Privacy Policy

Last Updated: February 2026

This Privacy Policy explains how Nutrahub collects, uses, stores, and protects personal information in accordance with the General Data Protection Regulation (GDPR) and German data protection laws.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Nutrahub
Lindenstraße 22
10115 Berlin, Germany
Email: [email protected]
Phone: +49 30 729 8742

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

  • Subscribe to our newsletter (email address)
  • Contact us through our contact form or email
  • Interact with our website

2.2 Automatically Collected Information

When you visit our website, certain information is automatically collected, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referral source
  • Device information

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies as described in our Cookie Policy.

3. How We Use Your Information

We process your personal data for the following purposes:

  • To provide and maintain our educational website
  • To send educational newsletters to subscribers
  • To respond to inquiries and provide customer support
  • To analyze website usage and improve our content
  • To comply with legal obligations
  • To detect and prevent fraud or security issues

Legal Bases for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent (e.g., newsletter subscription)
  • Legitimate Interest: For website analytics and security purposes
  • Legal Obligation: When required by law

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

4.1 Service Providers

We may share data with third-party service providers who assist us in operating our website and conducting our business, including:

  • Web hosting providers
  • Email service providers
  • Analytics providers

These service providers are contractually bound to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally approved transfer mechanisms

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

  • Newsletter subscriptions: Until you unsubscribe
  • Contact inquiries: 3 years after the last contact
  • Website analytics data: 26 months
  • Cookie data: As specified in our Cookie Policy

7. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

  • Right of Access: Request access to your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restriction: Request restriction of processing
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with a supervisory authority

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Regular backups
  • Employee training on data protection

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Nutrahub
Lindenstraße 22
10115 Berlin, Germany
Email: [email protected]
Phone: +49 30 729 8742

Supervisory Authority:
If you are not satisfied with our response, you have the right to lodge a complaint with the German data protection authority (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit).