Privacy Policy

Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of the access, the IP address, the amount of data transferred and the requesting provider.
The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and in improving our offer.

Contact

Controller

Contact us if you wish. The controller for data processing is: VitaCux GmbH, Am Querkamp 18-20, 27474 Cuxhaven, Germany, +49 4721 3108000, info@john-voss.de

Customer-initiated contact via email

If you contact us by email, we only collect your personal data (name, email address, message content) to the extent provided by you. The data processing is for handling and responding to your contact request.
If the contact is for the implementation of pre-contractual measures (e.g. consultation regarding purchasing interest, quotation preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to processing based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your request. Your data will be deleted thereafter in compliance with legal retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message content) only to the extent you provide. The data processing serves the purpose of contacting you.
If the contact is for the implementation of pre-contractual measures (e.g. consultation regarding purchasing interest, quotation preparation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to processing based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your request. Your data will be deleted thereafter in compliance with legal retention periods, unless you have consented to further processing and use.

Customer Account Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

Collection, processing, and disclosure of personal data for orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be transferred, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.

Advertising

Use of the email address for sending newsletters

We use your email address independently of the contract processing exclusively for our own advertising purposes for sending newsletters, provided that you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. You can unsubscribe from the newsletter at any time using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of the email address for direct advertising

We use your email address, which we received in the context of the sale of a good or service, for electronic advertising of our own similar goods or services, provided you have not objected to this use. Providing the email address is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to the use of your email address at any time by notifying us. Contact details for exercising the objection can be found in the legal notice. You can also use the link provided in the advertising email. No costs will arise other than the transmission costs according to the base rates.

Shipping Service Providers & Inventory Management

Transfer of email address to shipping companies for information about shipping status

We pass on your email address to the transport company as part of the contract processing, provided you have expressly agreed to this during the ordering process. The transfer serves the purpose of informing you via email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Use of an external inventory management system

We use an inventory management system for contract processing as part of order processing. For this purpose, your personal data collected during the order process is transmitted to
Lexware Premium.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Payment Service Providers

Use of PayPal

We use the PayPal payment service on our website, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the payment service. When selecting and using PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to PayPal’s privacy policy, which you can find at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the PayPal Plus payment service on our website, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling you to pay via PayPal, credit card via PayPal, or direct debit via PayPal. The data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

For certain payment methods such as credit card or direct debit via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical procedures from credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the obtained information to assess the statistical probability of default in payment. The credit check may include score values, which are calculated based on scientifically recognized methods and may include address data. Your legitimate interests are considered in accordance with the legal regulations. The data processing serves the purpose of credit assessment for contract initiation and is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment default when PayPal makes advance payments.
You have the right to object at any time to this processing of personal data concerning you, based on Art. 6 para. 1 lit. f GDPR, for reasons relating to your particular situation, by notifying PayPal. The provision of data is necessary for the conclusion of the contract using your desired payment method. Failure to provide the data means the contract cannot be concluded with your chosen payment method.

Use of PayPal Express

We use the PayPal Express payment service on our website, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of enabling you to pay via PayPal Express. To integrate this payment service, PayPal must collect, store, and analyze data (e.g. IP address, device type, operating system, browser type, device location) when the website is called up. Cookies may also be used, enabling recognition of your browser.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering customer-oriented payment options. You have the right to object at any time to this processing of personal data concerning you, based on Art. 6 para. 1 lit. f GDPR, for reasons relating to your particular situation. When selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing by PayPal Express can be found in the corresponding privacy policy at https://www.paypal.com/de/legalhub/paypal/privacy-full?locale.x=de_DE#Updated_PS

Use of PayPal Check-Out

We use the PayPal Check-Out payment service on our website, provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal. To fulfill the contract with you using the selected payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored, enabling recognition of your browser. This data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-friendly range of payment options. You have the right to object at any time to this processing of personal data concerning you, based on Art. 6 para. 1 lit. f GDPR, for reasons relating to your particular situation.

Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal

For specific payment methods like credit card, direct debit or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical procedures from credit agencies. To do this, PayPal transmits the personal data necessary for the credit check to a credit agency and uses the obtained information to assess the statistical likelihood of payment default. The credit report may include probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and may incorporate address data. Your rights and legitimate interests will be taken into account according to legal requirements. The data processing serves the purpose of credit assessment for contract initiation and is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when PayPal provides advance payment. You have the right to object at any time to this processing of personal data concerning you, based on Art. 6 para. 1 lit. f GDPR, by notifying PayPal. Providing the data is necessary for the conclusion of the contract using the payment method you selected. Failure to provide the data means the contract cannot be concluded using your selected payment method.

Third-Party Providers

If you choose a third-party payment method, the data required for payment processing will be transmitted to PayPal.
This processing is based on Art. 6 para. 1 lit. b GDPR. To carry out the selected payment method, the data may then be forwarded by PayPal to the respective provider. This processing is also based on Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:

• Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Invoice purchase via PayPal

For payment via invoice purchase, the data required for payment processing is initially transmitted to PayPal. To carry out this payment method, the data will then be forwarded by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract using your selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may perform a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies, as described above. The data processing serves the purpose of credit assessment for contract initiation and is carried out based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protecting against payment defaults when Ratepay provides advance payment. Further information about data protection and the credit agencies used by Ratepay can be found at: https://www.ratepay.com/legal-payment-dataprivacy and https://www.ratepay.com/legal-payment-creditagencies/.

Further information about data processing when using PayPal can be found in the corresponding privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of the Payment Service Provider Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; “Mollie”) to process payments on our website. The data processing serves the purpose of offering you various payment methods via Mollie. When you select a payment option provided by Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (such as bank account or credit card number), your IP address, browser and device type, and, in some cases, your full name, address data, and product or service information you purchased from us. This processing is based on Art. 6 para. 1 lit. b GDPR. More information on data processing by Mollie can be found in their privacy policy at: https://www.mollie.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is called up again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Already stored cookies can be deleted at any time. However, we point out that you may then not be able to use all functions of this website in full.

You can find out how to manage (including disable) cookies in the most common browsers via the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise specified in this privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. In addition, cookies allow our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

Use of Usercentrics

We use the consent management tool Usercentrics on our website, provided by Usercentrics GmbH (Rosental 4, 80331 Munich, Germany; “Usercentrics”).
The tool allows you to grant consent for data processing on the website, especially the setting of cookies, and to make use of your right of revocation for already granted consent. The data processing serves the purpose of obtaining and documenting necessary consents for data processing in order to comply with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Usercentrics: date and time of page access, information about the browser and device used, anonymized IP address, opt-in and opt-out data.
Usercentrics uses the Google Cloud Platform from Google Ireland Limited, which may involve the transfer of your data to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The data processing is carried out to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR. The revocation log of previously given consent is retained for a period of three years. Further information on data protection at Usercentrics can be found at: https://usercentrics.com/privacy-policy/

Analytics & Advertising Tracking

Use of Google Analytics 4

We use the Google Analytics web analysis service on our website, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. On behalf of the website operator, Google will use the information obtained to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet usage to the website operator.
The following data may be collected, among others: IP address, date and time of the page view, click path, information about the browser and device used, pages visited, referrer URL (website from which you accessed our website), location data, and purchasing activity. Your data may be linked by Google with other data, such as your search history, personal accounts, usage data from other devices, and other data Google holds about you.

Your IP address is shortened by us on our own servers before being transmitted to Google. This ensures that Google only receives pseudonymized data.

Google uses technologies such as cookies, browser web storage, and tracking pixels, which enable the analysis of your use of the website. The use of cookies or similar technologies is based on your consent in accordance with § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR.

The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of processing carried out prior to the revocation.

The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. An adequacy decision by the EU Commission is available for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and thus committed to complying with European data protection principles. Both Google and U.S. government authorities may access your data.

More information about terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of shopware Analytics

We use the “shopware Analytics” analysis tool on our website from shopware AG (Ebbinghoff 10, 48624 Schöppingen, Germany; “shopware”). Shopware and we are jointly responsible for the collection and transmission of your data when using the service. This is based on an agreement between us and shopware on the joint processing of personal data, which defines the respective responsibilities. Accordingly, shopware is responsible for all obligations except for obtaining your consent for the use of cookies or similar technologies and for fulfilling this information obligation. This includes in particular the fulfillment of data subject rights according to Art. 15 – 21 GDPR. You may also assert your data subject rights with us, and we will forward your request to shopware.
Data processing serves the purpose of analyzing this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following data may be collected and processed: customer group, visited pages, click paths, date and time of visit, device information (resolution, resolution density, operating system), referrer URL, browser details, locale, search queries, and time zone.
Cookies or similar technologies are used for this purpose.
The use of cookies or similar technologies is based on your consent under § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is based on your consent under Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of prior processing.
Further information on shopware Analytics can be found at https://docs.shopware.com/de/shopware-6-de/erweiterungen/shopware-analytics.

Use of the Meta Pixel

We use the Meta Pixel on our website, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").
Meta and we are jointly responsible for the collection and transmission of your data during the use of this service. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. We are particularly responsible for fulfilling the information obligations under Art. 13, 14 GDPR, for implementing technical and organizational security measures under Art. 32 GDPR, and for compliance with Art. 33 and 34 GDPR if a data breach relates to our obligations. Meta is responsible for enabling data subject rights under Art. 15–20 GDPR and for the security of the service itself.
The service is used to target visitors to our website with interest-based advertising on Facebook and Instagram. The remarketing tag from Meta is implemented on our website. When you visit the website, a direct connection to the Meta servers is established, informing Meta which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. If you then visit Facebook or Instagram, you will be shown personalized, interest-based ads.
The service also allows us to track conversions. We see the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as what actions were taken. We do not receive information that allows us to identify users personally. Your data may be transferred to the USA. An adequacy decision of the EU Commission is in place (Trans-Atlantic Data Privacy Framework – TADPF). Meta is certified under the TADPF and committed to upholding EU data protection principles.
The processing of your personal data is based on your consent under Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of processing carried out before the revocation.
You can disable the “Custom Audiences” remarketing function here. Further information on data collection and use by Meta, your rights, and privacy protection options can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program “Google Ads” including conversion tracking (action evaluation) on our website. Google Conversion Tracking is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
When you click on a Google ad, a cookie for conversion tracking is set on your computer. These cookies are valid for a limited time, do not contain personal data, and are therefore not used for personal identification. If you visit specific pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Ads customer websites.
The information collected using the conversion cookie is used to generate conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive information that personally identifies users. Your data may be transferred to Google servers in the USA. An adequacy decision (TADPF) is in place for the USA. Google is certified under the TADPF and committed to EU data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is also based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of prior processing.
More information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of Google AdSense

We use the AdSense function on our website from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The data processing serves the purpose of renting out advertising space on the website and targeting visitors with interest-based advertising. Through this function, visitors to the provider's website are shown personalized, interest-based ads from the Google Display Network. Google uses cookies to allow the use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision by the EU Commission (TADPF) is in place for the USA. Google is certified under the TADPF and committed to complying with EU data protection principles. Google may transmit the information to third parties where required by law or where such third parties process the data on Google’s behalf. Under no circumstances will Google associate your IP address with other Google data.
The use of cookies or comparable technologies is based on your consent under § 25 para. 1 sentence 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is also based on your consent under Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of prior processing.
More information and Google's privacy policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Data Subject Rights and Storage Duration

Storage Duration

After complete contract processing, the data will initially be stored for the duration of the warranty period, then in accordance with legal, especially tax and commercial retention periods, and deleted after the expiration of these periods, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, and data portability.
You also have the right to object to processing based on Article 6 para. 1 lit. f GDPR and to processing for direct marketing purposes under Article 21 para. 1 GDPR.

Right to Lodge a Complaint with the Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may file a complaint with the supervisory authority responsible for us at the following contact details:

Data Protection Officer of Lower Saxony
Prinzenstraße 5
30159 Hanover
Tel.: +49 511 1204500
Fax: +49 511 1204599
Email: poststelle@lfd.niedersachsen.de

Right to Object

If the processing of personal data listed here is based on our legitimate interest under Article 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After you have objected, the processing of the affected data will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If the processing of personal data is for direct marketing purposes, you may object to this processing at any time by notifying us. Once you object, we will stop processing the affected data for direct marketing purposes.

Last updated: 22.10.2024