Privacy Policy

1. General Information

Your personal data (e.g., salutation, name, address, email address, phone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and EU data protection regulations (GDPR).

The following sections provide information on processing purposes, recipients, legal bases, storage periods, as well as your rights and the responsible party for data processing.

This privacy policy applies only to our websites. If you are redirected to other pages via links on our website, please review their data protection policies.

2. Data Processing for Contract Fulfillment

(1) Purpose of Processing

  • Your personal data provided during the ordering process is required to conclude a contract with us.
  • You are not obliged to provide personal data, but without your address, we cannot deliver your order.
  • For certain payment methods, we need payment data to pass on to our payment service providers.
  • If you contact us via email or contact form, we will process the data provided to handle pre-contractual inquiries.
  • When creating a customer account, we process your data (name, address, payment method, email, and password) for registration and account management.

(2) Legal Basis

Legal basis: Art. 6 (1) b) GDPR (Contract fulfillment).

(3) Categories of Recipients

Payment service providers, shipping service providers, hosting providers, inventory management systems, and suppliers (for dropshipping).

(4) Storage Duration

  • We store contract-related data until the end of statutory warranty and contractual guarantee periods.
  • Commercial and tax-related data is stored for ten years (§ 257 HGB, § 147 AO).
  • Pre-contractual data is deleted if no contract is concluded.

3. Comments

(1) Purpose of Processing

If you submit a comment, your data (e.g., name/pseudonym, email address, website) is processed only for publication.

(2) Legal Basis

Legal basis: Art. 6 (1) f) GDPR (Legitimate interest).

(3) Legitimate Interest

Our interest is the public exchange of opinions. Comments contribute to transparency and consumer information. You may use a pseudonym for anonymity.

(4) Storage Duration

No fixed storage period – you may request deletion at any time.

(5) Right to Object

You have the right to object to data processing based on Art. 6 (1) f) GDPR for reasons arising from your particular situation.

For direct marketing, you may object without providing reasons at any time.

4. Reviews

(1) Purpose of processing

If you submit a review regarding our products, your purchase, or your experience with our shop, or if we ask you to leave a review after a purchase, we process your personal data for the purpose of collecting, managing, and publishing customer reviews, as well as improving our services and customer communication.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) (f) GDPR.

(3) Legitimate interest

Our legitimate interest lies in obtaining and publishing authentic customer opinions about our products and services in order to enable other customers to make informed purchasing decisions and to improve the quality of our services.

(4) Categories of data

In the context of submitting or requesting reviews, the following data in particular may be processed:

Name or pseudonym
Email address
Website, if applicable
Content of the review
Star rating or point rating
Profile picture uploaded voluntarily, if applicable
Reference to the order or indication of which product was reviewed
Time the review was submitted

(5) Categories of recipients

Recipients of the data may include our hosting provider, internally responsible employees (e.g. customer service or marketing), and, where applicable, external review service providers or platforms used by us, insofar as reviews are displayed or managed there.

(6) Storage duration

As a rule, we store reviews and the data processed in this context for as long as the review is published on our website or via the review services used, or as long as there is a legitimate interest in storing it. Deletion will take place if you wish to have your review removed, if we remove the review, or if statutory retention obligations prevent deletion.

(7) Rights of the data subject

With regard to the processing of your personal data in connection with reviews, you have the legal rights to access, rectification, erasure, restriction of processing, data portability, and to lodge a complaint with a supervisory authority. In all other respects, we refer to the explanations under “Your rights as a data subject” in this privacy policy.

(8) RIGHT TO OBJECT

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (f) GDPR.

Insofar as we use your data to ask you by email to submit a review in connection with a purchase, you may object to this processing at any time with effect for the future. Once we receive your objection, we will no longer send you any further review requests.

5. PayPal and Klarna Transactions

Please note that all payments are processed via PayPal and Klarna.
In this context, the processing of personal data is carried out solely for the purpose of payment processing in accordance with Art. 6 (1) b GDPR.

For more information on data processing by each provider, please refer to:

PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna: https://www.klarna.com/de/datenschutz/

6. Web Analytics & Online Advertising

The activation of the aforementioned analytics and marketing tools takes place only after your explicit consent via our consent manager (Borlabs Cookie). You may withdraw or adjust your consent there at any time.

(1) Use of Google Analytics 4

(a) Purpose of processing
We use Google Analytics 4 (“GA4”), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics 4 helps us analyze the use of our website in order to evaluate reach, user interactions, and the performance of our content and campaigns, and to improve our website.

(b) Legal basis
Your data is processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR, provided that you have consented to the use of Google Analytics 4 via our cookie banner (Borlabs Cookie).

(c) Categories of recipients
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

(d) Third-country transfer
It cannot be ruled out that data may also be transferred to servers of Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework.

(e) Revocation and opt-out
You may revoke or adjust your consent at any time via the cookie settings on our website.

(f) Further information
Further information on Google’s data processing can be found at:
https://policies.google.com/privacy?hl=en

(2) Use of Google Ads & Conversion Tracking

(a) Purpose of Processing
We use Google Ads to promote our offerings on external websites. As part of Google Ads, we use Conversion Tracking. If you access our website via a Google ad, Google Ads places a cookie on your device. This cookie allows us to recognize whether you have completed a specific action on our website (e.g., a purchase). The collected data is processed by Google and may be used to optimize our advertisements.(b) Legal Basis
The processing of your data is based on your consent according to Art. 6 (1) a) GDPR, provided that you have agreed to the use of Google Ads through our cookie banner.

(c) Recipient Category
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

(d) Data Transfer to Third Countries
Google may transfer the collected data to servers in the USA. Google is certified under the EU-U.S. Data Privacy Framework and complies with EU data protection standards.

(e) Storage Duration
The cookies are valid for 30 days and do not serve to personally identify users.

(f) Withdrawal & Opt-Out Option
You can prevent the storage of cookies by adjusting your browser settings or withdraw your consent via the cookie banner. Alternatively, you can opt out of Google Ads tracking at the following link:
https://adssettings.google.com

(g) Further Information
For more details on Google’s privacy policy, please visit:
https://policies.google.com/privacy?hl=en

(3) Use of Google Tag Manager

(a) Purpose of processing
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage and deploy website tags through an interface. Google Tag Manager itself does not create user profiles, but may be technically required to integrate and control other services on our website.

(b) Legal basis
Insofar as services requiring consent are loaded via Google Tag Manager, processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Insofar as Google Tag Manager performs only technically necessary functions, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the efficient management of our website tags.

(c) Categories of recipients
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

(d) Third-country transfer
It cannot be ruled out that data may be transferred to servers of Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework.

(e) Revocation and opt-out
You may revoke or adjust your consent at any time via the cookie settings on our website.

(f) Further information
Further information on Google’s privacy practices can be found at:
https://policies.google.com/privacy?hl=en

(4) Use of Google Listings & WooCommerce Integration

We use the “Google Listings & Ads” plugin for WooCommerce to showcase our products on Google Shopping, the Google Merchant Center, and other Google services.
Purpose of Processing:
Through this integration, product information, prices, and availability are automatically transmitted to Google. When you click on one of our ads or access our products via Google Shopping, Google may store and process certain data about your interaction.
Collected Data:

The processed data may include, but is not limited to:

  • Product views and clicks
  • Referrer URL (source of the request)
  • User behavior on the product page
  • Completion of a transaction

Data Recipient:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data Transfer to Third Countries:
Google may transfer the collected data to servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework and is committed to complying with European Union data protection standards.

(5) Use of Google Merchant Center

(a) Purpose of Processing

We use the Google Merchant Center to showcase our products on Google Shopping and other Google services. This may involve collecting information about our products as well as statistical data on interactions with our offerings.

(b) Legal Basis

The processing of your data is based on your consent under Art. 6 (1) a) GDPR, provided that you have agreed to the use of Google services via our cookie banner.

(c) Recipient Category

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

(d) Data Transfer to Third Countries

Google may transfer the collected data to servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework and is committed to complying with EU data protection standards.

(e) Withdrawal & Opt-Out Option

You can manage your data usage preferences with Google through your Google Account settings or disable it via the following link:
Google Ads Settings

(f) Further Information

For more details on Google’s privacy policies, please visit: Google Privacy Policy

We have concluded a data processing agreement (Article 28 GDPR) with Google Ireland Ltd. As part of the data transfer to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, processing in the United States may occur. Google LLC is certified under the EU–U.S. Data Privacy Framework. You may withdraw or change your consent at any time via the cookie banner (Borlabs Cookie).

(6) WooCommerce Order Attribution

(a) Purpose of processing
We use the “WooCommerce Order Attribution” function to understand through which sources visitors became aware of our shop and which marketing channels led to orders. In this context, information about the source of the visit, the landing page and campaign parameters may be processed and assigned to an order.

(b) Legal basis
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR, insofar as cookies or comparable technologies are used for this purpose and you have consented via our cookie banner.

(c) Categories of recipients
The data is processed within our WooCommerce system and/or on our server.

(d) Storage period
The data is stored together with order and shop data in accordance with the retention periods applicable to our shop.

(e) Revocation and opt-out
You may revoke or adjust your consent at any time via the cookie settings on our website.

(7) Use of Rank Math SEO and Google Search Console

We use the Rank Math SEO plugin to analyze the visibility of our website in search engines. No personal data is stored in this process. Rank Math SEO accesses data solely from our linked Google account (Search Console and Analytics) to display aggregated reports on page views and keyword statistics.

For more information, please visit: https://rankmath.com/privacy-policy/

(8) Use of Meta Pixel (Facebook Pixel)

(a) Processing Purpose
We use the Meta Pixel (formerly: Facebook Pixel) from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland on our website. The Meta Pixel enables us to measure the effectiveness of our advertising on Facebook and Instagram, create audiences for future advertising campaigns, and track conversion events (e.g., purchases, registrations).

When you visit our website and have given your consent via our cookie banner, the Meta Pixel is activated and can collect the following data:

  • Visited pages and their URLs
  • Actions performed (e.g., “Add to Cart”, “Purchase Completed”)
  • Device information (IP address, browser, operating system)
  • For purchases: Order value, product IDs, currency

Additionally, we use the Conversion API (server-to-server integration) to transmit event data directly from our server to Meta. This increases tracking reliability and works independently of browser cookies.

(b) Legal Basis
Processing is based on your consent pursuant to Art. 6 para. 1 a) GDPR, provided you have consented to the use of the Meta Pixel via our cookie banner (Borlabs Cookie).

(c) Recipient Category
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

(d) Data Transfer to Third Countries
Meta may also transfer the collected data to servers in the USA (Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA). Meta is certified under the EU-U.S. Data Privacy Framework and commits to comply with EU data protection standards.

(e) Storage Duration
The cookies of the Meta Pixel have a validity of up to 180 days. Meta stores the transmitted event data in accordance with its own privacy policy.

(f) Revocation and Opt-Out Options
You can prevent the storage of cookies through appropriate settings in your browser software or revoke your consent in the cookie banner.

Additionally, you can specifically disable personalized advertising from Meta at the following link:
https://www.facebook.com/adpreferences/ad_settings/

(g) Further Information
More information about Meta’s privacy policy can be found here:
https://www.facebook.com/privacy/policy/

We have concluded a data processing agreement (Art. 28 GDPR) with Meta Platforms Ireland Limited.

You can revoke or change your consent at any time via the cookie banner (Borlabs Cookie).

7. Information About Cookies

(1) Purpose of Processing

Our website uses essential cookies to enable core functionalities, such as adding products to the shopping cart.

(2) Legal Basis

Legal basis: Art. 6 (1) f) GDPR (Legitimate interest).

(3) Legitimate Interest

Our legitimate interest is ensuring website functionality.

(4) Storage Duration

  • Session cookies are deleted when you close your browser.
  • Persistent cookies may remain stored for a few minutes up to several years.

(5) Right to Object

If you do not want cookies stored, disable cookies in your browser settings. However, this may limit website functionality.

In addition, we use the consent manager “Borlabs Cookie” to manage and document the consents of our website visitors in accordance with Article 6(1)(c) GDPR and legal requirements.
When our website is accessed, a technically necessary cookie is set to store the consents you have given. This data is not shared with the provider of the tool and is stored exclusively on our own server.
You can change or withdraw your consent at any time via the “Cookie Settings” button on our website.

8. Newsletter

(1) Purpose of Processing

When you subscribe to our newsletter, your email address is used for promotional purposes.

(2) Legal Basis

Legal basis: Art. 6 (1) a) GDPR (Consent).

(3) Recipients

We use Brevo as our newsletter provider (Data processing agreement under Art. 28 GDPR). Brevo processes the data on servers located within the European Union (Germany).
Further information on data processing by Brevo can be found at: https://www.brevo.com/de/legal/privacypolicy/

(4) Storage Duration

Your email address is stored as long as you are subscribed.

(5) Right to Withdraw Consent

You may unsubscribe at any time via the unsubscribe link in the newsletter.

9. Your Rights as a Data Subject

If your personal data is processed, you are a data subject under the GDPR and have the following rights:

  • Right to Access (Art. 15 GDPR)
  • Right to Rectification (Art. 16 GDPR)
  • Right to Erasure (Art. 17 GDPR)
  • Right to Restriction of Processing (Art. 18 GDPR)
  • Right to Data Portability (Art. 20 GDPR)
  • Right to Withdraw Consent (Art. 7 (3) GDPR)
  • Right to Lodge a Complaint (Art. 77 GDPR)

10. Data Protection Officer

If you have any questions regarding data protection, please contact our Data Protection Officer:

Uenlue GbR – Une Foods
Friedrich-Ebert-Str. 83
59425 Unna, Germany
[email protected]