Data protection
Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
Contact us
Responsible person/Data protection officer
Contact us on request. The contact details of the person responsible for data processing can be found in our legal notice.
You can reach our data protection officer directly at: heidgen@nutri-plus.de
Proactive contact of the customer by e-mail
If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
Collection and processing when using the contact form
When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact.
If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out on the basis of Article 6(1)(f) GDPR.
We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.
WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided and other data to the extent provided by you. We use a mobile device for the service, the address book of which only stores data from users who have contacted us via WhatsApp. Personal data will not be passed on to WhatsApp without your prior consent to WhatsApp.
Your data will be transmitted by WhatsApp to servers of Facebook Inc. in the USA.
If the contact is made for the purpose of implementing pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in providing a quick and easy way to contact you and to answer your enquiry. In this case, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR.
We will only use your personal data to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.
Reviews advertising
Trustami customer reviews
To display collected ratings and feedback from social media, the Trustami trust seal is embedded on this website. This serves to implement our legitimate interests in the optimal marketing of our offer on our website in accordance with Article 6(1)(1)(f) GDPR. When the Trustami trust seal is called up, the web server automatically stores data (access data) in the form of a server log file containing the name of the website accessed, the file, the date and time of access, your IP address in truncated form, the amount of data transferred, the notification of successful retrieval, the browser type, the user's operating system, the referrer URL (of the previously visited site) and the requesting provider. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to our website. The Trustami trust seal and the services advertised with it are provided by Trustami GmbH, Schröderstraße 5, 10115 Berlin. For the processing of data collected by Trustami, Trustami's Data Protection Policy at https://www.trustami.com/privacy applies.
Use of the e-mail address for sending newsletters
We use your email address outside of contractual processing exclusively to send you a newsletter for our own marketing purposes, if you have explicitly agreed to this. The processing will be carried out on the basis of art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time without affecting the legality of the processing carried out with your consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by contacting us. Your email address will then be removed from the distributor.
Use of Brevo (formerly Sendinblue)
We use the service of Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin; "Brevo") for the newsletter dispatch within the scope of order processing.
We pass on the information you provide when registering for the newsletter (e-mail address, first and last name, if applicable) to Brevo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the sent e-mail newsletters contain a 1x1 pixel graphic (tracking pixel) and/or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any integrated links. Within this context, your personal data such as IP address, browser type and device as well as the time of opening may also be collected. From this data, user profiles can be created under a pseudonym. The data collected will not be used to identify you personally. The collected data is only used for statistical analysis to improve newsletter campaigns.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a targeted, effective advertising and user-friendly newsletter system. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you.
You can find more information and Brevo's privacy policy at: https://www.brevo.com/de/legal/privacypolicy
Merchandise management
Use of an external merchandise management system
We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be transmitted to
Pickware GmbH, Goebelstr. 21, 64293 Darmstadt
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven
Payment service provider
Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Amazon Payments
We use the Amazon Payments payment service of Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.
The purpose of data processing is to be able to offer you payment via the Amazon Payments payment service.
In order to integrate this payment service, it is necessary for Amazon Payments to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies make it possible to recognise your browser.
The use of cookies or comparable technologies is based on Art. 15 para. 3 sentence 1 TMG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in a customer-oriented offer of various payment methods.You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
By selecting and using “Amazon Payments”, the data required for payment processing will be transmitted to Amazon Payments in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Further information on data processing when using the Amazon Payments payment service can be found in the associated data protection declaration at: https://pay. amazon.com/en/help/201212490
Use of the payment service provider Mollie
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, The Netherlands; "Mollie") for payment processing on our website. The purpose of the data processing is to be able to offer you different payment methods through the payment processing via the payment service provider Mollie. If you have chosen one of the payment options of the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment data (for example, bank account number or credit card number), your IP address, your Internet browser and device type, and in some cases your first and last name, address data and information about the product or service you purchased from us. This data processing is based on Art. 6 para. 1 lit. b DSGVO. For more information on data processing when using the payment service provider Mollie, please refer to the associated privacy policy https://www.mollie.com/de/privacy
Cookies
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Use of "EU Cookie Directive Pro + automatic cookie recognition"
On our website, we use the consent management tool "EU Cookie Directive Pro + automatic cookie recognition" from ACRIS E-Commerce GmbH (Am Pfenningberg 60, 4040 Linz, Austria; "ACRIS").
The tool enables you to give your consent to data processing via the website, in particular to set cookies, as well as to make use of your right of revocation for consents already given. The data processing serves the purpose of obtaining and documenting necessary consents to data processing and thus to comply with legal obligations. Cookies may be deployed for this purpose. In addition to general user data, your IP address is collected and transmitted to ACRIS. This data will not be passed on to any other third parties.
The data processing is carried out on the basis of Article 6(1)(c) GDPR to comply with a legal obligation.
For more information about Acris's privacy policy, please visit: https://www.acris-ecommerce.at/datenschutz
Analysis of affiliate advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
In this context, the following information may be collected, among others: IP address, date and time of page view, click path, information about the browser you are using and the device you are using (device), pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google may have about you.
The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies takes place with your consent on the basis of § 25 para. 1 p. 1 TDDDG in conjunction with. Art. 6 para. 1 lit. a DSGVO.
The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a DSGVO. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
We use the extended implementation of the consent mode (Advanced Consent Mode). In this case, user data is transmitted to Google in the form of "pings" even if consent has not been granted. These pings may contain the following information, among others: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website from which you accessed our website) or information about the triggering of website events such as a conversion. On the basis of this information, Google models user data in order to be able to carry out a comprehensive usage analysis despite the refusal of consent.
Further information on terms of use and data protection can be found at https://www. google.com/analytics/terms/en.html or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de.
We use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The purpose of the application is to analyse visitor behaviour and interests. Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based advertisements. Cookies are used to record visits to the website and anonymised data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown adverts that are highly likely to take into account previously accessed product and information areas.
Your data may be transmitted to servers of Google LLC in the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/.
When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of Ads customers.
The information collected with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
Your data may be transferred to the USA There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The use of cookies or comparable technologies is based on § 15 para. 3 sentence 1 TMG. Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in targeting website visitors with interest-based advertising. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
You can deactivate personalised advertising for you in the Google advertising settings. You can find instructions on how to do this at https://support.google.com/ads/answer/2662922?hl=de. Alternatively, you can prevent the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out mentioned there. You will then not be included in the conversion tracking statistics.
Plug-ins and other
Rights of data subjects and storage duration
Duration of storage
After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, especially tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights in accordance with Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, you have the right to object pursuant to Art. 21 para. 1 GDPR, you also have the right to object to processing based on Article 6(1)(f) GDPR and to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.
Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
Last updated: 18.03.2025