Privacy Policy (Online Services)

Last updated: August 2026

Dear visitors to our website,
Dear users of our online services,

We – Phytoneering Extract Solutions GmbH – are committed to protecting your data and, with it, your privacy. With this privacy policy, we would like to inform you

  • which personal data we process,
  • what we use it for,
  • how you can object to its use or withdraw your consent, and
  • which rights you have as a data subject and how you can exercise them.

1. Controller

The controller responsible for data processing within the meaning of the GDPR is

Phytoneering Extract Solutions GmbH
Kerschensteinerstr. 11 - 15
92318 Neumarkt
Germany
Phone: +49 (0) 9181 / 231 - 220
Fax: +49 (0) 9181 231-265
E-mail: extracts@phytoneering-extract-solutions.de

2. Scope

This privacy policy applies to your visit to phytoneering-extract-solutions.de

3. Categories of Data and Data Processed

When you visit the respective website, the following categories of data and individual data may be processed:

Web Usage Data

  • IP address;
  • date and time of the request;
  • time zone difference to Greenwich Mean Time (GMT);
  • content of the request (specific page);
  • access status/HTTP status code;
  • amount of data transferred in each case;
  • website from which the request originates;
  • browser used, including language and version;
  • operating system of the device used and its interface.

Personal Details and Contact Data

  • name;
  • address;
  • date of birth;
  • marital status;
  • occupation/professional position;
  • nationality;
  • telephone number(s);
  • e-mail address;
  • other contact details provided, including social media accounts (e.g. Facebook, Twitter).

Electronic Communication Data (in particular e-mail)

  • content of electronic communication that you send to us or conduct with us;
  • metadata, e.g. the e-mail addresses involved, time and date of e-mail correspondence, details of your opening and click behaviour in our newsletters.

Where further data is processed in individual processes or applications beyond this, you will find additional information in the respective section on the corresponding tool.

4. General Processing When Visiting the Website (incl. Server Log Files and Cookies)

If you merely visit the website, i.e. if you do not register or otherwise transmit information to us, we only process the personal data that your browser automatically transmits to our server.

This includes in particular so-called web usage data and server log files, such as:

  • pages or files accessed,
  • date and time of access,
  • amount of data transferred,
  • notification of successful retrieval,
  • browser type and version,
  • operating system used,
  • referrer URL,
  • IP address, and
  • requesting internet service provider.

This data is processed for the technical provision of our website and to ensure stability, functionality and IT security. In addition, we use the data for error analysis and for detecting and preventing misuse or attacks. This data is not merged with other data sources or analysed for marketing or profiling purposes.

The legal basis is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website.

Server log files are generally stored for a maximum of 14 days and then deleted. Longer storage only takes place if this is necessary to investigate specific security or misuse incidents.

In addition, cookies are stored on your device when you use the website. These are small text files that are placed on your device and contain certain information. The following types of cookies are used:

a) Transient cookies are deleted automatically when you close your browser. These include in particular session cookies, which store a session ID that allows various requests from your browser to be assigned to the same session.

b) Persistent cookies are deleted automatically after a predefined period, which may vary depending on the cookie.

Cookies serve to technically enable the use of the website and to improve its functionality.

5. Contacting Us

When you contact us, web usage data, personal details and contact data as well as electronic communication data are collected and processed, depending on the information you provide.

When you contact us (for example via a contact form or e-mail), the information you provide is voluntary. We process this information in order to handle your enquiry.

Depending on the nature of your enquiry, the legal basis is Art. 6 (1) lit. b, c or f GDPR.

10. Your Rights

As a data subject, you have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, and the right to data portability under Article 20 GDPR. The right of access and the right to erasure are subject to the restrictions set out in Sections 34 and 35 of the German Federal Data Protection Act (BDSG). In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

Furthermore, you have the right to object under Article 21 GDPR. You may object at any time, without giving reasons, to the processing of personal data based on Article 6 (1) lit. e or f GDPR.

You may withdraw any consent you have given us at any time; the method we recommend depends on the medium and is specified in each case below (for example, you can unsubscribe from the newsletter simply by clicking "Unsubscribe", which you will find in every newsletter issue). You may also use the web form for this purpose or send an e-mail to extracts@phytoneering-extract-solutions.de. The web form and e-mail routes are not automated and may therefore take longer than the fully automated route we recommend.