Privacy Statement
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing the data will have no consequences. This applies only insofar as no other information is provided in the subsequent processing operations.
‘Personal data’ means any information relating to an identified or identifiable natural person.
Server-Log files
You can visit our website without providing any personal information.
Every time our website is accessed, usage data is transmitted to us or to our web host/IT service provider through your internet browser and stored in server log files. This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Your data may be transferred to third countries outside the European Union for which an adequacy decision has been made by the EU Commission.
Contact
Person responsible:
Contact us if you wish. The person responsible for data processing is:
Nutracosmetic GmbH, Theodor-Sanne-Str. 6, 83233 Bernau am Chiemsee, Germany
+4980516970970,
info@nutracosmetic.de
§ 4 Right of retention, reservation of title
(1) You can only exercise a right of retention if the claims in question arise from the same contractual relationship.
(2) The goods remain our property until full payment of the purchase price.
The customer contacts us on their own initiative by email
If you contact us of your own accord by email, we will only collect your personal data (name, email address, message text) to the extent that you have provided it. The data processing is used to process and respond to your contact request.
If the purpose of establishing contact is to carry out pre-contractual measures (e.g. advice on interest in purchasing, preparing offers) or if it relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) point b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only in the scope provided by you. The data processing is used for the purpose of establishing contact.
If the purpose of establishing contact is to carry out pre-contractual measures (e.g. advice on interest in purchasing, preparing an offer) or if it relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) point b GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR. We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Customer account / orders
Customer account
When you open a customer account, we collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying the order process. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.
Collection, processing and disclosure of personal data in orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to process your enquiries. The provision of data is necessary for the conclusion of the contract. Failure to provide it will mean that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) point b GDPR and is necessary for the fulfilment of a contract with you.
Your data is forwarded, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.
Your data may be transferred to third countries outside the European Union for which an adequacy decision has been made by the EU Commission.
Ratings. Advertising
Review reminder
After you place an order, we would like to ask you to rate your purchase with us.
For this purpose, we use your personal data (name, email address, information about the order) independently of the contract processing in order to send you a reminder by email to rate after you have placed an order, provided that you have expressly agreed to this.
The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time using the corresponding link in the e-mail or by contacting us without affecting the legality of the processing carried out with your consent up to the withdrawal.
Use of the email address for sending newsletters
We use your email address independently of the contract processing exclusively for our own advertising purposes to send you a newsletter, provided that you have expressly agreed to this. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.
Shipping service providers Merchandise management
Forwarding of e-mail addresses to shipping companies for information on the shipping status
We will forward your e-mail address to the transport company as part of the contract processing, provided that you have expressly agreed to this in the order process. The purpose of the forwarding is to inform you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 (1) point a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Use of an external merchandise management system
We use an inventory management system to process contracts as part of an order processing operation. For this purpose, the personal data collected in the course of the order will be transmitted to blue office deutschland Gmbh Hausener Strasse 32 77975 Ringsheim BW.
The processing of your personal data is for the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6(1)(b) of the GDPR.
Payment service provider
Use of PayPal
Our website uses the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; ‘PayPal’). The data processing is for the purpose of being able to offer you payment via the payment service. When you select and use PayPal as your payment method, the data required for payment processing will be transmitted to PayPal to enable us to fulfil our contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal data protection declaration. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that if you do this, you may not be able to use all the functions of this website to their full extent.
The following links provide information on how to manage cookies (including how to disable them) in the most popular browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 (https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09)
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)
Technically necessary cookies
Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies to make our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies is based on § 25 para. 2 TDDDG. The processing of your personal data is based on Art. 6 para. 1 lit. f DSGVO out of our overriding legitimate interest in ensuring the optimal a of the website as well as a user-friendly and effective design of our offer.
You have the right to object, on grounds relating to your particular situation, at any time to this processing of personal data concerning you.
Plug-ins and other
Use of the Google Tag Manager
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’) on our website.
This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools, in particular. The data processing is used for the purpose of optimising our website and ensuring that it is designed to meet requirements.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it does enable the triggering of further tags that can collect and process personal data.
You can find more information about the terms of use and data protection here (https://www.google.com/intl/de/tagmanager/use-policy.html).
Use of social plug-ins
We use plug-ins from social networks on our website. The integration of social plug-ins and the data processing that takes place serves to optimise advertising for our products.
When social plug-ins are integrated, a link is created between your computer and the servers of the social network provider and the plug-in is displayed on the page through a message to your browser, provided that you have expressly consented to this. In this process, both your IP address and information about which of our pages you have visited are transmitted to the provider’s server. This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or not logged in. If you are simultaneously connected to one or more of your social network accounts, the information collected can also be assigned to your corresponding profiles. When you use the plug-in functions (e.g. by clicking the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or comparable technologies is carried out with your consent on the basis of Article 6(1)(a) GDPR in conjunction with Article 25(1) of the TDDDG. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
The social networks named below are integrated into our website by means of social plug-ins. You can find more information about the scope and purpose of the collection and use of the data and about your rights and options for protecting your privacy in this regard in the providers’ linked data protection notices.
Use of Google reCAPTCHA
Our website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’). The purpose of the query is to distinguish between input by a human and input by automated machine processing. To do this, your input will be transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the United States. The EU Commission has issued an adequacy decision for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 Sec. 1 P. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more information about Google reCAPTCHA and the associated data privacy policy at: https://www.google.com/recaptcha/intro/android.html (https://www.google.com/recaptcha/intro/android.html) and https://www.google.com/privacy (https://www.google.com/privacy).
Use of Vimeo
We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; ‘Vimeo’) on our website to integrate videos from the ‘Vimeo’ portal.
When you access pages of our website that have such a plug-in, a connection to the Vimeo servers is established and the plug-in is displayed on the page through a message to your browser. This will send both your IP address and the information about which of our pages you have visited to the Vimeo servers.
If you are logged into Vimeo, Vimeo will associate this information with your personal account. When you use the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account.
Your data may be transmitted to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 Sec. 1 P. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
For more information on the purpose and scope of the collection and the further use and processing of the data by Vimeo, as well as your rights in this regard and options for protecting your privacy, please refer to Vimeo’s privacy policy: https://vimeo.com/privacy (https://vimeo.com/privacy)
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’) on our website.
The data processing is used for the purpose of displaying fonts consistently on our website. To load the fonts, a connection to Google’s servers is established when the page is accessed. Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using are processed and transmitted to Google. These data are not linked to your Google account.
Your data may be transmitted to the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal.
You can find more information about data processing and data protection at https://www.google.de/intl/de/policies/ (https://www.google.de/intl/de/policies/) and at https://developers.google.com/fonts/faq (https://developers.google.com/fonts/faq).
Use of FontAwesome
We use Font Awesome from Fonticons Inc. on our website (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA ‘Font Awesome’). The data processing is used for the purpose of uniformly displaying fonts and icons on our website. To load the fonts, a connection to FontAwesome servers is established when the page is opened.
Cookies may be used for this purpose. Among other things, your IP address and information about the browser you are using will be processed and transmitted to Font Awesome. Your data may be transmitted to third countries, such as the United States. The EU Commission has adopted an adequacy decision for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Font Awesome is not certified under the TADPF.
The use of cookies or comparable technologies is carried out with your consent on the basis of Art. 25 Sec. 1 P. 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
You can find more information about data processing and data protection at https://fontawesome.com/privacy (https://fontawesome.com/privacy) and at https://fontawesome.com/support (https://fontawesome.com/support).
Rights of data subjects and storage period
Rights of data subjects and storage period
Storage duration
After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then in accordance with legal, in particular tax and commercial, retention periods and then deleted after the deadline has passed, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for the purpose of direct advertising.
Right of appeal to the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is unlawful.
You can file a complaint with the supervisory authority responsible for us, which you can contact using the following information:
Bavarian Data Protection Authority (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail: poststelle@lda.bayern.de
Right of objection
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) point f GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.
Once the objection has been made, the processing of the data concerned will be terminated, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
Last updated: 22 October 2024
