Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you visit our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is BioTeiGa GmbH, Krawinkel 6, 06647 Bad Bibra, Germany, Tel.: +49 34465 6840100, E-Mail: shop@bioteiga.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for other purposes. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" string and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If individual cookies we use also process personal data, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR for contract performance, in accordance with Art. 6 (1) lit. a GDPR in the case of consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser to inform you about the placement of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact

5.1 Flyweight Chatbot AI

This website uses a live chat system from the following provider: Flyweight GmbH, Jungbuschstraße 28, 68159 Mannheim,

Processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 (1) lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the effective support of our website visitors.
The data you transmit will be deleted, subject to any statutory retention periods, once the relevant matter has been conclusively clarified.

Additionally, cookies may be used to create pseudonymized usage profiles, collecting and evaluating further information that does not serve to identify you personally and is not merged with other datasets. If this information has a personal reference, processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. However, the functionality of our website may be limited in this case. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.

We have concluded an order processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

5.2 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Based solely on your explicit consent in accordance with Art. 6 (1) lit. a GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can contact you via email with a review reminder.

You can revoke your consent at any time with effect for the future, either to us or to the provider.

We have concluded an order processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.3 Greyhound

For processing customer inquiries, we use the email ticketing system of the following provider: GREYHOUND Software GmbH & Co. KG, Segelfliegerweg 53, 49324 Melle, Germany

If you submit contact requests via our website by email, these will be stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can always check the current status of your request using the individually assigned ticket number.

For the organization and processing of inquiries, personal data is collected according to the scope provided, but at least your name, first name, and email address. This data is transmitted to the provider, stored there, and accessed.

The legal basis for processing this data is our legitimate interest in efficiently designing our customer service, responding to your inquiry as quickly as possible, and optimizing our service offerings in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.4 When contacting us (e.g., via contact form or email), personal data will be processed—exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been conclusively resolved and no legal retention obligations exist.

6) Data processing when opening a customer account

In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required for account opening from the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided all contracts concluded through it have been fully processed, no legal retention periods apply, and we no longer have a legitimate interest in further storage.

7) Use of customer data for direct marketing

7.1 Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For newsletter delivery, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters after confirming your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. We store your IP address assigned by the Internet Service Provider (ISP), as well as the date and time of registration, to be able to trace any possible misuse of your email address at a later date. The data we collect during newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

7.2 Shopify Email

Our email newsletters are sent via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provide during newsletter registration to this provider in accordance with Art. 6 (1) lit. f GDPR so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent under Art. 6 (1) lit. a GDPR, the provider also conducts a statistical evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7.3 Shopping cart reminders by email

If you abandon your purchase with us before completing the order, you have the option to receive a one-time email reminder about the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For email delivery, we use the so-called double opt-in procedure, which ensures that you will only receive a notification after confirming your consent by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR for sending a shopping cart reminder. We store your IP address assigned by the Internet Service Provider (ISP), as well as the date and time of registration, to be able to trace any possible misuse of your email address at a later date. The data we collect during registration for our email notification service is used strictly for the intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list for this purpose, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

8) Data processing for order handling

8.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided during the order to personally inform you within the scope of our legal information obligations in accordance with Art. 6 (1) lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates we owe and will only be processed by us to the extent necessary for the respective information.

8.2 Post & DHL Shipping (official)

To prepare shipments, we use the services of the following provider: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn
In accordance with Art. 6 (1) lit. b GDPR, we transmit digital shipping labels with your delivery information exclusively for the purpose of processing your online order from our order processing system to the provider, who then sends them to our local printers to enable printing. Data is only disclosed to the extent necessary for processing.

8.3 Disclosure of personal data to shipping service providers

- Deutsche Post

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will disclose your email address and/or phone number to the provider in accordance with Art. 6 (1) lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent for this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR, we will only disclose the recipient's name and delivery address to the provider. The disclosure is only made to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

The consent can be revoked at any time with effect for the future to the controller mentioned above or to the provider.
- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future to the controller mentioned above or to the provider.
- DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

We will share your email address and/or phone number with the provider before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, in accordance with Art. 6 (1) (a) GDPR, provided you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) (b) GDPR, we will only share the recipient's name and delivery address with the provider. The data will only be shared to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent can be revoked at any time with effect for the future to the responsible party mentioned above or to the provider.
- DHL Express Austria

As a transport service provider, we use the following provider: DHL Express (Austria) GmbH, Am Europlatz 2 (Objekt G), 1120 Wien

Consent can be revoked at any time with effect for the future to the responsible party mentioned above or to the provider.
- DHL Österreich

As a transport service provider, we use the following provider: DHL Paket (Austria) GmbH, Campus 21, Liebermannstrasse F08/401, 2345 Brunn am Gebirge
Austria

Consent can be revoked at any time with effect for the future to the responsible party mentioned above or to the provider.

8.4 Use of Payment Service Providers (Payment Services)

- PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method where you pay in advance, your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be shared with the provider in accordance with Art. 6 (1) (b) GDPR. Your data will only be shared for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data for an alternative payment method) during the ordering process.

To safeguard our legitimate interest in determining your creditworthiness, this data will be forwarded by us to the provider for a credit check in accordance with Art. 6 (1) (f) GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment method can be granted in view of payment and/or default risks.

The credit report may include probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- PayPal Checkout

This website uses PayPal Checkout, an online payment system by PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we will share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. The data will be shared in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to perform a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal. For this purpose, your payment data may be shared with credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may include probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

If the PayPal payment method "Invoice Purchase" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis is Art. 6 (1) (b) GDPR in each case. In this case, Ratepay will conduct an identity and credit check in its own name to determine creditworthiness in accordance with the principle already mentioned above, and will share your payment data with credit agencies based on the legitimate interest in determining creditworthiness in accordance with Art. 6 (1) (f) GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use a payment method from a local third-party provider, your payment data will first be shared with PayPal in accordance with Art. 6 (1) (b) GDPR to prepare the payment. Depending on your selection of an available local payment method, PayPal will then share your payment data with the respective provider for payment processing in accordance with Art. 6 (1) (b) GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Wien, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method where you pay in advance (e.g., credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be shared with the provider in accordance with Art. 6 (1) (b) GDPR. Your data will only be shared for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

8.5 Electronic Cancellation Option for Continuous Obligations with Consumers

Consumers who have entered into contracts for paid continuous obligations (e.g., subscription contracts) on this website have the option to cancel them via an electronic button in accordance with the applicable notice periods.

Clicking the button leads to a confirmation page where the consumer can provide further details about the cancellation, identify themselves clearly, and then submit their cancellation electronically.

The collection of personal data and its transmission to us is carried out in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for the proper processing of the cancellation. Also based on Art. 6 (1) (b) GDPR, the provided personal data will be used to confirm receipt of the cancellation notice and the cancellation date in text form by electronic means. Another legal basis for processing is Art. 6 (1) (c) GDPR. We are legally required to provide an electronic cancellation option for consumer contracts concluded via electronic commerce for paid continuous obligations.

9) Web Analytics Services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device and collect certain information. This includes your IP address, which Google truncates by the last digits to prevent direct personal identification.

The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser within Google Analytics is not merged with other Google data. Data collected via Google (Universal) Analytics is stored for two months and then deleted.

All processing described above, particularly the setting of cookies on your device, only occurs if you have given us your explicit consent under Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit. You can revoke your consent at any time with future effect. To exercise your right of revocation, please disable this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, ensuring the protection of our visitors' data and prohibiting unauthorized disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic Features
Google (Universal) Analytics uses the "demographic features" function to create statistics about the age, gender, and interests of website visitors. This is done by analyzing ads and third-party information. This helps identify target audiences for marketing. However, the collected data cannot be linked to a specific person and is deleted after two months of storage.

Google Signals
As an extension to Google (Universal) Analytics, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent under Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create models, including cross-device conversions. We do not receive personal data from Google, only statistics. To stop cross-device analysis, disable the "Personalized Ads" feature in your Google account settings. Follow the instructions here: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more information on Google Signals, visit: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, this website may use the "UserIDs" feature. If you have consented to the use of Google (Universal) Analytics under Art. 6(1)(a) GDPR, set up an account on this website, and log in on multiple devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the "Google Tag Manager", a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and managing them via a unified interface. Google Tag Manager itself does not store or read information on user devices, nor does it perform independent data analysis. However, when a page is accessed, your IP address is transmitted to Google and may be stored there. It may also be transferred to servers of Google LLC in the USA.

This processing only takes place if you have given us your explicit consent under Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit. You can revoke your consent at any time with future effect. To exercise your revocation, please disable this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, ensuring the protection of our visitors' data and prohibiting unauthorized disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

10) Retargeting/Remarketing and Conversion Tracking

Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our offers on external websites using ads (so-called Google Adwords). We can determine the success of individual advertising measures based on campaign data. Our goal is to show you ads that are of interest to you, make our website more appealing, and achieve fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google Ads ad. Cookies are small text files stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across Google Ads customers' websites. The information collected via the conversion cookie, including your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.

As part of using Google Ads, personal data may also be transmitted to servers of Google LLC in the USA.

Details on the processing triggered by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, particularly the setting of cookies to read information on the device used, only takes place if you have given us your explicit consent under Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service in the "Cookie Consent Tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To address users whose data we have received in the context of business or business-like relationships with more targeted advertising, we use a customer matching feature within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and phone numbers) electronically to Google. Google does not gain access to clear data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to match it with existing Google accounts that the data subjects have set up. This enables the display of personalized ads across all Google services linked to the respective Google account.

Customer data is only transmitted to Google if you have given us explicit consent in accordance with Art. 6 (1) (a) GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy is available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

11) Page Functionalities

11.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest when the video is played, to load the content. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to our site, your data will be directly associated with your account when you click on a video. If you do not wish this association, you must log out before clicking the play button.

All the aforementioned processing, in particular the setting of cookies to read information on the end device used, only takes place if you have given us your explicit consent in accordance with Art. 6 (1) (a) GDPR. You can revoke the consent you have given at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

11.2 - hCaptcha

On this website, we use the CAPTCHA service from the following provider: Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this data to the provider's servers for evaluation.

The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 (1) (f) GDPR.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

11.3 Google Customer Reviews (formerly Google Certified Dealer Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. On our website, after using our services, you will be asked if you would like to participate in a Google email survey.

If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. In the context of using Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.4 Forms App

For conducting surveys or online forms, we use the services of the following provider: FORMS APP OÜ, Lasnamäe tn 4b-26, 11412 Harju, Tallinn, Estonia

The provider enables us to design and evaluate surveys and online forms. In addition to the personal data you enter in the forms, information about your operating system, browser, date and time of your visit, referrer URL, and your IP address is also collected, transmitted to the provider, and stored on the provider's servers.

The information you enter in the forms is stored in password-protected form to ensure that third-party access is excluded and only we can evaluate the data for the purpose specified in the respective form.

If the processing of personal data is necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Art. 6 (1) lit. b GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is based on Art. 6 (1) lit. a GDPR. Any consent given can be revoked at any time with effect for the future.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

11.5 Shopsync for Shopify

This website uses the Shopify app "Shopsync" by ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
Shopsync synchronizes the newsletter service "Mailchimp" with our Shopify account so that, on the one hand, updates in Mailchimp email lists (such as an opt-out by a newsletter recipient) are automatically recorded in Shopify, and on the other hand, new contact data generated via contracts on Shopify are automatically transferred to Mailchimp email lists.

In the first case, data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the effective and cross-system maintenance of advertising address files and the efficient observance of legally significant status changes.

In the second case, only on the basis of explicit user consent in accordance with Art. 6 (1) lit. a GDPR after a contract conclusion on Shopify for inclusion in the Mailchimp list, the user's first and last name, address, and email address, together with transaction-related information (purchase amount, time, and date of purchase), are transmitted by Shopsync to Mailchimp.

Data transmitted in this way is not stored or retained by Shopsync after synchronization. All information synchronized between Shopify and Mailchimp is transmitted via SSL technology (Secure Socket Layer), and all transmitted information remains encrypted during the synchronization process.

The synchronization process requires the transmission of information via a secure connection to servers hosted by Amazon Web Services in the USA.

Further data protection information about Shopsync can be found here: https://www.shop-sync.com/privacy-policy

12) Tools and Miscellaneous

12.1 Billbee

For accounting purposes, we use the service of the cloud-based accounting software from the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany

The provider processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions to automatically capture invoices, match them to transactions, and create financial accounting in a partially automated process.

If personal data is also processed in this context, the processing is based on our legitimate interest in the efficient organization and documentation of our business transactions in accordance with Art. 6 (1) lit. f GDPR.

12.2 DATEV

For accounting purposes, we use the service of the cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nürnberg, Germany

12.3 Cookie-Consent-Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when they visit the page as an interactive user interface, where consent for specific cookies and/or cookie-based applications can be granted via checkboxes. The tool ensures that all cookies/services requiring consent are only loaded if the respective user has granted consent via checkbox. This guarantees that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in a legally compliant design of our website.

Another legal basis for processing is Art. 6 (1) (c) GDPR. As the controller, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded an order processing contract with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

12.4 Judge.me

To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as the product name and international references (GTIN/ISDNF) are collected, transmitted to the provider, and evaluated there to determine the legitimacy of a customer review for a specific order. This processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in ensuring the authenticity of customer reviews by verifying transaction relevance and preventing review abuse. After the review check and approval, the data is deleted by the provider.

In the case of data transmission to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13) Rights of the Data Subject

13.1 Applicable data protection law grants you, as the data subject, the following rights (rights to information and intervention) against the controller with regard to the processing of your personal data, with the respective conditions for exercise referring to the cited legal basis:

Right to information pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS IN ORDER TO SAFEGUARD OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

If personal data is processed on the basis of explicit consent pursuant to Art. 6 (1) (a) GDPR, this data is stored until you revoke your consent.

If there are statutory retention periods for data that is processed in the context of contractual or quasi-contractual obligations based on Art. 6 (1) (b) GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of the contract and/or we no longer have a legitimate interest in further storage.

If personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 01.10.2026, 21:01:28

Fast shipping

Order today and receive delivery tomorrow!

Customer service

Mon.-Fri. 9-12 and 14-17 / Tel. +49 34465 6840100

100% Organic

Our products are 100% natural & sustainable!

Secure payment

PayPal, credit card, Klarna, Apple Pay, invoice purchase

Vertrag widerrufen