Privacy policy
Responsible for Data Processing:
NaturVibes
We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we will provide detailed information about how we handle your data.
1. Access Data and Hosting
You can visit our website without providing any personal information. Each time you visit a website, the web server automatically stores what is known as a server log file, which includes the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data) to document the request.
This access data is used exclusively to ensure the proper functioning of the site and to improve our offerings. According to Art. 6(1)(f) GDPR, this serves the legitimate interests of ensuring the correct representation of our services. All access data will be deleted no later than seven days after the end of your visit to the site.
2. Collection and Use of Data for Contract Processing, Contacting Us, and Opening a Customer Account
We collect personal data when you voluntarily provide it to us during your order process or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we need these data to process the contract or your contact request, and without providing them, you cannot submit your order or contact us. The data collected is visible in the respective input forms. We use the data you provide in accordance with Art. 6(1)(b) GDPR to process the contract and handle your inquiries.
If you give your consent under Art. 6(1)(a) GDPR by choosing to create a customer account, we will use your data to open your customer account. After the contract is fully processed or your customer account is deleted, your data will be restricted for further processing and deleted after the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data usage that is legally permissible, which we will inform you about in this statement. You can delete your customer account at any time either by sending a message to the contact information below or through a function provided in the customer account.
3. Data Sharing
For contract fulfillment according to Art. 6(1)(b) GDPR, we share your data with the shipping company responsible for the delivery, as necessary to deliver the ordered goods. Depending on the payment service provider you choose during the order process, we will forward the payment data to the payment institution responsible for the payment and, if applicable, the payment service providers we have contracted or the selected payment service. Some payment service providers may also collect this data themselves if you create an account with them. In this case, you will need to log in with your credentials at the payment service provider during the order process. The privacy policy of the respective payment service provider applies in this case.
We use a shipping service provider located outside the European Union. The transmission of personal data to this company occurs only as necessary for contract fulfillment.
The same applies to data sharing with our manufacturers or wholesalers in cases where they handle shipping for us (drop-shipping).
4. Email Newsletter
Email Marketing with Newsletter Signup
If you sign up for our newsletter, we will use the necessary data or data you provide separately to send you our email newsletter regularly based on your consent according to Art. 6(1)(a) GDPR.
You can unsubscribe from the newsletter at any time either by sending a message to the contact information below or via a link provided in the newsletter. After unsubscribing, we will remove your email address from the recipient list, unless you have explicitly consented to further use of your data or we reserve the right to further data use that is legally permissible and will inform you about it in this statement.
5. Social Media
Our Online Presence on Facebook, Instagram
Our presence on social networks and platforms serves to improve active communication with our customers and prospects. We inform there about our products and ongoing special offers.
When visiting our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, pseudonymized user profiles are created, which may be used to display ads both on and off the platforms that likely match your interests. For this purpose, cookies are typically used on your device. These cookies store the visitor behavior and interests of users. According to Art. 6(1)(f) GDPR, this serves the legitimate interests of optimizing the display of our offerings and effectively communicating with customers and prospects. If the operators of the respective social media platforms ask for your consent (e.g., through a checkbox), the legal basis for the data processing is Art. 6(1)(a) GDPR.
If the social media platforms mentioned above have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA based on the EU-US Privacy Shield. You can view the current certificate for the respective company here.
Detailed information on the processing and use of data by the providers on their pages, as well as contact options and your rights regarding your privacy protection, including opt-out options, can be found in the privacy notices of the providers linked below. If you still need help, feel free to contact us.
Facebook: https://www.facebook.com/about/privacy/
Data processing is based on an agreement between joint controllers under Art. 26 GDPR, which you can view here.
More information about data processing when visiting a Facebook Fanpage (Information about Insights Data) can be found here.
Instagram: https://help.instagram.com/519522125107875
Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
6. Contact Options and Your Rights
As a data subject, you have the following rights:According to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified there;
According to Art 15 GDPR the right to request information about your personal data processed by us to the extent specified there
According to Art 16 GDPR the right to immediately request the correction of inaccurate or completion of your personal data stored by us
According to Art 17 GDPR the right to request the deletion of your personal data stored with us unless further processing is necessary for
The exercise of the right to freedom of expression and information
Compliance with a legal obligation
Reasons of public interest or
The establishment, exercise, or defense of legal claims
According to Art 18 GDPR the right to request the restriction of processing your personal data if
The accuracy of the data is contested by you
The processing is unlawful, but you oppose its deletion
We no longer need the data, but you require them to establish, exercise, or defend legal claims, or
You have objected to processing under Art 21 GDPR
According to Art 20 GDPR the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller
According to Art 77 GDPR the right to file a complaint with a supervisory authority Generally, you can contact the supervisory authority of your usual residence, workplace, or the location of our company's headquarters
For questions about the collection, processing, or use of your personal data, for information, corrections, restrictions, or deletions of data, as well as withdrawal of consents or objections to specific data uses, please contact us directly using the contact details in our imprint
Right to Object
To the extent that we process personal data as described above to protect our legitimate interests, you may object to such processing at any time with effect for the future. If processing is for direct marketing purposes, you may exercise this right at any time as described above. If processing occurs for other purposes, you have the right to object only if there are reasons arising from your particular situation.
After exercising your right to object, we will not process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.