We appreciate your interest in our online store .

Protecting your privacy and personal information is very important to us.

Our data processing has the objective to process only personal data, which are relevant for a meaningful and economical use of our offers in the online shop. Our privacy policy is in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (FDPA).

Below we provide you with detailed information on what data is processed and in what form when you visit our website. Herewith we come at the same time our information duty gem. Art. 13 GDPR to you.

Data Protection Officer and contact details:

Responsible for the data processing that takes place on our website is: 
Wahbio UG 
Auf dem Dreisch 6 
34346 Hann. Münden 
E-mail: [email protected]

1. PERSONAL DATA

According to the GDPR, personal data "means any information relating to an identified or identifiable natural person (" the data subject "); a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person.

2. FEATURES OF OUR WEBSITE

In the following, we will show you which data we process on which legal basis within the framework of our functions, how long we store your data and who receives your data.

a) General use of the website

When you visit our website, we only collect and store personal data if you actively communicate it to us. Notwithstanding the above basic conditions, however, the web server of our hoster automatically registers access to the websites and, in particular, your IP address. However, your IP address will not be saved.

In addition, our hoster creates so-called log files to maintain system security. These log files contain the following information such as: date of access, the URL, content accessed, and the information transferred.

This information remains anonymous to us. A conclusion to a person is therefore not possible.

Your IP address will be processed during the connection process so that we can make our website available to you. It is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is in the stated purpose.

Our log files are stored for 30 days.

b) Contact form

We offer you the possibility to contact us by means of a form. To do this, you must provide us with your e-mail address so that we can respond to your request. You can also tell us your name, a subject, and the specific message.

Contact us at the e-mail address provided on our website, at least provide us with your e-mail address and any other information you may provide in your e-mail. In order for us to be able to process your request, we must process this data. The processing in the context of a contact takes place, so that we could process and answer your inquiry. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the purpose just mentioned.

We will store your emails and contacts as long as necessary to process your request and then save them for a period of 3 years if you contact us again with reference to your original question. This does not apply if you create a contractual relationship with us in the e-mail. In this case, the storage duration depends on the underlying contract. In this case, you will be informed separately about the data processing that takes place there.

c) Opening a customer account, purchasing function & rating

When opening a user account, the necessary data voluntarily provided by you will be stored. When ordering in our online shop, we automatically create a user account based on their order data. We will send you your order data together with our terms and conditions by e-mail. You can view your order data and past orders as a registered user at any time in your user account. Of course you always have the possibility to have your user account deleted on request by us. We use the data provided by you to fulfill and process your order.

To create a customer account and when placing an order, we collect the following data: title, your first name, your surname, your e-mail address, a self-chosen password, your company, your street, your house number, if necessary. Addresses, your country, your post code, your city, your telephone number

Part of your customer account is your reviews. We make sure that you can only rate products that you have bought. We collect: name, title of the rating, your message, the rating (in the form of stars). At no time will personal details be published in the customer account. The processing of your customer account data is done in order to provide you with the functionalities of the customer account and - if you buy something - to process and process your order. The processing takes place in each case on the basis of Art. 6 para. 1 lit. b) GDPR. In addition, we are legally obliged to store certain data such as invoices, contracts and other accounting-relevant information for a certain period of time. The processing operations carried out for this purpose are based on Art. 6 para. 1 lit. c) GDPR i.V.m. § 147 AO and 257 HGB. We store your data, which are processed within the scope of the customer account, until you cancel the customer account. Afterwards, we will store your data for a further period of 3 years in case of any legal claims arising from the legal relationship with you. Personal data that is contained in contracts or invoices, we lift at the end of the year in which you have terminated the account for 11 years. Data that is contained in business letters or other documents that are relevant for taxation, we lift at the end of the year in which you have terminated the account for 7 years

For the purpose of the evaluation, you will be contacted by us within the scope of the contract. Your information will only be used for this purpose and especially not for further advertising and will not be passed on to other third parties. The processing is also based on Art. 6 para. 1 lit. f) GDPR, whereby the legitimate interest lies in the aforementioned purpose. We store your review as long as the product is sold by us.

Unless you have objected, we use your e-mail address, which we obtained in connection with the sale of a good or service for the electronic transmission of advertising for own goods or services similar to those you already have purchased from us. You may object to this use of your e-mail address at any time by notifying us. The contact details for the exercise of the contradiction can be found in the imprint. You can also use the dedicated link in the promotional e-mail. There are no other costs than the transmission costs according to the basic tariffs. The legal basis for this can be found in Art. 6 para. 1 lit. f) GDPR and Art. 95 GDPR i.V.m. § 7 Abs. 3 UWG. We store your required data until you object to the receipt of the commercial messages.

d) Newsletter and Advisory Services

When you register for our newsletter, your email address and your permission is saved and is used exclusively for our own advertising purposes until you request to stop receiving the newsletter. You can request to stop receiving the newsletter at any time this resulting in any costs other than the communications costs based on basic rates.

As a wahbio customer, you will receive a free advisory service as well as product recommendations via email. The advisory service as well as product recommendations are provided to every customer, whether they are subscribed to the newsletter or not. With that, we would like to provide you with information about all of our products and offers that suit your order history and might interest you based on what your most recent purchases may have been. We comply with relevant legal requirements as a matter of course. You can request to unsubscribe from our advisory service and product recommendations at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter). You will additionally find a cancellation link in each email that you receive.

When you register for our newsletter, your email address and your permission is saved and is used exclusively for our own advertising purposes until you request that delivery of the newsletter be stopped. To do this, we use a so-called “Double Opt-In” process, so we will only send you our email newsletter once you have expressly let us know that is what you want. We send you a confirmation email, in which we request that you click the link contained in said email, which then sends us your confirmation. You can request to cancel at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter). You will additionally find a cancellation link in each newsletter that you receive.

The processing is based on Art. 6 para. 1 lit. a) GDPR. We store your data until you revoke your consent.

We use the information that is automatically generated as well as the information you provide us with to constantly improve your shopping experience, protect you against unwanted advertisements and to individually tailor our promotions to your interests. To do this, we solely use the information in its pseudonymous form, so for example, receipt and confirmation of emails being read, your order history, dates and times that you have visited our online store and product pages that you have visited. The analysis and evaluation of this information makes it possible for us to send you promotions tailored to you. Our goal is to make our advertisements more useful and interesting to you. In doing this, we aim to prevent you from receiving unwanted ads and only sending you things that might be of interest to you, for example in the form of newsletters, product recommendation emails, postal advertisements or brochures in packages. If you do not wish to receive any personalised advertisements, you can request to completely stop or tailor them to your wishes at any time without incurring costs other than the communications costs based on basic rates. All you need to do is send us a written message to the contact details referred to in paragraph 13 (e.g. email, letter).

The processing here is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to promote our products. We store your data for this purpose until you object to its use.

e) Use of personal data when Klarna is selected as the payment method

Klarna reviews and evaluates your data and exchanges data with other companies and credit reference agencies if there is a justified interest and reason for doing so. Your personal data will be treated in compliance with applicable data protection regulations and in accordance with the information stated in the Klarna data protection policy.

If you decide to use Klarna's payment services, Klarna Pay after Delivery and Klarna Pay Monthly, as your payment option, you agree to allow us to obtain the following personal data needed to process your Pay after Delivery purchase and your identity and credit check, for example your first and last name, address, date of birth, gender, email address, IP address, telephone number, and the data needed to process the Pay after Delivery purchase in conjunction with the order, such as the number of articles, article number, invoice amount, and taxes in percent, and to communicate this information to Klarna. This information is communicated so that Klarna can create an invoice in order to process your purchase with the Pay after Delivery method that you requested and so that it can perform an identity and credit check.
Under the Bundesdatenschutzgesetz [German federal data protection law], Klarna has a legitimate interest in communicating the buyer's personal data, and it uses this data in order to obtain information from credit reference agencies in order to perform identity and credit checks. In Germany, this may be the following credit reference agencies:

Schufa Holding AG, Kormoranweg 5, 65203 Wiesbaden
Bürgel Wirtschaftsinformationen GmbH & Co. KG, Postfach 5001 66, 22701 Hamburg
Creditreform Bremen Seddig KG, Contrescarpe 17, 28203 Bremen
infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden

In making the decision to establish, execute, or terminate the contractual relationship, Klarna also uses information, in addition to an address check, on the buyer's previous payment history as well as probability values regarding future payment behaviour. Klarna calculates these score values based on a scientifically recognized statistical method. In the process, Klarna uses your address data as well as other data. If this calculation shows that you do not have the necessary creditworthiness, Klarna will inform you of this promptly. Withdrawing the permission for Klarna to use personal data:

1. At any time, you can withdraw your permission for Klarna to use your personal data. However, in some cases Klarna may continue to have the right to process, use, and communicate personal data, to the extent that this required by Klarna's services in order to process contractually agreed payments, or is required by a court of law or governmental agency.

2. Naturally, you can obtain information at any time about the personal data that is being saved by Klarna. This right is guaranteed under the Bundesdatenschutzgesetz [German federal data protection law]. If you, as the buyer, wish to contact Klarna, or if you wish to communicate changes in the data that are stored to Klarna, you can contact [email protected].

f) Identity and credit check upon selection of Billpay payment methods

If you decide to use one of the payment methods of our partner Billpay GmbH, during the ordering process you will be asked to consent to the communication to Billpay of the data needed to process the payment and perform an identity and credit check. If you grant your consent, your data (first and last name, street, building number, postal code, city (state/province), date of birth, telephone number, and, upon purchase by direct debit, the required account information), as well as the data relating to your order, will be communicated to Billpay.

In order to perform its own identity and credit check, Billpay or partner companies under contract with Billpay will communicate data to credit reference agencies (credit bureaus) and will obtain information from them, as well as in some cases creditworthiness information, based on mathematical/statistical methods in news calculation address data, as well as other data, are used. Detailed information on this and on the credit reference agencies that are used may be found in thePrivacy Policiesof Billpay GmbH.

In addition, Billpay may use tools provided by third parties to detect and prevent fraud. The data that are obtained with these tools may, in some cases, be stored in encrypted form at third-party locations, in such a way that they can only be read by Billpay. Only if you select a payment method of our alliance partner Billpay, will this data be used, otherwise the data will automatically expire after 30 minutes.

g) Paypal

We also use the payment service providers Paypal. The providers of these payment services are PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you select the payment through these service providers, the payment data you have entered will be transmitted to the respective service provider. The transmission takes place on the basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the fact that we want to offer you a varied and convenient payment for you. For more information about PayPal data processing, please visit https://www.paypal.com/web/sapps/mpp/ua/privacy-full.

3. RECIPIENT OF THE DATA

Each department within our organization has access to your data, which is responsible for handling the concerns. In addition, we use external service providers, as far as we can not perform services ourselves or make sense. These external service providers are primarily providers of IT services and telecommunications services.

4. AFFECTED RIGHTS

The General Data Protection Regulation guarantees you certain rights that you can assert against us, provided that the legal requirements apply.

·         Art. 15 GDPR - Data subject's right to information: You have the right to request confirmation from us as to whether personal data relating to you are being processed and, if so, what are these and the details of the processing.

·         Art. 16 GDPR - Right to rectification: You have the right to demand immediate correction of incorrect personal data concerning you. You also have the right, under consideration of the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.

·         Art. 17 GDPR - Right to delete: You have the right to ask us to delete your personal data without delay. Please note the exception

described under point II. 4 here

·         Art. 18 GDPR - Right to restriction of processing: You have the right to demand that we restrict processing.

·         Art. 20 GDPR - Right to Data Portability: You have the right, in the case of processing on the basis of a consent or to fulfill a contract, the personal data that you have provided us in a structured, common and machine-readable To obtain this format and to have that data transmitted to another person without hindrance or to have the data transmitted directly to the other person responsible, as far as technically feasible.

·         Art. 21 GDPR - Right to object: You have the right at any time, for reasons arising from your particular situation, against the processing of personal data relating to you, the legitimate interest on our part or a public interest mission 
If you file an objection, we will not process your personal data unless we can prove compelling legitimate grounds for processing that affect your interests, Rights and freedoms prevail, or processing serves to assert, exercise or defend legal claims. 
To the extent that we process your personal data in order to operate direct mail, you have the right to object to the processing at any time. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

·         Art. 77 GDPR i. V. m. § 19 FDPA - Right to complain to a supervisory authority: You have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that that the processing of personal data concerning you is contrary to applicable law.

If you have given us your consent, you have the right to withdraw your consent at any time. All data processing that we have done until your cancellation will remain legal in this case. To do this, you can simply click on the link contained in each mail and unsubscribe from the email service, make the appropriate setting in your user account, or send a message to [email protected], If you tell us in this message that you do not want to receive e-mails in the future, we will no longer send any messages to the e-mail address you provided.

5. DUTY TO PROVIDE DATA

You have no contractual or legal obligation to provide us with personal information. However, we will not be able to offer you our services without the data you provide.

6. EXISTENCE OF AUTOMATED DECISION MAKING (INCLUDING PROFILING)

We do not use automated decision-making that may cause or interfere with your legal effects.

7. INTERNET-SPECIFIC DATA PROCESSING

We use "cookies" to enhance the functionality of our Internet site and to make its use more convenient for you. When you enter our website, these “cookies” may be used to store data on your computer. You can adjust the settings on your browser to prevent cookies from being stored on your computer. However this may limit the functionality of our website.

Cookies will be stored on your computer when you are using this website. Cookies are small text files, which are stored on your hard drive in connection with the browser software you use and from which the body (in this case us) setting the cookie, will receive specific information. Cookies cannot execute programs or transmit viruses to your computer. They simply serve the purpose of making the overall internet offering more user-friendly and effective.

a) The website uses cookies to the following extent: Transient cookies (for temporary use), persistent cookies (time-limited use), and third party cookies (from third parties).

b) Transient cookies are deleted automatically, once you close your browser. These include specifically the so-called session cookies. They store a so-called session ID, with which various requests from your browser can be assigned to a common session. It allows your computer to be recognised when you visit the website next time. Session cookies are deleted once you log out or close your browser.

c) Persistent cookies are deleted automatically after a specified time, which can vary from one cookie to the next. You have the option to delete all stored cookies at any time via the setting options of your browser.

d) You can configure the settings of your browser according to your wishes. Which means you can e.g. refuse to accept third party cookies or all cookies. This setting option may, however, result in you not being able to use this website’s full functionality. You can also change the settings in your browser to ask for your permission every time a cookie tries to access your computer. You can find detailed information on how to change your browser settings in this guide.

Google Analytics

Google LLC ("Google"), 1600 Amphitheater Parkway, Mountain View, CA 94043 United States

On our website we use Google Analyitcs. Google Analytics is used for web analysis and optimization of use on the website. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. In the course of the tracking, order information is also transmitted about ordered products.

The data sent by us and associated with cookies, user IDs (e.g., user IDs) or promotional IDs will be automatically deleted after 36 months. For more information about terms of service and privacy, please visit https://www.google.com/analytics/terms/en.html or https://policies.google.com/?hl=en .

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR.

Use the following plugin to prevent google tracking: http://tools.google.com/dlpage/gaoptout?hl=d

Hotjar

Hotjar Ltd., Level 2, St Julian's Business Center, 3 Elia Zammit Street, St Julian's STJ 1000, Malta

On this website, data collected and stored by Hotjar (web analytics services) are used to create usage profiles using pseudonyms. These usage profiles are used to analyze visitor behavior and are evaluated to improve and tailor our services.

The use of Hotjar is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to analyze your use of our website.

You can opt out of the following link: http://www.hotjar.com/privacy

facebook

Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304 United States

This website uses Facebook's remarketing feature "Custom Audiences". This function serves to present to visitors of this website, as part of their visit to the social network Facebook, interest-based advertisements ("Facebook Ads"). It is transmitted to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account.

More information at: https://www.facebook.com/about/privacy/

The use of the service is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is in the purpose described above.

Click here to contradict.

Google AdWords

Google LLC ("Google"), 1600 Amphitheater Parkway, Mountain View, CA 94043 United States

Our website uses Google AdWords. AdWords is an online advertising program and we use conversion tracking as part of the online advertising program. After clicking on an ad served by Google, a cookie will be set for conversion tracking. At the cookie, we and Google recognize that you clicked on an ad and were redirected to our site. Conversion cookies are used to generate conversion statistics for AdWords advertisers who use conversion tracking.

Learn more at: https://www.google.com/policies/privacy/

The use of the service is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is in the purpose described above.

Click here to contradict.

8. IF YOU HAVE COMMENTS OR QUESTIONS

We take every precaution to protect and safeguard your information. Your questions and comments on privacy are welcome. If you have questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent, please contact: [email protected]