{"id":2001,"date":"2026-06-30T10:52:25","date_gmt":"2026-06-30T08:52:25","guid":{"rendered":"https:\/\/store.bioactiva.de\/?page_id=2001"},"modified":"2026-07-27T14:32:37","modified_gmt":"2026-07-27T12:32:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/store.bioactiva.de\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h1>Privacy Policy for the Online Shop<\/h1>\n<p><strong>Last updated: 26 June 2026<\/strong><\/p>\n<p>The protection of your personal data is important to us. With this Privacy Policy, we inform you about which personal data we process in connection with the use of our online shop, the ordering of food supplements, and communication with us, for what purposes this is done, and which rights you have.<\/p>\n<h1>1. Controller<\/h1>\n<p>The controller responsible for data processing within the meaning of the General Data Protection Regulation is:<\/p>\n<p>Bioactiva Diagnostica GmbH<br \/>\nLouisenstra\u00dfe 137<br \/>\n61348 Bad Homburg vor der H\u00f6he<br \/>\nGermany<br \/>\nEmail: s.nasser@bioactiva.de<br \/>\nTelephone: +49 (0) 6172 17102-0<br \/>\nRepresented by the Managing Director: Mr. Adnan Dawoud<\/p>\n<h1>2. General Information on Data Processing<\/h1>\n<p>We process personal data only to the extent necessary to provide our online shop, process orders, communicate with customers, fulfil legal obligations, or safeguard legitimate interests.<\/p>\n<p>Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, name, address, email address, telephone number, IP address, order data, and payment data.<\/p>\n<h1>3. Visiting Our Online Shop and Server Log Files<\/h1>\n<p>When you access our online shop, technical information that your browser transmits to our server is automatically collected. This may include:<\/p>\n<ul>\n<li>IP address;<\/li>\n<li>date and time of access;<\/li>\n<li>page or file accessed;<\/li>\n<li>referrer URL;<\/li>\n<li>browser used;<\/li>\n<li>operating system;<\/li>\n<li>internet service provider;<\/li>\n<li>amount of data transferred;<\/li>\n<li>access status.<\/li>\n<\/ul>\n<p>This data is technically necessary in order to display the online shop correctly, ensure the stability and security of the website, and prevent misuse.<\/p>\n<p>The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and functional provision of our online shop.<\/p>\n<h1>4. SSL or TLS Encryption<\/h1>\n<p>For security reasons, our online shop uses SSL or TLS encryption. You can recognize an encrypted connection by the character string \u201chttps:\/\/\u201d and the lock symbol in the address bar of your browser.<\/p>\n<p>This protects personal data that you transmit to us, in particular order, contact, and payment information, against unauthorized access.<\/p>\n<h1>5. Customer Account and Registration<\/h1>\n<p>If you create a customer account in our online shop, we process the data that you provide during registration. This may include, in particular:<\/p>\n<ul>\n<li>first and last name;<\/li>\n<li>billing and delivery address;<\/li>\n<li>email address;<\/li>\n<li>telephone number;<\/li>\n<li>login credentials;<\/li>\n<li>order history.<\/li>\n<\/ul>\n<p>The processing is carried out for the purpose of setting up and managing your customer account, simplifying the ordering process, allowing access to past orders, and communicating with you.<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for the performance of pre-contractual measures or for the fulfilment of a contract. If you voluntarily provide additional information, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR.<\/p>\n<p>You may request deletion of your customer account at any time, provided that no statutory retention obligations prevent deletion.<\/p>\n<h1>6. Orders in the Online Shop<\/h1>\n<p>When you place an order in our online shop, we process the personal data required to perform the purchase contract. This includes, in particular:<\/p>\n<ul>\n<li>first and last name;<\/li>\n<li>billing address;<\/li>\n<li>delivery address;<\/li>\n<li>email address;<\/li>\n<li>telephone number, if provided;<\/li>\n<li>products ordered;<\/li>\n<li>order number;<\/li>\n<li>payment status;<\/li>\n<li>shipping status;<\/li>\n<li>invoice and payment information;<\/li>\n<li>communication relating to the order.<\/li>\n<\/ul>\n<p>The processing is carried out for the purpose of accepting, processing, fulfilling, and delivering your order, issuing invoices, processing payments, communicating with customers, and handling inquiries, complaints, returns, and refunds.<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR. Where retention obligations under tax and commercial law apply, processing is also carried out on the basis of Art. 6(1)(c) GDPR.<\/p>\n<h1>7. Special Information Regarding Food Supplements<\/h1>\n<p>Our online shop sells food supplements. In principle, it is not necessary for you to provide us with health data in order to order these products.<\/p>\n<p>Please do not transmit health data, diagnoses, medication plans, or other particularly sensitive information to us unless this is necessary for your inquiry.<\/p>\n<p>If you voluntarily provide us with health-related information in the context of an inquiry, complaint, or product question, we process this information exclusively for the purpose of handling your inquiry. In this case, processing is carried out, where required, on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR and Art. 9(2)(a) GDPR, or for the handling of your matter in connection with the contractual relationship pursuant to Art. 6(1)(b) GDPR.<\/p>\n<p>We do not use such information for advertising purposes.<\/p>\n<h1>8. Product Quality, Complaints, Returns, and Refunds<\/h1>\n<p>If you contact us regarding a complaint, damaged goods, incorrectly delivered products, a return, or a refund, we process the data you provide in order to handle your request.<\/p>\n<p>This may include:<\/p>\n<ul>\n<li>name;<\/li>\n<li>contact details;<\/li>\n<li>order number;<\/li>\n<li>product name;<\/li>\n<li>photos of the product, packaging, or shipping box;<\/li>\n<li>description of the issue;<\/li>\n<li>payment and refund information.<\/li>\n<\/ul>\n<p>The processing is carried out for the performance of the contract, for the handling of warranty, return, and refund requests, and for the establishment, exercise, or defense of legal claims.<\/p>\n<p>The legal bases are Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR, and Art. 6(1)(f) GDPR.<\/p>\n<h1>9. Product Information, Safety Information, and Recalls<\/h1>\n<p>If this is necessary for reasons of product safety, quality assurance, statutory information obligations, or in connection with a product recall, we may use your contact details and order data to inform you about affected products.<\/p>\n<p>This may be necessary, in particular, if a product is recalled, safety information must be communicated, or official requirements apply.<\/p>\n<p>The processing is carried out on the basis of Art. 6(1)(c) GDPR where a legal obligation exists, and on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in product safety, consumer information, and quality assurance.<\/p>\n<h1>10. Payment Processing<\/h1>\n<p>Various online payment methods may be offered in our online shop. For the purpose of processing payment, the personal data required for this purpose is transmitted to the payment service provider selected by you.<\/p>\n<p>The data processed may include:<\/p>\n<ul>\n<li>name;<\/li>\n<li>billing address;<\/li>\n<li>delivery address;<\/li>\n<li>email address;<\/li>\n<li>order amount;<\/li>\n<li>order number;<\/li>\n<li>payment method;<\/li>\n<li>payment status;<\/li>\n<li>technical transaction data.<\/li>\n<\/ul>\n<p>Data processing is carried out for the purpose of payment processing and contract fulfilment on the basis of Art. 6(1)(b) GDPR. Where processing is necessary for fraud prevention, payment security, or legal defense, it is carried out on the basis of Art. 6(1)(f) GDPR.<\/p>\n<p>Depending on the payment method offered at checkout, the following payment service providers may be used in particular:<\/p>\n<h2>PayPal<\/h2>\n<p>If PayPal is selected, payment is processed via PayPal. The provider is PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.<\/p>\n<p>PayPal\u2019s privacy notices can be found on PayPal\u2019s website.<\/p>\n<h2>Klarna<\/h2>\n<p>If a Klarna payment method is selected, payment is processed via Klarna. The provider is Klarna Bank AB, Sveav\u00e4gen 46, 111 34 Stockholm, Sweden.<\/p>\n<p>Klarna may process personal data for payment processing, identity verification, and credit checks.<\/p>\n<p>Klarna\u2019s privacy notices can be found on Klarna\u2019s website.<\/p>\n<h2>Amazon Pay<\/h2>\n<p>If Amazon Pay is selected, payment is processed via Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg.<\/p>\n<p>Amazon Pay enables you to use payment and address data from your Amazon account for the order.<\/p>\n<p>Amazon Pay\u2019s privacy notices can be found on the Amazon Pay website.<\/p>\n<h2>Google Pay<\/h2>\n<p>If Google Pay is selected, payment is processed via the Google Pay function of your device. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/p>\n<p>Google Pay\u2019s privacy notices can be found on Google\u2019s website.<\/p>\n<h2>Apple Pay<\/h2>\n<p>If Apple Pay is selected, payment is processed via the Apple Pay function of your device. The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.<\/p>\n<p>Apple Pay\u2019s privacy notices can be found on Apple\u2019s website.<\/p>\n<p>Please note that the payment service providers mentioned may be independent controllers within the meaning of the GDPR. Their own privacy notices apply in addition to this Privacy Policy for their data processing.<\/p>\n<h1>11. Shipping and Delivery<\/h1>\n<p>For the delivery of your order, we pass on the personal data required for this purpose to the commissioned shipping or logistics service provider.<\/p>\n<p>This may include:<\/p>\n<ul>\n<li>name;<\/li>\n<li>delivery address;<\/li>\n<li>email address;<\/li>\n<li>telephone number, if required for delivery;<\/li>\n<li>tracking number;<\/li>\n<li>delivery information.<\/li>\n<\/ul>\n<p>The transfer takes place exclusively for the purpose of delivery, shipment tracking, and delivery communication.<\/p>\n<p>The legal basis is Art. 6(1)(b) GDPR. Where processing is necessary to safeguard our legitimate interests in secure and traceable delivery, it is carried out on the basis of Art. 6(1)(f) GDPR.<\/p>\n<h1>12. Contact by Email or Contact Form<\/h1>\n<p>If you contact us by email or through a contact form, we process the personal data you transmit to us in order to handle your inquiry.<\/p>\n<p>This may include:<\/p>\n<ul>\n<li>name;<\/li>\n<li>email address;<\/li>\n<li>telephone number;<\/li>\n<li>content of your message;<\/li>\n<li>order number, if provided;<\/li>\n<li>attached files or photos.<\/li>\n<\/ul>\n<p>The processing is carried out for the purpose of handling your inquiry. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper response to customer and prospective customer inquiries.<\/p>\n<p>If your inquiry is aimed at the conclusion or performance of a contract, the additional legal basis is Art. 6(1)(b) GDPR.<\/p>\n<h1>13. Newsletter<\/h1>\n<p>If you subscribe to our newsletter, we use your email address to send you regular information about products, offers, promotions, or news from Bioactiva Diagnostica GmbH.<\/p>\n<p>Registration generally takes place using the double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your subscription.<\/p>\n<p>For the newsletter, we process in particular:<\/p>\n<ul>\n<li>email address;<\/li>\n<li>time of registration;<\/li>\n<li>time of confirmation;<\/li>\n<li>IP address at registration and confirmation;<\/li>\n<li>name, if provided voluntarily.<\/li>\n<\/ul>\n<p>The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.<\/p>\n<p>You may withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending a message to s.nasser@bioactiva.de.<\/p>\n<h1>14. Email Advertising to Existing Customers<\/h1>\n<p>If you have purchased goods from us, we may use your email address to send you information about similar products from our range, provided that you have not objected to this.<\/p>\n<p>The processing is carried out on the basis of our legitimate interest in direct marketing pursuant to Art. 6(1)(f) GDPR in conjunction with the statutory requirements for advertising to existing customers.<\/p>\n<p>You may object to the use of your email address for advertising purposes at any time with effect for the future without incurring any costs other than transmission costs at the basic rates.<\/p>\n<h1>15. Cookies and Similar Technologies<\/h1>\n<p>Our online shop uses cookies and similar technologies. Cookies are small text files that are stored on your device.<\/p>\n<p>We distinguish between technically necessary cookies and optional cookies.<\/p>\n<h2>Technically Necessary Cookies<\/h2>\n<p>Technically necessary cookies are required for the online shop to function properly. They enable, for example:<\/p>\n<ul>\n<li>shopping cart function;<\/li>\n<li>checkout process;<\/li>\n<li>language settings;<\/li>\n<li>login function;<\/li>\n<li>storage of cookie settings;<\/li>\n<li>secure payment and ordering processes.<\/li>\n<\/ul>\n<p>The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and secure functionality of the online shop.<\/p>\n<h2>Optional Cookies<\/h2>\n<p>Optional cookies, in particular for statistics, analytics, marketing, or personalized advertising, are set only if you have given your prior consent.<\/p>\n<p>The processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw or change your consent at any time with effect for the future.<\/p>\n<h1>16. Cookie Consent Management<\/h1>\n<p>If we use a cookie banner or consent management tool, your cookie settings are stored so that we can document your selection and take it into account on your next visit.<\/p>\n<p>The following data may be processed in particular:<\/p>\n<ul>\n<li>consent status;<\/li>\n<li>time of consent;<\/li>\n<li>technical browser information;<\/li>\n<li>IP address in shortened or pseudonymized form;<\/li>\n<li>device information.<\/li>\n<\/ul>\n<p>The processing is carried out to fulfil statutory documentation obligations and to manage your consent on the basis of Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.<\/p>\n<h1>17. Web Analytics and Online Marketing<\/h1>\n<p>Where we use analytics or marketing services, this is done only with your prior consent, insofar as consent is required.<\/p>\n<p>Such services may help us understand the use of our online shop, improve user-friendliness, evaluate advertising campaigns, or display interest-based advertising.<\/p>\n<p>The following data may be processed in particular:<\/p>\n<ul>\n<li>IP address;<\/li>\n<li>device information;<\/li>\n<li>browser information;<\/li>\n<li>pages visited;<\/li>\n<li>click behavior;<\/li>\n<li>referring page;<\/li>\n<li>purchase or conversion information;<\/li>\n<li>cookie IDs or similar identifiers.<\/li>\n<\/ul>\n<p>The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.<\/p>\n<p>If Google Analytics, Google Ads, Meta Pixel, or comparable services are used, the respective providers, purposes, legal bases, retention periods, and objection options must be added separately to this Privacy Policy.<\/p>\n<h1>18. Social Media and External Links<\/h1>\n<p>Our online shop may contain links to our profiles on social networks, such as Facebook, Instagram, LinkedIn, or YouTube.<\/p>\n<p>When you click such a link, you leave our online shop and are redirected to the respective platform. The respective platform operator is generally responsible for the processing of personal data there.<\/p>\n<p>If social media plugins or embedded content are integrated directly into our online shop, personal data may be transmitted to the respective provider when the page is accessed. Such content is loaded only with your consent where required.<\/p>\n<h1>19. Recipients of Personal Data<\/h1>\n<p>We pass on personal data only where this is necessary or legally permitted.<\/p>\n<p>Recipients of personal data may include, in particular:<\/p>\n<ul>\n<li>hosting service providers;<\/li>\n<li>shop system or IT service providers;<\/li>\n<li>payment service providers;<\/li>\n<li>shipping and logistics service providers;<\/li>\n<li>tax advisors;<\/li>\n<li>banks and credit institutions;<\/li>\n<li>authorities, where legally required;<\/li>\n<li>service providers for newsletters, analytics, marketing, or customer communication, where used.<\/li>\n<\/ul>\n<p>Data is transferred only to the extent necessary and on the basis of the applicable legal basis.<\/p>\n<p>Where service providers process personal data on our behalf, we conclude data processing agreements with these service providers pursuant to Art. 28 GDPR.<\/p>\n<h1>20. Transfers to Third Countries<\/h1>\n<p>Personal data is transferred to countries outside the European Union or the European Economic Area only if this is necessary for the performance of our services, if you have given your consent, if there is a legal obligation, or if appropriate data protection safeguards exist.<\/p>\n<p>Appropriate safeguards may include, in particular, an adequacy decision by the European Commission or the conclusion of EU Standard Contractual Clauses.<\/p>\n<h1>21. Retention Period<\/h1>\n<p>We store personal data only for as long as is necessary for the respective purposes or as long as statutory retention obligations apply.<\/p>\n<p>Order, invoice, and payment data are stored within the scope of statutory retention obligations under commercial and tax law.<\/p>\n<p>Data from inquiries is deleted once the inquiry has been finally processed, unless statutory retention obligations or legitimate interests in further storage exist.<\/p>\n<p>Data processed on the basis of consent is stored until consent is withdrawn, unless another legal basis for further storage exists.<\/p>\n<h1>22. Obligation to Provide Personal Data<\/h1>\n<p>The provision of certain personal data is necessary for the conclusion and performance of a purchase contract. Without this data, we cannot process your order, process payment, or arrange delivery.<\/p>\n<p>Mandatory information is marked accordingly in the respective form or at checkout.<\/p>\n<p>All other information is voluntary.<\/p>\n<h1>23. Automated Decision-Making and Profiling<\/h1>\n<p>We do not use automated decision-making within the meaning of Art. 22 GDPR.<\/p>\n<p>Profiling does not take place unless expressly stated otherwise in this Privacy Policy.<\/p>\n<h1>24. Rights of Data Subjects<\/h1>\n<p>Within the scope of the statutory requirements, you have the following rights:<\/p>\n<ul>\n<li>right of access pursuant to Art. 15 GDPR;<\/li>\n<li>right to rectification pursuant to Art. 16 GDPR;<\/li>\n<li>right to erasure pursuant to Art. 17 GDPR;<\/li>\n<li>right to restriction of processing pursuant to Art. 18 GDPR;<\/li>\n<li>right to data portability pursuant to Art. 20 GDPR;<\/li>\n<li>right to object pursuant to Art. 21 GDPR;<\/li>\n<li>right to withdraw consent granted pursuant to Art. 7(3) GDPR;<\/li>\n<li>right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.<\/li>\n<\/ul>\n<p>To exercise your rights, you may contact us at any time:<\/p>\n<p>Bioactiva Diagnostica GmbH<br \/>\nLouisenstra\u00dfe 137<br \/>\n61348 Bad Homburg vor der H\u00f6he<br \/>\nGermany<br \/>\nEmail: s.nasser@bioactiva.de<\/p>\n<h1>25. Right to Object<\/h1>\n<p>If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.<\/p>\n<p>If your objection is directed against direct marketing, you have an unrestricted right to object. In this case, we will no longer use your personal data for direct marketing.<\/p>\n<h1>26. Withdrawal of Consent<\/h1>\n<p>You may withdraw consent you have given at any time with effect for the future.<\/p>\n<p>The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected by the withdrawal.<\/p>\n<h1>27. Right to Lodge a Complaint with a Supervisory Authority<\/h1>\n<p>You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.<\/p>\n<p>The competent authority may in particular be the data protection supervisory authority of your place of residence, your workplace, or our registered office.<\/p>\n<h1>28. Updates to This Privacy Policy<\/h1>\n<p>We reserve the right to amend this Privacy Policy if legal requirements, technical functions of our online shop, service providers used, or our data processing procedures change.<\/p>\n<p>The current version is available in our online shop.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy for the Online Shop Last updated: 26 June 2026 The protection of your personal data is important to us. With this Privacy Policy, we inform you about which personal data we process in connection with the use of our online shop, the ordering of food supplements, and communication with us, for what purposes [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2001","page","type-page","status-publish","hentry"],"acf":[],"jetpack_sharing_enabled":true,"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/pages\/2001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/comments?post=2001"}],"version-history":[{"count":0,"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/pages\/2001\/revisions"}],"wp:attachment":[{"href":"https:\/\/store.bioactiva.de\/en\/wp-json\/wp\/v2\/media?parent=2001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}