Privacy Policy

The entity responsible for data processing is:

Nectar by Hannah Lohoff
Hannah Lohoff
Astrid Lindgren Straße 30
41564 Kaarst
Email: hannah@nectarbyhannah.com

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information on how your data is handled.

1. Access Data and Hosting

You can visit our website without providing personal information. Each time you visit a webpage, the web server automatically stores a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data). These access data are evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offerings. This serves to safeguard our legitimate interests in the correct representation of our offerings as per Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted at the latest seven days after the end of your visit to the site.

2. Data Processing for Contract Fulfillment and Contacting Us

2.1 Data Processing for Contract Fulfillment

For the purpose of contract fulfillment (including inquiries and processing of any warranty and performance claims, as well as statutory update obligations) under Art. 6 para. 1 sentence 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us in the context of your order. Mandatory fields are marked as such because we require this data for the contract execution, and without this information, we cannot process your order. The data collected is evident from the respective input forms.

Further information regarding the processing of your data, particularly concerning the transfer to our service providers for order, payment, and shipping processing, is provided in the subsequent sections of this privacy policy. After the complete fulfillment of the contract, your data will be restricted for further processing and deleted after the expiry of the statutory retention periods under tax and commercial law, unless you have expressly consented to the further use of your data under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for purposes that are legally permissible and are explained in this policy.

2.2 Contacting Us

In the context of customer communication, we collect personal data for the purpose of processing your inquiries under Art. 6 para. 1 sentence 1 lit. b GDPR when you voluntarily provide this data during contact (e.g., via contact form or email). Mandatory fields are marked as such because we require this data to process your inquiry. The data collected is evident from the respective input forms. After the complete processing of your inquiry, your data will be deleted unless you have expressly consented to the further use of your data under Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to further data processing that is legally permissible.

3. Data Processing for Shipping Fulfillment

To fulfill the contract under Art. 6 para. 1 sentence 1 lit. b GDPR, we will transfer your data to the shipping service provider tasked with delivery, to the extent necessary for delivering the goods ordered.

4. Data Processing for Payment Processing

We work with technical service providers, financial institutions, and payment service providers to process payments in our online store.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we will transfer the necessary data for processing the payment transaction to our technical service providers, who act on our behalf, or to the financial institutions or the selected payment service provider, as necessary to process the payment. This is required for contract fulfillment under Art. 6 para. 1 sentence 1 lit. b GDPR. Some payment service providers collect the necessary data for processing the payment themselves, either on their website or via a technical integration in the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

4.2 Data Processing for Fraud Prevention and Optimizing Payment Processes

We may also provide our service providers with additional data to be used together with the necessary data for payment processing to prevent fraud and optimize our payment processes (e.g., billing, processing contested payments, assisting with accounting). This serves the legitimate interest of securing against fraud or ensuring efficient payment management under Art. 6 para. 1 sentence 1 lit. f GDPR.

5. Cookies and Other Technologies

General Information

To make the visit to our website attractive and enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Privacy Protection for End Devices

When using our online offerings, we use essential technologies to provide the requested telemedia service. The storage of information on your device or access to information already stored on your device does not require consent.

Subsequent Data Processing through Cookies and Other Technologies

We use technologies that are strictly necessary for the use of specific functions on our website (e.g., shopping cart functionality). These technologies collect and process information about your IP address, time of visit, device and browser information, and how you use our website (e.g., shopping cart content). This serves the legitimate interest of optimizing the presentation of our offerings under Art. 6 para. 1 sentence 1 lit. f GDPR.

You can manage your cookie settings for your browser using the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

6. Social Media

6.1 Social Plugins from Instagram (by Meta)

Our website uses social media buttons. These are embedded as HTML links so that no connection to the servers of the respective providers is made when visiting our website. By clicking on one of the buttons, the website of the respective social network opens in a new window of your browser, where you can, for example, click the Like or Share button.

6.2 Our Online Presence on Instagram (by Meta)

If you have given your consent under Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, data is automatically collected and stored when you visit our online presence on Instagram (by Meta) for market research and advertising purposes. This data is used to create pseudonymous usage profiles, which can be used to display advertisements within and outside the platforms that likely match your interests. In most cases, cookies are used for this. Detailed information on data processing and usage by the respective social media provider, as well as contact details and options to protect your privacy, can be found in the privacy policies of the providers. If you need assistance, please contact us.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):

• Pursuant to Art. 15 GDPR, the right to obtain information about the personal data we process about you, to the extent specified therein;

• Pursuant to Art. 16 GDPR, the right to request the immediate correction of inaccurate or incomplete personal data stored by us;

• Pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary:
  for exercising the right of freedom of expression and information;
  for compliance with a legal obligation;
  for reasons of public interest; or
  for the establishment, exercise, or defense of legal claims;

• Pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data if:
  you contest the accuracy of the data;
  the processing is unlawful, but you oppose the erasure of the data;
  we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
  you have objected to processing pursuant to Art. 21 GDPR;

• Pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request its transfer to another controller;

• Pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority at your habitual place of residence or work, or the authority responsible for the location of Nectar’s registered office.

7.2 Contact Options

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or revoke any consent given, or object to a specific use of your data, please contact us directly via the contact details provided in our legal notice (Impressum).