1. Data Controller
The data controller responsible for processing your personal data on this website is:
Musclesrrelbowel
Alexanderplatz 8, 10178 Berlin, Germany
Email: help-center@musclesrrelbowel.world
Website: https://musclesrrelbowel.world
If you have any questions about data protection or wish to exercise your rights under the GDPR, you may contact us at the address or email above.
2. What Personal Data We Collect
We collect only the personal data that is necessary for the purposes described in this policy. The categories of personal data we may collect include:
- Contact information: Full name, email address, and (optionally) phone number — provided when you submit our order form.
- Message content: Any message text you provide in the order form, including delivery addresses or questions.
- Consent records: A record of your consent to the processing of personal data and to our Privacy Policy, including the date and time of consent.
- Cookie preferences: Your cookie consent choices, stored locally in your browser via localStorage.
- Technical data: IP address, browser type and version, operating system, referring URL, pages visited, date and time of access — collected automatically by our web server.
3. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases under Article 6 of the GDPR:
- Order processing and fulfilment (Art. 6(1)(b) GDPR — performance of a contract): To process your order request, contact you regarding order confirmation, and arrange delivery of the product.
- Communication (Art. 6(1)(b) GDPR): To respond to your enquiries and provide customer support related to your order.
- Compliance with legal obligations (Art. 6(1)(c) GDPR): To comply with applicable laws, regulations, and legal processes, including tax and accounting requirements.
- Website functionality (Art. 6(1)(f) GDPR — legitimate interest): To ensure the website operates correctly, to maintain security, and to prevent fraud or misuse.
- Analytics and improvement (Art. 6(1)(a) GDPR — consent): Where you have given consent via the cookie banner, to analyse website usage patterns and improve our services.
- Marketing (Art. 6(1)(a) GDPR — consent): Where you have given explicit consent, to deliver relevant communications. Marketing cookies are only activated upon your consent.
4. How We Collect Your Data
We collect personal data through the following means:
- Order form: When you submit the order form on our website, you voluntarily provide your name, email, optional phone number, and a message.
- Cookie consent banner: When you interact with the cookie banner to set your cookie preferences.
- Automated collection: Technical data is collected automatically when you visit our website through server logs and, where consented, analytics tools.
5. Data Sharing and Recipients
We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:
- Service providers: We may engage trusted third-party service providers to assist with order processing, email delivery, website hosting, or analytics. These providers process data only on our behalf, under contractual data processing agreements (Art. 28 GDPR), and are bound by strict confidentiality obligations.
- Legal requirements: We may disclose personal data where required by law, court order, or governmental regulation, or where necessary to protect our rights, property, or safety.
- Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction, subject to the same level of data protection.
We do not transfer personal data to countries outside the European Economic Area (EEA) unless adequate safeguards are in place, such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law:
- Order data: Retained for the duration of the contractual relationship and for up to 10 years thereafter to comply with German tax and commercial law retention periods (§ 147 AO, § 257 HGB).
- Communication records: Retained for the period necessary to resolve your enquiry and for up to 3 years thereafter for potential legal claims (§ 195 BGB).
- Cookie consent records: Stored locally in your browser; not stored on our servers.
- Server logs: Retained for up to 90 days for security and diagnostic purposes, then deleted automatically.
When personal data is no longer necessary, it is securely deleted or anonymised.
7. Your Rights Under the GDPR
Under the General Data Protection Regulation and applicable German data protection law (BDSG), you have the following rights:
- Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data and information about its processing.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete personal data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data where the data is no longer necessary, you withdraw consent, or processing is unlawful.
- Right to restriction (Art. 18 GDPR): You may request the restriction of processing under certain conditions, such as while the accuracy of data is being verified.
- Right to data portability (Art. 20 GDPR): You may request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest at any time. We will cease processing unless compelling legitimate grounds override your rights.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at help-center@musclesrrelbowel.world. We will respond to your request within one month, as required by the GDPR. In complex cases, this period may be extended by a further two months, and we will inform you if such an extension is necessary.
8. Right to Lodge a Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for data protection in Berlin, Germany is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
Website: https://www.datenschutz-berlin.de
9. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our website.
- Access control and authentication mechanisms for internal systems.
- Regular security assessments and updates of our infrastructure.
- Staff awareness training on data protection and confidentiality obligations.
- Data processing agreements with third-party service providers in accordance with Art. 28 GDPR.
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify affected individuals and the relevant supervisory authority in the event of a personal data breach, as required under Articles 33 and 34 of the GDPR.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how you can manage your cookie preferences, please refer to our Cookie Policy.
11. Third-Party Links
Our website may contain links to external websites that are not operated by us. We have no control over the content or privacy practices of those sites. We encourage you to read the privacy policies of any external websites you visit. We bear no responsibility for the content, privacy policies, or practices of third-party websites.
12. Children's Privacy
Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly. If you are a parent or guardian and become aware that your child has submitted personal data to us, please contact us immediately.
13. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you, as described in Article 22 of the GDPR.
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the revised policy.
15. Contact Information
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:
Musclesrrelbowel
Alexanderplatz 8, 10178 Berlin, Germany
Email: help-center@musclesrrelbowel.world