Questions for the data protection contact
If you have any questions about data protection, please email us at privacy@nutra-shop-ww.com.
Your data protection rights
Using the contact details provided, you may exercise the following rights at any time:
- the right to obtain information about personal data stored about you and how it is processed,
- the right to correct inaccurate personal data,
- the right to request deletion of personal data stored about you,
- the right to restrict processing where legal retention obligations prevent immediate deletion,
- the right to object to the processing of your personal data, and
- the right to data portability where you have consented to processing or entered into a contract with us.
Where you have given consent, you may withdraw it at any time with effect for the future.
You may also lodge a complaint with the supervisory authority responsible for you. The competent authority depends on your place of residence, work or the location of the alleged infringement. For an overview of data protection authorities in the European Union, consult the official European Data Protection Board website or the authority responsible in your country.
Purposes of processing by the controller and third parties
We process personal data only for the purposes described in this privacy policy. We do not disclose personal data to third parties for purposes other than those stated. We disclose personal data only where:
- you have given your explicit consent,
- processing is necessary for the performance of a contract with you,
- processing is necessary to comply with a legal obligation, or
- processing is necessary for legitimate interests and there is no reason to assume that your overriding interests require the data not to be disclosed.
Deletion and restriction of data
We follow the principles of data minimisation and storage limitation. We retain personal data only for as long as necessary for the purposes described here or for the retention periods required by law. When the relevant purpose no longer applies or a statutory retention period expires, the data is routinely restricted or deleted in accordance with applicable law.
General information collected when you visit the website
When you access our website, technical information may be collected automatically. Server log files may include the browser type, operating system, domain name of the internet service provider, IP address, date and time of access, requested page and similar technical details.
This information is technically necessary to deliver requested website content correctly and to operate the website securely. It may be processed for the following purposes:
- ensuring a stable connection to the website,
- ensuring reliable use of the website,
- evaluating system security and stability, and
- other administrative and technical purposes.
Processing is based on our legitimate interest in operating, protecting and improving the website. We do not use this information to identify individual visitors unless this is necessary for security, legal compliance or the investigation of misuse. Recipients may include the controller and contracted processors.
Anonymous or aggregated technical information may be evaluated statistically to improve the website and its underlying technology.
Cookies
Like many websites, we may use cookies. Cookies are small text files stored on your device by a website. Depending on the cookie, they may contain technical identifiers or information about the browser, operating system, settings and interaction with the website.
Cookies cannot themselves run programs or transmit viruses. They may be used to make navigation easier, retain settings and display website content correctly.
Where consent is required, non-essential cookies are used only after valid consent has been obtained. You can generally use the website without optional cookies, although some functions may then be limited. You can delete or block cookies in your browser settings. Please consult your browser’s help function for instructions.
Registration on our website
If registration or personalised services are offered, personal data such as your name, postal address and contact details may be collected. Registered users may access content or services made available only to account holders and may be able to amend or delete information supplied during registration.
You may request information about personal data stored about you and ask for inaccurate data to be corrected or deleted, provided no legal retention obligation prevents this. Use the contact details in this privacy policy for such requests.
Comments
If users leave comments, the content of the comment, the time of submission and the chosen display name may be stored. Technical details may also be processed where necessary to prevent misuse, protect the website and respond to unlawful content.
SSL/TLS encryption
We use current encryption methods, such as SSL/TLS over HTTPS, to protect data transmitted between your browser and the website.
Newsletter
Where you have given explicit consent, we may send a newsletter or similar information to the email address you provide.
An email address is normally sufficient to subscribe. Information supplied during registration is used for newsletter delivery and related administration. Subscribers may also receive messages about material changes to the service or subscription.
Where required, we use a double opt-in process. This means that the subscription request, confirmation email and confirmation response are recorded so that we can demonstrate that the email-address holder completed the registration. Data is used for newsletter delivery and is not disclosed to third parties except contracted service providers acting on our instructions.
You may withdraw consent at any time. Each newsletter should contain an unsubscribe option. You may also contact us directly using the details in this privacy policy.
Contact form and email enquiries
If you contact us by email or through a contact form, the details you provide are processed to handle and respond to your enquiry. A valid email address may be required so that the enquiry can be assigned and answered. Additional information is optional unless it is necessary to deal with your request.
We retain enquiry data only for as long as necessary to respond, complete related follow-up work and meet legal obligations. It is then deleted or restricted in accordance with applicable retention requirements.
Use of Google Analytics
If Google Analytics is activated on this website, it is used to analyse website usage. Google Analytics may use cookies or similar technologies. Information generated about use of the website may be transmitted to and processed by Google, including on servers outside the United Kingdom or European Economic Area.
Where required, Google Analytics is activated only after consent. IP anonymisation and other privacy settings should be enabled where available. Google processes information on behalf of the website operator to evaluate website use, compile reports and provide related services. The IP address transmitted by your browser is not intended to be combined with other Google data by us.
The purpose of processing is to understand website usage and improve content, performance and technical operation. The applicable legal basis depends on the configuration and may be consent or, where legally permitted, legitimate interests.
You can prevent optional analytics cookies through the consent settings or browser settings. Google also provides browser tools and account controls that may limit analytics processing. The exact options available can change and should be checked in Google’s current privacy information.
Web fonts and external script libraries
To display content consistently, the website may use font or script libraries. If resources are loaded from an external provider, your browser may connect to that provider and transmit technical information such as the IP address, browser details and requested resource.
Where possible, fonts should be hosted locally. If external services are used and consent is required, they should be loaded only after consent. Details about the provider, purpose, legal basis and data transfers should be shown in the website’s current consent or privacy information.
Use of map services
If a map service such as Google Maps is embedded, the provider may process technical and usage data when the map is loaded or used. Depending on the configuration, this can include IP address, device information, location data and interactions with map functions.
Where consent is required, embedded maps should load only after consent. Please consult the map provider’s current privacy policy and settings for further information.
Changes to this privacy policy
We may update this privacy policy to reflect changes in legal requirements, technology, website functions or services. The version available on the website at the time of your visit applies. Material changes should be reviewed before publication to ensure that the policy accurately reflects the services and tracking technologies actually used on Nutra Shop WW.