Privacy policy

Privacy Policy

Privacy information

We take the protection of your personal data seriously and comply with the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG), as well as with this privacy information. We process our users' personal data only to the extent necessary to provide a functioning website and our content, services, offers, etc.

Personal data means all information relating to an identified or identifiable natural person.

This privacy information gives you an overview of the type of personal data processed and the purposes for which it is processed. This privacy information also explains how we ensure the protection of your personal data.

1. Name and contact details of the controller

This privacy information applies to data processing by the following controller:

Gebrüder Hammig GmbH
Rennwiese 11
77855 Achern, Germany
Telephone: +49 7841 62920
E-mail: info@cellfoodshop.de
Website: www.cellfoodshop.de

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting our website

You can visit our website www.cellfoodshop.de without having to provide us with any information about your person (who you are).

In the case of such purely informational use of our website, i.e. if you do not register or otherwise provide us with information about your person, we collect only the personal data that your browser transmits to our server. When you access our website www.cellfoodshop.de, the browser used on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,

• date and time of access,

• name and URL of the file retrieved,

• website from which access is made (referrer URL),

• browser used and, where applicable, the operating system of your computer as well as the name of your access provider, language and version of the browser software

The data mentioned is processed by us for the following purposes:

• ensuring a smooth connection to the website,

• ensuring convenient use of our website,

• evaluating system security and stability, and

• for further administrative purposes.

The legal basis for the data processing is Art. 6(1)(1)(f) EU GDPR. Our legitimate interest follows from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

In addition, we use cookies when you visit our website. Cookies do not cause any damage to your computer and do not contain viruses. You can find further explanations on this under section 5 of this privacy information.

b) When using our web shop

When you use our web shop, e.g. by submitting your offers, by accepting our offers, by registering or through other communication, we process the personal data you provide exclusively for the purpose of initiating or performing the contract.

The legal basis for the data processing is Art. 6(1)(1)(b) EU GDPR. According to this, data processing is permitted where it is necessary for the conclusion or performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.

When you use our web shop, the following personal data transmitted by you is processed by us:

• first name and surname (for companies: company name)

• address

• telephone number (landline number and/or mobile number)

• fax number (only if available)

• e-mail address

• IBAN (only if required for processing payments)

• credit card number including check digit (only if required for processing payments)

This data is processed for the purpose of fulfilling the contractual obligations, in particular for dispatching the goods, for processing payment including invoicing, for handling any warranty claims and for any related correspondence with you.

You may also voluntarily create a customer account in which we can store your personal data for further purchases at a later date. When you create an account under "My account", the data you provide there is stored subject to revocation. You can delete all further data, including your user account, at any time in the customer area.

c) When using our contact form

So that you can send us your questions, remarks, comments, etc., we have provided a contact form on the website. To use it, providing your e-mail address and your name is mandatory so that we know whom to reply to; you may provide further information voluntarily.

The legal basis for the data processing is your voluntarily given consent (Art. 6(1)(1)(a) EU GDPR).

The personal data we collect for the use of the contact form is deleted once your enquiry has been dealt with.

d) When subscribing to our newsletter

Provided you have expressly consented (Art. 6(1)(1)(a) EU GDPR), you can receive our newsletter, in which we inform you about current offers in the area of goods and/or services. The goods and/or services advertised in the newsletter are named in the declaration of consent. The only mandatory information for receiving the newsletter is your e-mail address. Providing further, separately marked data is voluntary and is used to be able to address you personally.

We use the so-called double opt-in procedure for subscribing to our newsletter. This means that after your subscription we send an e-mail message to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of subscription and confirmation in each case. The purpose of this procedure is to be able to prove your subscription and, if necessary, to clarify possible misuse of your personal data.

The legal basis for this data processing is your voluntarily given consent (Art. 6(1)(1)(a) EU GDPR).

You may withdraw your consent to receiving the newsletter at any time and unsubscribe from the newsletter. For this purpose, you can send your unsubscribe request by e-mail to the e-mail address info@cellfoodshop.de.

e) Processing on the basis of legitimate interests

Insofar as this is necessary for our business purposes, we process your data – apart from the initiation or performance of a contract and any consent expressly given by you – to safeguard the legitimate interests of our company, unless a balancing of interests in the individual case shows that your legitimate fundamental rights and freedoms requiring the protection of personal data override these (cf. Art. 6(1)(f) EU GDPR). The legitimate interests of our company include:

• direct marketing, unless you have objected to the use of your personal data.

f) Processing in connection with the use of the withdrawal button

If you use the withdrawal button or the electronic withdrawal function provided on our website, we process the personal data you provide in this context, in particular your first name and your e-mail address as well as the content of your declaration of withdrawal. Providing this data is necessary so that we can assign your declaration of withdrawal to a specific person or a specific contractual relationship, confirm receipt of the withdrawal and process the withdrawal properly.
The purpose of the processing is the receipt, assignment, confirmation and handling of your declaration of withdrawal as well as the documentation of the processing of the withdrawal.

The legal basis for the processing is, where applicable, Art. 6(1)(1)(a) 
GDPR, insofar as you voluntarily provide us with the relevant data in the context of using the withdrawal function. Insofar as the processing is necessary for handling and settling the contract you have withdrawn from, it is carried out on the basis of Art. 6(1)(1)(b)
GDPR. Insofar as we are legally obliged to provide an electronic withdrawal function and to receive, confirm and process declarations of withdrawal submitted via it, the processing is additionally carried out on the basis of Art. 6(1)(1)(c) GDPR. Beyond this, the processing may be carried out on the basis of Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in the proper, traceable and abuse-preventing handling of declarations of withdrawal, the clear assignment of the withdrawal to a person or a contractual relationship, the avoidance of incorrect or unauthorised assignments as well as the documentation and defence of our legal positions. The 
data processed in connection with the use of the withdrawal button is deleted as soon as it is no longer required for the processing and documentation of the withdrawal. Insofar as the withdrawal concerns a contractual relationship or the data is to be classified as contract-related correspondence, commercial or business letters, accounting vouchers or other documents relevant under tax or commercial law, the retention obligations provided for this apply, in particular under Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB) as well as in compliance with the principles for the proper management and retention of books, records and documents in electronic form and for data access (GoBD). In these cases, the
data is retained for the period provided for by law in each case, in particular for six, eight or ten years, and during this time is processed only insofar as this is necessary to fulfil the retention and documentation obligations or to assert, exercise or defend legal claims.

g) Obligation to provide the data

You are generally not obliged to provide us with personal data. However, insofar as certain information is necessary for processing your enquiry, for taking steps prior to entering into a contract, for concluding or performing a contractual relationship or for fulfilling legal obligations, processing may under certain circumstances not be possible, or not fully possible, without this information; where applicable, a contractual relationship may also not be established or performed.

When using the withdrawal button or the electronic withdrawal function, you are likewise not obliged to provide personal data. However, if no information, or insufficient information, is provided to enable your person to be identified or the relevant contractual relationship to be assigned, your declaration of withdrawal may under certain circumstances not be properly assigned, confirmed and processed.

3. Disclosure of data to third parties

Your personal data is not transferred to third parties for purposes other than those listed below. In particular, no disclosure to third parties, e.g. for advertising purposes, takes place without your express consent.

We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6(1)(1)(a) EU GDPR;

• this is necessary in accordance with Art. 6(1)(1)(b) EU GDPR for the performance of contractual relationships with you, e.g. to credit institutions for processing the contractually agreed payments, to dispatch and transport companies for the purpose of transporting the goods including shipment tracking, or, in the event of non-fulfilment of contractually agreed payments, to lawyers and legal service companies for the purpose of legal enforcement;

• in the event that there is a legal obligation for the disclosure in accordance with Art. 6(1)(1)(c) EU GDPR; or

• the disclosure is necessary in accordance with Art. 6(1)(1)(f) EU GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed.

Among other things, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (in short: "PayPal"). If you wish to make payments using PayPal, we transfer the following personal data of yours (form of address, first name and surname, for companies: company name, address (street, house number, postcode, town, country), telephone number (landline number and/or mobile number) and e-mail address) to PayPal as part of the contractual payment processing (Art. 6(1)(1)(b) EU GDPR). Further information on the processing of this personal data by PayPal can be found in the PayPal privacy policy, available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

4. Cookies

We use cookies on our site. These are small text files that are automatically created by your internet browser and stored on your device (e.g. PC, laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that arises in connection with the specific device used. However, this does not mean that we thereby obtain direct knowledge of your identity.

The use of cookies serves, among other things, to make the use of our offering more pleasant for you. For example, we use cookies to recognise whether you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, to optimise user-friendliness we use cookies that are stored on your device for a certain specified period. If you visit our site again in order to use our services, it is automatically recognised whether you have already been with us and what entries and settings you have made, so that you do not have to enter these again.

A distinction must be made between cookies that are strictly necessary in order to provide the services on this website (necessary cookies) and those that are not strictly necessary for this purpose (non-necessary cookies).

Without the use of the necessary cookies, this website does not function properly. Such cookies are used exclusively by us (so-called first-party cookies) and all information stored in these cookies is sent only to this website.

Necessary cookies are used irrespective of whether you have given your consent. In this case, the legal basis for the data processing is our legitimate interests, i.e. our interest in the analysis, optimisation and economic operation of our website and our services (Art. 6(1)(1)(f) EU GDPR).

Non-necessary cookies used by us can be divided into the categories preferences, statistics and marketing. Marketing cookies are used by external companies (so-called third-party cookies) in order to collect information about the websites you visit, e.g. in order to create targeted advertising.

Non-necessary cookies are only used after you have given your consent. By giving your consent, in a so-called consent tool made available by us on this website, to the use of the cookies listed there and selected by you, you agree to the use of these cookies. In this case, the legal basis for the data processing is your consent (Art. 6(1)(1)(a) EU GDPR).

You can adjust your cookie settings individually at any time by activating or deactivating individual cookies – with the exception of the necessary cookies – in the consent tool.

You can set your web browser so that the storage of cookies on your device is generally prevented or so that you are asked each time whether you agree to cookies being set. You can delete cookies that have been set at any time. How this works is described in the help function of the respective web browser.

A general deactivation of cookies may lead to functional restrictions of this website.

5. Storage period and deletion of data

Your personal data is deleted in particular as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed (Art. 17(1)(a) EU GDPR). The data is then deleted unless, for example, storage is necessary to fulfil a legal obligation to which the controller is subject under Union or Member State law (Art. 17(3)(b) EU GDPR), or to assert, exercise or defend legal claims (Art. 17(3)(e) EU GDPR). The statutory retention obligations constitute such a legal obligation; for example, under Section 147(1) no. 4, (3) sentence 1 AO there is a retention period of 10 years for accounting data including order and payment data, and under Section 257(1) nos. 2, 3, (4) HGB there is a retention period of 6 years for commercial correspondence, e.g. e-mail messages. For the duration of the retention obligations, the data is blocked; after they expire, it is deleted.

6. Rights of data subjects

You have the right,

• in accordance with Art. 7(3) EU GDPR, to withdraw consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent for the future. The lawfulness of the data processing carried out up to the withdrawal remains unaffected by your withdrawal;

• in accordance with Art. 15 EU GDPR, to request information about your personal data processed by us. In this context, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;

• in accordance with Art. 16 EU GDPR, to request without undue delay the rectification of incorrect personal data or the completion of your personal data stored by us;

• in accordance with Art. 17 EU GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

• in accordance with Art. 18 EU GDPR, to request the restriction of the processing of your personal data insofar as the accuracy of the data is contested by you, the processing is unlawful but you object to its erasure and we no longer need the data although you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR;

• in accordance with Art. 20 EU GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;

• in accordance with Art. 77 EU GDPR, to lodge a complaint with a supervisory authority. The competent supervisory authority is the state data protection commissioner of the federal state in which our company has its registered office. An overview of the state data protection commissioners together with their contact details is available at BFDI – State data protection authorities.

7. Right to object

Insofar as your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1)(1)(f) EU GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data, provided there are grounds for this arising from your particular situation. In the event of your justified objection, we will examine the situation and will either cease or adjust the data processing or set out to you our compelling legitimate grounds on the basis of which we will continue the processing.

Insofar as your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of direct marketing.

If you would like to exercise your right of withdrawal or right to object, an e-mail to the e-mail address info@cellfoodshop.de is sufficient

8. Data security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

We also use SSL or TLS encryption during your website visit (SSL = Secure Sockets Layer; TLS = Transport Layer Security; SSL is the previous designation of TLS). You can recognise the correspondingly encrypted connection by the prefix "https://" in the browser address bar and by the padlock symbol preceding the browser line.

9. Status and possible changes to this privacy information

This privacy information is dated June 2026.

Due to technical developments and/or changed legal or official requirements, it may become necessary to amend this privacy information. You can tell whether changes have been made by checking whether the "status" of the document has been updated in the first paragraph of this section 10.

The current version of the privacy information can be accessed and printed out by you at any time on our website at
www.cellfoodshop.de.