Fraud Blocker Privacy Policy - A.Vogel Canada

Search

Privacy Policy

Bioforce Canada Inc., together with its affiliated companies (“Bioforce”)  markets its products in Canada under the healthcare brands A.Vogel, Natur, Biotta, bioStrath, Herbatint and Aromaforce. Bioforce ensures that any Personal Information it receives, process, stores or transmits, is done in accordance with this policy. Personal Information is information that allows conclusions to be made about your identity, for example, your name, phone number, address or email address. Statistical data that we may, for example, collect during your visit to our online offering and that cannot be associated with your person is not included in the concept of Personal Information. 

Bioforce does not pass on any Personal Information to third parties and only makes this data available when it is required to fulfil your order in our online shop or for prize contests. Bioforce takes the protection of your Personal Information very seriously. Our employees and any third parties commissioned by us are obliged to respect the confidentiality of your data. 

The following privacy policy is intended to provide you with further details of this. You can print this document out or save it using the standard functions of your browser (usually under File / Save).

1.    Name And Address of The Data Controller and of The Privacy Officer

  • Name and address of the data controller

The contact person or the so-called data controller responsible for the collection, processing and use of Personal Information is:

Bioforce Canada Inc.
66 Brunswick
Dollard-des-Ormeaux, QC
Canada
H9B 2L3
514-421-3441
514-421-6446 

  • Name and address of the Data Protection and Privacy Officer

Sonia Chartier
514-421-3441 #219
schartier@bioforce.ca

You can contact our Privacy Officer at any time to exercise your rights or to obtain further information about how Bioforce treats your Personal Information.

2.   Your Privacy Rights

  • Your Right to Be Informed

You have the right to know how Bioforce collects your Personal Information, what information is collected, how it is used and shared. When you use our online offering or interact with our website (e.g. by completing and submitting the contact form), your Personal Information will be collected, processed and used. 

Purpose of Data Collection and Legal Basis 

We process Personal Information in order to ensure a smooth connection establishment to our website and ease of use for visitors, to evaluate system security and stability and for other administrative purposes. Moreover, we process data with your explicit consent in accordance with applicable privacy law as well as to meet our contractual obligations to you or to perform pre-contractual measures in response to your.

We do not collect any Personal Information when you simply use our online offering for informational purposes, with the exception of data that your browser passes on in order to allow you to visit our website.

Automated data processing (log files etc.)

Our site can be visited without actively providing personal information about the user. However, we automatically save access data (server log files) such as:  the name of the Internet service provider, the operating system used, the website from which the user visits us, the date and duration of the visit or the name of the requested file, as well as for security reasons, e.g. to detect attacks on our website, the IP address of the device used for a period of 7 days. This data will not be merged with other data sources. We process and use the data for the following purposes: provision of the website, prevention and detection of errors/malfunctions, and misuse of the website.

Data categories: Meta and communication data (e.g. IP address, date and time of access, time, type of HTTP request, website from which access is made (referrer URL), browser used and, if applicable, operating system accessing computer (user agent)

Purpose of processing: Prevention and detection of errors/malfunctions, detection of misuse of the website.

Legal basis: Legitimate interest in accordance with Art. 6 Para. 1 lit. f) GDPR Legitimate interests: Fraud prevention to detect misuse the website.

In addition to the purely informational use of our online offering and the customer portal, there are various ways for you to interact with us, and for us to offer services that you may be interested in using. These include, in particular, the contact form and registration for our newsletter as well as tests and checks and prize contests. In order to make use of these, you must provide additional Personal Information that we will use to provide the service in question and which we will also save. We will only use the data for the underlying purpose and in compliance with principles of data protection.

Disclosure of your Personal Information to affiliates and third parties

Bioforce will not disclose Personal Information for purposes other than those for which it was collected, except with the express consent of the Site's user or as required by law or by a competent authority.

Bioforce is a global healthcare organisation.  Its website server is hosted in Switzerland.  Your personal information may be transferred to Bioforce’s Swiss affiliate. 

There are a variety of circumstances in which we may be required to disclose Personal Information to third parties. For example, Bioforce may disclose Personal Information to third parties hired to perform functions on our behalf or to a public authority or an agent of a public authority if, upon reasonable notice by Bioforce, it appears that there is an imminent threat to the life or to private property that could be avoided or minimized by the disclosure of that information.

It is also possible that we retain the services of third parties which we consider as service providers to facilitate or outsource one or more aspects of our business and operations relating to the products and services provided to you, especially for aspects related to web hosting, programming and payment. We can send some of your Personal Information directly to these providers. These service providers are subject to a duty of confidentiality towards Bioforce and to all the legal provisions that prevent them from using your Personal Information for any purpose other than to facilitate or carry out the mandate given by Bioforce, unless we have your express consent or your permission to use additional information.

Our service providers may only use any such disclosed data to perform their task. They were carefully chosen by us and given instructions in writing to protect your privacy. They are obliged to follow our instructions and are monitored by us at regular intervals. It is forbidden for your Personal Information to be used for any other purpose, and none of the service providers we commission will do so.

In some cases, the service provider may collect information from you directly. If so, we will inform you of the involvement of the service provider, and you will be responsible for any additional information you provide, as well as additional uses for them. In situations where we disclose Personal Information in accordance with this Privacy Policy, we disclose only the information that is required and, if it is reasonable and practical to do so, we sign a confidentiality agreement with third parties to whom we disclose the Personal Information.  If you provide additional information directly to a service provider, its use of your information is governed by that service provider’s own privacy policies.

Because of the rules and regulations in place, we cannot assure you that all of your Personal Information will never be disclosed in a manner that is not described in the present Privacy Policy. For example, and without limiting the generality of the foregoing, it is possible that we may be forced to disclose, in some cases, Personal Information to the government or to third parties. Some third parties may also unlawfully intercept transmissions or private communications, or access thereto; or users can make abusive or malicious misuse of the Personal Information they collect on the Site. Therefore, although we use practices conform to industry standards to protect your privacy, we cannot guarantee you that your Personal Information or your private communications will always remain private, and you should not expect them to remain private.

Data collected by Bioforce will only be passed on to a third party if this is necessary for the purpose of executing a contract or payment, or you have given your consent to this in advance. Prior to doing so, we will take into account the following:

  • the sensitivity of the information;
  • the purposes for which it will be used;
  • the safeguards that would apply to it, including contractual measures; and
  • the legal framework applicable in the jurisdiction where the information would be disclosed, including the degree of adequacy of the legal framework with Quebec's privacy laws.

Your Personal Information will be disclosed outside of Quebec only if our assessment determines that it would receive an adequate level of protection.

  • Your Right to Access

You may at any time request access to, or information regarding, your Personal Information, about the processing purposes, the categories of Personal Information that are processed, recipients or categories of recipients to whom Personal Information has been disclosed or are to be disclosed, and if possible, the planned duration of retention of Personal Information or, if this is not possible, the criteria used to define this period.

  • Your Right to Rectify & Erasure

You are entitled to request immediate correction to your Personal Information at any time.  Furthermore, you can request the erasure of your Personal Information if the data is no longer required for the purpose for which it was collected, you wish to revoke your consent to processing and there is no other legal basis for its processing, you wish to object to processing, and there are no overriding, justifiable reasons for processing, or you wish to object to the processing of data for direct marketing when Personal Information was processed unlawfully, or when erasure is legally binding for us.

Moreover, you can request a restriction to the processing of your Personal Information if you dispute the accuracy of your Personal Information – namely for as long as it takes us to check the accuracy of data – if processing is unlawful but you reject the erasure and instead wish to restrict the use, if we no longer require your Personal Information for processing but you require data to assert, exercise or defend legal claims, or if you have objected to processing but it has not yet been clarified whether justified reasons on our part outweigh your reasons.

  • Your Right to Object

You are entitled to object at any time to the processing of your Personal Information for reasons arising from your particular situation if processing is necessary for the performance of a task carried out in the public interest or subject to the exercise of official authority vested in us, or if processing is performed in pursuit of our legitimate rights or those of third parties, and your basic rights or basic freedoms requiring the protection of Personal Information do not have priority. In this case, we will not continue to process your Personal Information unless we can provide proof of compelling, legitimate reasons for processing that outweigh your interests, rights and freedoms, or if processing serves the assertion, exercise or defence of legal claims.

The right to object also exists when we use Personal Information for direct marketing; this also applies to profiling when it is associated with direct marketing. Your Personal Information will no longer be used for direct marketing purposes following objection.

  • Your Right to Withdraw Consent

You also have the right to revoke your consent to the processing of your Personal Information at any time without affecting the legitimacy of the processing based on your consent up to the time of revocation.

You can contact our Privacy Officer at any time to make use of this right of revocation.

  1. Storage of Your Personal Information  

Your Personal Information is stored on our computer servers located at our offices listed above.   We will only store your Personal Information for as long and to the extent that it is required for the purpose for which it was collected. Personal Information subject to a legal retention obligation will be deleted when the legal retention period expires. Other Personal Information will be deleted as soon as it is no longer required for its purpose or in order to assert, exercise or defend legal claims. 

  1. Newsletters  

We offer you the option on our website to subscribe to free newsletters on selectable subject areas.  We use KLAVIYO, headquartered in Boston, Massachusetts, United States to send out our newsletter. We use the so-called double opt-in method for registration to our newsletter. This means that we will send you a confirmation email to the address you indicate asking you to confirm that you wish to receive the newsletter. If you confirm your request to receive the newsletter, we will store your email address until you unsubscribe from the newsletter. We only store this information for the purpose of being able to send you the newsletter. Moreover, we store your IP address and the times of registration and confirmation in order to prevent any misuse of your Personal Information. 

Your email address is the only mandatory information required to send you the newsletter. The disclosure of additional, specially marked information is voluntary and is only used to personalise the newsletter for you. You can revoke your consent to receive the newsletter at any time. You can do this by clicking on the link provided in every newsletter email, by sending an email to info@avogel.ca or by informing us of your revocation in any other manner. Any details disclosed will not be passed on to third parties. Your data will be deleted completely after your revocation of consent.

  1. Social plug-ins
    • Facebook

Facebook is a social network operated by Facebook Ireland Limited (Hanover Reach, 5–7 Hanover Quay, Dublin 2, Ireland). Facebook functions can be recognised by the Facebook logo. Depending on the type of functions, additional information may also appear (e.g. ‘Share’, ‘Like’).

When a Bioforce page contains a Facebook button and you click on this button, your browser or the application will establish a direct connection with the Facebook servers and the button for the function in question will be loaded from there. In doing so, the information that the respective Internet page of Bioforce has been accessed shall be transmitted to Facebook.

An exception is made, however, when you visit a page where we use a Facebook plug-in by means of which we present Bioforce’s latest Facebook activities on www.avogel.ca. In this case, your browser or the application will establish a direct connection with the Facebook servers.

If you are simultaneously logged into Facebook as a user, it is also possible that a page visit can be allocated to your profile on Facebook. If you click on integrated Facebook buttons and then log into Facebook (or are already logged in), the information that was ‘liked’ or ‘recommended’ can be published on Facebook in your profile and your timeline in an abbreviated form. Facebook may thus collect and store additional usage data, if applicable. It is therefore possible for Facebook user profiles to be created that go beyond what you yourself disclose on Facebook.

At no time does Bioforce find out which Facebook buttons you have used and when; instead Facebook only receives summarised, non-personal statistics about the use of Bioforce’s fan pages on Facebook and summarised statistics about the use of Facebook buttons.

You can learn in detail about what data Facebook collects for its own purposes in Facebook’s data privacy policy; there you will also find further information regarding data collection and processing by Facebook and regarding your rights in this regard. Facebook’s data privacy policy can be accessed at: https://www.facebook.com/policy.php 

  • X (Formerly Twitter)

X is a micro blogging service operated by the US company Twitter, Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107). If you access one of our web pages that contains a X button and click on that X button, your browser will establish a direct connection with X servers, and the button will load from there. In doing so, the information that the respective Internet page of Bioforce has been accessed shall be transmitted to X. It is thus possible for X to collect and also store usage data even when you are not logged in.

An exception is made, however, when you visit a page where we use a X plug-in by means of which we present Bioforce’s latest Twitter activities on www.avogel.ca. In this case, your browser or the application will establish a direct connection with the X servers without you specifically clicking on the Twitter button.

When you click on the X buttons and ‘tweet’ information via the X window that opens up, the tweeted information will be transferred to X. This information will then be published in your X user profile.

You can obtain further information about how X collects, analyses and processes your data and about your related rights in X’s data privacy policy, which can be accessed at: http://twitter.com/privacy.

  • Pinterest

Pinterest is a social network operated by the US company Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA. If you access one of our web pages that contains a ‘Pin it’ button and click on that button, your browser will establish a direct connection with Pinterest servers, and the button will load from there. In doing so, the information that the respective Internet page of Bioforce has been accessed shall be transmitted to Pinterest. It is thus possible for Pinterest to collect and also store usage data even when you are not logged in.

When you actively use a Pinterest function, for example, by clicking on the ‘Pin it’ button, it is possible for Pinterest to process additional data. Pinterest can, for example, activate a cookie that Pinterest can use on other websites that also have integrated Pinterest buttons to identify that you have already clicked on the button.

If you are simultaneously logged into Pinterest as a user, it will also be possible to assign a page visit to your profile on Pinterest. If you click on integrated Pinterest buttons and then log into Pinterest (or are already logged in), it is possible, for example, for the ‘pinned’ information to be published in you profile. Pinterest may thus collect and store additional usage data, if applicable. If you wish to prevent this, you must log out of you Pinterest account before clicking on the button.

You can obtain further information about how Pinterest collects, analyses and processes your data and about your related rights in Pinterest’s data privacy policy, which can be accessed at: https://policy.pinterest.com/en/privacy-policy.

You can also change the settings used to store your data at https://help.pinterest.com/en/articles/personalization-and-data#info-ad even if your do not have a Pinterest account.

  • YouTube

The video platform ‘YouTube’, where users can upload videos and make them publicly available, is operated by YouTube LLC, C901 Cherry Ave., San Bruno, CA 94066, USA and is a subsidiary of Google Inc., based in San Bruno, California, USA. 

We have integrated YouTube video clips in our online offering. These are stored on http://YouTube.com and can be played directly on our web pages. The videos have all been integrated in ‘advanced data protection mode’, i.e. no data about you as a user will be transferred to YouTube if you do not play the videos. It is only when you play the videos that the following data is sent. We have no influence on the transfer of data.

By playing the video, the third party receives the information that you accessed the corresponding sub-page of our website. Moreover, additional information about the purpose and extent of data collection and about the processing of such data is collected by the plug-in provider. You can obtain more information about how YouTube collects, processes and uses your data in the information provided on data privacy at: https://policies.google.com/privacy. You will also find additional information on your associated rights and the setting options you can use to protect your privacy.

The information that you accessed the corresponding sub-page of our website will be sent to YouTube irrespective of whether you are logged into a YouTube user account, or whether such an account exists. If you are logged into YouTube as a user, the data will be attributed directly to your account. If you do not want this information to be attributed directly to you, you must log out of your user account before activating the button.

YouTube stores the data as user profiles and uses it for the purposes of advertising, market research and/or a custom design of its web page. This type of evaluation is used in particular (including for users not logged in) to create user-specific advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles. Please contact YouTube if you wish to exercise your right to object.

  1. Google Maps

This website uses the map service Google Maps operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). This service is used by us in particular to provide the integrated ‘store finder’ service. In order for the Google map material to be integrated and displayed in your web browser, your web browser must establish a link to a Google server that may be located in the USA when it accesses a contact page. This provides Google with information that the contact page of our online access was accessed by your device’s IP address. You can find additional information in the Google Maps Terms of Service.

  1. Cludo search & insights engine

Recipient: Cludo, Frederikskaj 4, 2450 København, Denmark
Third country transfer: Based on the adequacy decision of the European Commission for the country Denmark
Data protection declarationhttps://www.cludo.com/privacy-policy

  1. Web analysis and optimization

We use procedures on our website to analyze usage behavior and measure reach. For this purpose, information about visitors' behavior, interests or demographic information is collected in order to determine whether and where our website needs optimization or adjustment (e.g. forms on the website, improved placement of buttons or call-to -action buttons etc.).

In addition, we can measure how website visitors click and scroll. This helps us, among other things, to recognize at what time our website, its functions or content are most frequently used.

The collection of this data is made possible through the use of certain technologies (e.g. cookies). These are stored on the users' devices as part of client-side tracking when they visit our website.

We implement precautions to protect the identities of our website visitors. We do not process any clear data from website visitors for the purposes described.

Website visitors are assigned an ID (identification number) when they visit so that they can be recognized when they visit again. The IDs and associated information are stored in user profiles. In addition, the IP addresses of website visitors are anonymized and the storage time of cookies is reduced. We have also integrated the data for analyzing usage behavior and measuring reach into our CMS. The CMS provider may also receive information about the data collected here.

Categories of data: usage data (e.g. websites visited, interest in content, access times), demographic characteristics (age, gender), meta and communication data (e.g. device information, anonymized IP addresses, location data), contact data (e.g. email address), Content data (e.g. text information)
Purposes of processing: Checking the status of goal achievement (success control) of all online activities: Analysis of usage behavior on the website (website interaction) for web optimization and reach measurement, checking the utilization of the website, lead evaluation, increasing sales, budget control Legal

 

Google: Enabled Universal Analytics (GA4)

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Privacy Policy: https://policies.google.com/privacy?hl=en-US

Google DoubleClick

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Privacy Policy : https://policies.google.com/privacy?hl=en-US

Google Optimize

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Privacy Policy: https://policies.google.com/privacy?hl=en-US

 

Google Tag Manager

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis : Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Privacy Policy: https://policies.google.com/privacy?hl=en-US

 

Google Adwords and conversion measurement

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Privacy Policy: https://policies.google.com/privacy?hl=en-US


Social Media Marketing

 

We use our social media channels to advertise our products and services. Our goal is to appeal to a broad community, which we reach through classic advertising channels, e.g. B. cannot be achieved in offline marketing (e.g. via flyers).

Targeting

As part of our social media channels, we use so-called targeting procedures to track certain user activities (interactions) to ensure that our advertisements are delivered to specific target groups. We use the processes and technologies of various social media providers. A common technology is the so-called cookie or pixel.

We install this technology in our tracking tool (e.g. via our website or social media channel). It ensures that users' navigation is recorded. When users interact with our website or our ad on social media, the technology records the people and the actions they take (e.g. clicks on ads, bounces on websites) and saves which pages and sub-pages were accessed. Cookies or pixels are stored on the user's device.

Products and services in our advertisements that are viewed but not purchased are analyzed using the technologies used. This is to show potential customers real-time and behavioral-based advertising on various social media platforms.

Conversion measurement (measuring the success of our advertisements)

We can determine the success of our advertisements based on summarized data made available to us by the social media provider (so-called conversion measurement). This allows us to understand whether a marketing measure led to a so-called event (e.g. downloading a PDF or playing a video) or a conversion (e.g. purchasing a product or registering on our website). The evaluation is provided to us in the form of statistics via our tracking tool and is used to analyze the success of our online activities (success monitoring). It helps us to derive measures to improve the so-called customer journey.

Categories of data: Usage and interaction data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address, possibly location data) Purposes of
processing: expansion of reach, reach analysis and statistical evaluations
Legal basis: consent (Art 6 Paragraph 1 Letter a) GDPR)

 

Metricool Analytics

Recipient: METRICOOL SOFTWARE, SL C / Téllez, No. 12, Entreplanta H, 28007, Madrid, Spain
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Transfer to third countries: Based on the European Commission's adequacy decision for the country Spain
Privacy Policy: https://metricool.com/privacy-policy/

Facebook Pixel

Recipient: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Legal basis: Consent (Art. 6 Para. 1 lit. a) GDPR)
Third country transfer: Based on the adequacy decision of the European Commission for the country USA (EU - US Privacy Framework)
Data protection declaration: https://www.facebook.com/privacy/explanation

  1. Data security

We undertake the latest technical, state-of-the-art measures to ensure data security, in particular with the aim of protecting your Personal Information against risks during data transfers and against access by third parties. These are constantly adapted to reflect the current state of the art. 

  1. Special Note on Children

Children (persons under the age of eighteen (18)) may not use the Site without supervision. In addition, we ask them not to give us Personal Information. If you are under eighteen (18) years of age, you can use this Site only under the supervision of your parents or guardian.

  1. Managing your password

You are responsible for any actions taken using your user name and password, including fees charged to your account. We recommend that you never reveal your Bioforce password to any third party. If you choose to share your user name and password or your Personal Information with third parties, you will be liable for any actions taken through your account and you therefore have an interest in reading the privacy policy of this third party beforehand. If you disclose your password, you may lose considerable control over your Personal Information and you may take the risk that legally binding actions be taken on your behalf. Thus, if the security of your password has been compromised, for whatever reason, you should immediately change it in accordance with the approach outlined in Section 9 of the present Privacy Policy.

  1. Severability

Should any provision of this Privacy Policy be contrary to the law, void or unenforceable for any reason whatsoever, that provision shall be deemed severable from the Privacy Policy and shall not affect the validity or enforceability of other provisions.

  1. Applicable Law and Jurisdiction

This Privacy Policy and its interpretation are subject to the laws that are in force in the province of Quebec and in Canada, without giving effect to any principles of conflicts of laws. The courts of the District of Montreal, in the Province of Quebec, have exclusive jurisdiction to hear any dispute related to the present Privacy Policy, including its interpretation and its effects.

  1. Changes to the Privacy Policy

This privacy policy was issued in December of 2023. Bioforce Canada Inc. may occasionally revise this online data privacy policy. Any changes to this data privacy policy will be communicated immediately on this page. 

Dollard-des-Ormeaux, QC, Canada, December 2023