top of page
This website was created by Liquis
covessa background.png

Data Protection

1. Introduction

 

Data protection is an important asset. In this privacy policy (hereinafter "Privacy Policy") you will find out which data processing takes place on the website of Covessa GmbH, Kurfürstendamm 15, 10719 Berlin (hereinafter "Covessa"), on which legal basis this takes place and where you can obtain further information.

​

2. Contact

 

When you contact Covessa by e-mail (info@covessa.de), the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. f GDPR.

​

Your data, which we have received in the course of contacting you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

​

As the controller, Covessa has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can always have security gaps. Absolute protection cannot be guaranteed; in any case, sending unencrypted e-mails is not secure. We therefore ask you not to send sensitive data by unencrypted e-mail, but to use either encrypted communication channels or the postal service.

​

3. Cookies

 

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store a variety of information, such as your language preference, the length of time you have visited the site, or the information you have entered there. The information stored in cookies can also be used to identify preferences and to target content according to areas of interest.

​

There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings. With Set up cookies you can revise your cookie selection for our website. The changes will become active the next time the page is loaded. 

​

First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting.

The legal basis for the processing of personal data by means of the cookies used on this website is your consent in accordance with Art. 6 Para. 1 lit. a GDPR as well as our legitimate interest in accordance with Art. 6 Para. 1 S.1 lit. f GDPR, insofar as these are technically necessary cookies, i.e. those that are required for the proper operation of the website. 

​

You can delete cookies already stored on your end device at any time. If you want to prevent cookies from being stored, you can do this via the settings in your internet browser. You can find instructions for popular browsers here: Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge browser, Safari, Safari mobile. Alternatively, you can also install so-called ad blockers. Please note that individual functions of the Covessa website may not work if you have disabled the use of cookies.

​

4. Google Web Fonts 

​

This website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. Covessa has opted for the offline variant, in which the Google Fonts are stored locally on our web server. The management of the fonts is then possible - using CSS - as with any other font family. A transmission of the IP address and other data to Google does not take place.

​

The use of Google Web Fonts is in the interest of a uniform and appealing presentation of the Covessa website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

​

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

 

5. Cloudflare

 

To protect against attacks, malicious bots and to improve performance, Covessa uses the services of CloudFlare Inc, 101 Townsend St, San Francisco, CA USA for this website. All data to and from this server is transmitted through Cloudflare's CDN ("Content Delivery Network"). Cloudflare provides Internet security services and distributed DNS services (domain name servers) that act as reverse proxies for websites.

​

Cloudflare collects statistical data about visits to this website. The access data include: Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical analysis for the purpose of operation, security and optimization of its own offer.

​

When a customer account is deleted, the data is deleted from the servers. In addition, you have the option to purge data from the cache at any time. Log files are kept for up to 7 days.

​

The use of Cloudflare serves to protect this website from attacks, harmful bots and to improve its performance. These purposes constitute a legitimate interest of Covessa pursuant to Art. 6 para. 1 lit. f GDPR.

 

Further information on data processing by the provider, in particular on data protection and data security, can be found at: https://www.cloudflare.com/security-policy/.

​

6. GStatic

 

Covessa uses on this website the service Gstatic of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mouintain View, CA, 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

​

Gstatic is used to retrieve static content to ensure the functionality of this website. In this context, your browser may transmit personal data to Gstatic.

​

The legal basis for the data processing is the legitimate interest of Covessa pursuant to Art. 6 para. 1 lit. f GDPR. This consists of a faultless function of this website. The deletion of the data takes place as soon as the purpose of their collection has been fulfilled. Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, Covessa has concluded EU standard contractual clauses with the service provider in order to establish a secure level of data protection.

​

For more information, please see Gstatic's privacy policy: https://policies.google.com/privacy. You can prevent the collection as well as the processing of your data by Gstatic by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find this for example at www.noscript.net or www.ghostery.com).

​

7. Web analysis with Google Analytics

​

This website uses functions of the web analysis service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, 1600. Google Analytics uses cookies, which allow an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

 

We use Google Analytics with the extension "anonymize IP" on our website. This means that your IP address collected by the Google Analytics cookie is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google uses this information on our behalf to evaluate your use of this website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Our website also uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person.

 

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. a GDPR. You can revoke your consent at any time as described above by adjusting your cookie preferences. You can deactivate the "demographic characteristics" function at any time via the ad settings in your Google account.

​

For more information on how Google Analytics handles user data, please see Google's privacy policy at www.google.com/analytics/terms/de.html.

 

8. Google Tag Manager

 

For reasons of transparency, we would like to point out that we use the Google Tag Manager of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

 

The Google Tag Manager itself does not collect any personal data. Google Tag Manager makes it easy for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behavior, to record the impact of online advertising and social channels, to set up remarketing and targeting and to test and optimize websites. We use Tag Manager for Google's Analytics service. If you have opted out, this opt-out will be honored by Google Tag Manager. For more information on the Google Tag Manager, see: https://www.google.com/intl/de/tagmanager/use-policy.html.

 

9. Advertising partner identification and remuneration

 

Once you click on a Covessa ad on an advertising partner's website, you will first be directed to that website and then to a link. On the Covessa website, Covessa creates a log file with the following information:

​

an irreversibly hashed version of your IP address and information about your device (e.g. "Macintosh; Intel Mac OS X 10_14_6");

the timestamp of your request and;

the name of the advertising campaign.

​

When you log in through the Covessa app, Covessa also creates an irreversibly hashed version of your IP address and device information (e.g., "Macintosh; Intel Mac OS X 10_14_6").  Covessa matches the hash values in these two log files to determine how many users registered for a set of credentials in the Covessa App after clicking on a Covessa ad on an advertiser's website. Covessa stores the hashes for a period of one week after the hash is created. Covessa does not combine this data with other data, not with your account data, your name or your health data.

​

Covessa uses the result of this comparison exclusively for the following purposes:

​

  1. to determine how many users have registered for an account on the Covessa App following a particular marketing campaign; and 
     

  2. to compensate Advertisers; the amount of compensation received by the Advertiser is based on the number of successful registrations that have occurred after a click on a Covessa ad on the Advertiser's website.

 

The legal basis for processing your personal data for the purposes described above is the legitimate interest of Covessa, 

​

  1. to know how many users have registered for an account in Covessa App after a particular marketing campaign; and 
     

  2. to remunerate advertising partners in accordance with the agreement (Art. 6 para. 1 lit. f GDPR).

 

10. Rights of the user 

​

With regard to the personal data, we hold about you, you have various rights which you may exercise depending on the requirements and limitations of the applicable data protection laws. You can contact Covessa at any time to:

​

  1. To request access to and information about the personal data processed in connection with your use of the App and/or the Services. You have the right to obtain a copy of the personal data processed. For additional copies that you request, Covessa may charge a reasonable fee based on the administrative costs;

  2. Request Covessa to correct any inaccurate information about you;

  3. To request the deletion of your personal data;

  4. Request Covessa to restrict the processing of your personal data if you consider that 

    • these data are incorrect,

    • the processing by Covessa is unlawful; or 

    • Covessa no longer needs to process such data for a specific purpose, unless Covessa is prohibited from deleting the data because Covessa must comply with a legal or other obligation or you do not wish the data to be deleted.

  5. Request the transfer of your personal data to another personal data controller by receiving your personal data, if provided by you, in a commonly used electronic format for subsequent transfer to another party;

  6. Object to the processing of your personal data if the legal basis for the processing by Covessa of your personal data or a legitimate interest does not (or no longer) exist. 

​

Covessa will comply with your request unless there are compelling legitimate grounds for the processing which override your interests and rights, or Covessa needs to further process the data in order to exercise or defend a legal claim. 

​

If Covessa uses your personal data based on your consent, you have the right to revoke your consent at any time free of charge for the future. 

​

If you wish to contact Covessa about any of the above rights, please contact Covessa via the website www.covessa.de or by email at privacy@covessa.de. As mentioned above, doctors and/or service providers act as independent data controllers in relation to any processing of your personal data that takes place while providing the testing services enabled through the App. Therefore, please contact the respective doctor and/or service provider if you wish to make a request or exercise any of your rights in relation to the services provided by the doctor / service provider.

 

11. Right to complain

​

If you have any questions, you can contact Covessa using the contact details above. You have the right to lodge a complaint with a data protection authority if you believe that the processing of your personal data is incorrect or does not comply with the law. In these cases, the competent authority is in particular the data protection authority of your place of residence or the data protection authority responsible for Covessa, i.e. the Berlin Commissioner for Data Protection and Freedom of Information.

bottom of page