Privacy policy
Privacy Policy
Privacy Policy
Information on the Handling of Personal Data
We are very pleased that you are interested in our website—and thus in our company. Protecting your privacy and personal freedoms is important to us; we use your data only for the purposes for which it was collected. Since it is important to us that you are always aware of how we collect, use, and, where applicable, transfer your data to third parties, we provide comprehensive information below regarding the processing of your personal data that we have collected or stored.
In general, you can visit our website without providing any (personal) data; if there are any exceptions for selected services, we will explain them in the following sections. When processing personal data, we strictly adhere to the provisions of the EU General Data Protection Regulation (GDPR) and, where applicable, other relevant data protection regulations.
Name and Address of the Data Controller
Active Nutrition International GmbH
Craig Rosenthal, Marc Mollere, Dirk Glassner
Zielstattstraße 38
81379 Munich
Germany
Phone: +49 (0) 89 50 200 71
Email:info@ani-eu.com
Website: https://powerbar.eu
Name and address of the Data Protection Officer
Mr. Jonathan Stoklas
Data Protection Team for general data protection inquiries:
Team email: DataCompliance@ani-eu.com
Updates to the Privacy Policy
To ensure that privacy information related to the services on our website is always up to date, we use the CLOUD DSE service provided by Cookiebox GmbH in Münster.
Rights of Data Subjects
Chapter III of the EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects, which we explain below with regard to the processing of your personal data:
Right of Access
This provision applies in particular to information regarding the following details of data processing:
- Purposes of processing
- Categories of data
- Recipients or categories of recipients, if applicable
- If applicable, the planned retention period or the criteria for determining this period
- Information regarding the respective right to rectification, erasure, restriction, or objection
- Existence of the right to lodge a complaint with a supervisory authority
- If applicable, the source of the data (if not collected from you)
- If applicable, the existence of automated decision-making, including profiling, along with meaningful information about the logic involved, the scope, and the expected effects
- If applicable, (planned) transfer to a third country or international organization
Right to rectification
If any data is incorrect, we will correct it immediately, provided you notify us of the issue.
Right to erasure (right to be forgotten)
Provided that processing is no longer necessary and one of the following conditions is met:
- The purpose of the processing no longer applies
- Withdrawal of your consent and absence of any other legal basis for processing
- Objection to the processing without a compelling legitimate reason to the contrary
- Unlawful processing
- Necessary to comply with a legal obligation
- Data was collected in accordance with Art. 8(1) of the GDPR
Right to restriction of processing
Provided that one of the following conditions is met:
- You contest the accuracy of your data (restriction may be applied for the duration of our review)
- In the event of unlawful processing, and provided the data is not to be erased, restriction of processing shall take the place of erasure
- If the purposes of processing no longer apply, but you need your data to assert, exercise, or defend legal claims
- Following an objection you have raised pursuant to Art. 21(1) of the GDPR and for the duration of the assessment of whether our legitimate grounds override yours.
Right to Data Portability
Provided it is technically feasible and does not infringe upon the rights and freedoms of others, we will—upon your request—transfer your data to another recipient (controller).
Right to Object
If we collect or have collected personal data from you (based on Article 6(1)(e) or (f) or Article 9(2)(a) of the GDPR) and process it, you have the right to object to the data processing (including profiling) at any time (with future effect). In exceptional cases, the objection may be ineffective, e.g., if we can demonstrate compelling legitimate interests in the processing that override your interests, or if the processing serves to assert, exercise, or defend legal claims. If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling to the extent that it is related to such direct marketing. You also have the right to object to the processing of your data concerning you that we carry out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
Automated Decision-Making in Individual Cases, Including Profiling
If we collect or have collected personal data from you and process it, you have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. Exceptions to this rule apply if the decision is necessary for to enter into or fulfill a contract between you and us, or if you have expressly consented to the processing. In any case, we will take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include, at a minimum, the right to request human intervention on our part, to present your point of view, and to challenge the decision.
Right to Withdraw Consent to Data Processing
You have the right to withdraw your consent to the processing of personal data at any time.
Right to File a Complaint with a Supervisory Authority
A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/DE/Service/Kontakt/Kontaktfinder/kontaktfinder_node.html.
General Information on Data Processing on the Website
The following information applies to data processing on our website in general. If there are any exceptions or additions to this information, they are described in detail in the respective sections.
Information on Data Security
We secure our website and other systems through technical and organizational measures against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all risks is not possible.
Legal Basis for Processing
We process personal data in accordance with the provisions of the GDPR, as follows depending on the nature and purpose of the processing:
|
Legal Basis |
GDPR Provision |
|
Informed consent |
Art. 6(1)(a) |
|
Performance of a contract |
Art. 6(1)(b) |
|
Implementation of pre-contractual measures |
Art. 6(1)(b) |
|
Compliance with legal obligations |
Art. 6(1)(c) |
|
Protection of vital interests |
Art. 6(1)(d) |
|
Protection of our legitimate interests |
Art. 6(1)(f) |
Our legitimate interest
Our legitimate interest, as defined under Article 6(1)(f) of the GDPR, is based on the conduct of our business activities to maintain our operational capacity and secure the employment of our employees.
General Data Retention Periods
Once the purpose for which the data is stored no longer applies, the retention periods are generally at least six or ten years. Data erasure generally takes place immediately in accordance with our data erasure policy, provided that no retention obligation, necessity for the performance of a contract, or legitimate interest precludes it.
Deletion or Blocking of Personal Data
We store your personal data only for the period necessary to fulfill the specified purpose. Once the purpose no longer applies and any applicable retention periods have expired, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
Collection of General Data and Information
As soon as you visit our website, our web server collects certain general data and technical information—as shown in the table below:
|
Data Collected |
Purpose of Collection |
|
Browser types and versions used |
Correct display of page content |
|
Operating system used, visitor origin (referrer, e.g., Google), subpages clicked |
Optimization of our website content and our advertising |
|
Date and time of access to the website, as well as the visitor’s IP address and Internet service provider |
Ensuring the continued functionality of our IT systems (for operating the website) and preventing misuse |
|
Other data and information for security purposes in the event of attacks |
Providing relevant information to law enforcement agencies in the event of a cyberattack |
Obligation to Provide Personal Data
Under certain circumstances (e.g., due to legal or contractual provisions), you are obligated to provide us with your personal data. Examples of such processing include the following:
|
Type or Purpose of Processing |
Necessity |
|
Conclusion of a sales contract (e.g., your address) |
Fulfillment of the contractual obligation (e.g., delivery of the goods to your address) |
|
In the context of employment (e.g., transmission of data to the tax office) |
Compliance with legal requirements (e.g., tax regulations) |
Information on Data Security
We secure our website and other systems through technical and organizational measures against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons. In addition, we have implemented SSL encryption (SHA256) on our website to protect your data. However, despite regular checks, complete protection against all risks is not possible.
Information on Specific Data Processing Activities on the Website
Where applicable, in deviation from or in addition to the general information provided above, you will find details below regarding the specific data processing activities on our website.
Contact Form
|
Purpose of Processing |
Processing and, if applicable, responding to the inquiry submitted by the form sender |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
|
|
Recipients (if applicable, in the event of disclosure) |
No data is transferred to third parties and/or to a third country. |
|
Intention to transfer data to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards), if applicable |
No data is transferred to a third country, nor is such a transfer planned. |
|
If known: Duration of data retention |
See General Time Limits for Data Deletion |
|
Obligation to provide personal data (e.g., due to legal or contractual provisions) / Necessity |
There is no obligation. |
|
Consequences of Noncompliance (Failure to Provide the Required Data) |
None |
|
Existence of automated decision-making, if applicable |
In this context, we do not use automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
The data comes from the data subject themselves. |
|
Categories of personal data, if applicable (if not collected directly from the data subject). |
Data and categories requested in the respective form. |
|
Change of purpose, if applicable |
None |
Cookies
We use cookies on this website; these are small text files that are placed or stored on your computer via your web browser (e.g., Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g., shopping cart functions, saving your login information); other cookies serve to ensure the security of your data or the website; and some cookies may be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID—a unique identifier consisting of a string of characters that enables websites and servers to be associated with the browser storing them.
Cookies that are necessary to transmit a message via a public telecommunications network and cookies that are absolutely essential to provide you with a function you have explicitly requested are referred to as “technically necessary cookies” and may be set without your explicit consent (Section 25(2) TDDDG). All other cookies require your consent (Section 25(1) TDDDG); where applicable, this is managed through our consent management platform.
We use some cookies only for the duration of your visit to the website, some for a predefined period, and some permanently. You can delete all of these cookies at any time manually or automatically via your web browser.
It is possible to use our services without cookies (although you may not be able to access the full range of features). Most browsers are set to automatically accept cookies. However, you can disable the storage of cookies or set your browser to notify you as soon as cookies are sent.
Job Applications and the Application Process
|
Purpose of Processing |
Data from applicants is collected, processed, and used for the purpose of selecting potential employees. |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
|
|
Recipients (if applicable; in the event of disclosure) |
No data is transferred to third parties and/or to a third country. |
|
Intent to transfer data to a third country or international organization (if applicable; including information on the Commission’s adequacy decision or appropriate safeguards) |
No transfer takes place, nor is one planned. |
|
If known: Duration of data retention |
The personal data of applicants whom we do not hire is retained for the period required to address potential legal claims (e.g., under the General Equal Treatment Act (AGG))—for a maximum of 6 months—and is subsequently destroyed or deleted without delay. |
|
Obligation to Provide Personal Data (e.g., due to statutory or contractual provisions) / Necessity |
To ensure a smooth application process, it is necessary that you provide us with the requested information truthfully. |
|
Consequences of Noncompliance (Failure to Provide the Required Data) |
A violation (i.e., failure to provide the required data) could, in some cases, result in our inability to enter into an employment contract with you. |
|
Possible Use of Automated Decision-Making |
In this context, we do not use automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
As a rule, the data comes from the data subject themselves; however, it may also come from third parties under certain circumstances. |
|
Categories of personal data (if not collected directly from the data subject) |
Master data, contact information, application data |
|
Change in purpose, if applicable |
If we hire you following the completion of the application process, the purpose for processing the relevant data will change: in that case, the data will be used in the future to carry out and maintain the employment relationship. |
Payment service provider—Unzer GmbH
|
Purpose of processing |
To enable a secure payment option |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
|
|
Recipients (if applicable, in the event of disclosure) |
If applicable, PayPal—PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; if applicable, SOFORT Überweisung, Klarna GmbH, Theresienhöhe 12, 80339 Munich |
|
If applicable, intention to transfer data to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards) |
No data transfer to a third country takes place, nor is one planned. |
|
If known: Duration of data retention |
See General Time Limits for Data Deletion |
|
Obligation to provide personal data (e.g., due to legal or contractual provisions) / Necessity |
None |
|
Consequences of non-compliance (if the required data is not provided) |
None |
|
Existence of automated decision-making, if applicable |
In this context, we do not engage in automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
The data generally comes from the data subject, but may also come from third parties. |
|
Where applicable, categories of personal data (if not collected directly from the data subject). |
Identification data, contact information, device-related data (e.g., IP address) |
Risk and Credit Assessment - Unzer GmbH
|
Purpose of processing |
Risk and credit assessment |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
|
|
Recipients (if applicable, in the event of disclosure) |
Our payment service provider may transfer your personal data to credit bureaus or retrieve it from them in order to conduct creditworthiness checks (e.g., Schufa Holding AG, CRIF Bürgel GmbH, Arvato Infoscore GmbH, Universum Business GmbH, Bisnode D & B Austria GmbH). |
|
If known: Duration of data retention |
See General Time Limits for Data Deletion |
|
Obligation to Provide Personal Data (e.g., due to legal or contractual provisions) / Necessity |
For the payment methods listed, providing the relevant data is mandatory. |
|
Consequences of non-compliance (if the required data is not provided) |
Without this data, the relevant payment methods cannot be used. |
|
Existence of automated decision-making, if applicable |
In this context, we do not engage in automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
The data generally comes from the data subject, but may also come from third parties. |
|
Categories of personal data, if applicable (if not collected directly from the data subject). |
Address data, creditworthiness data |
|
Change of purpose, if applicable |
None |
Customer account and product order
|
Purpose of processing general data |
|
||||||||
|
Legal basis |
Performance of a contract (Art. 6(1)(b) GDPR) |
||||||||
|
Recipients (if applicable, in the event of disclosure) |
Parcel delivery providers, logistics service providers, payment service providers |
||||||||
|
Intention to transfer data to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards), if applicable |
No data transfer to a third country takes place, nor is one planned. |
||||||||
|
If known: Duration of data retention |
See General Time Limits for Data Deletion |
||||||||
|
Obligation to provide personal data (e.g., due to legal or contractual provisions) / Necessity |
The data (in the required fields) must be provided as part of the underlying contract. |
||||||||
|
Consequences of non-compliance (if the required data is not provided) |
In this case, it is not possible to create a customer account. |
||||||||
|
Existence of automated decision-making, if applicable |
In this context, we do not engage in automated decision-making. |
||||||||
|
Source of the data (if not collected directly from the data subject) |
The data comes from the data subject themselves. |
||||||||
|
Categories of personal data, if applicable (if not collected directly from the data subject). |
The data comes from the data subject themselves. |
||||||||
|
Change of purpose, if applicable |
None |
Contests, sweepstakes, and raffles
|
Purpose of processing |
To conduct sweepstakes |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
|
|
Recipients (if applicable, in the event of disclosure) |
Prize draw partners, if applicable; see general information on data transfer |
|
If applicable, intention to transfer data to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards) |
No data transfer to a third country takes place and is not planned. |
|
If known: Duration of data storage |
We store your personal data only for as long as necessary to fulfill our mutual obligations in connection with the contest, sweepstakes, or prize drawing. In addition, we store your personal data only to assert or defend against legal claims or until the respective statutory retention obligations have expired. |
|
Obligation to Provide Personal Data (e.g., due to legal or contractual provisions) / Necessity |
Unless otherwise specified, the data (in the required fields) must be provided as part of the underlying contract. |
|
Consequences of non-compliance (if the required data is not provided) |
None |
|
Existence of automated decision-making, if applicable |
In this context, we do not engage in automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
The data generally comes from the data subject, but may also come from third parties. |
|
Categories of personal data, if applicable (if not collected directly from the data subject). |
Data required to participate in the sweepstakes (e.g., name, title, mailing address, email address, landline or cell phone number, age, date of birth, gender, content generated by the user on , or other personal data) |
|
Change in purpose, if applicable |
None |
Newsletter
|
Purpose of processing |
Provision of information in the form of electronic newsletters |
|
Legal basis (pursuant to Art. 6 / 9 GDPR) |
Informed consent (Art. 6(1)(a)). Within the framework of an existing customer relationship (§ 7(3) UWG) |
|
Recipients (if applicable, in the event of disclosure) |
Brevo (formerly Sendinblue); Operator: Sendinblue SAS, 55 Rue d’Amsterdam, 75008 Paris, France, https://de.sendinblue.com/legal/privacypolicy/ |
|
If applicable, intention to transfer data to a third country or international organization (including information on the Commission’s adequacy decision or appropriate safeguards) |
No data transfer to a third country takes place and is not planned. |
|
If known: Duration of data retention |
See General Time Limits for Data Deletion |
|
Obligation to provide personal data (e.g., due to legal or contractual provisions) / Necessity |
There is no obligation to provide personal data. Newsletters are sent exclusively after registration via a double opt-in procedure (voluntary and revocable informed consent pursuant to Article 6(1)(a) of the GDPR) or after a purchase contract has been successfully concluded and the email address was collected during this process (pursuant to Section 7(3) of the UWG). |
|
Consequences of Non-Compliance (Failure to Provide the Required Data) |
A violation (i.e., failure to provide the required data) would result in the newsletter not being delivered to you. |
|
Possible Use of Automated Decision-Making |
In this context, we do not engage in automated decision-making. |
|
Source of the data (if not collected directly from the data subject) |
The data comes from the data subject themselves. |
|
Change of purpose, if applicable |
None |
Web tracking technologies—managed with Usercentrics
To manage all cookies, website technologies, and tracking technologies that require consent or opt-out in compliance with data protection regulations, we use the consent management platform provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, through which we have integrated the following services:
Services
Amazon Web Services
Trusted Shops
Usercentrics Consent Management Platform
AWIN
Facebook Pixel
Google Ads Conversion Tracking
Google Ads Remarketing
Google Analytics
Google Analytics 4
1 Subservice
Google Maps
Google Tag Manager
Hotjar
Microsoft Advertising
Optin
Pinterest Tags
Schober Analytics
Sendinblue
Shopify Analytics
Shopify Marketing
Shopify Preferences
Strava
Typeform
YouTube Video