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. We are therefore pursuing the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Adwords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, and in particular we cannot identify users based on this information. The information obtained using the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current level of knowledge: By integrating Adwords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive advertisements from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads , whereby this setting will be deleted if you delete your cookies; c) by deactivating interest-based advertisements from providers who are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices , whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers using the link http://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to fully use all the functions of this offer.

The legal basis for the processing of your data is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html . Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org . Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .


9. Use of social plugins and embedding of links

We do not use social media plug-ins on our website. If our website contains symbols from social media providers (e.g. Twitter, Facebook, Instagram, Pinterest, Houzz, YouTube), we only use these to passively link to the pages of the respective providers.

We also use other symbols embedded on our website, such as the kununu symbol or embedded links to Personio or to websites on which studies are located, only for passive linking to the pages of the respective providers.

a. YouTube

We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transferred to YouTube if you do not play the videos. The data mentioned below is only transferred when you play the videos. We have no influence on this data transfer.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your YouTube profile to be assigned, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and processing by YouTube can be found in YouTube's privacy policy. There you will also find further information on your rights and setting options for protecting your privacy: https://policies.google.com/privacy?hl=de

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .


b. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The data collected is used to optimize our website and for advertising purposes. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Please note that this website uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses are only processed in abbreviated form, thus preventing them from being linked to individuals. If the data collected about you is personally identifiable, this is immediately excluded and the personal data is deleted immediately. We use Google Analytics to analyze and regularly improve the use of our website. Using the statistics obtained, we can improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

The legal basis for the use of Google Analytics is Art. 6 ( 1 ) sentence 1 lit. f GDPR.

Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html , and the data protection declaration: http://www.google.de/intl/de/policies/privacy .


c. Google Tag Manager

This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tag Manager itself does not set cookies, only tags, and does not collect any personal data. The service triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Tag Manager will not be merged with other data from Google. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

The legal basis for the use of Google Tag Manager is Art. 6 Para. 1 S. 1 lit. f GDPR.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://support.google.com/tagmanager/answer/7157428 ; Privacy policy: http://www.google.de/intl/de/policies/privacy .

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

10th Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

We use the so-called double opt-in procedure to register for our newsletter. This means that after you register, we will send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only mandatory information required to send the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The legal basis is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in each newsletter email, by email to support @clearlightinfrarotkabinen.de or by sending a message to the contact details provided in the imprint.

11. Information about your rights

a. Right to information

You can request information from us at any time about the personal data we process about you. You have the right to receive a copy of the data we process about you.

b. Right to rectification, right to erasure

You have the right to request that inaccurate personal data concerning you be corrected or that incomplete personal data be completed. You also have the right to request that we delete personal data concerning you if and to the extent that it is no longer required for the purpose of processing, if you have withdrawn your consent on the basis of which the processing was carried out or have objected to processing and if there is no other legal basis for the processing or if the processing was carried out unlawfully. We will delete your personal data at your request if we do not absolutely need this data to fulfill the contract or if we are legally obliged to retain it.

c. Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if

• you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data;

• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;

• we no longer need the personal data for the purposes of processing, but you require them to assert, exercise or defend legal claims, or

• You have objected to the processing pursuant to Art. 21 Para. 1 GDPR, as long as it has not yet been determined whether the legitimate reasons on our part outweigh those on your part.

d. Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another controller without hindrance, provided that

• the processing is based on consent pursuant to Art. 6 Para. 1 Sentence 1 Letter a) or Art. 9 Para. 2 Letter a) or on a contract pursuant to Art. 6 Para. 1 Sentence 1 Letter b) GDPR and

• the processing is carried out using automated procedures.

To the extent that this is technically feasible, you have the right to have the personal data transmitted directly from us to another controller.

e. Right of objection

You have the right to object at any time to the processing of personal data concerning you based on Article 6 (1) sentence 1 letter e) or f) of the GDPR, for reasons related to your particular situation. We will then no longer process your data covered by the objection, unless there are compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

f. Right to withdraw consent

You have the right to revoke your consent to data processing at any time without giving any reason and without giving any form. The revocation does not affect the legality of the processing carried out up to that point.

To exercise your rights, please contact our data protection officer using the contact details below.

Finally, you have the right to lodge a complaint with the responsible supervisory authority for data protection. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information .


12th Data Protection Officer

You can contact our data protection officer at support@helsi.life or our postal address Clearlight Saunas Europe GmbH, C/O LPA-GGV
Herrengraben 3, 20459 Hamburg, Germany with the addition, the Data Protection Officer”.


13. Changes to this Privacy Policy

We reserve the right to change the contents of this privacy policy from time to time in order to adapt these to technical changes on our website or to the relevant legal requirements. As soon as the privacy policy is changed, we will make the current version available to you on this page.

Status: 02.04.2024