Data protection

This privacy notice applies to the website naturhaus.com. The controller within the meaning of the GDPR is Naturhaus GmbH, Weisserlenstrasse 3, 79108 Freiburg, Germany, phone +49 (0)7666 61433 0, email info@naturhaus.com.

Server log data and technical operation

When this website is accessed, our hosting provider processes technical access data such as IP address, date and time of access, requested URL, referrer, transferred volume, status codes, and browser or device information. These data are required to provide the website securely, detect attacks or malfunctions, and ensure stable operation. The legal basis is Art. 6(1)(f) GDPR.

These data are not combined with other data sources for advertising purposes. Storage depends on the technical and security requirements of the hosting environment as well as statutory retention obligations.

Contact form, email, and phone

If you contact us via a form, email, or phone, we process the data you provide solely to handle your request, respond to you, or prepare and carry out a contractual relationship. The legal bases are Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR; for optional additional information, Art. 6(1)(a) GDPR may also apply.

Cookies, local storage, and consent control

This website uses technically necessary storage and control mechanisms to keep language settings, security functions, form protection, and privacy choices for Google services consistent. Where cookies or similar local storage are used for advertising, measurement, or similar purposes, this takes place only on the applicable legal basis. The legal basis for technically necessary storage is Section 25(2) TDDDG; for consent-based storage it is Art. 6(1)(a) GDPR together with Section 25(1) TDDDG.

Google Funding Choices and Consent Mode

Google Funding Choices may be used on this website to collect and manage privacy-related decisions for Google advertising and measurement services. In addition, Google Consent Mode is used to control signals such as ad_storage, ad_user_data, ad_personalization, and analytics_storage.

Before consent is granted, these signals are generally set to a denied state for the affected regions. Once a choice has been made, the consent status can be updated and applied to the Google services that are permitted to run.

Google Site Kit, Google Tag Manager, and analytics

Google services are integrated on this website via Google Site Kit and Google Tag Manager. This may involve the technical processing of connection data, device information, page views, and measurement events. Where integration is necessary for technical operation, usage analysis, or optimisation, it is based on the applicable legal basis; consent-based measurement only takes place after the relevant approval has been granted.

Google AdSense and advertising

Google AdSense may be used on naturhaus.com. In this context, Google may process technical data such as IP address, browser details, device identifiers, referrer data, and usage events to deliver ads, measure their performance, and prevent abuse. Depending on the consent choice, cookies or similar technologies may also be used. The legal basis is any consent granted under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG or, where only technically necessary processes are involved, Art. 6(1)(f) GDPR.

Further information about Google's data processing can be found at policies.google.com/privacy. Where an ads.txt file is provided on the domain, it serves solely to authenticate authorised ad sellers and does not contain personal data.

Recipients and third-country transfers

In connection with the Google services described above, data may be transferred to Google companies or related technical infrastructures outside the European Union. Where this happens, the transfer is based on the data protection mechanisms provided by the relevant service provider.

Storage duration

We store personal data only for as long as this is necessary for the relevant purpose, statutory retention obligations, or the defence or enforcement of claims. Contact inquiries are deleted or restricted once they are no longer needed and no legal obligation requires continued storage.

Your rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to withdraw any consent with effect for the future.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular with the Baden-Wuerttemberg State Commissioner for Data Protection and Freedom of Information.