Privacy Policy

Data Controller

The data controller responsible for processing your personal data is:

Nordiva
Rosenstraße 18
80331 Munich
Germany
Email: [email protected]
Phone: +49 372 68 941 52

Nature of This Website

Nordiva is an educational information resource providing general knowledge about natural ingredients and lifestyle awareness. We are not a commercial service, do not sell products directly, and do not collect personal data for marketing purposes.

Our data collection is minimal and limited to what is necessary for basic website functionality and responding to direct inquiries.

Information We Collect

Technical Data

When you visit our website, our server automatically collects minimal technical information necessary for website operation:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Pages visited on our website
• Referring website

This technical data is collected automatically through server logs and is necessary for the legitimate interest of providing a functional website and ensuring security.

Contact Information

If you contact us through our contact form or email, we collect:

• Email address
• Content of your message
• Any other information you voluntarily provide

This information is collected only when you actively choose to contact us and is used solely to respond to your inquiry.

Cookies

We use only essential cookies required for basic website functionality. Specifically:

• Cookie consent preference storage
• Session management for form submissions

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. See our Cookie Policy for more details.

How We Use Your Information

Technical Data

Technical data collected through server logs is used for:

• Ensuring website functionality and performance
• Identifying and addressing technical issues
• Protecting against security threats and abuse

Legal basis: Legitimate interest in maintaining a functional and secure website.

Contact Information

Information you provide through contact forms or email is used exclusively to:

• Respond to your specific inquiry
• Provide requested information about our educational content

Legal basis: Your consent when voluntarily providing information, and our legitimate interest in responding to inquiries.

Data Sharing and Disclosure

We do not sell, rent, or trade personal information to third parties. We do not share your data with marketing companies or advertisers.

We may disclose information only in the following limited circumstances:

• When required by German or European law
• To protect our legal rights or comply with legal processes
• To prevent fraud or security threats
• With service providers who assist in website hosting, subject to strict data protection agreements

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Technical server logs: 30 days
• Contact form submissions and email correspondence: Until the inquiry is resolved, plus any period required by German commercial record-keeping requirements
• Cookie consent preferences: Until you clear your browser storage or withdraw consent

Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month as required by GDPR.

Right to Lodge a Complaint

If you believe we have not processed your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
Website: lda.bayern.de

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure
• Regular security assessments
• Limited access to personal data on a need-to-know basis
• Secure communication protocols

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

International Data Transfers

Your personal data is processed and stored within the European Union, primarily in Germany. We do not routinely transfer data outside the EU.

If any international transfer becomes necessary, we will ensure appropriate safeguards are in place as required by GDPR, such as Standard Contractual Clauses.

Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will indicate the date of the most recent update at the top of this policy.

Material changes will be communicated through a notice on our website. We encourage you to review this policy periodically.

Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us:

Email: [email protected]
Phone: +49 372 68 941 52
Address: Rosenstraße 18, 80331 Munich, Germany