Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Fairvital BV, Eurode-Park 1-39, 6461 KB Kerkrade, Netherlands, Tel.: 00800-11779933, Fax: 00800-11779911, Email: info@fairvital.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser's address bar.

2) Data Collection When Visiting Our Website

When you use our website solely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

• The website visited
• Date and time of access
• Amount of data transmitted in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (possibly in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3) Cookies

To make your visit to our website more attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and enable website settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

If personal data is also processed through individual cookies used by us, processing takes place in accordance with Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(a) GDPR where consent has been given, or Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective website experience.

You can configure your browser to inform you when cookies are being set and to decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or generally.

Please note that the functionality of our website may be limited if you do not accept cookies.

4) Contacting Us

When you contact us (e.g. via a contact form or email), personal data is processed exclusively for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

5) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will also be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the relevant form on our website. You may delete your customer account at any time by sending a message to the controller at the address provided above. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we have no legitimate interest in continuing to store the data.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters. This ensures that you only receive newsletters after you have expressly confirmed your consent to receive them by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store the IP address recorded by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named above. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and as described in this privacy policy.

6.2 Advertising by Post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, postal address and, insofar as we have received this additional information from you as part of the contractual relationship, your title, academic degree, year of birth and professional, industry or business designation in accordance with Art. 6(1)(f) GDPR. We may use this information to send you interesting offers and information about our products by post. You may object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

7) Data Processing for Order Fulfilment

7.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6(1)(b) GDPR.

If, on the basis of a corresponding contract, we are obliged to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally prescribed period, using an appropriate means of communication (e.g. by post or email), in accordance with our statutory information obligations under Art. 6(1)(c) GDPR. Your contact details will be used strictly for the purpose of communicating updates that we are obliged to provide and will only be processed by us to the extent necessary for the respective notification.

To process your order, we also work with the service providers listed below, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

7.2 Disclosure of Personal Data to Shipping Service Providers

DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your email address to DHL before delivery in accordance with Art. 6(1)(a) GDPR for the purpose of arranging a delivery date or providing delivery notifications, provided that you have given your express consent during the ordering process. Otherwise, we will only pass on the recipient's name and delivery address to DHL for delivery purposes in accordance with Art. 6(1)(b) GDPR. The data will only be disclosed to the extent necessary for delivery of the goods. In this case, prior arrangement of the delivery date with DHL or delivery notification will not be possible.
Consent may be withdrawn at any time with effect for the future by contacting the controller named above or the transport service provider DHL.

7.3 Use of Payment Service Providers

PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, “Purchase on Account” or “Instalment Payment” via PayPal, we pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) as part of payment processing. The transfer takes place in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for payment methods involving credit cards via PayPal, direct debit via PayPal or, if offered, “Purchase on Account” or “Instalment Payment” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check, regarding the statistical probability of payment default, to decide whether to make the respective payment method available. The credit report may contain probability values (so-called score values). Where score values are included in the credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is included in the calculation of score values. Further information on data protection, including details of the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Stripe
If you choose a payment method offered by the payment service provider Stripe, payment processing will be carried out through Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We will pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank sort code, credit card number where applicable, invoice amount, currency and transaction number), to Stripe in accordance with Art. 6(1)(b) GDPR. Further information on Stripe's data protection practices can be found at https://stripe.com/de/privacy#translation.
Stripe reserves the right to carry out a credit check using mathematical and statistical procedures in order to safeguard its legitimate interest in determining the user's ability to pay. Stripe may transfer the personal data necessary for a credit check and obtained during payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values (so-called score values). Where score values are included in the credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is included in the calculation of score values. Stripe uses the result of the credit check regarding the statistical probability of payment default to decide whether the user is eligible to use the selected payment method.
You may object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies. However, Stripe may still be entitled to process your personal data if this is necessary for contractual payment processing.

8) Online Marketing

Use of Affiliate Programs

Our Own Affiliate Program
In connection with the product presentations on our website, we operate our own affiliate program, through which we provide interested third-party website operators with partner links for placement on their websites that lead to our offers. Cookies are used for the affiliate program. These are generally set on the partner website after a corresponding partner link has been clicked, and we are therefore not responsible for them under data protection law. Cookies are small text files stored on your device to trace the origin of transactions (e.g. “sales leads”) generated via such links. In this way, we can recognise, among other things, that you clicked on the partner link and were redirected to our website. This information is necessary for payment processing between us and our affiliate partners. If the information also contains personal data, the processing described is carried out on the basis of our legitimate financial interest in processing commission payments in accordance with Art. 6(1)(f) GDPR.
If you wish to prevent analysis of user behaviour through cookies, you can configure your browser to inform you when cookies are being set and to decide individually whether to accept them, or to exclude acceptance of cookies in certain cases or generally.

9) Web Analytics Services

Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of website usage.

When Google Analytics 4 is used, so-called “cookies” are used by default. Cookies are text files stored on your device that enable analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened by its final digits; see below) is generally transmitted to a Google server and stored and processed there. Information may also be transmitted to the servers of Google LLC in the USA and processed further there.

When Google Analytics 4 is used, the IP address transmitted by your device while using the website is, by default, always collected and processed automatically in anonymised form only, so that direct identification of an individual from the information collected is excluded. This automatic anonymisation is achieved by Google shortening the IP address transmitted by your device by its final digits within member states of the European Union (EU) or other states party to the Agreement on the European Economic Area (EEA).

On our behalf, Google uses this and other information to evaluate your use of the website, compile reports on your website activities and usage behaviour, and provide us with other services relating to website and internet usage. The shortened IP address transmitted by your device within Google Analytics 4 is not combined with other Google data. Data collected through Google Analytics 4 is retained for two months and then deleted.

Google Analytics 4 also makes it possible, through a special function known as “demographic characteristics”, to compile statistics containing information about the age, gender and interests of website users based on an evaluation of interest-based advertising and additional information from third-party providers. This enables website user groups to be identified and distinguished for the purpose of targeting marketing measures more effectively. However, data collected through “demographic characteristics” cannot be attributed to any specific person, including you personally. Data collected through this function is retained for two months and then deleted.

All the processing described above, in particular the setting of Google Analytics cookies to store and read information on the device you use to access the website, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Google Analytics 4 will not be used while you visit our website without your consent. You may withdraw consent previously given at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google for our use of Google Analytics 4, under which Google is obliged to protect the data of our website users and not disclose it to third parties.

To ensure compliance with European data protection standards when data is potentially transferred from the EU or EEA to the USA and processed further there, Google relies on the European Commission's so-called Standard Contractual Clauses, which we have contractually agreed with Google.

Further legal information about Google Analytics 4, including a copy of the Standard Contractual Clauses mentioned above, is available at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

10) Website Features

10.1 Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops quality seal and to offer Trusted Shops membership to buyers after an order has been placed. This serves to protect our overriding legitimate interests, within the context of a balancing of interests, in the optimal marketing of our offering, in accordance with Art. 6(1)(f) GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file containing, for example, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documenting the access. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the website.

Additional personal data is only transferred to Trusted Shops if, after placing an order, you decide to use Trusted Shops products or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

10.2 Google Web Fonts
This website uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), to ensure a consistent display of fonts. When you access a page, your browser loads the required web fonts into its cache to display text and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This may also involve the transfer of personal data to Google LLC servers in the USA. In this way, Google becomes aware that our website has been accessed via your IP address. Personal data is processed in connection with establishing a connection to the font provider only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.

11) Rights of the Data Subject

11.1 Applicable data protection law grants you the following rights as a data subject (rights of access and intervention) against the controller with regard to the processing of your personal data. The legal basis cited in each case determines the conditions for exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to be informed pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest following a balancing of interests, you have the right to object to such processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes.

12) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods apply to data processed in connection with contractual or similar legal obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we have no legitimate interest in continuing to store it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.