Privacy Policy | Experience the power of human pheromones.

[As of: 21.08.2025]

With this information, the controller named in section 1 ("We") informs the user of the website ("you" or "user") in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the collection and processing of personal data. At the same time, we inform you if we store information on the end device you use when accessing our websites or if we access information that is already stored on your end device.

For the use of websites of other providers, to which reference is made e.g. via links, the data protection information provided there applies.

A. General Information

1. Controller and Data Protection Officer

1.1 Controller

The data controller for this website is: …[Implementation note: Name, postal address, email address of the controller, cf. Art. 13(1)(a) and Art. 14 GDPR.]

1.2 Data Protection Officer

You can reach the data protection officer by email at [Note: Enter the email address of the data protection officer, but this is not mandatory], or via the address in section 1.1 with the address supplement "c/o the Data Protection Officer." [Implementation note: If there is no obligation to appoint a data protection officer, the preceding sentence is replaced by: "We are not required to appoint a data protection officer." cf. Art. 13(1)(b) and Art. 14 GDPR.]

1.3 Hosting

Our website is hosted by ALL-INKL.COM (www.all-inkl.com), i.e., technically provided on the web servers of this web host. The web host is a processor commissioned by us in accordance with Art. 28 GDPR. [Implementation note: the last sentence is only correct if you have actually concluded a data processing agreement with us.]

2. Rights of the Data Subject

As a "data subject," you have the following rights if personal data concerning you is collected by us:

2.1 Right of Access

You can request access to your personal data that we process in accordance with Art. 15 GDPR.

2.2 Right to Object

You have a right to object for reasons arising from your particular situation according to Art. 21(1) GDPR. We will inform you about this separately from this information under section "B".

2.3 Right to Rectification

If the information concerning you is no longer accurate, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request its completion.

2.4 Right to Erasure

You can request the erasure of your personal data under the conditions of Art. 17 GDPR.

2.5 Right to Restriction of Processing

In the cases of Art. 18 GDPR, you have the right to request a restriction of the processing of your personal data ("blocking").

2.6 Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77(1) GDPR.

2.7 Right to Data Portability

In the event that you have provided us with personal data in accordance with Art. 20(1) GDPR, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a structured, commonly used and machine-readable format. The collection of data for the provision of the website and the storage of log files (see section 3.1 below) are strictly necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. The requirements of Art. 20(1) GDPR are therefore not met in this respect.

3. Procedure: Provision of the Website and Creation of Log Files

3.1 What data is processed for what purpose?

Each time the content of the website is accessed, the web server of our web host, where our website is stored, temporarily collects and stores information (data) from the internet browser of the user's accessing computer or end device. This data may allow for the identification of the user and is therefore personal data.

3.1.1 The following data is collected and stored by our web host:

IP address of the user,
Date and time of the website access,
The protocol, e.g., HTTP,
The request method "Get" or "Post",
Content of the request or specification of the retrieved file that was transmitted to the user,
The access status (successful transmission, error, etc.),
The amount of data transferred in bytes,
Inbound and outbound data traffic ("traffic"),
A process identification number ("Process ID"),
The time it took for the web server to respond to the user's request,
The website from which the user's access originated,
The browser used by the user, the operating system, the interface, the browser language, and the version of the browser software.

3.1.2

The temporary storage of this user data is necessary for the course of a website visit in order to enable the delivery of the website. For this purpose, the user's IP address must necessarily be stored for the duration of the session (i.e., the website visit).

3.1.3

Further storage of the IP address with the aforementioned data from the list above for this purpose takes place in log files. This is done so that our web host can ensure the functionality of the website and the security of the information technology systems.

3.2 On what legal basis is this data processed?

The data from section 3.1 is collected and processed by our web host for the aforementioned temporary storage purpose and also for the further storage purpose in accordance with Art. 6(1)(f) GDPR. This purpose also constitutes the legitimate interest in data processing. This legitimate interest is the interest of our web host, but also our legitimate interest in a functional website.

3.3 Are there other recipients of the aforementioned data besides the controller?

Our web host, as our processor, has technical access to the data mentioned in 3.1.

3.4 How long is the data stored?

The data from 3.1.1 is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of providing the website, this is the case when the respective session is ended. The log files are kept for a maximum of 7 days, unless a security incident requires longer storage. [Implementation note: Here you must describe any different individual handling on your part, deviating from the standard text.]

3.5 Is there an obligation to provide the data?

You must provide the data from 3.1 to our web host. Otherwise, you cannot technically use our website and our web host cannot guarantee secure technical operation.

4. Data Processing Procedures

4.1 Data and information processing requiring consent

Insofar as we may only collect and process personal data with your consent, we provide information on this in our consent banner in the context of the consent dialog.

4.2 Use of email address and contact form data based on legitimate interests

4.2.1 What data is processed for what purpose?

Insofar as we provide you with an email address and a contact form with input fields, this serves the purpose of allowing you to contact us. If you transmit personal data to us, it will be stored and processed by us for the purpose of contacting you. [Implementation note: If you design your contact form for other purposes, you must change the standard text and also inform about these purposes. For example, if you also forward the entered and transmitted personal data for third-party advertising.]

4.2.2 On what legal basis is this data processed?

The data from section 4.2.1 is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest of us as the controller). If your request is aimed at concluding a contract, then Art. 6(1)(b) GDPR is an additional legal basis (initiation, conclusion, and performance of a contract).

4.2.3 Are there other recipients of the aforementioned data besides the controller?

Our web host, as our processor, has technical access to the data mentioned in 4.2.1. [Note: If you use another service provider (mail provider), it should be named instead of "Our web host".]

4.2.4 How long is the data stored?

The data from 4.2.1 is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent to us via email or the contact form, this is the case when the respective correspondence with the user has ended and storage is no longer necessary for other reasons. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

4.2.5 Is there an obligation to provide the data?

You are not obliged to provide us with data from 4.2.1. You do not have to communicate with us.

4.3 Use of the session cookie "wbk_sid" based on legitimate interests

[Implementation note: If the login and contact forms are not used, section 4.3 is omitted, as this cookie is not set. If only one of the two services is omitted, the text below should be for only one or the other service.]

4.3.1 What data is processed for what purpose?

As soon as you use the login form or the contact form, the session cookie "wbk_sid" is stored on your end device by default. This cookie contains a long combination of numbers and letters ("ID"). The purpose of the cookie is to recognize the user as such when submitting login data or contact information and to distinguish them from malicious users (e.g., SPAM bots).

4.3.2 On what legal basis is this data processed?

Although the information in this cookie constitutes personal data, the use of the cookie "wbk_sid" does not require consent under data protection law because the data processing is necessary to protect the legitimate interests of the website operator and because the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, do not override them. The legal basis for data processing is therefore Art. 6(1) sentence 1(f) GDPR.

4.3.3 Are there other recipients of the aforementioned data besides the controller?

Our web host, as our processor, has technical access to the data mentioned in 4.3.1.

4.3.4 How long is the data stored?

When the user closes the browser, the cookie is automatically deleted from the user's operating system. It is therefore only valid for the duration of the visit to the websites (session cookie).

4.3.5 Is there an obligation to provide the data?

You are obliged to provide us with data from 4.3.1. Otherwise, you cannot use the login form or the contact form.

4.3.6 Consent for the use of the cookie?

Your consent to the storage of information for the "wbk_sid" cookie on your end device or our access to this information stored on your end device is not required because the storage and/or access are strictly necessary for you to be able to use the login form or the contact form (§ 25(2) No. 2 TTDSG).

4.4 <if necessary, another data processing procedure>

[Implementation note: If you want or need to inform about other data processing procedures, you can use the following structure as a template for each procedure and briefly describe the procedure in the heading, e.g., "Use of comment function"]