Privacy Policy

1. Controller

NaturFaktor GmbH
Danziger Str. 62
33605 Bielefeld
Germany
Phone: +49 172 4407911
Email: info@naturfaktor-botanicals.de

2. Hosting and provision

This website is provided through ChatGPT Sites. The provider and processor for data from the European Economic Area is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

When the website is accessed, technically necessary connection and usage data is processed. This may include the IP address, date and time of access, requested address, referrer address, browser and device information and HTTP status data. This processing serves to deliver the website, maintain its stability and security and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically functional operation of this website.

OpenAI may use subprocessors. Cloudflare is used for the technical delivery and protection of this website. In particular, IP addresses, routing information and security information may be processed. The technically necessary __cf_bm cookie detects automated traffic and expires after 30 minutes of inactivity.

Where data is processed outside the European Economic Area, the providers state that transfers are based on an adequacy decision or appropriate safeguards, in particular the EU Standard Contractual Clauses.

Further information is available in the ChatGPT Sites Data Processing Addendum, the Cloudflare Privacy Policy and the Cloudflare cookie documentation.

3. Contacting us and contact form

If you contact us using the contact form, by email or by telephone, we process the information you provide, in particular your name, company, contact details, product information, requested quantity and the content of your enquiry, in order to respond and handle any follow-up questions.

If your enquiry concerns a contract or pre-contractual measures, Article 6(1)(b) GDPR is the legal basis. In all other cases, processing is based on our legitimate interest in appropriate communication pursuant to Article 6(1)(f) GDPR.

Enquiries submitted through the form are stored in the access-protected database of this website and can be viewed only by authorised persons at NaturFaktor GmbH. Required fields are name, email address, product information, message and confirmation that the Privacy Policy has been read. All other details are voluntary.

We delete the data once the enquiry has been fully dealt with, unless statutory retention obligations or other legitimate reasons require continued storage. To limit automated bulk submissions, the number of enquiries per email address is temporarily restricted.

4. Cookies, consent management and Google Maps

We do not use analytics or marketing services. We do not conduct audience measurement or profiling. In the cookie dialog, you can decide independently whether your selected language may be stored and whether the embedded Google Maps view may be loaded. Both options are initially switched off.

The nf_cookie_consent cookie stores your choice and the consent version for 180 days. It is required so that your decision is respected on subsequent page views and the dialog does not appear every time. The legal bases are Section 25(2) no. 2 TDDDG and Article 6(1)(f) GDPR.

The __cf_bm cookie set by the technical service provider Cloudflare detects automated traffic and protects the website against abuse. It expires after 30 minutes of inactivity. The legal bases are Section 25(2) no. 2 TDDDG and Article 6(1)(f) GDPR.

The nf_language cookie is set for 180 days only after you consent. It stores your selected language version. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.

We use Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display our registered office. The map is initially blocked. Your consent is stored and a connection to Google is established only when you allow the External media category in the cookie dialog or expressly load the map using the button. Google may then receive your IP address, device and browser information, the time and the page accessed. Google may use its own cookies or comparable technologies and process data under its own responsibility.

The legal bases for loading the map are your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Google may process data outside the European Economic Area, particularly in the United States. Google LLC is certified under the EU-US Data Privacy Framework; where required, Google also relies on the EU Standard Contractual Clauses. Further information is available in the Google Privacy Policy and the information on data transfers.

You can change or withdraw each consent at any time with effect for the future through “Cookie settings” in the footer. On withdrawal, the optional language cookie is deleted or the embedded map is blocked again. You can delete cookies already set by Google through your browser settings. The lawfulness of processing before withdrawal remains unaffected.

The Statistics and Marketing categories are marked as “Not currently used”. Your choice is stored only after you actively select a button; optional categories are not preselected.

5. Product overview PDF

The product overview is provided as a file directly through this website. Downloading it therefore only generates the technical access data described under “Hosting and provision”.

6. Recipients and storage period

Personal data is received only by those who require it for the purposes stated above. This includes responsible persons within our company and hosting or IT service providers acting as processors. Data is otherwise disclosed only where permitted or required by law.

Technical data is processed only for as long as required for operation, security and error analysis. Communication data is stored in accordance with the criteria described above. Statutory retention obligations remain unaffected.

7. Your rights

Subject to the applicable legal requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR and data portability under Article 20 GDPR.

Under Article 21 GDPR, you may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation.

To exercise your rights, send a message to info@naturfaktor-botanicals.de.

8. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Email: poststelle@ldi.nrw.de
https://www.ldi.nrw.de/

9. Encryption

This website uses an encrypted HTTPS connection. This protects transmitted data against unauthorised access by third parties.

10. Automated decision-making

No automated decision-making, including profiling, takes place on this website.

11. Updates to this Privacy Policy

We update this Privacy Policy when the services used or legal requirements change.

Last updated: 29 July 2026