During the mere informational use of our website, i.e., if you do not register or otherwise transmit information to us, we only collect information that your browser transmits to our server (so-called "server log files"). The information is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should indications point to illegal use.

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location information and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. For more information on cookies, please refer to our Cookie Policy.

When contacting us, personal information is collected. Which information is collected in the case of a contact form can be seen from the respective contact form. This information is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. Your information will be deleted after final processing of your request, if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

When you create or update your account, we collect and store the data you provide, like your email address, password, phone number, and name, and assign you a unique identifying number ("Account Data"). Account Data consists of Personal Data as described below.

Personal Data is information that can be used to identify you specifically, including your name, email address, telephone number, and date of birth or demographic information like your hometown. You consent to give us this information by providing it to us voluntarily on our website. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our website.

The legal basis for the processing of your personal information in the context of direct marketing measures is either your consent or our legitimate interest in marketing and promoting our courses and services. The purpose of processing your personal information in the context of direct marketing measures is to send information, offers and, if applicable, to promote sales.

We process information of our contractual and business partners, e.g., customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g., to answer inquiries.

We process this information to fulfill our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organization. We only disclose the information of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of the contractual partners (e.g., to participating telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisers, payment service providers or tax authorities).

Unless otherwise specified, the purposes of processing this information are: Contractual performance and service, contact requests and communication, office and organizational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioral marketing. Additionally, the legal bases for processing this information are: Contractual performance and pre-contractual inquiries, legal obligation, and our legitimate interests.

Gleo Health is committed to keeping your personal information secure. We implement appropriate measures and take steps to protect personal information against loss and theft as well as unauthorized access, disclosure, copying, use, and modification using security safeguards, including physical, administrative, organizational and technological measures, appropriate for the sensitivity of your personal information.

We comply with industry standards that require safeguards for handling and securing customer information. These include using secure networks, encryption or other protection of cardholder information, physical and technical access controls, monitoring and testing of security systems, and implementation of the information security policies. Gleo Health Associates who have access to your personal information are made aware of the importance of keeping it confidential. When disposed of, the information is securely shredded, destroyed, erased, or otherwise made unreadable.

Please be aware that no security measures can guarantee complete security. You should also take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your login credentials private.

Your personal data will only be passed on if there is a legal obligation to do so or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law.

a) Disclosure within affiliated companies
‍
We pass on your personal data for the conclusion and processing of contracts for offers on our website to affiliated companies. This is particularly necessary so that you can use all our offers. If you contact a store or our customer hotline with questions, complaints or returns as well as other complaints, they will also receive access to your order data in order to be able to process your request.

b) Disclosure to service providers
‍
For the operation and optimization of our services and for the processing of contracts, various service companies work for us, e.g., for central IT services or the hosting of our website, for the payment and delivery of products or for the dispatch of newsletters, to whom we pass on the data required for the fulfillment of the task (e.g., name, address).

Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We therefore agree on specific data security measures with these companies and monitor them regularly.
‍
In contrast to order processing, in the following cases we transmit data to third parties for their own use in order to process the contract. In the case of payment for goods to the payment service provider specified when the order was placed.

We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to our payment service provider. The transmission of your personal information during an order transaction is encrypted using industry standard Secure Socket Layer ("SSL") technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us but will be encrypted and collected directly.

c) Disclosure to other third parties
‍
We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g., due to official or court orders, or if we are entitled to do so, e.g., because this is necessary for the prosecution of criminal offenses or for the exercise and enforcement of our rights and claims.

Gleo Health has taken a variety of security measures to adequately protect personal information to an appropriate extent. All information held by Gleo Health is protected by physical, technical, and procedural measures that limit access to the information to specifically authorized persons in accordance with this Policy Statement.

The Gleo Health website is behind a software firewall to prevent access from other networks connected to the Internet. In addition, only employees who need to perform a specific job function are granted access to personally identifiable information. These employees are trained in security and privacy practices and treat your information confidentially.

You have the ability to exercise the following rights:

Right to withdraw consent
‍
You have the right to withdraw your consent at any time by emailing contact@gleohealth.com, subject to legal and contractual restrictions. Note that your withdrawal of such consent may limit your ability to obtain certain products and services.

Right of access, correction, deactivation or deletion of accounts
‍
You have the right to request access to and obtain a copy of any of your personal information that we may hold, to request correction of any inaccurate information relating to you and to request the deactivation or deletion of your accounts under certain circumstances. You may submit these requests by emailing contact@gleohealth.com.

Right to submit a privacy complaint
‍
You have the right to submit a complaint with the appropriate governing body in the jurisdiction of your residence if you consider that Gleo Health's management of your personal information infringes applicable laws (although we ask you to try to resolve any complaint with us first).
‍
Right to opt out
‍
You have the right to opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects.
‍
Right to data portability
‍
You have the right to request access to and obtain a copy of any of yYou have the right to obtain your data in a portable and readily usable format that allows you to easily transmit this data.our personal information that we may hold, to request correction of any inaccurate information relating to you and to request the deactivation or deletion of your accounts under certain circumstances. You may submit these requests by emailing contact@gleohealth.com.

Right to know what personal information is being collected and how the personal information is used and shared
‍
You have the right to know what personal information Gleo Health has collected, used, or shared, and why Gleo Health collected, used, or shared that information.

Right to non-discrimination for exercising your CCPA rights.
‍
You will not be denied services, charged a different price, or receive a different level of service as a result of exercising your CCPA rights.

If you have a question about our personal information practices, please contact us at contact@gleohealth.com.
‍
If you make a request, we will confirm that we have received your request and let you know if we need anything else from you. We typically fulfill your request within two (2) to three (3) weeks unless the request is particularly complex, or we receive multiple requests from you. In these cases, we may extend the time period, but we will always let you know.

For your protection, we only fulfill requests for the personal information associated with the email address and/or account number that you identify in your request, and we may need to take other steps to verify your identity before taking any action. When permitted by law, we may charge an appropriate fee to cover the costs of responding to your request.

Currently, various browsers — such as Internet Explorer, Firefox, and Safari — offer a "do not track" or "DNT" option that relies on a technology known as a DNT header, which sends a signal to Web sites visited by the user about the user's browser DNT preference setting. At this time, Gleo Health has not enabled DNT functionality on its websites, in part because industry groups have adopted no common industry standard for DNT, technology companies, or regulators, including no consistent standard of interpreting user intent. The company takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

The CAN-SPAM Act is a regulation that sets the guidelines for commercial email, establishes requirements for commercial announcements, provides recipients the right to have certain emails not delivered to them, and spells out hard fines for violations.

We collect your email to be able to send information, react to questions, and/or other demands or questions
To maintain compliance with CANSPAM, we agree to:

If anytime you want to unsubscribe from receiving future emails, you can email us by using the contact form at our website gleohealth.com, and we will immediately remove you from all marketing and non-service related communication.

We kindly ask you to regularly inform yourself about the content of our Privacy Policy. We will amend the Privacy Policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

If you have any questions or concerns about a possible disclosure, breach, or misuse of your personal information, or any other questions or comments, you can contact us at contact@gleohealth.com