Privacy Policy

1. Responsible body

The operator of the website www.allvital.com and responsible within the meaning of the General Data Protection Regulation is Allvital Products BV (hereinafter "Allvital" or "we"), with business address Energiestraat 10A, 1411 AT Naarden, Netherlands, registered in the Commercial Register of the Dutch Chamber of Commerce (Kamer van Koophandel) under registration number 14067332.

2. Personal data

Personal data is information that can be used to determine the identity of a natural person.

When you visit our website www.allvital.com, we collect personal data. We take your privacy very seriously and treat your personal data confidentially and in accordance with legal regulations.

This privacy policy explains what personal data we collect from you, how we handle it, and what rights you have regarding the personal data we store. If you have any further questions about this privacy policy, please contact us. You can find the contact details at the bottom of this privacy policy.

3. Data processing for contract processing, contact and when opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g. via contact form or email). Mandatory fields are marked as such, since in these cases we absolutely need the data to process the contract or to process your contact. Which data is collected can be seen from the respective input forms. We use the data you provide to process the contract and process your inquiries in accordance with Art. 6 (1) (b) GDPR. If you have given your consent to this in accordance with Art. 6 (1) (a) GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy.

After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax and commercial law in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use your data in any other way that is permitted by law and about which we will inform you in this declaration. Your customer account can be deleted at any time and can be done by sending a message to the contact option described in this privacy policy.

We use merchandise management systems from external service providers to process orders and contracts. Our service providers work for us as part of a contract processing agreement. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using the contact options described in this privacy policy.

4. Data processing for the purpose of shipping

In order to fulfil the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

5. Data processing for payment processing

Depending on the selected payment method, we will pass on the data necessary for processing the payment transaction to our technical service providers, who work for us as part of a contract processing agreement, or to the selected payment service provider, insofar as this is necessary to process the payment. This serves the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their own website or via a technical integration in the ordering process. The privacy policy of the respective payment service provider applies in this respect.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact options described in this privacy policy.

If necessary, we will provide our service providers with additional data, which they will use together with the data necessary for processing the payment as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing disputed payments, accounting support). Pursuant to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests in protecting ourselves against fraud and in efficient payment management, which prevail within the framework of a balancing of interests.

6. E-mail newsletter with registration

We offer a newsletter with which we would like to inform interested parties about our products and/or services.

If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR.

For newsletter subscribers, we store at least the email address. In addition to the email address, we may supplement the profile with additional personal data for newsletter subscribers. We receive this information when you create an account with us or place an order (provided you provide the same email address you used to register for the newsletter).

You can unsubscribe from the newsletter at any time. You can do so either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use your data in any other way that is permitted by law and about which we will inform you in this statement.

7. Data backup

We attach great importance to the security of your personal data. All personal data we request is transmitted using an encrypted SSL connection to protect it from unauthorized access. We also take additional technical and organizational security measures to prevent the loss, destruction, and misuse of data. However, it is not possible to completely protect transmissions over the internet and ensure that they are absolutely error-free. You should always treat your access information confidentially and close the browser window when you have finished communicating with us.

8. Storage period of personal data

Allvital will not store your personal data longer than necessary for the purposes stated above and to comply with laws and regulations. Once it is no longer necessary to store your personal data, we will delete it. Newsletters will be sent until you revoke your consent.

Allvital uses cookies with a specific expiration date. If you do not visit our website or use our services within this period, the cookies are automatically deactivated and the stored data is deleted.

9. Collection of access data and log files

When you access our website, several pieces of technical information are automatically recorded. This information (server log files) is collected on the basis of our legitimate interests within the meaning of Art. 6 (1) (f) GDPR and includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, and similar information. This information is technically necessary to correctly deliver the website content you request and is mandatory when using the Internet. Anonymous information of this type is statistically evaluated by us in order to optimize our website and the technology behind it. This data is not merged with data from other sources.

10. Cookies and other technologies

To make visiting our website more attractive and enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).

We only use technologies that are absolutely necessary for the use of certain functions of our website. These technologies collect and process IP addresses, the time of visits, device and browser information, and information about your use of our website. This serves the overriding legitimate interest in an optimized presentation of our offering in accordance with Art. 6 (1) (f) GDPR, based on a balancing of interests.

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) shown below. The information automatically collected by Google technologies about your use of our website is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened before being stored on Google’s servers by activating IP anonymization. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise stated for the individual technologies, data processing is based on an agreement concluded for the respective technology between joint controllers in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google’s privacy policy.

Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website). This data is then used to create user profiles using pseudonyms. Cookies may be used for this purpose. Your IP address will not be merged with other Google data. Data processing is based on a contract processing agreement with Google.

Google Ads
For advertising purposes in Google search results and on third-party websites, a Google Remarketing Cookie is set when you visit our website. This cookie automatically collects and processes data (IP address, time of visit, device and browser information, and information about your use of our website) and uses a pseudonymous cookie ID to enable interest-based advertising based on the pages you visit. Further data processing only takes place if you have activated the "personalized advertising" setting in your Google account. If you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you have accessed our website via a Google Ads advertisement. Cookies may be used for this purpose and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) may be collected. From this data, user profiles are created using pseudonyms.

11. Social Media

The social networks Facebook, Instagram, and Pinterest are integrated into our website as links to the corresponding services. After clicking on the embedded image link, you will be redirected to the respective provider's website. Only after redirection is user information transferred to the respective provider. Information on how your personal data is handled when using these websites can be found in the respective privacy policies of the providers you use.

Facebook is a service of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing when you visit a Facebook fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR.

Instagram is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our online presence on Instagram is generally transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. Data processing when you visit an Instagram fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR.

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

12. Access, changes and deletion of your data

You can obtain information about your data stored by us free of charge at any time, as well as exercise your right to rectification, erasure, restriction of processing of your data, or your right to data portability. You can find the contact details for this at the bottom of this privacy policy.

13. File a complaint

If you wish to object to the collection, processing or use of your data by Allvital in accordance with this data protection policy as a whole or for individual measures, you can send your objection by email, fax or letter to the contact details stated below in this data protection declaration.

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you is unlawful.

The competent authority in the Netherlands is called the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

14. Changes to the Privacy Policy

Allvital may change this Privacy Policy from time to time by posting an updated version of the Privacy Policy on its website. We therefore encourage you to review this policy regularly to stay informed about how we process your personal data.

15. Contact

We are happy to help you at any time.

We can be reached by telephone on working days from 9:00 a.m. to 12:00 p.m. and from 1:00 p.m. to 5:00 p.m.

Telephone number:
0031 36 539 71 98 (DE)
0031 36 539 71 97 (NL)

Fax:
0031 36539 71 99

E-mail:
info@allvital.com

Postal address:
Allvital Products BV
Energiestraat 10A
NL - 1411 AT Naarden

Status: November 2021