Privacy policy

We take data protection seriously


You can object to this processing  help@morenutrition.de . at any time in accordance with Art. 21 Para. 2 GDPR, for example by contacting us via the corresponding link in the email received from  help@morenutrition.de or by writing an email to help@morenutrition.de .

Protecting your privacy when processing personal data is very important to us. Therefore, we only process personal data when it is necessary and economically relevant for the use of our services. In any case, we comply with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Below you will find information about what data is processed, in what form, and by whom when you visit our shop at www.morenutrition.de .


I. Who is responsible for data processing and whom can you contact?


(1) The responsible party is
Quality First GmbH,
Werner-von-Siemens-Straße 8,
25337 Elmshorn, Germany.
Telephone: +49 (0)4121 273 3002,

(2) The company's data protection officer is
Nico Becker,
Projekt 29 GmbH & Co. KG,
Ostengasse 14,
93047 Regensburg, Germany.


II. Personal Data

(1) Personal data is information about you that can be used to identify you. This includes, for example, your name, address, email address, location data, payment details, and many other types of information. Generally, you do not need to provide any personal data to visit our website. However, in some cases, we need this information to provide you with the services you request on our website. If you use one of our services that requires this, we generally only collect the data necessary for that purpose, and even then, only with your consent.

 


III. Visit our website


A. General Use

(1) When you visit our website, our web servers automatically store the IP address of your internet service provider, the website from which you visited us, the pages you visit on our site, and the date and duration of your visit. Processing this information is essential for the technical transmission of the website, the convenient use of our services, and the secure operation of our servers. Our legitimate interest is based on Article 6(1)(f) of the GDPR.
(2) It is not possible to directly identify you from this information, and we will not attempt to do so. The information is stored and automatically deleted once the aforementioned purposes have been fulfilled. The standard deletion periods are determined by the criterion of necessity.


1. Automatically saved data (server log files)

(1) The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

This includes:
• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• Full IP address of the requesting computer
• Amount of data transferred


(2) This data will not be combined with other data sources. Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.


(3) For technical security reasons, in particular to defend against attacks on our web server, we temporarily store this data. It is not possible for us to identify individual persons based on this data. After a maximum of seven days, the data is anonymized by shortening the IP address to the domain level, so that it is no longer possible to establish a connection to an individual user. In anonymized form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, even in part.

 

2. Cookies, tracking pixels and tools

(1) When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to recognize the specific web browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID. You can find an overview of the cookies we use here.


(2) By using session cookies, the controller can provide users of this website with a user-friendly service that would not be possible without setting cookies. Without consent, we only use technically necessary cookies on the legal basis of legitimate interest pursuant to Article 6(1)(f) GDPR.


(3) We only use personalized cookies to improve our website or for marketing/advertising purposes with your consent. On your first visit, you can voluntarily consent to tracking and analysis via the displayed cookie banner. Your data may be shared with partners or third-party providers. These cookies will only be stored if you explicitly consent; the legal basis for this is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can change your cookie settings here at any time.

 

3. Social Plugins from Facebook, Pinterest, Instagram and YouTube

(1) Our website uses social media buttons from social networks. These are simply embedded as HTML links, so no connection is established with the servers of the respective provider when you visit our website. Clicking on one of the buttons opens the website of the respective social network in a new browser window. There you can, for example, click the Like or Share button.

 

4. Consent Management

(1) Here you can manage, revoke or change your cookie settings:Change consent


1. Shopify

(1) We host our website with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”). Shopify is a tool for building and hosting e-commerce websites. When you visit our website, Shopify collects your IP address and information about the device you are using and your browser. Shopify also analyzes visitor numbers, visitor sources, and customer behavior, and generates user statistics. If you make a purchase on our website, Shopify also collects your name, email address, delivery and billing addresses, payment details, and other data related to the purchase (e.g., telephone number, sales volume, etc.). 

(2) The use of Shopify is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time. We have concluded a data processing agreement (DPA) pursuant to Article 28 GDPR with the aforementioned provider. This is a legally required contract under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


2. Usercentrics

(1) This website uses Usercentrics' consent technology to obtain your consent to the storage of certain cookies on your device or the use of certain technologies and to document this in accordance with data protection regulations.

(2) When you visit our website, the following personal data will be transferred to Usercentrics:
• Consent
• IP address
• Information about your browser
• Information about your device
• Time of your visit to the website


(3) Furthermore, Usercentrics stores a cookie in your browser to associate your consents or their revocations with you. The data collected in this way is stored until you request its deletion, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.


(4) Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6(1)(c) GDPR.


(5) We have concluded a data processing agreement (DPA) pursuant to Article 28 GDPR with the aforementioned provider. This is a legally required contract under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


3. Google reCAPTCHA

(1) On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent, provided you have given it to us via the consent banner. Because data protection is very important to us, and we want to keep the intrusion for you to a minimum, we do not use Google's service permanently, but only in specific situations. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA.


(2) In the event of the transfer of personal data to Google LLC, which is based in the USA, Google LLC has certified itself under the EU-US Privacy Shield Framework, which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list 

C. Tools and services for analysis, statistical analysis and marketing


1. Google Tag Manager

(1) We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.


(2) The Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. The Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves only to manage and deploy the tools integrated through it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google's parent company in the United States.


(3) The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and easy integration and management of various tools on its website. If corresponding consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal equipment (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.


2. Google Analytics (4)

(1) This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


(2) Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user's origin. This data is aggregated into a user ID and assigned to the respective device of the website visitor.


(3) Furthermore, we can use Google Analytics to record your mouse movements, scrolling, and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data sets and employs machine learning technologies for data analysis. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about your use of this website is generally transmitted to and stored on a Google server in the USA. The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. You may withdraw your consent at any time.


(4) Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/

3. Browser Plugin

(1) You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de . More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

4. Google Signals

(1) We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, YouTube history, and demographic data (visitor data). This data can be used for personalized advertising with the help of Google Signals. If you have a Google account, the visitor data from Google Signals will be linked to your Google account and used for personalized advertising messages. The data is also used to create anonymized statistics on the user behavior of our users.


5. Google Analytics E-Commerce Measurement

(1) This website uses the "E-commerce Measurement" function of Google Analytics. E-commerce Measurement allows the website operator to analyze the purchasing behavior of website visitors in order to improve their online marketing campaigns. Information such as orders placed, average order values, shipping costs, and the time from viewing to purchasing a product is recorded. This data can be aggregated by Google under a transaction ID that is assigned to the respective user or their device.


6. Google Ads

(1) The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


(2) Google Ads allows us to display advertisements in the Google search engine or on third-party websites when users enter specific search terms into Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As website operators, we can quantitatively evaluate this data by, for example, analyzing which search terms triggered the display of our advertisements and how many advertisements resulted in clicks.


(3) The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. You may withdraw your consent at any time. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/

7. Google AdSense

(1) This website uses Google AdSense, a service for integrating advertisements. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


(2) We use Google AdSense in "non-personalized" mode. Unlike personalized mode, the ads are therefore not based on your previous browsing behavior, and no user profile is created. Instead, so-called "contextual information" is used to select the ads. The selected ads are then based, for example, on your location, the content of the website you are visiting, or your current search terms. You can find more information about the differences between personalized and non-personalized targeting with Google AdSenseat: https://support.google.com/adsense/answer/9007336

 

 

(3) Please note that even when using Google AdSense in non-personalized mode, cookies or similar recognition technologies (e.g., device fingerprinting) may be used. According to Google, these are used to combat fraud and abuse.

 

 

(4) The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and 25 para. 1 TTDSG. Consent can be withdrawn at any time.

 

 

(5) Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Details here: https://business.safety.google/adscontrollerterms/sccs/

 

 

(6) You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://accounts.google.com/InteractiveLogin/signinchooser?continue=https%3A%2F%2Fadssettings.google.com%2Fauthenticated&followup=https%3A%2F%2Fadssettings.google.com%2Fauthenticated&passive=1209600&ifkv=AaSxoQztBRZECiFuPg9ngHKf3Khxo8ycCfZ-uI5nRuta2cDfsqrEp_EE_qy9NKEl6yluulsDyAvhdg&ddm=0&flowName=GlifWebSignIn&flowEntry=ServiceLogin

 

 

(7) Further information on advertising technologies can be found here: https://policies.google.com/technologies/ads and https://morenutrition.de/pages/datenschutzerklarung 

8. Google Campaign Manager

(1) This website also uses the online marketing tool Campaign Manager from Google, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.


(2) The Campaign Manager uses cookies to display relevant ads to users, improve campaign performance reports, and prevent users from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from being shown repeatedly. Furthermore, the Campaign Manager can use cookie IDs to track conversions related to ad requests. This occurs, for example, when a user sees a Campaign Manager ad and later visits the advertiser's website using the same browser and makes a purchase. 


(3) Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: By integrating the Campaign Manager, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google will learn and store your IP address.


(4) Furthermore, the Campaign Manager cookies we use (e.g., DoubleClick or Floodlight) allow us to understand whether you perform certain actions on our website after viewing or clicking on one of our display/video ads on Google or another platform via the Campaign Manager (conversion tracking). The Campaign Manager uses this cookie to understand the content you interacted with on our websites in order to send you targeted advertising later. 


(5) The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Art. 25 para. 1 TTDSG. You may withdraw your consent at any time. Further information on Campaign Manager can be found at https://marketingplatform.google.com/about/enterprise/ and on data protection at Google in general at: https://www.google.de/intl/de/policies/privacy  . Google has submitted to the Data Privacy Framework Program and is certified: https://www.dataprivacyframework.gov/s/

9. Google Display & Video 360

(1) On this website we use the Display & Video 360 tool from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, which collects data for analysis, marketing and optimization purposes and thereby helps us to improve our marketing measures and our website.


(2) The data collected is used by Display & Video 360 to link advertising contacts and clicks on advertisements with the resulting use of our website. In this way, we can determine whether internet users who have seen our ads visit our website or which products they are interested in. This helps us to use our advertising budget more efficiently. The collected data can also be used by us to deliver advertising based on your interests (e.g., products viewed).


(3) Pseudonymous online identification numbers (such as cookie IDs or IP addresses) are used for data collection. No unique user-related data, such as name or address, is stored. All IDs we use only allow us to recognize your device and internet browser. We will not use the collected data to personally identify you as a user of our website without your explicit consent.


(4) Please note that for users who are registered with Google, Google may link your visit to this website with your registered data. You can find out exactly how Google handles your data on Google's privacy pages by clicking on the following link:https://privacy.google.de/intl/de/take-control.html?categories_activeEl=sign-in

 

 

(5) The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Art. 25 para. 1 TTDSG. You may withdraw your consent at any time. Google has submitted to the Data Privacy Framework Program and is certified: https://www.dataprivacyframework.gov/s/ 

10. Microsoft Advertising

(1) We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”), as described below. Data processing is based on a joint controllership agreement pursuant to Article 26 GDPR. The information about your use of our website that is automatically collected by Microsoft technologies is generally transferred to and stored on a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard contractual clauses for data protection issued by the European Commission.


(2) Further information about data processing by Microsoft can be found in Microsoft's privacy statement: https://privacy.microsoft.com/de-de/privacystatement.


(3) For advertising purposes in Bing, Yahoo and MSN search results as well as on third-party websites, the so-called Microsoft Advertising Remarketing Cookie is set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website) and by means of a pseudonymous cookie ID and based on the pages you have visited.


(4) For website analysis and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behavior when you access our website via a Microsoft Advertising advertisement and create usage profiles using pseudonyms. Cookies may be used for this purpose, and data (IP address, time of visit, device and browser information, and information about your use of our website based on events we define, such as visiting a website or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.


(5) If consent has been requested, processing will take place exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's terminal equipment (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.


11. Facebook Pixel

(1) This website uses the Facebook pixel for conversion tracking. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries. This allows the behavior of website visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This enables the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and for the optimization of future advertising campaigns.


(2) The data collected is anonymous for us as the operators of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy. This allows Facebook to display advertisements on Facebook pages as well as on websites outside of Facebook. We, as the website operators, have no influence over this use of the data.

(3) The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. You may withdraw your consent at any time. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

 

 

(4) To the extent that personal data is collected on our website and forwarded to Facebook using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. Our joint obligations are set out in a joint controllership agreement. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of its products. You can assert your data subject rights (e.g., requests for access) regarding data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook. You can find further information on protecting your privacy in Facebook's data policy: https://de-de.facebook.com/about/privacy/

 

 

(5) You can also deactivate the "Custom Audiences" remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged in to Facebook to do this.

12. polyfill-fastly.net

(1) Our website loads a web service from The Financial Times Limited, 1 Southwark Bridge, SE1 9HL London, United Kingdom (hereinafter: polyfill-fastly.net). We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to polyfill-fastly.net. The legal basis for this data processing is Article 6(1)(f) GDPR. The legitimate interest lies in ensuring the website functions correctly. The data is deleted as soon as the purpose for which it was collected has been fulfilled. Further information on how the transmitted data is handled can be found in the polyfill-fastly.net privacy policy: https://polyfill-fastly.net/v3/privacy-policy/

13. Amazon Advertising

Our website uses Amazon Advertising, an advertising service provided by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA. Amazon Advertising allows us to display targeted advertisements for our products or services both on Amazon platforms and on external websites. The following data may be processed in this context:

 

  • IP address
  • Device information
  • Browser data
  • Clickstream data
  • Search history on Amazon
  • Purchase history (if available)

 

Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses.

Details can be found here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/ .

 

 The deployment is based on our legitimate interest in achieving the best possible outcome.

user-friendly investigation of your request (Art. 6 para. 1 lit. f GDPR). If a corresponding

If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Amazon is also certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards.

 

D. Contact form

(1) When you contact us (e.g., via contact form, email, telephone, or social media), the data you provide will be processed to the extent necessary to respond to your inquiry and any requested actions. This data will be stored on our servers for data backup purposes. We will use your data solely for processing your request. Your data will be treated with strict confidentiality and will not be shared with third parties.


(2) Responding to contact requests within the framework of contractual or pre-contractual relationships is done to fulfill our contractual obligations or to answer (pre-)contractual requests and otherwise on the basis of our legitimate interests in answering the requests.


(3) Types of data processed: Inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms).


(4) Persons concerned: Communication partners.


(5) Purposes of processing: Contact requests and communication


(6) Legal bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 lit. b. GDPR), Legitimate interests (Art. 6 para. 1 lit. f. GDPR).

 


E. Customer account

(1) Contractual partners can create an account within our online service (e.g., customer or user account, hereinafter referred to as "customer account"). If registration of a customer account is required, contractual partners will be informed of this, as well as of the information required for registration. Customer accounts are not public and cannot be indexed by search engines. During registration, as well as subsequent logins and use of the customer account, we store the customers' IP addresses along with the access times in order to verify the registration and prevent any misuse of the customer account.


(2) If customers have terminated their customer account, the data relating to the customer account will be deleted, unless its retention is required for legal reasons. It is the customers' responsibility to back up their data after terminating their customer account.

 


F. Shop and e-commerce

(1) We process our customers' data to enable them to select, purchase, or order the chosen products, goods, and related services, as well as to facilitate payment and delivery or fulfillment. If necessary for order fulfillment, we use service providers, in particular postal, freight forwarding, and shipping companies, to carry out delivery or fulfillment for our customers. We utilize the services of banks and payment service providers for processing payments. The required information is marked as such during the ordering or similar purchase process and includes the information needed for delivery, provision, and invoicing, as well as contact information to allow for any necessary follow-up.


(2) Types of data processed: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. email, telephone numbers), contract data (e.g. subject matter of the contract, term, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).


(3) Persons concerned: prospective customers, business and contractual partners, customers.


(4) Purposes of processing: Provision of contractual services and customer service, contact requests and communication, office and organisational procedures, administration and answering of inquiries, security measures, conversion measurement (measuring the effectiveness of marketing measures), interest-based and behavioral marketing, profiling (creating user profiles).


(5) Legal bases: Contract performance and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR), Legal obligation (Art. 6 para. 1 sentence 1 lit. c. GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).

 


1. Purchase of goods

(1) If you are already a customer and need to interrupt the process during a subsequent order or are unable to complete your purchase, we will remind you after a certain period of time via email or SMS about the items you have placed in your shopping cart so that you do not have to add them again ("Abandoned Cart") or send you a message with the items you have viewed ("Abandoned Browse"). We use cookies for this purpose. Further information on the use of cookies can be found in section 3.1.2 ("Cookies, Tracking Pixels and Tools").


(2) The legal basis for sending the notifications is Section 7 Paragraph 3 of the German Unfair Competition Act (UWG). You can object to receiving the notifications at any time, for example by contacting us via the corresponding link in the email you received.

 


G. Direct marketing


1. Customer information

(1) Unless you have objected, we will use the email address and mobile phone number you provided when purchasing goods or services to send you electronic advertising for our own goods or services that are similar to those you have already purchased or used from us. For this purpose, we use your email address, mobile phone number, name, and order history to send you information about products that may be of interest to you based on your recent orders. The legal basis for this data processing is Article 6(1)(f) GDPR and Section 7(3) of the German Act Against Unfair Competition (UWG).


(2) You can object to this processing at any time in accordance with Article 21(2) GDPR by contacting us, for example via the relevant link in the email you received or by sending an email to service@morenutrition.de   .

2. Newsletter

(1) On our website, we offer the option to subscribe to our newsletter. After registration, we will regularly inform you via email and SMS about news regarding our offers (e.g., promotions, new products, restocks, and competitions).


(2) Furthermore, after a certain period of time, you will be reminded by email and SMS of the items you have placed in your shopping cart and whose order you had to interrupt or whose purchase you were unable to complete.


(3) A valid email address or mobile phone number is required to subscribe to the newsletter. To verify your email address, you will first receive a registration email which you must confirm via the link. To verify your mobile phone number, you will receive a registration SMS which you must confirm via the link (double opt-in). When you subscribe to the newsletter on our website, we process personal data such as your email address and mobile phone number based on your consent. The legal basis for this processing is Art. 6 para. 1 subpara. 1 lit. a GDPR.


(4) You can unsubscribe from our newsletter at any time, for example by contacting us via the relevant link in the email you received or by sending an email to service@morenutrition.de   .

3. Typeform

(1) We use Typeform from TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 Barcelona, ​​Spain (Typeform) for our B2B newsletter registration and customer challenge. This allows us to provide you with an easy way to contact us. For this purpose, we transfer the following personal data to Typeform: email address.


(2) Typeform is the recipient of your personal data and acts as a data processor for us. The processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we cannot provide you with a newsletter. The data is stored exclusively for the purpose of newsletter registration.


(3) In addition, Typeform collects the following personal data using cookies: information about your device (IP address, device information, operating system, browser settings). Usage data is also collected, such as the date and time you used the form. Typeform needs this data to ensure the form's display and functionality. Further information can be found at: https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-dat

(4) The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent to the processing of your personal data at any time. Withdrawal can be made via the contact details provided. Your data will be processed for as long as such consent exists. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.


4. Service providers

(1) We use CleverReach for sending customer information and newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter "CleverReach"). CleverReach is a service that allows us to organize and analyze newsletter distribution. The data you enter for newsletter subscription (e.g., email address) is stored on CleverReach's servers in Germany or Ireland.


(2) We also use Klaviyo for sending customer information and newsletters and integrate components for this purpose into our website. The provider is Klaviyo, Inc., 125 Summer St Floor 6, Boston, MA 02111, United States (hereinafter "Klaviyo"). Klaviyo offers marketing automation software for marketing services and products, including SEO and content creation, lead management, newsletters, email and SMS marketing, and web analytics.


(3) Klaviyo uses cookies and other browser technologies to analyze user behavior and identify users. This information is used, among other things, to compile reports on website activity and to send customers personalized communications (e.g., reminders of incomplete purchases, information about products customers have viewed, etc.). Furthermore, Klaviyo is used to store and transmit data entered into forms using cookies, including your IP address. In this case, your data will be shared with Klaviyo.


(4) The data you provide for the purpose of subscribing to the newsletter (e.g. email address) will be stored on Klaviyo's servers in the United States.


(5) The data you provide to us for the purpose of subscribing will be stored by us until you unsubscribe from our mailing list or the service provider's mailing list and will be deleted after you unsubscribe. Data stored by us for other purposes remains unaffected.


5. Analysis of CleverReach and Klaviyo

(1) Our customer information and newsletters sent via CleverReach and Klaviyo allow us to analyze recipient behavior. We use this information to improve your shopping experience by sending you personalized advertising that is more useful and relevant to you.


(2) CleverReach allows you to analyze, among other things, how many recipients opened a message and how often each link was clicked. Using conversion tracking, you can also analyze whether a predefined action (e.g., purchasing a product on this website) occurred after clicking a link. Further information on data analysis through CleverReach newsletters can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/

(3) When you open an email sent via Klaviyo, a file embedded in the email (a so-called web beacon) connects to Klaviyo's servers in the USA. This allows Klaviyo to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also collected (e.g., time of access, IP address, browser type, and operating system). This information cannot be linked to individual newsletter recipients. It is used solely for the statistical analysis of newsletter campaigns. Further information on data analysis by Klaviyo can be found at: https://www.klaviyo.com/features/reporting. Data transfer to the USA is based on the EU Commission's Standard Contractual Clauses. Details can be found here: https://www.klaviyo.com/legal/dpa

(4) Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by the withdrawal.


(5) If you do not want your data analyzed by CleverReach or Klaviyo, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every newsletter message.


(6) After you unsubscribe from the newsletter mailing list, your email address may be stored on a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage on the blacklist is not time-limited. You can object to this storage if your interests outweigh our legitimate interest. For more information, please see the privacy policies of CleverReach at:
https://www.cleverreach.com/de/datenschutz/ and Klaviyo at https://www.klaviyo.com/legal/privacy-notice

(7) We have concluded a data processing agreement (DPA) pursuant to Article 28 GDPR with the aforementioned provider. This is a legally required contract under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


6. Ablyft

(1) We use ABlyft in our shop. ABlyft is a service provided by Conversion Expert GmbH, Zeppelinring 52c, 24146 Kiel, Germany.


(2) ABlyft is a tool used for A/B and multivariate testing. ABlyft collects information on user behavior to improve the usability of the website. No personally identifiable information is stored on or transferred to the platform. Data is stored anonymously and in aggregated form.


(3) The use of this analytics tool is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If corresponding consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.


(4) Information on data processing by ABlyft can be found here: https://ablyft.com/de/features/datenschutz-privatsphaere 

7. Clear Attribution

(1) We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for audience measurement and statistical analysis on our behalf. This data collection is based on the following legal grounds:

(2) If the user has given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TDDDG, the data to be processed will be collected on a user-specific basis.

(3) Different cookies are used for the aforementioned different types of data collection in order to ensure the respective type of data collection.

Cookie Opt-Out:
To completely opt out of Klar's use of cookies, please use this link . This will set a cookie named "do_not_track" from the domain "morenutrition.com". Please do not delete this cookie, as otherwise we cannot guarantee that you will not be tracked by Klar.

(4) Information on data protection and data usage by Klar can be found on the following website: https://www.getklar.com/data-protection

8. Admetrics Measurement Pixels

(1) On our website, we use the measurement pixel of Admetrics GmbH, Neue Rothofstraße 13-19, 60313 Frankfurt am Main, Germany. The aim is to better analyze and optimize the performance of our website and, in particular, our advertising campaigns and organic traffic sources.

(2) If you give your consent in accordance with Article 6(1)(a) GDPR, Admetrics will collect certain usage data via a tracking pixel for analysis and performance measurement. This includes, in particular:

  • URL of the requested page
  • IP address
  • Timestamp of access
  • Device and browser properties
  • Order number (for transactions)

(3) This information helps us to better assess the effectiveness of our marketing activities and to improve our offerings in a targeted manner.

(4) When using the Admetrics pixel, cookies are also set based on your consent. These serve, among other things, to recognize devices, attribute user interactions, and analyze user behavior (e.g., page views or time spent on the site). These cookies are generally stored for 90 days.

(5) An overview of the cookies used can be found in our cookie banner / cookie consent tool.

(6) Admetrics GmbH acts as a data processor in accordance with Article 28 GDPR, with whom a corresponding data processing agreement has been concluded.


9. Clarity

(1) This website uses Clarity. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ( https://docs.microsoft.com/en-us/clarity/ ).

(2) Clarity is a tool for analyzing user behavior on this website. In particular, Clarity records mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heatmaps). Clarity can also record sessions, allowing us to view page usage in video format. Furthermore, we receive information about general user behavior within our website.

(3) Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.

(4) For the USA, the European Commission has issued an adequacy decision, provided that companies are certified under the Data Privacy Framework Programme. Microsoft is certified accordingly and therefore meets the requirements of the EU Commission.

(5) The use of Clarity is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in effective user analysis. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal equipment (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

(6) Further details on Clarity's privacy policy can be found here:https://docs.microsoft.com/en-us/clarity/faq .

(7) We have concluded a data processing agreement (DPA) pursuant to Article 28 GDPR with the aforementioned provider. This is a legally required contract under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


10. Cameleoon

(1) Our website uses the services of Kameleoon SAS, 12 rue de la Chaussée d'Antin, 75009 Paris, France. Kameleoon is an analytics and personalization service that allows us to better understand user behavior on our website and to tailor our content to different user segments.

(2) For this purpose, pseudonymized usage data is collected, such as click behavior, time spent on the site, or pages visited. This information is stored via cookies or your browser's local storage. You are not directly identified in this process.

(3) Processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in improving our online services and the user-friendliness of our website. If corresponding consent has been requested (e.g. via a cookie banner), processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR, Section 25 para. 1 TDDDG); this consent can be revoked at any time.

(4) We have concluded a data processing agreement with Kameleoon in accordance with Article 28 GDPR. Data processing takes place exclusively within the EU. Further information on data protection at Kameleoon can be found at:https://www.kameleoon.com/de/datenschutz

11. Direct mail advertising

(1) We use your address in compliance with all legal provisions for sending postal advertising (postal advertising).


(2) The legal basis for this is our legitimate interest in direct marketing pursuant to Article 6(1)(f) in conjunction with Recital 47 GDPR. If corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; this consent can be revoked at any time. More specific provisions may be communicated to you during data collection and take precedence over this provision.


(3) Your address will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for erasure or withdraw your consent to postal advertising, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur once these grounds cease to apply.


(4) We use the following service provider for sending our postal mailings:
Deutsche Post Dialog Solutions GmbH 
Charles-de-Gaulle-Str. 20
 D-53113 Bonn


(5) We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a legally required agreement under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


H. Evaluation requests

(1) If you have ordered a product from our shop, we will contact you by email and SMS to ask about your satisfaction with your order and the products, unless you have previously objected to this. To send you this inquiry, we will use the email address and mobile phone number you provided. We also process your name, IP address, and the IP geolocation used, as well as information about your order. The customer satisfaction survey and the data processing described above are based on the legal basis of Section 7 Paragraph 3 of the German Unfair Competition Act (UWG) in conjunction with Article 6 Paragraph 1 Letter f) of the GDPR. This processing serves the purpose of direct marketing.


(2) You can object to the processing and in particular the use of your email address and mobile phone number for this purpose at any time in accordance with Art. 21 para. 2 GDPR by using the objection option in our emails or by email to the email address provided in our legal notice, without incurring any costs other than the transmission costs according to the basic rates.


1. Refer-a-friend program with MentionMe


(1) We use MentionMe to provide the refer-a-friend program on our website. Users can recommend our services to their friends. The provider is MentionMe Limited, 20-22 Wenlock Road, London, N1 7GU, United Kingdom.


(2) The provider processes content data (e.g. entries in online forms), contact data (e.g. email addresses, telephone numbers), meta/communication data (e.g. device information, IP addresses) and master data (e.g. names, addresses) in the United Kingdom.


(3) Mention Me offers a referral marketing solution where customers can recommend our products to their friends via various communication channels, such as sharing a link. The referrer (recommender) enters their name and email address on the website and subsequently receives a link that they can share with friends. Both the referrer and the referee (recommended recipient) then receive a reward for the referral, provided the referee has taken advantage of the shared offer.


(4) For this purpose, we will share selected data from you (email address, name, and order details) in encrypted, pseudonymized form with Mention Me so that you can participate in our "refer a friend" program. This allows us to later determine which and how many existing customers were referred to a new customer and who receives a reward for their referral. For this purpose, the referrer's email address, name, and IP address will be processed. The referred friend's email address and IP address will be processed.


(5) The legal basis for processing is Article 6(1)(a) GDPR. Processing is based on consent. Data subjects may withdraw their consent at any time, for example by contacting us using the contact details provided in our privacy policy. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data will be deleted when the purpose for which it was collected no longer applies and there is no obligation to retain it. Further information can be found in the provider's privacy policy.

(6) The provider's privacy policy can be found here: Mention Me Privacy Policy

 

The provider's cookie policy can be found here: https://mention-me.com/help/privacy_policy/de_DE

 

 

(7) We have concluded a data processing agreement (DPA) pursuant to Article 28 GDPR with the aforementioned provider. This is a legally required contract under data protection law, which ensures that the provider processes the personal data of our website visitors and customers only according to our instructions and in compliance with the GDPR.

I. Economic Analyses and Market Research

(1) For business reasons and in order to identify market trends, wishes of contractual partners and users, we analyze the data available to us on business transactions, contracts, inquiries, etc., whereby the group of persons affected may include contractual partners, prospective customers, customers, visitors and users of our online service.


(2) The analyses are carried out for the purposes of business evaluations, marketing, and market research (e.g., to identify customer groups with different characteristics). Where available, we may consider the profiles of registered users, including their information, such as details of services used. The analyses are for our internal use only and will not be disclosed externally, unless they are anonymous analyses with aggregated, i.e., anonymized, data. Furthermore, we respect the privacy of users and process the data for analytical purposes in a pseudonymous manner wherever possible and, where feasible, anonymously (e.g., as aggregated data).


J. Payment service provider

(1) In the context of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer data subjects efficient and secure payment options and use, in addition to banks and credit institutions, other payment service providers (collectively "Payment Service Providers").


(2) The data processed by the payment service providers includes master data, such as name and address, bank details, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, amount, and recipient-related information. This information is required to process the transactions. However, the entered data is processed and stored only by the payment service providers. This means that we do not receive any account or credit card information, but only confirmation or rejection of the payment. The payment service providers may transmit the data to credit reference agencies. This transmission is for the purpose of identity and creditworthiness verification. Please refer to the terms and conditions and privacy policies of the payment service providers for further information.


(3) The terms and conditions and privacy policies of the respective payment service providers, which can be accessed on their respective websites or transaction applications, apply to payment transactions. We also refer to these for further information and to exercise your rights of withdrawal, access, and other data subject rights.


K. Transport service provider

(1) For the purpose of delivering ordered goods, we work with logistics service providers/transport companies and/or shipping partners to whom the following data is transmitted for the purpose of delivering the ordered goods or for the purpose of shipment notification: first name, last name, postal address, and, if applicable, email address and telephone number. The legal basis for this processing is Article 6(1)(b) GDPR.


L. Security

(1) We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access. All our employees and service providers (data processors) working for us are bound by applicable data protection laws.


(2) Whenever we collect and process personal data, it is encrypted before transmission. This means that your data cannot be misused by third parties. Our security measures are subject to continuous improvement, and our privacy policy is constantly being revised. Please ensure you have the latest version.


M. Data exchange within the group

(1) Your order data will be made available to group companies if necessary for contract processing. Customer data is stored separately and on a company-specific basis, whereby our parent group or individual companies may act as service providers for the other participating companies (e.g., customer support or logistics).

IV. Online presence on social media

(1) If you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, your data will be automatically collected and stored when you visit our online presence on our social media channels for market research and advertising purposes. Pseudonymous user profiles will be created from this data. These profiles can be used, for example, to display advertisements both on and off the platforms that are likely to correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social media operator, as well as contact options and your related rights and settings for protecting your privacy, can be found in the linked privacy policies of the providers on their websites. Should you require further assistance, please contact us.


V. Rights of Data Subjects

(1) You have the right to information, rectification, erasure, or restriction of processing of your stored data at any time, as well as the right to object to processing, data portability, and the right to lodge a complaint, in accordance with the requirements of data protection law.
• Right to information: You can request information from us as to whether and to what extent we process your data.
• Right to rectification: If we process your data that is incomplete or inaccurate, you can request that we rectify or complete it at any time.
• Right to erasure: You can request that we erase your data if we process it unlawfully or if the processing disproportionately infringes upon your legitimate interests. Please note that there may be reasons that preclude immediate erasure, for example, in the case of legally mandated retention periods. Regardless of whether you exercise your right to erasure, we will erase your data promptly and completely, unless a contractual or legal obligation to retain it exists. Right to restriction of processing: You can request that we restrict the processing of your data if you contest the accuracy of the data, for a period that allows us to verify the accuracy of the data; if the processing of the data is unlawful, but you object to its erasure and instead request the restriction of its use; if we no longer need the data for the intended purpose, but you still require it for the establishment, exercise, or defense of legal claims; or if you have objected to the processing of the data.
Right to data portability: You can request that we provide you with the data you have provided to us in a structured, commonly used, and machine-readable format, and that you can transmit this data to another controller without hindrance from us, provided that we process this data based on your consent, which you can withdraw, or for the performance of a contract between us, and this processing is carried out by automated means. Where technically feasible, you can request that we transmit your data directly to another controller.
• Right to object: If we process your data based on legitimate interests, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims. You can object to the processing of your data for direct marketing purposes at any time without giving reasons.
• Right to lodge a complaint: If you believe that we have violated German or European data protection law when processing your data, please contact us so that we can clarify any questions. You also have the right, of course, to contact the supervisory authority responsible for you, the respective state data protection authority.


  • (2) If you wish to exercise any of the aforementioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.


VI. Changes to this Privacy Policy

(1) We reserve the right to amend our privacy policy if this becomes necessary due to new technologies. Please ensure you have the current version. If fundamental changes are made to this privacy policy, we will announce them on our website.


(2) If you wish to exercise any of the aforementioned rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.