1. Privacy Policy

We take the protection of your personal data very seriously. Your data is handled with strict confidentiality and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), as well as this privacy policy.

In general, it is possible to use our website without providing any personal data. Where personal data (e.g. name, address, or email address) is collected on our website, this is always done on a voluntary basis whenever possible. Such data will not be passed on to third parties without your explicit consent.

Please note that data transmission over the internet (e.g. via email) may be subject to security vulnerabilities. A complete protection of data against unauthorized access by third parties is not possible.

 

2. Controller and Contact Information

Controller responsible for data processingx

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and regulations is:

dr.reinwald vital ltd.
Lord Byron Street 61–63, 5th Floor
CY-6023 Larnaca, Cyprus
Phone: +49 (0)9187 808780
Email: [email protected]
Website: www.www.drreinwald.de

If you have any questions about data protection or wish to exercise your rights as a data subject (e.g. access, rectification, erasure, restriction of processing, or objection), feel free to contact us at any time via the contact details provided above.

3. Collection and Use of Personal Data

We only collect and use your personal data where this is permitted by law or where you have given your explicit consent. Your data will not be sold or passed on to third parties without your consent, unless this is necessary for the fulfilment of contractual or legal obligations.

3.1 Accessing our website (server log files)

When you visit our website, the following data is automatically transmitted by your browser and temporarily stored in so-called log files:

• IP address of the requesting device

• Date and time of the request

• Name and URL of the retrieved file

• Website from which the access was made (referrer URL)

• Browser type and version

• Operating system of the requesting device

• Name of the access provider

This data is collected for technical reasons to ensure a smooth connection and secure operation of the website. The data is not used to personally identify you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring the functionality and security of our website)

3.2 Contact via email or contact form

If you contact us by email or via a contact form, the personal data you provide (e.g. name, email address, message content) will be stored and processed in order to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or fulfilment of a contract) and Art. 6(1)(f) GDPR (legitimate interest in processing your request)

3.3 Creating a customer account

When you register for a customer account, we collect the data required to create and manage your account. This includes:

• Name

• Address

• Email address

• Password

• Optional information such as telephone number

Your data will be used exclusively to provide the services associated with your account.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

3.4 Placing an order

When you place an order in our online shop, we process your personal data to fulfil and manage your purchase. This includes:

• Billing and delivery address

• Order details

• Payment method

• Contact information for order processing

The data may also be shared with third-party service providers (e.g. payment providers, logistics partners), to the extent necessary for processing your order.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

4. Newsletter and Analysis Tools

4.1 Newsletter Subscription

If you subscribe to our newsletter, we will use your email address to send you regular updates about our products, services, and news. Your subscription will only take place with your explicit consent (double opt-in procedure).

To personalise the newsletter and improve our offering, we may analyse your interaction with the newsletter (e.g. opening rates, clicks on links).

You can unsubscribe at any time via the link provided in each newsletter or by contacting us directly.

Legal basis: Art. 6(1)(a) GDPR (consent)

4.2 Email Marketing to Existing Customers

If you have already purchased products from us and provided your email address, we may send you information about similar products or services. You can object to this use at any time without incurring any costs other than transmission fees according to the basic rates.

Legal basis: Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG (legitimate interest in direct marketing)

4.3 Use of Cookies

We use cookies on our website to make your experience more efficient and user-friendly. Cookies are small text files stored on your device that can store certain settings and data for exchange with our system.

There are different types of cookies:

• Essential cookies: Necessary for website functionality (e.g. shopping cart, login)

• Functional cookies: Improve usability (e.g. save preferences)

• Performance cookies: Collect anonymised data for statistical analysis (e.g. Google Analytics)

• Marketing cookies: Track user behaviour for personalised advertising

When you first visit our site, we ask for your consent via a cookie banner for all non-essential cookies. You can change or withdraw your consent at any time.

Legal basis: Art. 6(1)(a) GDPR for optional cookies / Art. 6(1)(f) GDPR for technically necessary cookies

4.4 Web Analytics (Google Analytics)

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to analyse how visitors use our site. The information generated is generally transmitted to a Google server in the USA and stored there. IP anonymisation is activated, so your IP address will be shortened within the EU before transmission.

You can prevent the storage of cookies through your browser settings or by using a browser plugin from Google:
https://tools.google.com/dlpage/gaoptout

Legal basis: Art. 6(1)(a) GDPR (consent)

5. Third-Party Services and Data Transfers

5.1 Payment Providers

To process your orders, we work with external payment service providers. Depending on the selected payment method, your payment data may be transferred to the respective provider (e.g. PayPal, credit card acquirer).

These service providers are independently responsible for your data under applicable data protection law.

Legal basis: Art. 6(1)(b) GDPR (contract performance)

5.2 Shipping Providers

To deliver your order, we share necessary personal data (e.g. name, delivery address, contact information) with our logistics partners, such as DHL.

Legal basis: Art. 6(1)(b) GDPR (contract performance)

5.3 Data Transfers to Third Countries

If service providers or tools are used in countries outside the EU or EEA, we ensure that an adequate level of data protection is guaranteed, either through:

• An adequacy decision by the European Commission

• Standard contractual clauses issued by the EU Commission

• Binding corporate rules (BCRs)

• Your explicit consent

You will be informed in advance if such transfers occur.

6. Data Retention and Deletion

We store personal data only as long as necessary to fulfil the purposes for which it was collected or to comply with legal retention periods.

After the purpose no longer applies or statutory retention obligations expire, your data will be deleted or anonymised unless you have expressly consented to further use.

7. Data Security

We implement appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, or disclosure. This includes:

• SSL encryption for secure data transmission

• Regular system updates and backups

• Access control and staff confidentiality agreements

However, please note that internet-based data transmission (e.g. email) can have security gaps. Absolute protection cannot be guaranteed.

8. Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) – You have the right to obtain information about the data we process about you.

• Right to rectification (Art. 16 GDPR) – You may request the correction of incorrect or incomplete personal data.

• Right to erasure (Art. 17 GDPR) – You may request the deletion of your data, provided that we are not legally obliged or entitled to retain it.

• Right to restriction of processing (Art. 18 GDPR) – In certain cases, you can request that your data be processed only to a limited extent.

• Right to data portability (Art. 20 GDPR) – You have the right to receive your data in a structured, commonly used and machine-readable format.

• Right to object (Art. 21 GDPR) – You may object to the processing of your data for direct marketing purposes or for reasons arising from your particular situation.

To exercise any of these rights, please contact us using the contact details provided above.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with a data protection authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

The supervisory authority responsible for us is:

Commissioner for Personal Data Protection (Cyprus)
Iasonos 1, 1082 Nicosia
Phone: +357 22818456
Email: [email protected]
Website: www.dataprotection.gov.cy

10. Validity and Changes to This Privacy Policy

We reserve the right to adapt this Privacy Policy to ensure it complies with current legal requirements or to reflect changes in our services or internal processes. The latest version of this Privacy Policy is always available on our website.

This Privacy Policy is valid as of July 2025.