Controller responsible for data processing:
NO SUGAR SUGAR GmbH
Lilienstraße 15
20095 Hamburg
Email: info@nosugarsugar.de
Phone: +49 (0)40 23700830
We are pleased about your interest in our online store. Protecting your privacy is very important to us. Below, we inform you in detail about the handling of your personal data.
1. Access data and hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically saves what is known as a server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transmitted, and the requesting provider (access data), and records the retrieval. These access data are evaluated solely for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests in the proper presentation of our services pursuant to Art. 6(1)(f) GDPR. All access data are deleted no later than seven days after the end of your visit to the site.
Hosting
The services for hosting and displaying the website are partially provided by our service providers within the scope of processing on our behalf. Unless otherwise specified in this privacy policy, all access data and all data collected via the forms on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact details provided in this privacy policy.
2. Data processing for contract fulfillment and contact
2.1 Data processing for contract fulfillment
For the purpose of fulfilling the contract (including responding to inquiries and handling any warranty or performance issues as well as statutory update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because in these cases the data are required to process the contract, and without them, we cannot send the order. The data collected can be seen from the respective input forms.
Further information on the processing of your data, particularly on the transfer of data to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully performed, your data will be restricted for further processing and deleted after the statutory retention periods under tax and commercial law, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we have reserved a use beyond this that is permitted by law and about which we inform you in this policy.
2.2 Customer account
If you have given your consent pursuant to Art. 6(1)(a) GDPR by deciding to open a customer account, we use your data for the purpose of opening and maintaining your customer account as well as for storing your data for future orders on our website. You may delete your customer account at any time, either by sending a message to the contact address provided in this privacy policy or by using the corresponding function in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we have reserved a use beyond this that is permitted by law and about which we inform you in this policy.
2.3 Contact
As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6(1)(b) GDPR if you voluntarily provide these to us when contacting us (e.g. via contact form, live chat tool, or email). Mandatory fields are marked as such because we need the data in these cases to process your contact request. Which data are collected can be seen from the respective input forms. Once your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we have reserved a use beyond this that is permitted by law and about which we inform you in this policy.
3. Data processing for shipping purposes
For the performance of the contract pursuant to Art. 6(1)(b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact details provided in this privacy policy.
Transfer of data to shipping service providers for delivery notification
If you have given us your express consent during or after your order, we will transfer your email address and telephone number to the selected shipping service provider based on this consent pursuant to Art. 6(1)(a) GDPR so that they can contact you prior to delivery for the purpose of delivery notification or coordination. You may revoke your consent at any time by sending a message to the contact details listed in this privacy policy or directly to the shipping service provider at the following address:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
4. Data processing for payment handling
When processing payments in our online shop, we cooperate with the following partners: technical service providers, credit institutions, and payment service providers.
4.1 Data processing for transaction handling
Depending on the selected payment method, we transmit the data necessary for the execution of the payment transaction to our technical service providers acting on our behalf, to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for the execution of the payment. This serves the fulfillment of the contract pursuant to Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for the payment transaction themselves, e.g. on their own website or via technical integration in the ordering process. The respective payment service provider’s privacy policy applies in this regard.
If you have any questions regarding our partners for payment processing and the basis of our cooperation with them, please contact the contact details provided in this privacy policy.
4.2 Data processing for fraud prevention and payment process optimization
Where applicable, we provide our service providers with additional data, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, handling disputed payments, accounting support). This is based on our legitimate interests, which prevail in the context of a balancing of interests, in safeguarding against fraud or in efficient payment management pursuant to Art. 6(1)(f) GDPR.
5. Email marketing
5.1 Email newsletter with subscription
If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly based on your consent pursuant to Art. 6(1)(a) GDPR. You may unsubscribe from the newsletter at any time by sending a message to the contact option described below or via the link provided in the newsletter. After unsubscribing, we delete your email address from the mailing list unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve a use beyond this that is permitted by law and about which we inform you in this policy.
5.2 Newsletter dispatch
The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact details provided in this privacy policy.
6. Cookies and other technologies
General information
To make visiting our website attractive and to enable the use of certain functions, we use various technologies, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser.
Privacy protection on devices
When using our online services, we use technologies that are strictly necessary to provide the telemedia service you have expressly requested. Storing information on your device or accessing information already stored on your device does not require consent in this regard.
For non-essential functions, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not grant consent, parts of the website may not be fully usable. Any consent you may have granted will remain valid until you adjust or reset the respective settings on your device.
Subsequent data processing through cookies and other technologies
We use technologies that are necessary for the use of certain functions of our website (e.g. shopping cart function). Through these technologies, the IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the content of the shopping cart) are collected and processed. This serves our legitimate interests in an optimized presentation of our offer pursuant to Art. 6(1)(f) GDPR.
We also use technologies to fulfill the legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data) and for web analytics and online marketing. Further information, including the legal basis for data processing, can be found in the following sections of this privacy policy.
Cookie settings
You can find the cookie settings for your browser under the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of technologies pursuant to Art. 6(1)(a) GDPR, you can withdraw your consent at any time by sending a message to the contact option described in this privacy policy.
7. Use of cookies and other technologies
We use the following cookies and other technologies from third-party providers on our website. Unless otherwise specified for the individual technologies, processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Once the purpose of use no longer applies and the use of the respective technology has ended, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on your withdrawal options can be found in the section “Cookies and other technologies.” Further details, including the basis of our cooperation with each provider, can be found in the descriptions of the individual technologies below.
Use of Google services
We use the technologies listed below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise stated for the respective technologies, data processing takes place on the basis of a joint controller agreement pursuant to Art. 26 GDPR.
Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.
Our service providers are also located and/or use servers in countries outside the EU and the EEA for which no adequacy decision by the European Commission exists. Our cooperation with them is based on standard contractual clauses issued by the European Commission.
Google Analytics
For the purpose of website analytics, data (IP address, time of visit, device and browser information, and information about your use of our website) are automatically collected and stored using Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server located in the EU for geolocation purposes and then immediately deleted before traffic is forwarded for further processing on other Google servers. Data processing is carried out on the basis of a data processing agreement with Google.
8. Integration of the Trusted Shops Trustbadge / other widgets
Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. the Trustmark, collected reviews) and to offer Trusted Shops products for buyers after an order has been placed.
This serves our legitimate interests, which prevail in the context of a balancing of interests, in optimal marketing by enabling secure shopping pursuant to Art. 6(1)(f) GDPR. The Trustbadge and the associated services are an offer of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany (“Trusted Shops”), with which we are jointly responsible for data protection in accordance with Art. 26 GDPR.
8.1 Data processing when embedding the Trustbadge / other widgets
The Trustbadge is provided by a US content delivery network (CDN) provider. An adequate level of data protection is ensured by an adequacy decision of the European Commission. Service providers based in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). If a service provider is not certified under the DPF, standard contractual clauses are used as an appropriate safeguard.
When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the retrieval. The IP address is anonymized immediately after collection, so that the stored data can no longer be associated with your identity. The anonymized data are used in particular for statistical purposes and error analysis.
8.2 Data processing after order completion
After an order has been completed, the Trustbadge accesses order information stored on your device (order total, order number, product purchased if applicable) as well as your email address. This is necessary to offer you Trusted Shops services and, if applicable, to automatically secure your order. For this purpose, your email address is transmitted to Trusted Shops in hashed form using a cryptographic one-way function. The legal basis is Art. 6(1)(f) GDPR.
This serves to check whether you are already registered for Trusted Shops services and is therefore necessary to fulfill our and Trusted Shops’ overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6(1)(f) GDPR. If you are already registered, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered, you will subsequently have the option to do so. If you do not register, all transmitted data will be automatically deleted by Trusted Shops.
Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Art. 6(1)(f) GDPR for the purpose of ensuring a trouble-free operation. Processing may take place in third countries (USA, United Kingdom, Israel). An adequate level of data protection is ensured by an adequacy decision of the European Commission.
9. Social Media
Our online presence on Facebook (by Meta) and Instagram (by Meta)
If you have given your consent pursuant to Art. 6(1)(a) GDPR to the respective social media operator, your data will be automatically collected and stored when you visit our online presences on the aforementioned social media for the purposes of market research and advertising, from which usage profiles are created using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that are likely to correspond to your interests. Cookies are usually used for this purpose.
Facebook (by Meta) and Instagram (by Meta) are services provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta”). The information automatically collected by Meta about your use of our online presences is usually transmitted to a server of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and stored there. Data processing when visiting a fan page takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.
Our service providers are located and/or use servers in countries for which the European Commission has determined an adequate level of data protection (including the USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina). The adequacy decision for the USA applies as a basis for third-country transfers, provided that the respective service provider is certified. For other countries without an adequacy decision (e.g. Australia, India, Brazil), our cooperation is based on standard contractual clauses issued by the European Commission.
10. Contact options and your rights
10.1 Your rights
As a data subject, you have the following rights:
- In accordance with Art. 15 GDPR, the right to obtain information about your personal data processed by us;
- In accordance with Art. 16 GDPR, the right to request rectification of inaccurate or completion of your personal data stored by us;
- In accordance with Art. 17 GDPR, the right to request deletion of your personal data, unless legal obligations require retention;
- In accordance with Art. 18 GDPR, the right to request restriction of processing of your data;
- In accordance with Art. 20 GDPR, the right to receive your personal data in a structured, commonly used, and machine-readable format;
- In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority.
Right to object
Where we process personal data to protect our legitimate interests as explained above, you have the right to object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time. After exercising your right to object, we will not process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defense of legal claims.
10.2 Contact options
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, withdraw your consent, or object to a specific data use, please contact us directly:
NO SUGAR SUGAR GmbH
Brookstieg 4
22145 Stapelfeld
Email: info@nosugarsugar.de
Phone: +49 (0)40 23700830