Privacy policy

Privacy Policy

Last updated: September 19, 2026

1. Controller

The controller responsible for data processing on this website is:

Faiba Nutrition
Johannes Kötter
c/o GAM
Pappelallee 64
10437 Berlin, Germany
Email: info@faibanutrition.de

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website along with our content and services. The processing of personal data generally takes place only with the consent of the user or on another legally permitted basis.

Our shop is operated via the Shopify platform. The provider is Shopify International Limited, The Sidings, 4th Floor, Grand Canal Quay, Dublin, D02 E7K8, Ireland ("Shopify"). Shopify processes personal data on our behalf as a processor within the meaning of Art. 28 GDPR. In this context, personal data may also be processed outside the EU. Further information can be found at https://www.shopify.com/legal/privacy and in the "International data transfers" section below.

3. Your rights

Within the framework of applicable statutory provisions, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

You may contact us at any time using the contact details above to exercise these rights. You also have the right to lodge a complaint with a supervisory authority. The authority competent for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin

4. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When you access our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

IP address of the requesting device
Date and time of access
Name and URL of the file accessed
Website from which access is made (referrer URL)
Browser used and, where applicable, the operating system of your device

This processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the stability and functionality of our website. The data is not shared or otherwise used. However, we reserve the right to review server log files retrospectively should there be concrete indications of unlawful use.

b) When using our contact form

We offer you the opportunity to contact us using a form provided on the website. A valid email address is required so that we know who the inquiry is from and can respond. Additional information may be provided voluntarily.

This processing takes place in accordance with Art. 6(1)(a) GDPR on the basis of your voluntarily given consent. The personal data collected via the contact form is deleted once your inquiry has been resolved, unless statutory retention obligations apply.

c) When placing an order

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your inquiries. This data includes in particular:

Name
Billing and shipping address
Email address
Payment data or payment information

Providing this data is necessary for the formation, performance, and termination of the contractual relationship. Without this data, we cannot conclude a contract with you. This processing takes place in accordance with Art. 6(1)(b) GDPR.

Payment is processed via the payment services provided by Shopify or connected payment service providers. When paying via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). PayPal's privacy policy applies: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

We store order data for as long as required under German commercial and tax retention obligations, which is generally up to ten years.

d) Newsletter

If you subscribe to our newsletter via the signup form on our website, we store your email address in our Shopify system in order to send you information about our products and news. Subscription uses the double opt-in procedure: after signing up, you receive an email asking you to confirm your subscription. We log the time of registration and confirmation in order to be able to prove your consent.

This processing takes place in accordance with Art. 6(1)(a) GDPR on the basis of your consent. You can withdraw your consent at any time, for example via the unsubscribe link included in every newsletter or by email to info@faibanutrition.de. Your email address will then be removed from our mailing list.

e) Book Club review submissions

You can submit a book review via a form on our website. We process the data you provide (e.g. name or pseudonym, email address, and review text) in order to review your submission and, where applicable, publish it in our Book Club. Your email address is used only for questions regarding your submission and is not published.

This processing takes place in accordance with Art. 6(1)(a) GDPR on the basis of your consent. You can withdraw your consent at any time with effect for the future by contacting us. Upon withdrawal, we will remove your published review and delete the associated data.

5. Cookies and consent management

Our website uses technically necessary cookies required to operate the online shop, for example to store the contents of your shopping cart or to maintain your session during checkout. This processing takes place in accordance with Art. 6(1)(f) GDPR and § 25(2) TDDDG on the basis of our legitimate interest in providing a technically functional service.

We use Shopify's built-in customer privacy and consent management feature, which automatically detects the legal requirements applicable to visitors based on their region (such as the GDPR in the EU/EEA) and displays a cookie consent banner where required. Depending on your choices in this banner, certain non-essential cookies may or may not be set. You can change your choices at any time.

At present, we do not use any additional cookies or tools for analytics, marketing, or tracking purposes beyond those technically necessary to operate the shop and Shopify's consent mechanism described above. Should this change, we will update this Privacy Policy accordingly and, where legally required, obtain your prior consent.

6. International data transfers

Because our shop is operated via Shopify, personal data may be transferred, in the course of the technical provision of services, to countries outside the European Union or European Economic Area, including Canada and the United States. Canada is recognized by the European Commission as providing an adequate level of data protection. For transfers to the United States, Shopify relies on the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses pursuant to Art. 46 GDPR.

7. Data security

We use the widely adopted SSL/TLS encryption method during your visit to the website. In addition, we use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

8. Currency and amendment of this Privacy Policy

This Privacy Policy is currently valid and dated as indicated above. As we develop our website and offerings further, or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy.