{"id":35655,"date":"2026-06-10T11:42:12","date_gmt":"2026-06-10T09:42:12","guid":{"rendered":"https:\/\/nui-vital.com\/?page_id=35655"},"modified":"2026-08-02T07:52:38","modified_gmt":"2026-08-02T05:52:38","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/nui-vital.com\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<p><em>As of: June 2026. Legal framework: General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).<\/em><\/p>\n<h2>1. Controller<\/h2>\n<p>Responsible for data processing on this website:<br \/>\n<strong>NUI \u2013 Genossenschaft f\u00fcr Gesundheit und Wohlbefinden eG<\/strong><br \/>\nSchulgasse 70, 6850 Dornbirn, Austria<br \/>\nPhone: +43 5572 721040 \u00b7 Email: hello@nui-vital.com<br \/>\nAuthorised managing board member: Enrico Mandl \u00b7 Commercial register: FN 605146x, Landesgericht Feldkirch \u00b7 VAT: ATU79569557<\/p>\n<h2>2. General information on data processing<\/h2>\n<p>We process personal data only insofar as this is necessary to provide a functional website as well as our content and services, or where you have given your consent. The legal bases are in particular:<\/p>\n<ul>\n<li>Art. 6(1)(a) GDPR \u2013 consent (e.g. newsletter, non-essential cookies, chatbot)<\/li>\n<li>Art. 6(1)(b) GDPR \u2013 performance\/initiation of a contract (order processing, customer account)<\/li>\n<li>Art. 6(1)(c) GDPR \u2013 legal obligation (e.g. retention obligations)<\/li>\n<li>Art. 6(1)(f) GDPR \u2013 legitimate interest (secure, optimised operation of the website)<\/li>\n<\/ul>\n<p>A transfer to third countries (in particular the USA) takes place only on the basis of adequacy decisions (EU-U.S. Data Privacy Framework), standard contractual clauses (SCC) or your explicit consent. Data processing agreements (DPA) pursuant to Art. 28 GDPR have been concluded with all processors.<\/p>\n<h2>3. Hosting<\/h2>\n<p>Our website is hosted by ALL-INKL.COM \u2013 Neue Medien M\u00fcnnich (Hauptstra\u00dfe 68, 02742 Friedersdorf, Germany). The server location is Germany (EU). The provider processes inventory, contact, content, usage and metadata on our behalf (Art. 6(1)(f) GDPR). Email is also sent via the host&#8217;s mail server (EU).<\/p>\n<h2>4. Server log files<\/h2>\n<p>The hosting provider automatically collects server log files transmitted by your browser (browser type\/version, operating system, referrer URL, host name, time of the request, IP address). These data are not merged with other data sources and are deleted or anonymised after a short time. Legal basis: Art. 6(1)(f) GDPR.<\/p>\n<h2>5. Cookies &amp; consent management<\/h2>\n<p>We use cookies and comparable technologies. We set technically necessary cookies on the basis of Art. 6(1)(f) GDPR or \u00a7 165(3) TKG 2021. We set all non-essential cookies only with your consent (Art. 6(1)(a) GDPR), which you can revoke at any time with effect for the future. For management we use <strong>Borlabs Cookie<\/strong> (Borlabs GmbH, Hamburg). Your consent settings are stored locally; you can adjust them at any time via the \u201cCookie settings\u201d link.<\/p>\n<h2>6. SSL\/TLS encryption<\/h2>\n<p>For security reasons, this page uses SSL\/TLS encryption, recognisable by \u201chttps:\/\/\u201d and the padlock symbol in the address bar.<\/p>\n<h2>7. Order processing &amp; customer account<\/h2>\n<p>The shop is operated with WooCommerce (incl. WooCommerce Germanized). When you place an order, we process the data required to perform the contract (name, address, billing\/delivery address, email, phone if applicable, order and payment data) on the basis of Art. 6(1)(b) GDPR. We only pass on these data insofar as this is necessary to process the contract (payment service provider, shipping service provider, ERP, tax advisor if applicable) or where we are legally obliged to do so. Tax and commercial retention periods (usually 7 years) remain unaffected. A customer account is optional and can be deleted at any time.<\/p>\n<h2>8. Payment methods<\/h2>\n<p>Payment data are processed for the performance of the contract (Art. 6(1)(b) GDPR).<\/p>\n<ul>\n<li><strong>Stripe<\/strong> (Stripe Payments Europe, Ltd., Dublin, Ireland) is our payment service provider; it handles credit card, Stripe Link, Klarna, Amazon Pay and Sofort. Also applicable is the <a href=\"https:\/\/stripe.com\/at\/privacy\" target=\"_blank\" rel=\"noopener\">Stripe privacy policy<\/a>. Stripe can transfer data to the USA (SCC\/DPF).<\/li>\n<li><strong>Klarna \/ Sofort:<\/strong> Klarna Bank AB (publ.), Stockholm, Sweden \u2013 <a href=\"https:\/\/www.klarna.com\/at\/datenschutz\/\" target=\"_blank\" rel=\"noopener\">Klarna privacy notice<\/a>.<\/li>\n<li><strong>Amazon Pay:<\/strong> Amazon Payments Europe S.C.A., Luxembourg.<\/li>\n<li><strong>PayPal<\/strong> (PayPal (Europe) S.\u00e0 r.l. et Cie, S.C.A., Luxembourg) \u2013 <a href=\"https:\/\/www.paypal.com\/at\/legalhub\/privacy-full\" target=\"_blank\" rel=\"noopener\">PayPal privacy notice<\/a>.<\/li>\n<li><strong>Prepayment\/bank transfer, SEPA direct debit, purchase on account, cash on delivery<\/strong> \u2013 processing of the respectively required payment data.<\/li>\n<\/ul>\n<h2>9. Shipping<\/h2>\n<p>For delivery, we transmit the name and delivery address to the commissioned shipping service provider (Art. 6(1)(b) GDPR). For shipping notifications, the email address may also be transmitted.<\/p>\n<h2>10. Contacting us<\/h2>\n<p>When you contact us by email or form, we process your details to handle the request (Art. 6(1)(b) or (f) GDPR). The data are deleted as soon as they are no longer required and no retention obligations apply.<\/p>\n<h2>11. Newsletter \/ email marketing (Klaviyo)<\/h2>\n<p>For sending newsletters we use <strong>Klaviyo<\/strong> (Klaviyo Inc., Boston, USA). Registration takes place using the double opt-in procedure; the legal basis is your consent (Art. 6(1)(a) GDPR), which you can revoke at any time via the unsubscribe link. Processed in particular are the email address, registration data as well as open\/click data. Klaviyo processes data in the USA (SCC\/DPF).<\/p>\n<h2>12. ERP integration (Odoo)<\/h2>\n<p>For order, purchasing and inventory management, we transmit order and customer data to our ERP system Odoo (Art. 6(1)(b) GDPR; DPA pursuant to Art. 28 GDPR).<\/p>\n<h2>13. Remote website maintenance<\/h2>\n<p>For the technical maintenance of the website, we use iThemes\/Solid Sync (StellarWP, USA) (Art. 6(1)(f) GDPR). In doing so, technical status\/access data may be transferred to the USA (SCC).<\/p>\n<h2>14. Data backup<\/h2>\n<p>For data backup we use UpdraftPlus. The backups are stored locally at the host (EU).<\/p>\n<h2>15. Spam protection<\/h2>\n<p>To protect against spam, we use Antispam Bee (pluginkollektiv, Germany). The plugin works in a data-efficient manner and by default does not transmit any IP addresses to third parties.<\/p>\n<h2>16. Reviews (ProvenExpert)<\/h2>\n<p>For customer reviews we use <strong>ProvenExpert<\/strong> (Expert Systems AG, Berlin). Also applicable is the <a href=\"https:\/\/www.provenexpert.com\/datenschutz\/\" target=\"_blank\" rel=\"noopener\">ProvenExpert privacy policy<\/a>.<\/p>\n<h2>17. AI product advisor \u201cProfessor Nuno\u201d<\/h2>\n<p>On the website we offer an AI chatbot (\u201cProfessor Nuno\u201d) for product advice. When you use the chat, your inputs are transmitted, in order to generate the response, to <strong>Anthropic, PBC<\/strong> (San Francisco, USA) and processed there (Art. 6(1)(a)\/(b) GDPR; transfer via SCC, data processing addendum). Please do not enter any sensitive personal data in the chat.<\/p>\n<h2>18. Your rights<\/h2>\n<p>You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) as well as objection (Art. 21). You can revoke consents given at any time with effect for the future. Contact: hello@nui-vital.com.<\/p>\n<h2>19. Right to lodge a complaint<\/h2>\n<p>You have the right to lodge a complaint with a supervisory authority, in Austria with the Austrian Data Protection Authority (\u00d6sterreichische Datenschutzbeh\u00f6rde, DSB), Barichgasse 40\u201342, 1030 Wien, dsb@dsb.gv.at.<\/p>\n<h2>20. Storage period<\/h2>\n<p>We store personal data only for as long as is necessary for the respective purpose or as long as statutory retention periods (usually 7 years) exist. The data are then deleted.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>As of: June 2026. Legal framework: General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). 1. Controller Responsible for data processing on this website: NUI \u2013 Genossenschaft f\u00fcr Gesundheit und Wohlbefinden eG Schulgasse 70, 6850 Dornbirn, Austria Phone: +43 5572 721040 \u00b7 Email: hello@nui-vital.com Authorised managing board member: Enrico Mandl \u00b7 Commercial&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-35655","page","type-page","status-publish","hentry"],"taxonomy_info":[],"featured_image_src_large":false,"author_info":{"display_name":"Michael","author_link":"https:\/\/nui-vital.com\/en\/author\/nuivital-gf-michael\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/pages\/35655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/comments?post=35655"}],"version-history":[{"count":2,"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/pages\/35655\/revisions"}],"predecessor-version":[{"id":37859,"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/pages\/35655\/revisions\/37859"}],"wp:attachment":[{"href":"https:\/\/nui-vital.com\/en\/wp-json\/wp\/v2\/media?parent=35655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}