Please note: This English version is provided for your convenience only. The German version of this page is the legally binding one.
As of: November 2026
1. Controller
Natumeda UG (haftungsbeschränkt), represented by its managing director Bernhard Hansen
Goldbacher Str. 79, 88662 Überlingen on Lake Constance
Phone: +49 176 4266 3407 · Email: info@natumeda.shop
We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, please contact us at the address above.
2. The essentials in brief
This website does not set any cookies, does not use any analytics or marketing tools and does not embed any third-party content (no Google Fonts, no maps, no videos, no social media plugins). Fonts and images are loaded from our own web space. Only when you proceed to payment are you taken to Stripe’s page, which sets its own cookies required for the payment.
3. Hosting and server log files
This website is hosted by Cloudflare (Cloudflare, Inc., San Francisco, USA; for customers in the EU: Cloudflare Germany GmbH, Munich). When you access the pages, Cloudflare processes technically necessary data, in particular your IP address, the date and time of access, the page accessed, the referrer, and your browser and operating system. This data is required to deliver the website and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable provision of the website.
We have a data processing agreement with Cloudflare (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; any transfer to the USA takes place on the basis of the European Commission's adequacy decision (Art. 45 GDPR).
4. Basket in your browser (local storage)
So that your basket is retained when you move between pages, we store the selected items exclusively locally in your browser (local storage). This data is not transmitted to us. The storage is strictly necessary for the service you have expressly requested (Section 25(2) No. 2 TDDDG). You can delete it at any time via your browser settings.
5. Ordering and payment (Stripe)
When you click “Continue to secure payment” at checkout, we transmit the items in your basket to our payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland (“Stripe”), and redirect you to Stripe’s payment page. There, Stripe and we collect the data required for concluding the contract, delivery, payment and invoicing (name, address, email address, telephone number, order and payment data). The legal basis is Art. 6(1)(b) GDPR; retention in accordance with commercial and tax law takes place under Art. 6(1)(c) GDPR (generally eight or ten years).
Stripe processes some payment data as an independent controller (e.g. for fraud prevention). Depending on the payment method chosen, data is passed on to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, or Klarna Bank AB, Stockholm; for Klarna invoice purchases a credit check may take place. Any transfer to Stripe, Inc. in the USA takes place on the basis of the EU-US Data Privacy Framework. Further information: stripe.com/de/privacy.
For shipping, we pass your name and delivery address to DHL (Deutsche Post AG, Bonn).
6. Contact by email or phone
If you contact us by email or telephone, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. We delete the data once the enquiry has been fully dealt with and no statutory retention obligations apply.
7. Saliva analysis, consultation and seminars
Health data may be processed in connection with the saliva analysis and personal consultations. This is done solely to provide the service you have booked and only with your explicit consent (Art. 9(2)(a) GDPR), which you may withdraw at any time with effect for the future. We retain records from our naturopathic practice in accordance with professional regulations and protect them against unauthorised access. For consultations via Zoom, Zoom's privacy policy also applies; on request, we are happy to advise you by telephone.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent given at any time (Art. 7(3) GDPR).
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
9. Encryption
This website is delivered exclusively via an encrypted connection (HTTPS/TLS).