GDPR
Declaration of Information Obligation
1. Legal Basis:
The protection of your personal data is a special concern to us. We therefore process your data exclusively based on the legal provisions (GDPR, DSG 2018, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the scope of our website.
2. General Information
2.1 Responsible Party
Natural Products & Drugs GmbH
Neuer Platz 1
9800 Spittal/Drau
Tel.: 04762 44340
privacy@np-d.com
It is a particular concern for us to protect and securely store all personal data that you entrust to us. In this document, you will learn more about how we use and process your personal data.
Contacting Us
When you contact us via form on the website or via email, the data you provide will be stored with us for six months for the purpose of processing your inquiry and in the event of follow-up questions. We do not share this data without your consent.
Data Storage
We would like to point out that for the purpose of simplifying the shopping process and fulfilling subsequent contracts, the IP data of the connection owner is stored as part of cookies in the webshop, as well as the name, address, and credit card number or bank account details of the buyer.
Additionally, for the purpose of contract settlement, the following data is also stored with us: name, address, bank account details, or credit card data, phone number, and email address. The data you provide is necessary for contract fulfillment or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you. Data transfer to third parties does not occur, except for the transfer of credit card data to the processing banking institutions/payment service providers (Mpay, Paypal) for the purpose of debiting the purchase price, to the transportation/shipping company tasked with delivering the goods, and to our tax consultant to fulfill our tax obligations. These parties are committed to adhering to the applicable data protection regulations. A data processing agreement has been concluded in accordance with Art. 28 GDPR. More information about the processors we have engaged can be requested at: privacy@np-d.com.
Data processing is based on the legal provisions of § 96 Abs 3 TKG and Art 6 Abs 1 lit. a (consent) and/or f (legitimate interest) of the GDPR (in particular consent and/or contractual necessity).
If the shopping process is aborted, the data stored with us is deleted. In the event of a contract being concluded, all data from the contractual relationship is stored until the expiry of the statutory retention period (7 years).
The data name, address, purchased goods, and date of purchase are also stored until the product liability period expires (10 years). Data processing is based on the legal provisions of § 96 Abs 3 TKG and Art 6 Abs 1 lit. a (consent) and/or lit. b (necessary for contract fulfillment) of the GDPR.
Your data will, of course, be treated confidentially.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do not cause any damage.
We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.
If you do not wish this to happen, you can set your browser to inform you about the setting of cookies and only allow this in individual cases.
If cookies are deactivated, the functionality of our website may be limited.
Web Analytics
Our website uses features of the web analytics service Google Analytics. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow an analysis of your website usage. The information generated by the cookie about your usage of this website is usually transmitted to a Google server in the USA and stored there. You can prevent this by setting your browser so that no cookies are stored.
The storage of Google Analytics cookies is based on Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both their website and advertising.
IP Anonymization
We have activated the IP anonymization feature on this website. As a result, your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your usage of the website, compile reports on website activities, and provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
Browser Plugin
You may prevent cookies from being stored by adjusting your browser settings accordingly; however, we point out that you may not be able to fully use all the functions of this website if cookies are disabled. Additionally, you can prevent Google from capturing and processing the data generated by the cookie and related to your usage of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to Data Collection
You can prevent Google Analytics from capturing your data by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website: Disable Google Analytics.
https://www.google.com/settings/ads/onweb/
For more information on how Google Analytics processes user data, refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics Demographics
This website utilizes the “demographics” feature of Google Analytics. As a result, reports can be generated containing statements about age, gender, and interests of site visitors. These data originate from Google's interest-based advertising as well as visitor data from third-party providers. These data cannot be assigned to a specific person. You can disable this feature at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”
Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This function enables the advertising target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages tailored to your previous usage and browsing behavior on one device (e.g., a phone) can also be displayed on another device of yours (e.g., a tablet or PC).
If you have given consent, Google will link your web and app browser history with your Google Account for this purpose. Thus, the same personalized advertising messages can be displayed on any device where you log into your Google Account.
To support this function, Google Analytics collects Google-authenticated IDs of users temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.
You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.
The aggregation of collected data in your Google Account occurs exclusively based on your consent, which you can provide or withdraw in Google (Art. 6 Abs. 1 lit. a GDPR). For data collection processes not aggregated in your Google Account (e.g., because you do not have a Google Account or have objected to aggregation), data collection is based on Art. 6 Abs. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in analyzing anonymized website visitors for advertising purposes.
Further information and the privacy policy can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/.
Plugins and Tools
Facebook Plugins (Like & Share Button)
On our pages, plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated. You can recognize the Facebook plugins by the Facebook logo or the "Like Button" ("Like") on our website. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, a direct connection is established through the plugin between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like Button" while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We point out that as the website provider, we have no knowledge of the content of the transmitted data nor its use by Facebook. For more information, see Facebook's privacy policy at: https://www.facebook.com/policy.php.
If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Twitter Plugin
Our pages include functions of the Twitter service. These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Use of Twitter and the function “Re-Tweet” links the websites you visit to your Twitter account and makes this information known to other users. Data is also transferred to Twitter. We point out that as the website provider, we have no knowledge of the content of the transmitted data nor its use by Twitter. For more information, see Twitter's privacy policy at: https://twitter.com/privacy.
Your privacy settings on Twitter can be changed in the account settings at https://twitter.com/account/settings.
Instagram Plugin
On our pages, functions of the Instagram service are integrated. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We point out that as the website provider, we have no knowledge of the content of the transmitted data nor its use by Instagram.
For more information, see Instagram's privacy policy at: https://instagram.com/about/legal/privacy/.
Newsletter
When registering for the newsletter, the data entered in the input mask is stored in order to provide the newsletter. The legal basis for this processing is Art. 6 Abs. 1 S. 1 lit. a GDPR. Your email address, the time of registration, and the IP address used for registration are stored as long as you subscribe to our newsletter. This service is provided using a double opt-in procedure. You will then receive an email with a link to confirm that you are the owner of the specified email address and wish to be notified via our email service. You can unsubscribe from this service at any time by clicking the link contained in each newsletter.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the browser's address line switching from “http://” to “https://” and the padlock icon in your browser's address bar.
If SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties.
Your Rights
You have the rights of access, rectification, deletion (provided there is no statutory storage obligation), restriction, data portability, withdrawal, and objection. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can lodge a complaint with the regulatory authority. In Austria, this is the privacy authority.
Austrian Data Protection Authority
Barichgasse 40-42
1080 Vienna
Phone: +43 1 521 52-25 69
Email: dsb@dsb.gv.at
As a rule, we do not process data from minors and are not authorized to do so. By providing your consent, you confirm that you have reached the age of 14 or that your legal representative has provided consent.
You can revoke your consent at any time using the following email address: