Data protection

Privacy Policy

Data collection and data usage

Personal data is information that can be used to identify a person as such. This includes, for example, your name, your address, your e-mail address or your telephone number.

(1) Collection of personal data when using the website

When using the website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

IP address Date and time of the request Time zone difference to Greenwich Mean Time (GMT) Content of the request (specific page) Access status/HTTP status code amount of data transferred in each case Website from which the request comes Browser Operating system and its interface Language and version of the browser software. The legal basis for storing the data is Art. 6 para. 1 lit. f GDPR.

(2) Collection of personal data during registration

We offer you the opportunity to register on our website by providing personal data. Depending on the type of contract concluded, we store the following data:

First name, surname Address Billing address E-mail address Telephone number

As part of the registration process, you will be asked whether you have read the privacy policy and agree to its validity, which you confirm by clicking the field and checking the corresponding box. By doing so, you consent to your personal data being used for the following purposes:

Processing of orders Sending direct advertising, e.g. by e-mail, package insert or post, sending offers and vouchers Sending rating requests Sending our newsletter

The legal basis for the processing of data is, in the case of your consent, Art. 6 para. 1 lit. a GDPR and, if the registration serves the fulfillment of a contract or the implementation of pre-contractual measures with you, additionally Art. 6 para. 1 lit. b GDPR.

Name and contact details of the controller

(3) The controller for the administration of personal data is

Nextlevelnutrition GmbH Industriestrasse 9 79541 Lörrach

Managing Director: Eric Ziehme

E-mail: datenschutz@nextlevelnutrition.de

(4) Contact details of the data protection officer

You can reach our data protection officer at: E-mail: datenschutz@nextlevelnutrition.de

Purposes of processing personal data

(5) We only store your data for the following purposes:

For processing orders (including payment processing and, if applicable, credit assessment), for sending advertising by us and for customer service.

We store and process your personal data at our central company headquarters.

Your personal data will only be transferred to third parties if the transfer is necessary for contract processing or for billing or collection purposes (e.g. shipping companies or payment service providers) or if you have expressly consented.

The legal basis for the transfer of data to third parties for the purpose of contract processing or for billing purposes is Art. 6 para. 1 lit. b GDPR and for disclosure in cases mandated by law Art. 6 para. 1 lit. c GDPR.

Duration of data storage

We store your data for as long as the respective purpose requires, taking into account your legitimate interests. If there is a tax retention period for certain data that is processed for the processing of purchase contracts, the data will be stored for 6 or 10 years. During this period, the processing of the data is restricted after 2 years, i.e. the data is only used to comply with legal obligations. The retention obligation begins at the end of the calendar year in which the order was placed by the customer or the contract was fulfilled.

Disclosure of personal data to third parties We may disclose your personal data to the following companies/categories of persons in accordance with legal regulations:

Tax, auditing and other authorities External service providers and professional advisors such as lawyers, auditors, accountants, credit agencies for credit checks, debt collection service providers, postal/shipping service providers, freight forwarders e.g. UPS, DHL, Deutsche Post Payment providers such as PayPal, Klarna, Amazon Pay, Apple Pay, Shopify Payments, Google Pay

E-commerce platform Shopify

To operate our online shop, we use Shopify, a service of Shopify Inc., 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5. For more information on data protection, please refer to Shopify's privacy policy.

Your rights

You have the following rights:

  1. Withdrawal of consent
  2. Right of access
  3. Right to rectification
  4. Right to erasure or restriction of processing
  5. Right to object to processing
  6. Right to data portability

You also have the right to lodge a complaint with the competent data protection supervisory authority for Baden-Württemberg:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Lautenschlagerstraße 20 70173 Stuttgart Telephone: 0711/615541-0 E-mail: poststelle@lfdi.bwl.de

Contact form

If you send us inquiries via the contact form, we will only use your data to process your request. This data will not be used for advertising purposes or passed on to third parties.

The legal basis for the processing of data transmitted via the contact form or in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the purpose of contact is also to conclude a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

The data you enter in the contact form will be stored by us until you request its deletion, revoke your consent to storage, or the purpose for data storage ceases to apply.

Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies. These are small text files that your web browser receives when you visit our pages and stores on your computer. Some of the cookies are deleted again immediately after closing the browser. Other cookies remain permanently on your computer and allow us to recognize you or your computer on your next visit to our website.

This site uses the following types of cookies, the scope and function of which are explained below:

  • Transient cookies: These are automatically deleted when you close your browser.
  • Persistent cookies: These remain stored on your device until they are manually deleted or expire.

You can deactivate cookies in your browser settings. Please note, however, that this may lead to functional restrictions of the website.

Analysis tools

Use of Google Analytics

Our website uses Google Analytics, a web analysis service from Google LLC. Google Analytics uses cookies to analyze website usage. The data is processed anonymously.

You can prevent the collection of your data by Google Analytics by installing this browser plugin.

Social Media Links

We link to social media platforms such as Facebook, Instagram and YouTube. No automatic data transfer takes place. By clicking on the links, you will be redirected to the respective platform.

Legal basis for data processing

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the secure and stable presentation of our website.

Marketing & Communications

Use of Klaviyo for Marketing and Communications
We use Klaviyo to send transactional emails and marketing communications, including newsletters, special offers, and order confirmations. Klaviyo acts as a data processor and processes personal data on our behalf in strict compliance with the Swiss Federal Act on Data Protection (FADP).

Categories of Data
The personal data we collect and share with Klaviyo includes, but is not limited to:

  • Your name and email address
  • Purchase history and order details
  • Your interactions with our emails, including opens, clicks, and preferences
  • Your behavior on our website, such as pages viewed and items added to cart

Purpose of Data Processing
We use Klaviyo for email marketing with amail agency for the following purposes:

  • Sending essential transactional emails related to your orders
  • Providing personalized marketing communications, including product recommendations and special offers
  • Analyzing customer behavior to improve our services and marketing strategies

Data Sharing and Protection
Klaviyo does not share your personal data with third parties. All data is processed securely and used solely for the purposes mentioned above.

Data Retention Period
Your personal data will be stored within Klaviyo for as long as necessary to fulfill the stated purposes or as required by applicable legal obligations.

International Data Transfers
As part of Klaviyo's operations, your personal data may be processed on servers located in the United States. All data transfers comply with the requirements of the FADP, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

Your Rights under the FADP
You have the following rights regarding your personal data:

  • Access: You can request access to and a copy of your data.
  • Rectification: You can request the correction of inaccurate or incomplete data.
  • Erasure: You can request the deletion of your personal data under certain conditions.
  • Objection: You can object to the processing of your data for marketing purposes.
  • Data Portability: You can request a copy of your data in a machine-readable format.
  • Withdrawal of Consent: You can withdraw your consent to processing for marketing communications at any time.

Consent and Opt-out
By subscribing to our newsletter or creating an account, you consent to the processing of your data for the purposes mentioned above. You can withdraw your consent at any time by clicking the "Unsubscribe" link in our emails.

For more information on Klaviyo's privacy practices, please review their privacy policy at https://www.klaviyo.com/legal/privacy-policy.