Responsible for Data Processing:
NaturVibes
support@naturvibes.de
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time you visit a website, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data) and documents the request.
This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This is in accordance with Art. 6, Sec. 1, S. 1, lit. f DSGVO, to safeguard our legitimate interests in the correct presentation of our services. All access data is deleted no later than seven days after the end of your visit to the website.
2. Data Collection and Use for Contract Execution, Contact, and Customer Account Creation
We collect personal data when you voluntarily provide it to us during your order process or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we need the data to process the contract or handle your contact request, and you cannot submit the order or contact us without providing this information. The specific data collected is indicated in the respective input forms. We use the data you provide in accordance with Art. 6, Sec. 1, S. 1, lit. b DSGVO for contract execution and processing your inquiries.
If you give consent in accordance with Art. 6, Sec. 1, S. 1, lit. a DSGVO by deciding to open a customer account, we use your data for customer account creation.
After completing the contract or deleting your customer account, your data will be restricted for further processing and deleted after the statutory retention periods for tax and commercial law, unless you have explicitly consented to further use of your data or we have reserved further data processing that is legally permitted, which we inform you about in this statement. You can delete your customer account at any time, either by sending a message to the contact details below or via a function provided in the customer account.
3. Data Transfer
For contract fulfillment in accordance with Art. 6, Sec. 1, S. 1, lit. b DSGVO, we pass your data to the shipping company entrusted with delivery, to the extent necessary to deliver the goods ordered. Depending on the payment service provider you select during the order process, we forward the payment data collected to the payment institution or payment service providers commissioned by us for payment processing. In some cases, the selected payment service providers collect this data themselves if you create an account with them. In such cases, you must log in to the payment service provider with your access credentials during the order process. In this case, the privacy policy of the respective payment service provider applies.
We use a shipping service provider located outside the European Union. The transfer of personal data to this company only occurs to the extent necessary for contract fulfillment.
The same applies to data transfer to our manufacturers or wholesalers when they handle shipping for us (drop-shipping).
4. Email Newsletter
Email Marketing with Newsletter Subscription
If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6, Sec. 1, S. 1, lit. a DSGVO.
You can unsubscribe from the newsletter at any time, either by sending a message to the contact details below or by clicking the unsubscribe link in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have explicitly consented to further use of your data or we reserve further data processing that is legally permitted, which we inform you about in this statement.
5. Social Media
Our Online Presence on Facebook and Instagram
Our presence on social networks and platforms serves to facilitate better, active communication with our customers and prospects. We inform them about our products and ongoing promotions.
When visiting our social media pages, your data may be automatically collected and stored for market research and advertising purposes. Usage profiles are created using pseudonyms from this data. These profiles may be used to display ads within and outside the platforms that presumably align with your interests. For this purpose, cookies are usually placed on your device. These cookies store the visitor’s behavior and interests. This is done in accordance with Art. 6, Sec. 1, lit. f DSGVO to protect our legitimate interests in optimizing the presentation of our services and effective communication with customers and prospects.
If the respective social media platform operators ask for your consent (e.g., via a checkbox) for data processing, the legal basis for data processing is Art. 6, Sec. 1, lit. a DSGVO.
If the social media platforms are based in the USA, the European Commission has issued an adequacy decision for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
For detailed information on the processing and use of data by the providers, as well as contact options, rights, and settings for privacy protection, particularly opt-out options, please refer to the privacy notices of the providers linked below. If you still need help, you can contact us.
Facebook: Facebook Privacy
Instagram: Instagram Privacy
6. Contact Options and Your Rights
As the data subject, you have the following rights:
• According to Art. 15 DSGVO, the right to request information about the personal data we process about you, within the scope defined there.
• According to Art. 16 DSGVO, the right to immediately correct incorrect or complete personal data stored by us.
• According to Art. 17 DSGVO, the right to request the deletion of your personal data stored by us, unless the further processing is necessary to exercise the right to freedom of expression and information; to fulfill a legal obligation; for public interest reasons; or for asserting, exercising, or defending legal claims.
• According to Art. 18 DSGVO, the right to request the restriction of the processing of your personal data, as long as the accuracy of the data is disputed; the processing is unlawful, but you refuse its deletion; we no longer need the data, but you require it for asserting, exercising, or defending legal claims; or you have objected to the processing in accordance with Art. 21 DSGVO.
• According to Art. 20 DSGVO, the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.
• According to Art. 77 DSGVO, the right to lodge a complaint with a supervisory authority. Typically, you can contact the supervisory authority of your usual place of residence or work or our company’s registered office.
For questions regarding the collection, processing, or use of your personal data, for requests for information, correction, restriction, or deletion of data, as well as for revoking any consents or objections to a particular data use, please contact us directly using the contact details in our imprint.
Right to Object
If we process personal data based on our legitimate interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are reasons arising from your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will not process your personal data for this purpose any longer.