Privacy Policy

2. Categories of Data

We process personal data that you provide directly or that is generated when using the shop. This may include name, billing and shipping address, email address, phone number, account data, order contents, payment method, payment reference, shipping status, support messages, review submissions, IP address, device and browser data, cookie choices, and technical log data.

3. Purposes and Legal Bases

• Shop, cart, checkout, customer account, and order processing: contract performance.
• Payment processing, shipping, support, and fraud prevention: contract performance and legitimate interests.
• Accounting, tax, commercial-law retention, and legal documentation: legal obligations.
• Security logging, abuse prevention, and technical troubleshooting: legitimate interests.
• Optional analytics or marketing cookies: consent, where enabled.

4. Orders, Payments, and Shipping

Order data is processed to create and fulfil orders, calculate totals, issue payment references, provide tracking information, handle support cases, and comply with accounting obligations. Payment data may be processed by banks or payment providers depending on the payment method selected at checkout. Shipping data may be shared with DHL or other carriers used for delivery.

5. Cookies and Consent

Necessary cookies and local storage are used for essential shop functions such as cart storage, account session handling, navigation, security, and consent management. Optional analytics and marketing cookies are only used after consent where such tools are enabled. You can change cookie choices through the cookie banner controls where available.

6. Service Providers and Recipients

We may share data with service providers involved in hosting, shop infrastructure, order processing, payment processing, shipping, email delivery, fraud prevention, analytics, marketing, accounting, legal support, and customer support. Data is shared only where necessary for the respective purpose.

7. Web Fonts

This website uses web fonts to provide a consistent and readable presentation. The font files are delivered locally from our own website infrastructure via paths such as /_next/static/media. No request to Google Fonts domains such as fonts.googleapis.com or fonts.gstatic.com is made by your browser for loading these fonts.

8. International Transfers

Some service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism required by data protection law.

9. Storage Duration

We store personal data only for as long as necessary for the purposes described in this policy. Order, invoice, payment, and accounting records may be retained for statutory retention periods. Support and account data is deleted or restricted when it is no longer required, unless retention is necessary for legal claims or compliance obligations.

10. Your Rights

Subject to the legal requirements, you may have the right to access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent with effect for the future.

11. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.

12. No Automated Individual Decision-Making

We do not use automated individual decision-making within the meaning of Article 22 GDPR.

13. Contact for Privacy Requests

For privacy-related questions or requests, contact contact@ruhmreich-peptides.de.