Privacy policy

1. Data Controller

The entity responsible for processing personal data under the GDPR on this website and on innera’s social media channels is:
Dr. Annika Becker, Jeannine Faber & Kevin Kölmel GbR
An der Kirche 50
37647 Vahlbruch, Germany
Email: info@innera.de
VAT ID: DE459337307
Legal Notice: https://innera.de/policies/legal-notice

Important Note on the Online Shop and Orders:
The innera brand collaborates with the specialized partner Biosa Vitalkonzepte® for the production, distribution, and delivery of its products.

Therefore, for the purchase of products:

  • The purchase contract is concluded exclusively between the buyer and Biosa Vitalkonzepte® as the sole contractual partner.
  • Upon completion of the order, the buyer becomes a customer of Biosa Vitalkonzepte®, which assumes all obligations arising from the purchase, including delivery, invoicing, payment processing, product safety, and quality assurance.
  • In this context, the privacy policy, terms and conditions, and other contractual provisions of Biosa Vitalkonzepte® apply. More information: https://www.biosa-vitalkonzepte.de/datenschutz/

2. General Information

Protecting your personal data is a central concern for us. We process data exclusively within the scope of applicable data protection regulations (GDPR, BDSG) and inform you transparently about the type, scope, and purpose of data processing, as well as your rights.

Personal data includes any information relating to you, e.g., name, address, email address, social media profiles, or order information.

3. Provision of the Online Shop (Shopify)

Our online shop is operated via Shopify:

Service Provider:
Shopify International Limited
Victoria Buildings, 2nd Floor, 1–2 Haddington Road
Dublin 4, D04 XN32, Ireland

Purpose of Data Processing:

  • Technical provision and operation of the shop
  • Management of customer and order accounts
  • Usage analysis to improve the online offer

Processed Data: IP address, device and browser information, order and contact data
Legal Basis: Art. 6(1)(b) GDPR (contract fulfillment), Art. 6(1)(f) GDPR (legitimate interest in operational security)
Further information: Shopify Privacy Policy

4. Web Hosting

We use hosting services from STRATO to provide our online offer and ensure technical infrastructure.

4.1 Hosting / Server Log Files

Service Provider:
STRATO AG
Pascalstraße 10
10587 Berlin, Germany

Purpose of Data Processing:

  • Provision of our online offer
  • Ensuring technical infrastructure
  • Security measures

Processed Data: Usage data (page views, time on site, click paths, device info), meta/communication and procedural data, log files
Retention: Log files are deleted after a maximum of 30 days (exceptions for evidence purposes)
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest)
Further information: STRATO Privacy Policy

4.2 Email Hosting & Delivery

Purpose of Data Processing:

  • Sending and receiving emails
  • Storing emails
  • Spam detection

Processed Data: Sender and recipient addresses, provider information, email content if applicable
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest)
Note: Emails on the internet are not end-to-end encrypted.

5. Order Process & Collaboration with Biosa Vitalkonzepte®

For invoicing, payment processing, logistics, product safety, and quality assurance, innera works closely with Biosa Vitalkonzepte®.

Contractual Partner and Responsible Party for Orders:
Biosa Vitalkonzepte®
Owner: Christof Plottek
Botschelsgraben 20, 97837 Erlenbach bei Marktheidenfeld, Germany
Email: info@biosa-vitalkonzepte.de
Website: www.biosa-vitalkonzepte.de
VAT ID: DE814348294

Notes:

  • Order and contact data are transferred to Biosa to ensure proper order fulfillment.
  • Biosa is solely responsible for invoicing, payments, shipping, product safety, and quality assurance.
  • innera assumes no liability for payment or delivery processes.
  • By placing an order, you accept the privacy policy, terms, and contractual conditions of Biosa Vitalkonzepte®.

Legal Basis: Art. 6(1)(b) GDPR (contract fulfillment)

6. Payment Providers

All payments are processed via Biosa Vitalkonzepte® and their payment service providers (e.g., PayPal, Sofort, Klarna, credit card). innera does not receive sensitive payment information. Biosa Vitalkonzepte® is responsible for data protection and security of payments.

7. Contact & Inquiries

If you contact us via email, contact form, or social media, your data will be stored to process the request.

Processed Data: Customer data, contact data, content data, meta/communication data
Legal Basis: Art. 6(1)(b) GDPR (pre-contractual measures), Art. 6(1)(f) GDPR (legitimate interest in handling inquiries)
Retention: As long as necessary to process the request
Note: Data from contact forms and emails are used exclusively for the stated purpose.

8. Newsletter & Electronic Notifications

If you consent to receive a newsletter, your data will be stored for this purpose.

Processed Data: Email address, name (optional), meta/communication data
Legal Basis: Consent (Art. 6(1)(a) GDPR)
Opt-out: At any time via unsubscribe link or email
Retention: Up to 3 years after unsubscription for proof purposes (blocklist)

9. Cookies & Tracking

We use cookies only as technically necessary or with your consent for marketing and analytics purposes.

Types:

  • Session cookies: temporary, deleted when closing the browser
  • Permanent cookies: up to 2 years, e.g., login status, preferences

Legal Basis: Consent (Art. 6(1)(a) GDPR), legitimate interest (Art. 6(1)(f) GDPR)
Consent Management: Consent is recorded and can be revoked at any time

10. Online Marketing & Advertising

Providers: Google Ads, Google AdSense
Purpose: Reach measurement, audience creation, profiling, conversion tracking
Legal Basis: Consent and legitimate interest
Opt-Out Links:

  • Europe: Your Online Choices
  • USA/Canada: Opt-Out
  • Google: Disable personalization

11. Affiliate Programs & Links

Purpose: Commission settlement, tracking of affiliate links
Data Types: Contract data, usage data, meta/communication data
Legal Basis: Consent / legitimate interest
Retention: According to general data retention rules

12. Social Media

innera is active on Instagram, Facebook, LinkedIn, YouTube, and TikTok. Content on these platforms is processed by the respective providers.

Purpose: Communication, public relations, interaction with users
Data: Contact data, content data, usage data
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
Note: Cross-border transfers may occur via Data Privacy Framework / Standard Contractual Clauses

Further information and privacy notices:

  • Instagram: Meta Platforms Ireland Limited, Privacy
  • Facebook: Meta Platforms Ireland Limited, Privacy
  • LinkedIn: LinkedIn Ireland Unlimited Company, Privacy
  • YouTube: Google Ireland Limited, Privacy

13. Blogs / Publication Media

Purpose: Content presentation, communication, feedback
Data Types: Customer data, contact data, content data, usage data
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)

14. Rights of Data Subjects

You have the right to:

  • Access your stored personal data
  • Correct inaccurate data
  • Delete or restrict processing
  • Object to processing
  • Data portability
  • File a complaint with the supervisory authority

15. Online Dispute Resolution

We are willing to participate in dispute resolution procedures before a consumer arbitration board.
EU Commission platform: https://ec.europa.eu/odr

16. Changes to the Privacy Policy

We reserve the right to update the privacy policy, e.g., in case of new services, partners, or legal requirements. Please review the privacy policy regularly.