1. Controller

The controller responsible for data processing on this website is:

Rosenbaum Natural e.K.
Ahornallee 10
99428 Weimar
Germany

Represented by: Gabriel Serrano

Phone: +49 3643 4434364
Email: info@rosenbaumnatural.de

2. General Information on Data Processing

We process personal data of visitors to this website only to the extent necessary to provide a functional website, handle enquiries, or comply with legal requirements.

Personal data means any information that can directly or indirectly identify a person, such as name, contact details, IP address, or the content of a message.

Processing is carried out in particular on the basis of Art. 6(1)(a) GDPR, where consent has been given; Art. 6(1)(b) GDPR, where processing is necessary to handle an enquiry; and Art. 6(1)(f) GDPR, where there is a legitimate interest in the secure and stable operation of the website. Among other things, the GDPR requires information on the controller, purposes, legal bases, recipients, and storage periods.

3. Hosting and Technical Provision of the Website

This website is provided using services of IONOS SE.

When the website is accessed, technically necessary data is processed so that the website can be displayed. This may include, in particular, the following data:

IP address
Date and time of access
Page or file accessed
Browser type and browser version
Operating system used
Referrer URL
Device type

This data is processed for the technical provision, security, and stability of the website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of this website.

4. Contact Form and Contacting Us

A contact form is integrated into this website. If you contact us using this form, the data you enter will be processed. On the current page, the form primarily provides fields for name and message; it also contains consent to the processing of data for the purpose of contacting you.

Processing takes place solely for the purpose of handling your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry is related to pre-contractual or contractual communication. In all other cases, processing is based on your consent pursuant to Art. 6(1)(a) GDPR or on our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.

We store the data submitted via the contact form only for as long as necessary to process your enquiry. Statutory retention obligations remain unaffected.

5. Cookies and Consent Management

This website uses a cookie and consent banner. This allows visitors to accept, reject, or individually configure certain services. The website currently displays the website translator and IONOS SiteAnalytics as configurable services.

Where technically necessary functions are used, processing is carried out on the basis of Art. 6(1)(f) GDPR. Where non-essential services are used, processing only takes place after consent has been given pursuant to Art. 6(1)(a) GDPR. Consent that has been given may be withdrawn or changed at any time via the privacy settings.

6. IONOS SiteAnalytics / WebAnalytics

This website uses IONOS SiteAnalytics or WebAnalytics for statistical analysis of website usage.

According to IONOS, data such as referrer, accessed website or file, browser type, browser version, operating system, device type, time of access, and the IP address in anonymised form may be processed. According to IONOS, no cookies are stored for WebAnalytics; the IP address is anonymised immediately after transmission and processed without personal reference.

Processing serves the purpose of statistical analysis, optimisation, and the economic improvement of the website. Where consent is obtained via the cookie banner, the legal basis is Art. 6(1)(a) GDPR. Where the analysis is carried out without cookies and without personal reference, Art. 6(1)(f) GDPR may also apply.

7. Website Translator

This website offers a translation function. When the translation service is loaded or activated, data may be transmitted to the provider of the translation service. The website indicates that translations are provided by a third-party service that may collect data about activities on the website.

The website translator is loaded only after the corresponding consent has been given. The legal basis is Art. 6(1)(a) GDPR. Consent may be withdrawn at any time via the privacy settings.

Note: It should still be checked which specific translation service is technically integrated. IONOS describes the configuration of a website translator for MyWebsite Now in its help section, but for a complete privacy policy, the specific provider or service name should be clearly identified.

8. Disclosure of Data

Personal data is disclosed to third parties only where this is necessary for providing the website, handling enquiries, complying with legal obligations, or on the basis of consent.

Service providers used in connection with the operation of the website generally process data only within the framework of the applicable data protection requirements.

9. Storage Period

Personal data is stored only for as long as necessary for the respective purpose. Data from contact enquiries is deleted once the enquiry has been fully processed, unless statutory retention obligations prevent deletion.

Technical server and access data is stored only for as long as necessary for the security, stability, and technical provision of the website.

10. Your Rights

Under the GDPR, you have in particular the following rights:

Right of access to the personal data we process
Right to rectification of inaccurate data
Right to erasure of your data
Right to restriction of processing
Right to data portability
Right to object to certain processing activities
Right to withdraw consent given, with effect for the future
Right to lodge a complaint with a competent data protection supervisory authority

Data protection authorities also list these data subject rights as central rights under the GDPR.

To exercise your rights, you may contact us at any time:

info@rosenbaumnatural.de

11. Withdrawal of Consent

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

12. Right to Object

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

13. Validity of this Privacy Policy

Last updated: 10 June 2026

We reserve the right to amend this privacy policy if technical, legal, or organisational changes arise.

Additional text to place directly below the contact form:

By submitting the form, you agree that we may process your details in order to handle your enquiry. Further information can be found in our Privacy Policy.