Privacy Policy

Controller

Heilpflanzenwohl GmbH
Alt-Moabit 101 D
10559 Berlin
E-mail: datenschutz@heilpflanzenwohl.com

Data protection officer

Lawyer Roosbeh Karimi – Data protection officer (TÜV)
KARIMI.legal Rechtsanwaltsgesellschaft mbH

Data we collect

When you visit our website, technical access data is recorded automatically: IP address, browser type, operating system, pages visited, time and date of access and the referring URL. This data is used solely to ensure secure operation of the website and is not linked to personal profiles.

If you contact us voluntarily (e.g. by e-mail), we store the data you provide (name, e-mail address, content of the enquiry) solely to process your enquiry.

Purposes of processing and legal bases

We process personal data on the basis of Art. 6 GDPR:

Art. 6(1)(b) GDPR – for the initiation or performance of a contract, e.g. for orders or enquiries.
Art. 6(1)(c) GDPR – to fulfil legal obligations (e.g. statutory retention requirements).
Art. 6(1)(f) GDPR – on the basis of legitimate interests, e.g. to secure and analyse our website.
Art. 6(1)(a) GDPR – with your consent, e.g. for marketing e-mails or optional cookies.

Cookies and tracking

Our website uses technically necessary cookies that are required for the operation of the site and may be set without your consent. For all other cookies – in particular for analysis and marketing purposes – we obtain your consent via our cookie banner. You may withdraw your consent at any time.

We use Google Tag Manager to manage scripts and tags centrally. The Tag Manager itself does not collect personal data, but may load other services if you have consented.

Third-party services

Google Analytics (Google LLC, USA): To analyse user behaviour on our website – only with your consent. IP addresses are anonymised before transmission. Data transfer to the USA is based on standard contractual clauses (Art. 46 GDPR).

Google Fonts (Google Ireland Limited): Fonts are embedded locally – no data is transmitted to Google.

Klaviyo (Klaviyo Inc., USA): For sending marketing e-mails if you have subscribed and consented. You may unsubscribe at any time.

Retention periods

Personal data is stored only for as long as the respective processing purpose requires. Data that must be retained due to statutory retention obligations (e.g. accounting data) is deleted after the statutory period expires.

Your rights under the GDPR

You may exercise your rights at any time:

• Access – You have the right to know what data we hold about you (Art. 15 GDPR).
• Rectification – You may request the correction of inaccurate data (Art. 16 GDPR).
• Erasure – You may request deletion of your data, unless statutory retention obligations apply (Art. 17 GDPR).
• Restriction – You may request restriction of processing (Art. 18 GDPR).
• Data portability – You may receive your data in a commonly used format (Art. 20 GDPR).
• Objection – You may object to processing based on legitimate interests (Art. 21 GDPR).
• Withdrawal – You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Complaint – You have the right to lodge a complaint with a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.

Contact for data protection enquiries

Write to us at datenschutz@heilpflanzenwohl.com. We will respond within 30 days.

Changes to this privacy policy

We update this privacy policy as required by changes in law or new processing activities. The current version is always available on this page. Last updated: October 2026.