Login

Language

Cart

Your cart is empty

Continue shopping

Privacy policy

1) Introduction and Contact Details of the Responsible Party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data here means all data with which you can be personally identified.

1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is LIFEBRANDS Natural Food GmbH, Gaußstraße 120-122, 22765 Hamburg, Germany, Tel.: +49 40 18052800, E-mail: info@lifebrands.de. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When merely using our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect such data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data which is technically necessary for us to display the website to you:

  • The website visited
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/referrer from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no passing on or other use of the data. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transmission to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Google Cloud CDN

We use a content delivery network from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service enables us to deliver large media files such as graphics, page content, or scripts over a network to deliver regionally distributed servers faster. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Data may also be transferred to: Google LLC, USA

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of site settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is processed through individual cookies used by us, the processing is carried out pursuant to Art. 6 para. 1 lit. b GDPR either for the performance of the contract, pursuant to Art. 6 para. 1 lit. a GDPR in case of given consent, or pursuant to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Hubspot

To process customer inquiries, we use the e-mail ticketing system of the following provider: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland

If you submit contact inquiries via e-mail through our website, these are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can always view the current status of the processing of your concern via the individually assigned ticket number.

For the organization and processing of inquiries, personal data is collected according to the extent of its provision, but at least name, first name, and e-mail address, transmitted to the provider, stored there, and read out.

The legal basis for processing this data is our legitimate interest in the efficient design of our customer service, in the fastest possible response to your concern, and in optimizing our service offering pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

5.2 As part of contacting us (e.g., via contact form or e-mail) – exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose – personal data is processed.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if the circumstances indicate that the matter concerned has been finally clarified and if no legal retention obligations oppose this.

6) Data processing when opening a customer account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data are required for the account opening can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded via it have been fully completed, no statutory retention periods oppose this, and we no longer have a legitimate interest in further storage.

7) Use of customer data for direct advertising

7.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive the newsletter by clicking a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this process, we store the IP address assigned to you by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscription, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use the data beyond this in a legally permitted manner, about which we inform you in this declaration.

7.2 HubSpot

The sending of our e-mail newsletters is carried out via this provider: HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter in accordance with Art. 6 para. 1 lit. f GDPR to forward this provider so that they take over the newsletter dispatch on our behalf.

Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits forwarding to third parties.

8) Data Processing for Order Fulfillment

To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be forwarded to the commissioned shipping company and the commissioned financial institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to personally inform you within the scope of our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

For the processing of your order, we also cooperate with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when visiting the website, which are small text files stored on your device and collect certain information. This information also includes your IP address, which Google shortens by removing the last digits to exclude direct personal identification.

The information is transmitted to Google servers and processed there. Transfers to Google LLC based in the USA are also possible.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted and shortened by your browser within Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, in particular the setting of cookies on the used device, only occur if you have given us your explicit consent for this in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 during your visit to the site will not take place. You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special "demographic characteristics" feature and can create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent to the use of Google Analytics according to Art. 6 para. 1 lit. a GDPR, can analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized Ads" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6 para. 1 lit. a GDPR, have set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.

Collection of data provided by users
To improve the analysis results for users whose contact data we have received within the framework of business or business-like relationships, we use the feature of "collection of "User-provided data".
Subject to your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit one or more files containing customer data aggregated about you (especially email address and phone number) electronically to Google as part of this function. Google does not gain access to clear data but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up.
The processing serves to refine measurement data, improves cross-device user tracking, and enables the integration of analysis results into advertising personalization and conversion tracking functions of Google Ads.
You can revoke your consent to us at any time with effect for the future. Further information on Google's data protection measures regarding the transmission of customer data can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

9.2 Microsoft Clarity

This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms to read device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, to analyze it for statistical evaluations of user behavior on our website and to create pseudonymized usage profiles. Among other things, this allows the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text inputs, scrolling, clicks, and mouse-overs). The pseudonymization fundamentally excludes direct personal reference. No merging with clear data collected in other ways about you takes place.

All processing described above, especially reading or storing information on the device used, is only carried out if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

10) Retargeting/ Remarketing and Conversion Tracking

Meta Pixel with Enhanced Data Matching

Within our online offering, we use the service "Meta Pixel" from the following provider in enhanced data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser after redirection through a cookie set by our linked page itself. In addition, this cookie collects specific customer data such as the email address, which we collect on our website linked with the Facebook or Instagram ad during processes such as purchases, account registrations or sign-ups (enhanced data matching). The cookie is then read and enables the transmission of data including specific customer data to Meta.

We use "Meta Pixel" with enhanced data matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they match the interests of users or have certain characteristics (e.g., interests in specific topics or products determined by the visited websites), which we transmit to Meta (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our advertisements by tracking whether users are redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the enhanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data are stored and processed by Meta, allowing assignment to the respective user profile, and Meta can use the data for its own advertising purposes in accordance with Meta's data use policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display ads on and off Facebook.

All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the „Cookie Consent Tool“ provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to and stored on a Meta server; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

11) Site Functionalities

Google reCAPTCHA

On this website, we use the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the Captcha window, the provider uses "Google Fonts", i.e., fonts loaded from the internet by Google. No further information beyond those already transmitted to Google via the functionality of ReCaptcha is processed.

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this data for evaluation to the provider's servers. Cookies may be used in this process, i.e., small text files stored in the browser of the device.

If the above-described processing is based on cookies, these are only set if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

If the above-described processing is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

Further information on Google's data protection policies can be found here: https://business.safety.google/intl/de/privacy/

12) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users as an interactive user interface when the page is accessed, where consents for certain cookies and/or cookie-based applications can be granted by ticking checkboxes. By using the tool, all cookies/services requiring consent are only loaded if the respective user has given corresponding consent by ticking the boxes. This ensures that such cookies are only set on the user's device if consent has been granted.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.

In individual cases, for the purpose of storage, assignment, or logging of Cookie settings for the processing of personal data (such as the IP address) are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is also Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1 The applicable data protection law grants you the following rights as a data subject against the controller regarding the processing of your personal data (rights to information and intervention), whereby the respective conditions for exercising these rights refer to the stated legal basis:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw given consents pursuant to Art. 7 para. 3 GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS AFTER BALANCING INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the processing purpose, and – if applicable – additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on an explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you Revoke consent.

If there are statutory retention periods for data processed within the framework of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiration of the retention periods, provided it is no longer necessary for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored as long as you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored as long as you exercise your right to object under Art. 21 para. 2 GDPR.

Unless otherwise specified in the other information of this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.