1. Controller and scope
The controller for this website is 360Naturalis GmbH, Spenerstraße 3, 10557 Berlin, Germany. Contact us at management@360naturalis.com or through our contact form. This notice covers our brand website. Orders through linked Amazon listings take place on Amazon.
2. Website delivery and security
We use Shopify to provide this website. The provider for our location in Germany is Shopify International Limited, The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland. Visits involve processing IP addresses, access times, requested URLs, browser and device information and technical error data. These are used to deliver the website, diagnose errors and prevent abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure, reliable website.
Shopify uses affiliates and technical providers for delivery and security. Their functions and locations are described in Shopify's subprocessor list. Processing on our behalf is governed by the Shopify Data Processing Addendum. Technical data is processed for as long as necessary for these purposes and, where applicable, to investigate a security incident.
3. Email and contact form
When you contact us, we process your email address, message and any name you optionally provide. The form is submitted through Shopify, which screens messages for spam. We use Google Workspace for email. Google and its authorised subprocessors receive the data needed to deliver, store and secure communications. Processing terms are available in the Google Cloud Data Processing Addendum.
Contractual and pre-contractual enquiries are processed under Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f), based on our legitimate interest in responding. Providing information is voluntary; without a reply address and sufficient information, we may be unable to answer. Sending a message does not constitute consent to advertising.
We retain correspondence as needed to handle the enquiry. Once it is resolved, that purpose ends; statutory retention duties and necessary retention to establish or defend legal claims remain unaffected. Business records subject to retention duties are kept only for those purposes. Please do not submit health or payment information through the form.
4. Links to Amazon
Product buttons link to external Amazon pages. Clicking them takes you away from our website. Amazon processes visits under its own privacy notices. Orders and payments are handled on Amazon. We do not add affiliate identifiers to our links or embed an Amazon purchasing interface on this page.
5. Language, cookies and consent
The website may read the language supplied by your browser to select a language version. Your manual choice takes priority. Our language function does not maintain its own persistent localStorage or sessionStorage entries; explicit choices use the page address and Shopify's language functionality. This does not use GPS data or an external geolocation service.
Shopify uses technical storage for purposes such as security, language and privacy choices. Strictly necessary access to your device is based on section 25(2) German TDDDG. Subsequent personal-data processing relies on Article 6(1)(b) or (f) GDPR, depending on the purpose. Our website design contains no additional advertising pixels, external video embeds or externally loaded fonts added by us.
If you agree to optional analytics or marketing through a consent dialog, the legal bases are section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change or withdraw consent for the future using “Cookie settings”. Shopify's Cookie Policy explains its cookies, purposes and durations; not all listed functions are part of our brand website. You can also delete or block cookies in your browser, which may restrict functionality.
6. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You can withdraw consent at any time for the future without affecting the lawfulness of earlier processing.
Objection: Where processing relies on Article 6(1)(f) GDPR, you can object on grounds relating to your particular situation. You can object to direct marketing at any time. Please contact management@360naturalis.com.
You can complain to a data protection supervisory authority, particularly where you habitually reside, work or suspect an infringement. The authority for our registered office is the Berlin Commissioner for Data Protection and Freedom of Information.
7. International processing and date
Shopify and Google may process data through affiliates or providers outside the European Economic Area, particularly in Canada and the USA. Their processing terms set out the applicable safeguards, including EU standard contractual clauses where no relevant adequacy decision applies. Details are available in the linked contractual documents or from us on request.
For this brand website, we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Last updated: 17 October 2026.
