Privacy Policy

1. Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 General Information

Thank you for visiting our website. This Privacy Policy explains how we collect, process, and protect your personal data when you use our website.

Personal data means any information relating to an identified or identifiable natural person.

1.2 Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Biologa Danell GmbH
Hauptstraße 27
72336 Balingen
Germany

Phone: +49 7433 955 7172
E-mail: info@biologadanell.com

1.3 Data Security

To protect your personal data during transmission, we use SSL/TLS encryption via HTTPS and apply appropriate technical and organizational security measures.

2. Data Collection When Visiting Our Website

When you visit our website, our servers automatically collect information transmitted by your browser.

This information may include:

• Visited website
• Date and time of access
• Amount of data transferred
• Referring website (referrer URL)
• Operating system
• Browser type and version
• IP address (where applicable in anonymized form)

The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest is to ensure the stability, security, and proper operation of our website.

Server log data is generally stored for a maximum of seven days unless longer retention is required for security-related reasons.

3. Contacting Us

If you contact us via contact form or e-mail, the information you provide will be processed solely for the purpose of handling your request and any related correspondence.

The legal basis for processing is:

• Article 6(1)(a) GDPR (consent)
• Article 6(1)(b) GDPR (contractual relationship)
• Article 6(1)(f) GDPR (legitimate interest)

Your data will be deleted once your request has been fully processed, unless statutory retention obligations apply.

4. Cookies

Our website uses cookies.

Cookies are small text files stored on your device. Some cookies are technically necessary to ensure the proper functioning of the website. Other cookies may be used to improve the user experience or analyze website usage.

You can configure your browser to reject or delete cookies. Please note that disabling cookies may limit the functionality of certain parts of the website.

Where legally required, non-essential cookies are only used after obtaining your consent in accordance with Article 6(1)(a) GDPR.

5. Data Processing for Order Fulfilment

When placing an order in our online shop, we process the personal data required to fulfil the contract.

This may include:

• Name
• Billing and shipping address
• E-mail address
• Telephone number
• Payment information

The legal basis for processing is Article 6(1)(b) GDPR.

Shipping Service Providers

To deliver your order, we share the information necessary for delivery with the shipping service provider commissioned by us.

Payment Processing

Payment-related data is processed only to the extent necessary for payment handling.

PayPal

If you choose PayPal as a payment method, payment processing is carried out by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

Personal data is transferred to PayPal solely for payment processing purposes in accordance with Article 6(1)(b) GDPR.

Further information can be found in PayPal's Privacy Statement: https://www.paypal.com/privacy

6. Customer Account and Contract Fulfilment

You may create a customer account on our website.

The personal data entered during registration is processed for the administration of your customer account and the fulfilment of contractual obligations.

The legal basis is Article 6(1)(b) GDPR.

You may request deletion of your customer account at any time. Statutory retention obligations remain unaffected.

7. Direct Marketing

Newsletter

You may subscribe to our free newsletter.

The newsletter is sent only after successful confirmation via double opt-in.

The legal basis is Article 6(1)(a) GDPR.

When subscribing, we record:

• E-mail address
• IP address
• Date and time of registration

You may unsubscribe at any time using the unsubscribe link contained in every newsletter.

Existing Customers

If you purchase goods or services from us and provide your e-mail address, we may use it to send information about similar products or services.

The legal basis is Article 6(1)(f) GDPR in conjunction with applicable marketing regulations.

You may object to such use at any time without incurring costs other than transmission costs according to the basic rates.

8. Embedded YouTube Videos

Our website may include videos provided by YouTube, a service of Google Ireland Limited.

When you play an embedded YouTube video, personal data may be transmitted to Google and YouTube.

Embedded videos are used in enhanced privacy mode where available.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR.

Further information is available at: https://policies.google.com/privacy

9. Google Analytics 4

Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics 4 uses cookies and similar technologies to analyze website usage.

The following information may be processed:

• Page views
• Session data
• Click behavior
• Technical device information
• Approximate location data
• Anonymized IP address

IP anonymization is enabled.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR.

Data collected via Google Analytics 4 is generally stored for two months.

You may withdraw your consent at any time through our cookie consent settings.

Google may process data on servers located in the United States. Google participates in the EU-U.S. Data Privacy Framework.

Further information: https://policies.google.com/privacy - https://policies.google.com/technologies/partner-sites

10. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

11. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purpose or to comply with statutory retention obligations.

Once the applicable retention periods have expired, the data will be routinely deleted unless further storage is required for contractual or legal reasons.