Legal

Privacy policy

Natur Vital Handels GmbH · Last updated October 2026

This translation is provided for information purposes only. The German version is legally binding.

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Company
Natur Vital Handels GmbH
Address
Wirtschaftszeile Ost 10, 4482 Ennsdorf bei Enns, Austria

For any questions about data protection or to exercise your rights, you can reach us at this address.

Data protection officer

For questions about data protection, you can also contact our data protection officer directly:

Name
Dr. Franz Reitbauer, MBA
Address
Wirtschaftszeile Ost 10, 4482 Ennsdorf bei Enns, Austria

At a glance

  • This website does not set cookies and does not use any analytics, tracking or advertising services.
  • We serve fonts and images from our own domain. No data is transferred to third parties such as Google Fonts when you load a page.
  • The map on the contact page only loads once you explicitly click on it.
  • We only process personal data to the extent necessary to operate the website or to handle your enquiry.

Visiting the website and hosting

This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Each time the website is accessed, Cloudflare processes technically necessary data: your IP address, the date and time of access, the page accessed, the previously visited page, and information about your browser and operating system.

This is done to deliver the website, keep it stable and protect it against attacks. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). We do not analyse this data or combine it with other data. It is deleted as soon as it is no longer needed for these purposes.

Cloudflare processes the data on our behalf on the basis of a data processing agreement under Art. 28 GDPR. This may involve a transfer of data to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, the European Commission’s standard contractual clauses apply.

Contact and enquiries

If you contact us by e-mail or telephone, we process the information you give us, such as your name, company, e-mail address, telephone number and the content of your message. We use it solely to handle your enquiry.

We record business enquiries in our CRM system, Odoo, in order to process them and maintain the business relationship.

We receive and send e-mails via Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Microsoft processes the data on our behalf on the basis of a data processing agreement under Art. 28 GDPR. Data may be transferred to Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at a contract or business relationship, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We store the data until your matter has been dealt with. Beyond that, we keep business correspondence for as long as statutory retention obligations require, generally seven years under Section 212 of the Austrian Commercial Code (UGB) and Section 132 of the Federal Fiscal Code (BAO).

Please do not send us diagnoses, medical reports or any other health data through these channels. Questions about products and orders should be directed to the relevant shop, which has its own privacy notice.

Job applications

If you apply for a position with us or send us a speculative application, we process your documents in order to decide on an employment relationship (Art. 6(1)(b) GDPR). If you are not hired, we delete your documents no later than seven months after the application process has closed. This period is based on the time limits laid down in the Austrian Equal Treatment Act. We only keep your documents longer for future vacancies with your consent (Art. 6(1)(a) GDPR).

Google Maps

On the contact page, you can display a map from Google Maps. For users in the EU, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded when you click ‘Load map’. Before that, no data is transferred to Google.

By clicking, you consent to your browser connecting to Google (Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021, TKG 2021). In the process, Google receives in particular your IP address, the page accessed and information about your browser, and may set cookies. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.

Your consent applies only to that individual page view. You can withdraw it at any time with effect for the future by not loading the map again and by deleting any cookies set in your browser. For more information, please see Google’s privacy policy.

Cookies and browser storage

This website does not set cookies or store any other information in your browser. A cookie banner is therefore not required. Google can only set cookies if you load the map on the contact page (see Google Maps).

Data security

The connection to this website is encrypted throughout using TLS. You can tell by the padlock symbol and ‘https’ in your browser’s address bar. Please note that unencrypted e-mails are not fully protected in transit.

Your rights

In relation to us, you have the right to

  • access the data stored about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interests (Art. 21 GDPR),
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

To exercise these rights, write to us at office@naturvitalgroup.com. You are not required by law or contract to provide your data. However, we cannot respond to an enquiry without it. We do not use automated decision-making, including profiling.

Your right to object

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), for example when you visit the website or when we answer enquiries, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to office@naturvitalgroup.com.

Complaints

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at. You can also contact the supervisory authority in your place of residence in the EU.

Updates to this policy

This privacy policy was last updated in October 2026. We will amend it if the website or the legal requirements change. The version currently published here applies.

Go to the home page