Privacy Policy

1. Name and Contact Details of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Anti-Aging & Performance Booster – Wafaa Al Nachwati
Frankfurter Straße 4
35440 Linden
support [ at ] ap-booster.de

2. Hosting and Server Log Files (Hetzner)

We host the website of our online shop with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter "Hetzner").

When you access our website, the web server automatically collects data transmitted by your browser (server log files). This includes:

IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Transferred data volume
Operating system and browser type/version

Legal Basis: Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in providing a secure, fast, and stable online store.

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) with Hetzner in accordance with Art. 28 GDPR.

3. Data Processing during Order Processing

When you place an order in our online shop, we process the personal data you provide (name, address, email address, phone number, payment details, and order details).

Purpose: Processing and fulfilment of the purchase contract (delivery, invoicing, customer service).
Legal Basis: Art. 6(1)(b) GDPR (contract performance).
Disclosure to Third Parties: We only pass on your data to third parties to the extent necessary for contract fulfilment (e.g. to the shipping company commissioned with delivery and the selected payment service provider).
Storage Period: We store this data for the duration of contract processing and subsequently in accordance with statutory commercial and tax retention periods.

4. Cookies and Web Analytics (Google Analytics)

Our website uses cookies. These are small text files stored on your end device.

Google Analytics

We use the web analytics service Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").

Purpose: Analysis of user behaviour to optimise our web offering and marketing activities.
Functionality: Google Analytics uses cookies that enable an analysis of your use of the website. The information generated is generally transmitted to a Google server in the USA and stored there. We use Google Analytics exclusively with activated IP anonymisation (your IP address is truncated within EU/EEA member states prior to transmission).
Third Country Transfer: For data transfers to the USA, an adequacy decision by the EU Commission exists (EU-US Data Privacy Framework), under which Google is certified.
Legal Basis: Google Analytics is used exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
Withdrawal: You can withdraw your consent at any time with effect for the future via the cookie consent banner on our website.

5. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right of Access (Art. 15 GDPR) regarding your personal data processed by us;
Right to Rectification (Art. 16 GDPR) of inaccurate data;
Right to Erasure (Art. 17 GDPR) of your data stored by us;
Right to Restriction of Processing (Art. 18 GDPR);
Right to Data Portability (Art. 20 GDPR);
Right to Object (Art. 21 GDPR) to processing based on our legitimate interest (Art. 6(1)(f) GDPR);
Right to Withdraw Consent (Art. 7(3) GDPR) at any time with effect for the future;
Right to Lodge a Complaint (Art. 77 GDPR) with a supervisory authority.