Privacy Policy Online Services

Last update: March 2025

We - Phytoneering Extract Solutions GmbH - are not only committed to protecting your health, but also to protecting your data and thus your privacy. With this data protection declaration we inform you about

• which personal data we collect, store, process, block and erase from you when you visit the website and use our online services (collectively referred to as ‘processing’),
• what we use these data for,
• how you can object to the use or withdraw your consent and
• what rights you have as a data subject, e.g. how you revoke declared consent and how you can exercise other rights to information, correction, complaint and deletion of your data.

1. Who is responsible for data processing and who can I contact?

The responsible body for data processing in the sense given in the GDPR is:

Phytoneering Extract Solutions GmbH
Kerschensteinerstr. 11–15
92318 Neumarkt, Germany
Phone: +49 (0) 9181 / 231 - 220
Fax: +49 (0) 9181 231-265
Email: extracts@phytoneering-extract-solutions.de

Our company data protection officer can be reached via email at datenschutz@bionorica.de or by post at the above address (please include the line ‘ATTENTION: Data Protection Officer’).

2. Scope

This data protection declaration applies to your visit to phytoneering-extract-solutions.de

3. Definition of the data categories

In the context of this data protection declaration, the following definitions apply to data types:

Type 1: web usage data

• IP address;
• Date and time of the request;
• Time zone difference to Greenwich Mean Time (GMT);
• Content of the request (specific page);
• Access status / HTTP status code;
• Amount of data transferred in each case;
• Website from which the request comes;
• Browser used including language and version;
• Operating system of the device used and its interface.

Type 2: personal details and contact details

• Name;
• Address;
• Date of birth;
• Marital status;
• Occupation/occupational position;
• Nationality;
• Phone number(s);
• E-mail address;
• Other communicated contact details including accounts for social media (e.g. Facebook, Twitter).

Type 3: Electronic communication data (especially email)

• Contents of electronic communication that you address to us or that we carry with us;
• Metadata, e.g. e-mail addresses involved, time and date of e-mail correspondence, details on your opening and clicking behavior in our PhytothekNews (e-mail newsletter).

4. General website visit

(1) If you use the website for informational purposes only, i.e. if you do not register or otherwise convey any information to us, we will only collect the personal data your browser transmits to our server. If you would like to view our website, we collect the type 1 data which are technically necessary for us to display our website to you and ensure the stability and security (legal basis is Art. 6(1) (f) GDPR).

(2) In addition to the data mentioned above, the following transient and persistent cookies are saved on your computer when you visit our website:

a) Transient cookies: these cookies are automatically deleted when you close the browser. They particularly include session cookies. A session cookie saves a so-called session ID with which various requests from your browser can be assigned to a given session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you close your browser.

b) Persistent cookies: these cookies are automatically deleted after the expiration time has been reached. Depending on the cookie, the expiration time may differ. You can delete the cookies at any time via the system settings in your browser.

c) You can configure your browser settings as you wish and, e.g., refuse to accept third-party cookies or all cookies. Please be aware that if you disable cookies, you may not be able to use all the features of this website.

5. Your contact with us

When contacting us (for example via a contact form or an e-mail), your details are voluntary unless we need them to process your request and answer. This information is stored and processed by us to process the request and potential follow-up questions.

Depending on your details, data of types 1, 2 and 3 will be collected and processed when you contact us. The legal basis for the use of this service depends on the nature of your request from Art. 6 Para. 1 lit. a or b GDPR.

6. Google

6.1. Google Analytics

(1) The website uses Google Analytics, a web analysis service of Google Inc. (‘Google’). Google Analytics collects data of type 1 and uses cookies for this. To be able to assign your website visit, we anonymise your IP address upon collection and hence we cannot link it to you personally. We also do not merge your IP address with other data from Google.

(2) The information on your use of this website generated by the cookies mentioned above is usually transferred to and saved on a Google server in the US. Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide additional services associated with the website and internet use to us.

(3) You can prevent cookies being saved by making the appropriate setting in your browser. However, in this case you may not be able to use all the features of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) for Google and the processing of these data by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=de.

(4) The legal basis for the use of this service is yielded from Art. 6 Para. 1 lit. f GDPR.

(5) Further information on the use of data by Google for advertising purposes as well as on setting and objection possibilities can be found at: https://support.google.com/analytics/answer/6004245?hl=de.

6.2. Google Consent Mode V2

Applies to: all websites mentioned

(1) On our websites mentioned above, we use Google Consent Mode V2 to ensure that your data protection preferences are implemented. Google Consent Mode V2 enables us to adapt the use of Google services such as Google Analytics and Google Ads to your consent. This means that these services will only be activated if you have expressly given your consent.

(2) Google Consent Mode V2 is an extension that makes it possible to adjust the behaviour of Google tags based on the consent status of users. This mode takes into account the user's consent to the use of cookies and tracking technologies and ensures that only the data for which consent has been given is collected and processed. Consent Mode V2 sends signals to the Google tags, which are adjusted depending on the user's consent status in order to fulfil the data protection requirements.

(3) The legal basis for the processing is your voluntary consent (in the cookie banner) in accordance with Art. 6 para. 1 sentence 1 a) GDPR.

(4) By using Google Consent Mode V2, we can control the collection and processing of your data in a way that complies with legal data protection requirements. If you give your voluntary consent, data such as IP address, usage behaviour and other relevant information will be forwarded to Google. This data will not be collected or processed without your consent.

(5) You have the option to revoke or adjust your consent at any time. To do this, you can make the appropriate settings in our cookie banner or in the data protection settings on our website. You can find more information about how Google processes your data in Google's privacy policy (https://policies.google.com/privacy?hl=de) and further information about Google Consent Mode V2 on the associated Google page (https://statics.teams.cdn.office.net/evergreen-assets/safelinks/1/atp-safelinks.html).

7. Email newsletter

We offer an email newsletter on the website mentioned to provide information about our products, services and events. You can register for this newsletter by entering an email address; Information that goes beyond the email address is voluntary. We use the data collected for the purpose of registering for the newsletter, to send the corresponding newsletter and to evaluate your click behavior in the emails (openings, clicks) in order to improve our newsletter offer.

The legal basis for processing your data for the purpose of sending the newsletter is Art. 6 Para. 1 lit. a GDPR, for the purpose of evaluating click behavior Art. 6 para. 1 lit. f GDPR. You can withdraw your consent to the sending of the newsletter at any time by clicking on the “Unsubscribe” link that you will find in every newsletter issue.

8. Other third parties

We work with third parties who process your personal data when you visit our website (e.g. session-based storage by geotracking on your mobile phone). Such processing is carried out exclusively under the sole responsibility of the respective third party in terms of data protection law. We do not process any data in this way. Nor do we receive any personal data from the third-party provider following its processing.

9. Server logs

(1) The web server(s) delivering the website write protocols in which the following data is listed:

• Name of the website accessed;
• File, date and time of access;
• Amount of data transferred;
• Notification of successful retrieval;
• Browser type and version;
• Operating system used by the user;
• URL of the previously visited website (referrer URL);
• IP address of the user;
• Inquiring telecommunications provider.

(2) We use the log data only for statistical evaluations for the purpose of operation, security and optimization of the website and our offer. However, we reserve the right to check the log data retrospectively if there is concrete reason to suspect that the website has been or is being used illegally.

(3) The legal basis for maintaining the server logs is Art. 6 Para. 1 lit. f GDPR. As a rule, we delete the server logs after 14 days, or later if the reason for this is given in paragraph 2.

10. Your rights

(1) If you have any questions about the protection of your data, you can contact our data protection officer by sending an email to datenschutz@bionorica.de, or at our postal address with the addition "the data protection officer".

(2) You determine what happens to us with your personal data and we will help you with this. You can receive information about the data we have stored about you, you can request the correction of incorrect data and the restriction of the processing and deletion of your personal data from us. Please write an email to the address datenschutz@bionorica.de.

(3) You also have the right to data portability.

(4) You can withdraw your consent given to us at any time, whereby the route recommended by us will be specified depending on the medium (you can register for the newsletter, for example, simply by clicking on "Unsubscribe", which you can find in every newsletter Find output). You can also use the web form mentioned above for this. The way via the web form is not automated and therefore takes longer than the fully automatic way recommended by us in case of doubt.

(5) You also have the right to complain to the competent data protection supervisory authority.