Privacy policy

Person responsible

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Dr. Bernhard Hoffmann

Data Protection Officer

We have appointed as data protection officer

Tabea Hoffmann

Your rights as a data subject

You can exercise the following rights at any time in accordance with the EU General Data Protection Regulation (GDPR) using the contact details provided:

  • Information about your data stored by us and its processing (Art. 15 GDPR),
  • Correction of incorrect personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data by us (Art. 21 GDPR) and
  • Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority of the federal state of your residence or the authority responsible for us as the responsible body.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing activities

Collection of general information when visiting our website

Nature and purpose of the processing:

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

They are processed for the following purposes in particular:

  • for the technically error-free presentation and optimization of the website.

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

Data is stored in server log files in a form that makes it possible to identify the data subjects for a maximum of 30 unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an incident, server log files are stored until the security-relevant incident has been rectified and fully clarified.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Contradiction:

Please read the information on your right to object under Art. 21 GDPR below.

Contact us

Nature and purpose of the processing:

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

It is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication.

You can contact us via the telephone numbers provided. We collect log data that includes your telephone number and the duration of the call.

Regardless of the type of communication selected, we collect the content of your request. Your data will be stored for the purpose of individual communication with you.

Legal basis:

The data is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest in processing your data is to enable you to contact us easily.

If you contact us to request a quote, the data will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

Data will be deleted no later than six months after the contact has been processed.

If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the request.
Objection

Please read the information on your right to object under Art. 21 GDPR below.

Newsletter

Nature and purpose of the processing:

For the delivery of our newsletter or comparable information, we collect personal data that is transmitted to us via an input mask.

We require a valid e-mail address for effective registration. We use the double opt-in procedure to verify that a registration is actually made by the owner of an e-mail address. For this purpose, we log the registration for the newsletter, the sending of a confirmation email and the receipt of the requested reply. No further data is collected.
Legal basis

On the basis of your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.
Recipient

We use a service provider for shipping who acts as our processor.

Storage duration:

The data will only be processed in this context as long as the corresponding consent has been given.
Provision prescribed or required

The provision of your personal data is voluntary, solely on the basis of your consent. We cannot send you our newsletter without your consent.

Withdrawal of consent:

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can unsubscribe via the link contained in every e-mail or via the contact information provided in this privacy policy.

Provision of chargeable services

Nature and purpose of the processing:

We process the data provided by you in the context of the order to carry out or process your order. This also includes the return, exchange and complaint of items.

Your personal data will only be used to the extent necessary to process this order and deliver the requested products and services.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

In order to fulfill the contract, we pass on your name and address to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select in the order process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us in order to process payments.

Storage duration:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is contractually required. Without the provision of your personal data, we cannot process your order.

Creating a customer account

Nature and purpose of the processing:

You have the option of creating a customer account on our website. To do this, we record your contact details and link your purchases to your account.

Legal basis:

The data entered during registration is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

Data will only be processed in this context as long as the corresponding consent has been given.

Provision prescribed or required:

The creation of a customer account is voluntary. It is advantageous for the fulfillment of a contract with you or for the implementation of pre-contractual measures, but not necessary. You can place orders as a guest at any time.

Withdrawal of consent:

Deletion of your customer account is possible at any time and can be requested using the contact information listed below.

Use of the Google Analytics tracking tool

Nature and purpose of the processing:

If you have given your consent, this website uses Google Analytics 4, a web analysis service of Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies to help the website analyze how users use the site. The information collected is usually transferred to a Google server in the USA and stored there.

With Google Analytics, automatic anonymization of IP addresses is activated by default. Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to the information provided by Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to our website, your user behavior is recorded in the form of so-called events, such as

  • Page views
  • Start of a session
  • Dwell time
  • User engagement
  • First visit to a website
  • Scrolls (when a visitor scrolls 90% to the bottom of the page)
  • Clicks on external links
  • Viewed or clicked ads
  • Internal searches
  • Interaction with video content
  • Downloads
  • Language settings

The following information is also recorded:

  • Your approximate location (region)
  • Your IP address (in abbreviated form)
  • Technical information such as browser, internet provider, end device and screen resolution
  • Source of origin (referrer URL) of your visit (i.e. via which website or advertising medium you came to us)

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

Legal basis:

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Recipient:

For the operation and maintenance of our website and for the evaluation of cookies, we use technical service providers who act as our processors.

Other recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Storage duration:

The data sent by us and linked to cookies are automatically deleted after: 14.

The maximum lifespan of Google Analytics cookies is two years. Data whose retention period has been reached is automatically deleted once a month.

Third country transfer:

As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To ensure an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Withdrawal of consent:

You can revoke your consent for the future at any time in the cookie settings.

You can also prevent tracking by Google Analytics on our website by clicking on this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: Browser Add On to deactivate Google Analytics.

Cookies

A cookie is a small data record that is created when a website is visited and stored temporarily on the website visitor's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.

You can access detailed information about cookies and which cookies are used on this website and for what purpose at any time in the cookie settings.

Delete cookies:

You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice.

Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Technically necessary cookies

Nature and purpose of the processing:

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We need cookies for the following applications:

You can find an overview of the cookies used in our cookie consent tool.

Legal basis and legitimate interest:

In this respect, data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with a weighing up in accordance with §25 para. 2 TDDDG.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage duration:

The respective storage period of the cookies can be found in the cookie consent tool.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Contradiction:

Please read the information on your right to object under Art. 21 GDPR below.

Provision prescribed or required:

The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

Withdrawal of consent:

You can revoke your consent for the future in the cookie consent tool.

Profiling:

With the help of technically unnecessary cookies, the behavior of website visitors can be evaluated and their interests analyzed. We create a pseudonymous user profile for this purpose.

Information about your right to object in accordance with Art. 21 GDPR

Right to object on a case-by-case basis:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Recipient of an objection:

metaX Institute for Dietetics GmbH
Dr. Bernhard Hoffmann
Am Straßbach 5
61169 Friedberg (Hesse)
Phone +49 (0) 6031 - 16672 -70
Fax +49 (0) 6031 - 16672 -50
E-mail address order@metax-shop.org

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an e-mail to the person responsible named above.

Copyright information

This privacy policy was created with the help of activeMind AG - the experts for external data protection officers (Version #2024-10-25).